Abstract 1 Introduction 2 Preliminaries 3 PureSuperQMA 4 2-PureCLDM is PureSuperQMA-complete 5 𝒌𝗣𝘂𝗿𝗲𝗖𝗟𝗗𝗠 is in 𝗣𝗦𝗣𝗔𝗖𝗘 6 Approximation and Optimization References

The Pure-State Consistency of Local Density Matrices Problem: In PSPACE and Complete for a Class Between QMA and QMA(2)

Jonas Kamminga ORCID Department of Computer Science and Institute for Photonic Quantum Systems (PhoQS), Paderborn University, Germany Dorian Rudolph ORCID Department of Computer Science and Institute for Photonic Quantum Systems (PhoQS), Paderborn University, Germany
Abstract

In this work we investigate the computational complexity of the pure consistency of local density matrices (𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬) and pure N-representability (𝖯𝗎𝗋𝖾-N-𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒; analog of 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 for bosonic or fermionic systems) problems. In these problems the input is a set of reduced density matrices and the task is to determine whether there exists a global pure state consistent with these reduced density matrices. While mixed 𝖢𝖫𝖣𝖬, i.e. where the global state can be mixed, was proven to be 𝖰𝖬𝖠-complete by Broadbent and Grilo [JoC 2022], almost nothing was known about the complexity of the pure version. Before our work the best upper and lower bounds were 𝖰𝖬𝖠(2) and 𝖰𝖬𝖠. Our contribution to the understanding of these problems is twofold.

Firstly, we define a pure state analogue of the complexity class 𝖰𝖬𝖠+ of Aharanov and Regev [FOCS 2003], which we call 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠. We prove that both 𝗉𝗎𝗋𝖾-N-𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 and 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 are complete for this new class. Along the way we supplement Broadbent and Grilo by proving hardness for 2-qubit reduced density matrices and showing that mixed N-𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 is 𝖰𝖬𝖠-complete.

Secondly, we improve the upper bound on 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬. Using methods from algebraic geometry, we prove that 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠𝖯𝖲𝖯𝖠𝖢𝖤. Our methods, and the 𝖯𝖲𝖯𝖠𝖢𝖤 upper bound, are also valid for 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 with exponential or even perfect precision, hence 𝗉𝗋𝖾𝖼𝗂𝗌𝖾𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is not 𝗉𝗋𝖾𝖼𝗂𝗌𝖾𝖰𝖬𝖠(2)=𝖭𝖤𝖷𝖯-complete, unless 𝖯𝖲𝖯𝖠𝖢𝖤=𝖭𝖤𝖷𝖯. We view this as evidence for a negative answer to the longstanding open question whether 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is 𝖰𝖬𝖠(2)-complete.

The techniques we develop for our 𝖯𝖲𝖯𝖠𝖢𝖤 upper bound are quite general. We are able to use them for various applications: from proving 𝖯𝖲𝖯𝖠𝖢𝖤 upper bounds on other quantum problems to giving an efficient parallel (𝖭𝖢) algorithm for (non-convex) quadratically constrained quadratic programs with few constraints.

Keywords and phrases:
Quantum Complexity Theory, PSPACE, QMA(2), Consistency of Local Density Matrices, Polynomial Optimization
Funding:
Jonas Kamminga: supported by the DFG under grant number 450041824.
Dorian Rudolph: supported by the DFG under grant number 432788384 and 563388236.
Copyright and License:
[Uncaptioned image] © Jonas Kamminga and Dorian Rudolph; licensed under Creative Commons License CC-BY 4.0
2012 ACM Subject Classification:
Theory of computation Quantum complexity theory
Related Version:
Full Version: https://arxiv.org/abs/2411.03096 [18]
Acknowledgements:
The authors would like to thank Dima Grigoryev for suggesting that the GP algorithm could be parallelized, pointing to helpful references, and giving us advice on how this could be proven.
Editor:
Shubhangi Saraf

1 Introduction

“Are these local density matrices consistent with some global state?” This quantum variant of the 𝖭𝖯-complete marginal problem is known as the consistency of local density matrices problem (𝖢𝖫𝖣𝖬) or quantum marginal problem and as the N-representability problem (N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒) when dealing with indistinguishable particles. It is of fundamental interest to quantum physics. In fact, it was already recognized as an important question in the sixties [10]. At that time, the hope was that the ground state energy of quantum systems could be found using reduced density matrices. This hope was supported by the fact that Hamiltonians showing up in nature are all local. One requirement would be that it is possible to check that alleged reduced density matrices are indeed consistent with a valid global quantum state, hence the interest in the 𝖢𝖫𝖣𝖬 problem.

Over the years it became apparent that this hope would not materialize, especially when Kitaev proved that computing ground state energies of local Hamiltonians is 𝖰𝖬𝖠-hard [20]. Also the 𝖢𝖫𝖣𝖬 problem itself was proven to be hard. First by Liu, who proved that the (mixed state) 𝖢𝖫𝖣𝖬 problem is contained in 𝖰𝖬𝖠 and 𝖰𝖬𝖠-complete under Turing reductions [22] and later, together with Christandl and Verstraete, proved that the N-representability problem is also 𝖰𝖬𝖠-complete under Turing reductions [23]. This was improved by Broadbent and Grilo who showed that the mixed 𝖢𝖫𝖣𝖬 is also 𝖰𝖬𝖠-hard under Karp reductions, establishing it as 𝖰𝖬𝖠-complete [9].

In this work we focus our attention on a variant of 𝖢𝖫𝖣𝖬 that is of interest to physics and complexity theory. This variant, the pure consistency of local density matrices problem, or 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 asks not whether there exists any state consistent with the reduced density matrices, but demands that this consistent state is pure. Physically, this restriction to pure states is well motivated as isolated systems will always be in a pure state. If one has some reduced density matrices of some molecule it might be more interesting to know whether these are consistent with some global state of the molecule in isolation, i.e. a pure state, rather than some larger state where the molecule is entangled with its environment.

From a complexity point of view 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is interesting because of its connections with the class 𝖰𝖬𝖠(2). While the complexity of mixed 𝖢𝖫𝖣𝖬 is well understood to be 𝖰𝖬𝖠, the best known upper bound to 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is the class 𝖰𝖬𝖠(2) and it has been a longstanding open question whether 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is complete for 𝖰𝖬𝖠(2) [23]. If it would be complete that would be interesting for several reasons. Firstly, it would be a highly physically motivated complete problem for 𝖰𝖬𝖠(2), a class that has attracted a lot of attention but generally lacks physical complete problems. Secondly, there has been a large interest in the relation between purity testing and 𝖰𝖬𝖠(2). In many ways, the power of 𝖰𝖬𝖠(2) seems to come from the ability to do SWAP tests [16]. On the other hand, a correspondence between protocols over separable states and protocols with a purity constraint has been used in several works (e.g. [16, 32]). Recently, it has been suggested that purity testing could already be enough to give 𝖰𝖬𝖠(2) its power [4]. Establishing 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 as a complete problem for 𝖰𝖬𝖠(2) would suggest that indeed SWAP tests are not necessary to capture the power of 𝖰𝖬𝖠(2) and indeed a purity constraint is already enough.

1.1 Our results

In this work we investigate the complexity of 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 and 𝖯𝗎𝗋𝖾N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 and give evidence towards a negative answer to the longstanding open question whether they are 𝖰𝖬𝖠(2)-complete.

Definition 1.1 (k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬, informal).

We are given pairs (ρ1,C1),,(ρm,Cm), where the ρi are reduced density matrices and Ci[n] with |Ci|k for all i. Additionally, we are given parameters α and β with βα1/poly(n). Decide whether:

  • YES: there exists a consistent pure state, that is, a state |ψ such that TrCi¯(|ψψ|)ρiα for all i[m].

  • NO: all pure states are “far from” consistent, that is, for all |ψ, there is an i[m] with TrCi¯(|ψψ|)ρiβ.

1.1.1 𝗣𝘂𝗿𝗲𝗖𝗟𝗗𝗠 is complete for 𝗣𝘂𝗿𝗲𝗦𝘂𝗽𝗲𝗿𝗤𝗠𝗔

Our first main result on the complexity of 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is that it is complete for the class of (promise) problems decided by a “super-verifier” (c.f. [2]) that is given a pure state proof. Following [2] we call this class 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠.111[2] use the name 𝖰𝖬𝖠+, but recently 𝖰𝖬𝖠+ has been used to refer to 𝖰𝖬𝖠 with proofs with nonnegative amplitudes [17, 5]. As 𝖰𝖬𝖠+ is sometimes referred to as 𝖰𝖬𝖠 with a super-verifier, we use 𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠.

Definition 1.2 (𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠, informal).

A promise problem A=(Ayes,Ano,Ainv) is in 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(m,ε,δ) if there exist m constraints 𝒱={(Vx,i,rx,i,sx,i)}i[m] such that:

  • xAyes|ψ:Pri(|p(Vx,i,ψ)rx,i|sx,i)=1, that is, the Vx,i accept |ψ with acceptance probability at most sx,i away from rx,i.

  • xAno|ψ:Pri(|p(Vx,i,ψ)rx,i|sx,i+ε)1δ, that is, at least a δ fraction of the Vx,i accept |ψ with probability more than sx,i+ε away from rx,i.

Here p(V,ψ) denotes the acceptance probability of the circuit V when ran on input |ψ.

In the following we refer to m as the number of checks or constraints and to ε and δ as precision parameters. We denote the union of 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(m,ε,δ) where m is polynomial and ε and δ are inverse polynomial as 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(poly,1poly,1poly)𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠.

We show that the definition of 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 can be significantly simplified: we can set all rx,i=1/2 and all sx,i=0 without changing the complexity. Our proof of 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠-completeness holds already for k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬1, which is k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 with “exact consistency” as well as for Bosonic/Fermionic 𝖯𝗎𝗋𝖾N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒.

Theorem 1.3.

k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬1 is 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠-complete for all k2.

Corollary 1.4.

Fermionic/bosonic 𝖯𝗎𝗋𝖾N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒1 is 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠-complete.222Technical details of 𝖯𝗎𝗋𝖾N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 are in the full version [18].

Note that 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 as the complete complexity class is quite natural, since Liu’s proof for 𝖢𝖫𝖣𝖬𝖰𝖬𝖠 also goes via 𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠=𝖰𝖬𝖠. Since a pure state analogue to this latter statement is not known, we have to remain the super-verifier regime. Along the way to Theorem 1.3, we show that the k𝖢𝖫𝖣𝖬 problem is already 𝖰𝖬𝖠-hard for k2. This improves upon the results by Broadbent and Grilo [9] who show hardness for k5. We also resolve one of their open questions by showing that the (mixed) fermionic and bosonic N-representability problems are 𝖰𝖬𝖠-hard, already for 2-particle reduced density matrices.

1.1.2 𝗣𝘂𝗿𝗲𝗦𝘂𝗽𝗲𝗿𝗤𝗠𝗔 as a “light” version of 𝗤𝗠𝗔(𝟐)

Next, we prove results suggesting 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 can be viewed as a “light” version of 𝖰𝖬𝖠(2). It lies between 𝖰𝖬𝖠 and 𝖰𝖬𝖠(2) but contains 𝖭𝖯 already with log-size proofs and becomes 𝖭𝖤𝖷𝖯 when the number of checks and the precision are exponential. This mirrors 𝖰𝖬𝖠(2) that also contains 𝖭𝖯 with log-size proofs [6] and becomes equal to 𝖭𝖤𝖷𝖯 when made exponentially precise [26]. On the other hand, 𝖰𝖬𝖠 with log-size proofs is equal to 𝖡𝖰𝖯 [24], which is believed not to contain 𝖭𝖯, and 𝖯𝗋𝖾𝖼𝗂𝗌𝖾𝖰𝖬𝖠=𝖯𝖲𝖯𝖠𝖢𝖤 [11] is believed to be different from 𝖭𝖤𝖷𝖯. Figure 1 depicts the relationships between the classes discussed here.

Proposition 1.5.

𝖰𝖬𝖠𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(exp,1poly,1poly)𝖰𝖬𝖠(2).

Proposition 1.6.

𝖭𝖯 can be decided in 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 already with log-size proofs.

Proposition 1.7.

𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(exp,1exp,1exp)=𝖭𝖤𝖷𝖯

1.1.3 𝗣𝘂𝗿𝗲𝗦𝘂𝗽𝗲𝗿𝗤𝗠𝗔 is upper bounded by 𝗣𝗦𝗣𝗔𝗖𝗘

Proving a non-trivial upper bound on the complexity of 𝖰𝖬𝖠(2) is a major open question in the field. As such, one might wonder whether our “light” version of 𝖰𝖬𝖠(2) does admit a non-trivial upper bound. Our second main result is that it does indeed, namely 𝖯𝖲𝖯𝖠𝖢𝖤. This sharpens the upper bound on the complexity of 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 from 𝖰𝖬𝖠(2)𝖭𝖤𝖷𝖯 to 𝖯𝖲𝖯𝖠𝖢𝖤.

Theorem 1.8.

𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(poly,0,1poly)𝖯𝖲𝖯𝖠𝖢𝖤.

Our proof relies on methods from algebraic geometry and also works for 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 with exponential or even perfect precision as long as the number of constraints is polynomial.

What does this mean for 𝖰𝖬𝖠(2)? Of course showing that 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is 𝖰𝖬𝖠(2)-hard would imply 𝖰𝖬𝖠(2)𝖯𝖲𝖯𝖠𝖢𝖤 but there is a catch. To prove Theorem 1.8 we use methods from algebraic geometry that also work for 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 with exponential precision and even with perfect precision. This allows us to obtain the following corollary.

Corollary 1.9.

If 𝖯𝗋𝖾𝖼𝗂𝗌𝖾𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is 𝖯𝗋𝖾𝖼𝗂𝗌𝖾𝖰𝖬𝖠(𝟤)-hard, then 𝖯𝖲𝖯𝖠𝖢𝖤=𝖭𝖤𝖷𝖯.

This corollary can be interpreted either as evidence that 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is not 𝖰𝖬𝖠(2)-hard, or as a barrier to a hardness proof: any such proof must fail in the precise case, assuming that 𝖯𝖲𝖯𝖠𝖢𝖤𝖭𝖤𝖷𝖯.

Furthermore, by combining Propositions 1.5 and 1.3 we conclude that 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 can only be 𝖰𝖬𝖠(2)-complete if a polynomial number of constraints give the same power as exponentially many constraints.

Corollary 1.10.

If 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(poly,1poly,1poly)𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(exp,1poly,1poly), then 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is not 𝖰𝖬𝖠(2)-hard.

Lastly, the fact that 𝖰𝖬𝖠(2) contains 𝖭𝖯 already with log-size proofs is sometimes taken as evidence that 𝖰𝖬𝖠(2) could be equal to 𝖭𝖤𝖷𝖯. We argue that our results imply that this is not evidence at all. Indeed, 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 also contains 𝖭𝖯 with log-size proofs but is contained in 𝖯𝖲𝖯𝖠𝖢𝖤.

Figure 1: Diagram of the complexity classes discussed in this paper. Theorem 1.8 shows 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠𝖯𝖲𝖯𝖠𝖢𝖤. 𝖡𝖾𝗅𝗅𝖯𝗎𝗋𝖾𝖲𝗒𝗆𝖰𝖬𝖠 is discussed in the full version [18]. Proposition 1.5 shows 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(exp,1poly,1poly)𝖰𝖬𝖠(2). 𝖯𝖲𝖯𝖠𝖢𝖤=𝖯𝗋𝖾𝖼𝗂𝗌𝖾𝖰𝖬𝖠 is shown in [11]. The third level of the quantum polynomial hierarchy, 𝖰Σ3, is between 𝖰𝖬𝖠(2) and 𝖭𝖤𝖷𝖯 [12]. 𝖭𝖤𝖷𝖯=𝖯𝗋𝖾𝖼𝗂𝗌𝖾𝖰𝖬𝖠(𝟤) is shown in [6, 26]. The relationship between 𝖯𝖲𝖯𝖠𝖢𝖤 and 𝖰𝖬𝖠(2) remains a major open problem.

1.1.4 Solving systems of quadratic equations efficiently in parallel

To prove Theorem 1.8 we rely on techniques by Grigoriev and Pasechnik [14] for solving certain polynomials. We call such polynomials GP systems.

Definition 1.11 (GP system (informal)).

A GP system is a polynomial of the form p(Q(X)), where p:k is a degree d polynomial in “few” variables, and Q:Nk is quadratic in “many” variables. We assume the coefficients of p and Q are integers of bit size at most L. A solution to the system is a point XN such that p(Q(X))=0.

Grigoriev and Pasechnik give an algorithm that can compute a set of univariate representation of solutions of p(Q(X)) that intersects all connected components of the solution set [14, Theorem 1.2]. Their algorithm requires (dN)O(k) arithmetic operations.

We show how to write a 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 verifier as a GP system with k=poly(n) and N,L=2poly(n) such that the system has a solution iff the verifier accepts some pure proof. The results by Grigoriev and Pasechnik then immediately imply 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠𝖤𝖷𝖯. To prove containment in 𝖯𝖲𝖯𝖠𝖢𝖤 we modify the algorithm to work efficiently in parallel. The techniques we develop turn out to be much more general. They also show that solving quadratic systems with few constraints is in 𝖭𝖢, or Nick’s Class, which captures efficient parallel computation.

Definition 1.12 (Nick’s Class [3]).

The i-th level of 𝖭𝖢, 𝖭𝖢i, consists of all languages decidable in time O(logi(n)) using poly(n) parallel processors. 𝖭𝖢 is the union of 𝖭𝖢i over all i.333Equivalently, 𝖭𝖢i can be defined as the class of languages decidable by an O(login)-depth circuit of size poly(n).

The class 𝖭𝖢(poly) of all decision problems decidable in poly(n) time on exp(n) processors is equal to 𝖯𝖲𝖯𝖠𝖢𝖤 [7]. Our modification of Grigoriev and Pasechnik’s algorithm yields:

Theorem 1.13.

Let p,Q be a GP system. There is a parallel algorithm for deciding whether p(Q(X)) has a root. The algorithm uses L2(k2Nd)O(k) parallel processors and needs poly(logN,logd,k,logL) time. In particular, if logN,logd,logL,kpoly(n) the computation can be done in 𝖭𝖢(poly)=𝖯𝖲𝖯𝖠𝖢𝖤. If N,d,Lpoly(n) and k=O(1) then the algorithm is in 𝖭𝖢.

We further build upon [14] and consider the following optimization problem which includes the task of quantifying how inconsistent local density matrices are.

Definition 1.14 (OptGP).

An OptGP instance consists of a degree d polynomial r:k and a GP system p(Q(X)) with bounded solution set Z={XN:p(Q(X))=0}. The task is to compute or approximate θ=minXZr(Q(X)).

We give a parallel algorithm for approximating the optimum of a OptGP system as well as approximating a witness to this optimum.

Theorem 1.15.

Let r,p,Q be an OptGP instance. There is a parallel algorithm that computes a δ-approximation to θ=minXZr(Q(X)) and to some X with r(Q(X))=θ and p(Q(X))=0. The algorithm uses poly(L,|logδ|,(kNd)O(k2)) parallel processors and needs poly(logN,logd,k,logL,log|logδ|) time.

Grigoriev and Pasechnik [14, Theorem 1.5] also state a theorem with a sequential algorithm for the optimization problem that also applies to unbounded Z, but their proof is not yet available to the best of our knowledge.

Finally, we showcase the applicability of the developed algorithms. The formal treatment of these applications are deferred to the full version [18] but we already state the results.

First, we improve upon a result by Shi and Wu. In [30] they give a 𝖯𝖲𝖯𝖠𝖢𝖤 algorithm for optimizing the energy of “decomposable” Hamiltonians over separable states. Using our framework we are able to reprove this fact, and even get a better runtime dependence on the error.

Second, we show that deciding if there exists a unique444We say a state |ϕ is the unique state consistent with some local density matrices if any state that is orthogonal to |ϕ is far from consistent. pure state that is consistent with given local density matrices is also in 𝖯𝖲𝖯𝖠𝖢𝖤. In other words, we can decide in 𝖯𝖲𝖯𝖠𝖢𝖤 whether the local density matrices fully describe the physics of the system.

Third, we show how to decide a variant of 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬, where the input only specifies the spectrum of the local density matrices. This version is sometimes referred to as the quantum marginal problem, although others use that name for our 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬.

Fourth, we consider a pure-state variant of 𝖡𝖾𝗅𝗅𝖲𝗒𝗆𝖰𝖬𝖠(poly). This class (see [1, 8]) captures 𝖰𝖬𝖠 protocols where Merlin promises to send poly many copies of a proof in tensor product, but Arthur has measure each copy independently and then decide to accept or reject based on the classical measurement outcomes. It turns out that 𝖡𝖾𝗅𝗅𝖲𝗒𝗆𝖰𝖬𝖠(poly) is actually equal to 𝖰𝖬𝖠 [8]. The variant we consider, 𝖡𝖾𝗅𝗅𝖯𝗎𝗋𝖾𝖲𝗒𝗆𝖰𝖬𝖠(poly) adds the additional promise that the proof is pure and does not obviously equal 𝖰𝖬𝖠. It is easily seen that 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠𝖡𝖾𝗅𝗅𝖯𝗎𝗋𝖾𝖲𝗒𝗆𝖰𝖬𝖠(poly) as Arthur can approximate the acceptance probability of the checks by doing many independent measurements. We slightly strengthen Theorem 1.8 by proving that also 𝖡𝖾𝗅𝗅𝖯𝗎𝗋𝖾𝖲𝗒𝗆𝖰𝖬𝖠(poly)𝖯𝖲𝖯𝖠𝖢𝖤.

Lastly, we consider an entirely classical problem: quadratic programming with few constraints. A quadratically constrained quadratic program (QCQP) is an optimization problem of the form

minxn x𝖳A0x+a0𝖳x (1a)
subject to x𝖳Aix+ai𝖳xbii[m]. (1b)

As a final application of the GP framework, we show that QCQPs can be solved in 𝖭𝖢 if the number of constraints m is constant. Note that we do not require any assumptions on the Ai such as positivity, symmetry or bounds on the condition number.

1.2 Proof techniques

Sketches of our proof can be found in Sections 4, 5, and 6. The formal proofs can be found in the full version [18].

1.3 Related work

The computational complexity of (mixed) 𝖢𝖫𝖣𝖬 and N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 has previously been studied by Liu, Broadbent and Grilo, as mentioned before. Liu [22] proves that (mixed) 𝖢𝖫𝖣𝖬 is contained in 𝖰𝖬𝖠 and hard under Turing reductions. Similar results for N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 are proven in [23]. This was improved by Broadbent and Grilo who proved (among other results regarding zero-knowledge proof systems) that (mixed) 𝖢𝖫𝖣𝖬 is also 𝖰𝖬𝖠-hard under Karp reductions, thereby fully resolving its complexity [9]. Both Liu, and Broadbent and Grilo do not intensively study 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬, although [23] does show containment of fermionic 𝖯𝗎𝗋𝖾N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 in 𝖰𝖬𝖠(2), leaving hardness as an open question. A similar containment for bosonic 𝖯𝗎𝗋𝖾N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 was shown in [31].

That does not mean that 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 and 𝖯𝗎𝗋𝖾N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 have not been studied before. There is a large body of work focussing on finding necessary and/or sufficient conditions for reduced density matrices to be consistent with a global state. Among these works is [21], which focuses on the case where the reduced density matrices are non-overlapping. The paper establishes conditions that are necessary and sufficient for the existence of a consistent pure state in this case. Mazziotti [25] derives necessary conditions for a two-fermion density matrix to have a consist global N-fermion pure state.

[32] rewrite 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 as an optimization problem over separable state. They then apply the method of symmetric extensions to this notoriously hard problem to describe 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 as a hierarchy of SDP’s. That is, they describe SDP’s depending on a parameter N such that any “No” instance will be discovered by the SDP for sufficiently large N. They do not, however, prove any upper bounds on the size of N required.

In [4], the authors consider 𝖰𝖬𝖠 with an internally separable proof. They prove that when this proof is mixed, the class is contained in 𝖤𝖷𝖯, whereas it is equal to 𝖭𝖤𝖷𝖯 if the proof is pure. This provides the, to our knowledge first, instance where pure proofs are provably stronger than mixed proofs, modulo standard complexity theoretic assumptions.

An algorithm for solving polynomial systems more general than those considered in Theorem 1.13 is given in [13]. It shows that a system of k polynomials of degree d in n variables can be solved in time poly(nd3k). One downside to this algorithm is that it finds a solution over the complex numbers instead of the reals. This makes it hard to constrain the norm of variables, as the complex conjugate is not a polynomial.

1.4 Discussion and open questions

Our work sheds some more light on the complexity of 𝖯𝗎𝗋𝖾N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 and 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬. However, the story is far from complete as the relation between 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 and 𝖰𝖬𝖠 or 𝖯𝖲𝖯𝖠𝖢𝖤 remains poorly understood. We conjecture

Conjecture 1.16.

𝖰𝖬𝖠𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠𝖰𝖬𝖠(2).

We give some evidence that 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 differs from 𝖰𝖬𝖠(2). Indeed, we prove that their precise versions are equal only if 𝖯𝖲𝖯𝖠𝖢𝖤=𝖭𝖤𝖷𝖯. However, this does not necessarily carry over from the precise setting to the “standard” setting. It would therefore be nice to see more evidence that 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠𝖰𝖬𝖠(2), such as an oracle separation. Of course, separating 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 from 𝖰𝖬𝖠(2) relative to an oracle is at least as hard as separating 𝖰𝖬𝖠 from 𝖰𝖬𝖠(2) in this way, something that has been eluding researchers to this date. Perhaps, however, the new perspective offered by 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 can lead to new insights.

Recently, it has been suggested that purity testing is at the heart of 𝖰𝖬𝖠(2)’s power [4]. While we provide evidence that 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is not 𝖰𝖬𝖠(2)-hard, that does not mean the end for this suggestion. One way to formalize the idea that 𝖰𝖬𝖠(2)’s power derives from purity would be to prove that 𝖰𝖬𝖠(2)=𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(exp,1poly,1poly). Note that our results do not provide evidence against this equality, as the 𝖯𝖲𝖯𝖠𝖢𝖤 upper bound crucially relies on there being only polynomially many constraints.

The relationship between 𝖰𝖬𝖠 and 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 with a constant number of checks could also be interesting. It can be shown that with a single check 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(1,1poly,0)=𝖰𝖬𝖠 as there is no single check passed by a mixed state but not by a pure state555If there exists a mixed state passing the check then there exist pure states |ψ,|ϕ such that |ϕ is accepted with probability 1/2 and |ψ is accepted with probability 1/2. By interpolating between these states and the Intermediate Value Theorem it follows that there exists some pure state accepted with probability exactly 1/2. We have been unable to find a set of 2 constraints with a consistent mixed state but no consistent pure state but leave 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(2,1poly,0)=?𝖰𝖬𝖠 as an open question.

Lastly, it would be nice to see if the GP system framework used for our 𝖯𝖲𝖯𝖠𝖢𝖤 upper bound can find other uses. An approach one could take here is to try to use it for a 𝖯𝖲𝖯𝖠𝖢𝖤 or 𝖤𝖷𝖯 upper bound on 𝖰𝖬𝖠(2). There are two main obstacles here. Firstly, any such approach needs to make essential use of the promise gap in order to work for 𝖰𝖬𝖠(2) but not for 𝖰𝖬𝖠(2)𝖾𝗑𝗉 (assuming 𝖯𝖲𝖯𝖠𝖢𝖤𝖭𝖤𝖷𝖯). Secondly, naively converting a 𝖰𝖬𝖠(2) instance into polynomials yields degree 3, for which the techniques from [14] no longer work.

2 Preliminaries

The main object of study in this paper is the k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 problem on qubits.

Definition 2.1 (k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬).

We are given a set of reduced density matrices ρ1,,ρm with poly(n) bits of precision, where each ρi acts on qubits Ci[n] with |Ci|k, as well as thresholds α,β with βα1/poly(n). Decide:

  • YES: There exists a state |ψ2n such that TrCi¯(|ψψ|)ρiα for all i[m].

  • NO: For all states |ψ2n, there exists an i[m] such that TrCi¯(|ψψ|)ρiβ.

For α=0, we denote the problem by k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬1. Define k𝖢𝖫𝖣𝖬 and k𝖢𝖫𝖣𝖬1 analogously, but allowing a mixed state in place of |ψ.

Note that 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 and (mixed) 𝖢𝖫𝖣𝖬 are indeed different. The following example shows that a consistent mixed state may exist even if no consistent pure state exists.

Example 2.2.

Let ρ=1ni=1n|ψiψi|, where |ψi=|0i110ni2n. Then all 2-local reduced density matrices of ρ are ρij=n2n|0000|+1n|0101|+1n|1010|. Assume there exists a pure state σ=|ϕϕ| such that σij=ρij for all i,j[n]. Then |ϕSpan{|0n,|ψ1,,|ψn} since ρ has no overlap with any string of Hamming weight 2. Hence, |ϕ must be of the form |ϕ=i=1nai|ψi with |ai|=1/n. Then σ12=2n|ηη|+n2n|0000|, where |η=n/2(a1|10+a2|01). However, then σ12ρ12 since their rank differs, which contradicts the choice of |ϕ.

3 PureSuperQMA

In this section we define the complexity class 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠. Following the definition we prove that 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 contains 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 and some other properties of the class, suggesting it can be thought of as a “light” version of 𝖰𝖬𝖠(2). We end the section by establishing a canonical form for 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠, cleaning up the definition. This canonical form will be important in the next section, where we use it for the hardness proof.

Definition 3.1 (𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠, c.f. [2]).

A promise problem A is in 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(m,ε,δ) if there exists a uniformly generated super-verifier666Our definition of a super verifier here might seem slightly different from Aharanov and Regev’s definition. Note that their definition can be recovered from our by repeating the same constraint as necessary. 𝒱={(Vx,i,rx,i,sx,i)}i[m] on n1(n)nO(1) proof qubits and n2(n)nO(1) ancilla qubits (n=|x|) such that

  • xAyes|ψ𝒫:Pri(|p(Vx,i,ψ)rx,i|sx,i)=1,

  • xAno|ψ𝒫:Pri(|p(Vx,i,ψ)rx,i|sx,i+ε)1δ,

where 𝒫 is the set of unit vectors on n1(n) qubits, i[m] is drawn uniformly at random, and p(V,ψ)Tr(ΠaccV|ψ,0n2ψ,0n2|V) denotes the acceptance probability of V on input |ψ.777Here and in the following, we use ψ to denote the density operator |ψψ|. We call each triple (Vx,i,rx,i,sx,i) a constraint or a check. Let

𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠=mnO(1),ε,δnO(1)𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(m,ε,δ). (2)
Lemma 3.2.

k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 for kO(logn).

The proof is analogous to the containment of 𝖯𝗎𝗋𝖾N𝖱𝖾𝗉𝗋𝖾𝗌𝖾𝗇𝗍𝖺𝖻𝗂𝗅𝗂𝗍𝗒 in 𝖰𝖬𝖠(2) [23] and can be found in the full version [18].

Proposition 1.5. [Restated, see original statement.]

𝖰𝖬𝖠𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(exp,1poly,1poly)𝖰𝖬𝖠(2).

Proof sketch.

First note that 𝖰𝖬𝖠𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 follows by setting r=1 and s=1exp(n) in the definition of 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠. For the other inclusion we use the fact that 𝖰𝖬𝖠(2)=𝖰𝖬𝖠(poly) [16]. With probability 1/2 each, the verifier performs one of the following tests: (i) Run swap tests between random disjoint pairs of the registers to ensure the input state is close to a state of the form |ψk. (ii) Pick i[m] uniformly at random and run Vx,i on all k proofs, recording the outcomes as y1,,yk{0,1}, and let μ=1ki=1kyk. Accept if |μrx,i|sx,i+ε/2. For sufficiently large knO(1), we can use Hoeffding’s inequality to prove completeness and soundness.

Note that we still get containment in 𝖰𝖬𝖠(2), even with an exponential number of constraints, as long as in the NO-case the acceptance probability deviates from rx,i for a significant fraction of constraints. However, we do have some reason to believe that k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is only hard for 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 with a polynomial number of constraints since the hardness proof works for any precision parameter and k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬𝖯𝖲𝖯𝖠𝖢𝖤 (see Theorem 1.13) even for exponentially small precision. In contrast, if we have both an exponential number of constraints and exponential precision, then 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 contains 𝖭𝖤𝖷𝖯.

See 1.6 Following [6]’s proof of containment of 𝖭𝖯 in 𝖰𝖬𝖠(2) with log-size proofs, the idea behind the proof is verify a 3-coloring instance by having the prover send a state of the form |ψ=1nvV|vV|C(v)C. To forcing the prover to send a proof of this form we design constraints to force every vertex to show up in the superposition and to have exactly one color associated to it. For the technical details, see the full version [18].

A similar proof using succinct 3-coloring rather than normal 3-coloring shows the following result.

Proposition 1.7. [Restated, see original statement.]

𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(exp,1exp,1exp)=𝖭𝖤𝖷𝖯

Since 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠(exp,1exp,1exp)𝖰𝖬𝖠(2)exp (i.e. 𝖰𝖬𝖠(2) with exponentially small promise gap) by the same argument as Proposition 1.5, we also recover the following known result:

Corollary 3.3 ([6, 26]).

𝖰𝖬𝖠(2)exp=𝖭𝖤𝖷𝖯, where 𝖰𝖬𝖠(2)exp denotes 𝖰𝖬𝖠(2) with exponentially small promise gap.

To prove that 2𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 is 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠-complete, we will use a simplified but equivalent definition:

Definition 3.4 (𝖯𝖲𝖰𝖬𝖠).

A promise problem A is in 𝖯𝖲𝖰𝖬𝖠(m,ε) if there exists a uniformly generated super-verifier 𝒱={Vx,i}i[m] on n1(n)nO(1) proof qubits and n2(n)nO(1) ancilla qubits (n=|x|) such that

  • xAyes|ψ𝒫i[m]:|Tr(ΠaccVx,i|ψ,0n2ψ,0n2|Vx,i)12|=0,

  • xAno|ψ𝒫i[m]:|Tr(ΠaccVx,i|ψ,0n2ψ,0n2|Vx,i)12|ε,

where 𝒫 is the set of unit vectors on n1(n) qubits.

Let 𝖯𝖲𝖰𝖬𝖠=mnO(1),εnO(1)𝖯𝖲𝖰𝖬𝖠(m,ε).

In other words, 𝖯𝖲𝖰𝖬𝖠 is 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 where all the r’s are set to 12 and all the s’s to 0.

Lemma 3.5.

𝖯𝖲𝖰𝖬𝖠=𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠.

4 2-PureCLDM is PureSuperQMA-complete

See 1.3 We give a proof sketch only. The complete proof can be found in the full version [18].

Proof sketch.

Containment holds by Lemma 3.2. It remains to prove that k𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬1 is 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠=𝖯𝖲𝖰𝖬𝖠-hard (Lemma 3.5). For simplicity, we only prove hardness of 2𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬1, but k>2 is analogous since simulatability works for any k.

Our proof closely follows the proof for the 𝖰𝖬𝖠-completeness of the (mixed) 𝖢𝖫𝖣𝖬 problem by Broadbent and Grilo [9] based on locally simulatable codes. The broad idea behind their proof is as follows: starting with a 𝖰𝖬𝖠 verifier V we can use Kitaev’s circuit-to-Hamiltonian construction to build a Hamiltonian H that has low-energy state if and only if V would accept. This low-energy state, the history state, encodes the behavior of the verifier. Broadbent and Grilo’s aim is to construct local density matrices that are consistent with the history state if V accepts, and are inconsistent otherwise.

The main difficulty is that the behavior of the verifier, and hence the history state, depend on the proof given to the verifier. This is solved by considering a different verifier V that mirrors the actions of V but acts on encoded data. By choosing an s-simulatable code for this encoding this has as crucial advantage that the s-local density matrices at any point during the computation can be computed efficiently.888Note that these no longer depend on the proof. Intuitively, all information contained in the proof has been moved to the correlations between larger sets of qubits.

One technical detail that will be especially important to us is that the new verifier V needs to check whether the proof it received is properly encoded. To ensure that the local density matrices can still be computed during this checking procedure, Broadbent and Grilo have the prover send the original proof encoded under a one-time pad and the one-time pad keys. It is this one-time pad constructions that causes the Broadbent Grilo proof to fail for 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 as a cheating prover could send different pure states for each key, making the full state behave like a mixed state.

We will now sketch our construction. Highlighting especially where we deviate from Broadbent and Grilo. For the technical details and proofs we refer to the full version [18].

Consider a problem A𝖯𝖲𝖰𝖬𝖠 that is decided by a super-verifier 𝒱={Vx,i}i[m] on n1 proof qubits and n2 ancilla qubits. We will now describe how 𝒱 is reduced to a 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 instance that is consistent if the super-verifier accepts and inconsistent if it rejects.

First, we define a modified super-verifier 𝒱𝗈𝗍𝗉={Vx,i𝗈𝗍𝗉}i[m] that accepts a one-time padded proof. A crucial difference with Broadbent and Grilo is that we use the same key to encrypt every qubit. The expected proof will be of the form

|ψ𝗈𝗍𝗉=12a,b{0,1}(XaZb)n1|ψab|abab, (3)

where the |ψab are proofs accepted by 𝒱 that can (but do not have to) depend on a,b. Every individual qubit will still be maximally mixed, but there are only 4 different keys. By projecting the key register down to fixed values of a,b, the modified super-verifier can check that |ψab is indeed accepted by 𝒱. As there are only a 4 different key values (rather than exponentially many for BG), the super-verifier can include checks for each of the possible projections.

Next, we unify all constraints in 𝒱𝗈𝗍𝗉 into a single circuit that we can apply a circuit-to-Hamiltonian construction to, and, following Broadbent and Grilo, make this circuit act on encoded data using an s-simulatable code.

Definition 4.1 (s-simulatable code [9]999Our definition deviates from [9, Definition 4.1] in that it does not require transversal circuits for all gates. In fact the simulatable codes in [9] also use non-transversal gates for the T-gadgets given in [9, Section 4.3].).

Let 𝒞 be an [[N,1,D]]-QECC, and 𝒢 a universal gateset, such that for each logical gate G𝒢 on kG qubits, there exists a physical circuit U1(G),,U(G) with poly(N) that implements G with the help of an mG-qubit magic state τG. We say 𝒞 is s-simulatable if there exists a deterministic 2O(N)-time algorithm 𝖲𝗂𝗆𝒞(G,t,S) with G𝒢, t{0,,}, S[N(mG+kG)], |S|s, and output ρ(G,t,S), such that for any kG-qubit state σ

ρ(G,t,S)=TrS¯((Ut(G)U1(G))𝖤𝗇𝖼(στG)(Ut(G)U1(G))), (4)

where 𝖤𝗇𝖼(ρ) denotes the encoding of ρ under 𝒞.

Lemma 4.2 ([15, 9]).

For every k>log(s+3), the k-fold concatenated Steane code is s-simulatable.

The unified circuit Vx(s) expects the proof to be encoded with 𝒞, such that 𝒞 is (3s+2)-simulatable. Vx(s) has a proof register B on n1 logical qubits, and an ancilla register on n2′′>n2, where the additional ancilla qubits are used as resources for the 𝖳-gates. Vx(s) is defined in Figure 2

The way we combine the Vx,i𝗈𝗍𝗉 might seem puzzling at first: we run the encoded version of Vx,i𝗈𝗍𝗉, decode its output qubit, encode it again and run the encoded version of Vx,i𝗈𝗍𝗉. While this acts as the identity, we will be able to extract the acceptance behavior of the Vx,i𝗈𝗍𝗉 from the history state of Vx(s).

(a) Vx(s) first checks whether the proof is encoded, then generates resource states, and finally checks all constraints of 𝒱𝗈𝗍𝗉.
(b) 𝖢𝗁𝗄𝖤𝗇𝖼 successively encodes and decodes each qubit. The annotation “I/2” denotes the expected reduced density matrix of that qubit. U𝖽𝖾𝖼 is a unitary such that U𝖽𝖾𝖼𝖤𝗇𝖼(|ψ)=|ψ|0N1 and U𝖾𝗇𝖼=U𝖽𝖾𝖼.
(c) To verify Vx,i𝗈𝗍𝗉, first apply the verifier in the code space, then decode the output qubit, which is maximally mixed for acceptance probability 1/2, and finally undo these steps again.
Figure 2: Super-verifier Vx(s). Wires represent logical qubits under 𝒞. Note that while the 𝖢𝗁𝗄 procedures act as identity, their outcome can be read from the history state via the Extraction Lemma.

Unlike Broadbent and Grilo, we use the 2-local circuit-to-Hamiltonian construction from [19] to obtain a Hamiltonian H.101010Broadbent and Grilo use Kitaev’s original 5-local construction. Let us now briefly state an important property of the 2-local construction and the Extraction Lemma, which we use to extract the acceptance probabilities of the Vx,i𝗈𝗍𝗉 from the history state.

Lemma 4.3 (Variant of [19, Lemma 5.1]).

Let V=UTU1 be a quantum circuit on n qubits that only consists of 1-local gates and CZ gates followed and preceded by two Z gates, n1n, and εnO(1). Then there exists a 2-local Hamiltonian H on n+T qubits and Hpoly(n), such that ϕ|H|ϕ=0 for all |ϕ𝒮hist, and if Tr(Hρ)1, then there exists a state σ in 𝒮hist (pure if ρ is pure), such that ρσtrε, where for |t^=|1t 0Tt,

𝒮hist:=Span{t=0TUtU1|x,0n2|t^|x{0,1}n1}. (5)

Note that circuits consisting of only 1-local gates and CZ gates followed and preceded by two Z gates are universal. We can thus assume that all circuits we consider have this form.

Lemma 4.4 (Extraction Lemma).

Let |ψhist=(T+1)1/2t=0T|ψt|t^𝒮hist as defined in Lemma 4.3 with |ψt=UtU1|ϕ,0n2 for some |ϕ2n1. Let i,j[T], Uj=I, S={i,n+j}, and ρ=TrS¯(|ψhistψhist|). There exists a linear function fex (independent of the circuit) such that fex(ρ)=Tri¯(|ψjψj|) and fex(A)tr(T+1)Atr for all A.

Now suppose we have a state |ψ approximately consistent with a set of 2-local density matrices {ρij} that has low energy with respect to the 2-local Hamiltonian H=ijHij of Lemma 4.3. Thus Tr(H|ψψ|)ijTr(Hijρij)1 and |ψ must be close to a history state. In general, we do not know how to compute local density matrices of an accepting history state. However, by the properties of the s-simulatable code, these can be computed for the encoded portion of the circuit. Using the Extraction Lemma, we also know the 1-local density matrices of an output qubit after decoding.

Let |ψhist(s) be the history state for Vx(s), such that the input |ψ𝗈𝗍𝗉 satisfies every constraint in 𝒱𝗈𝗍𝗉 perfectly:

|ψhist(s)=1T+1t=0TUtU1|ψ𝗈𝗍𝗉|0n2′′|t^. (6)

Using the properties of the simulatable code, it can be argued that reduced density matrices of |ψhist(s) can be classically efficiently computed.

Claim 4.5.

There exists a deterministic classical algorithm 𝖲𝗂𝗆V(s)(x,S) that outputs a classical description of TrS¯(|ψhist(s)ψhist(s)|) for S[N(n1+n2′′)+T] with |S|s in time poly(2N,T).

To apply the Extraction Lemma we would like to force any state consistent with the output of the reduction to be close to a history state. To achieve this we use the following trick: the reduction computes the energy of the reduced density matrices it would output (this is possible since H is 2-local). If this energy is too high, the reduction simply outputs a trivial “No” instance111111We would like to reject here, but as we are describing the reduction we cannot directly do this. Instead, we output a trivial “No” instance which has the same effect.. If the energy is sufficiently small, we can show that any consistent state must be close to a history state as desired.

We have now assembled all the pieces and are ready to sketch the actual reduction and hardness proof. Let A𝖯𝖲𝖰𝖬𝖠=𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 be as at the beginning of Section 4, and let Vx:=Vx(2)=UTU1 be as defined below Lemma 4.2. Given an instance x{0,1}n, we compute a 2𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 instance as follows:

  1. 1.

    Compute the Hamiltonian H=i,j[n]Hi,j with n:=N(n1+n2′′)+T by applying Lemma 4.3 to Vx for ε1nO(1) (to be determined in the soundness proof).

  2. 2.

    For all i,j[n], compute ρij=𝖲𝗂𝗆V(s)(x,{i,j}).

  3. 3.

    Compute E=ijTr(Hijρij).

    1. (a)

      If E=0, output {ρij}i,j[n] and β (to be determined in the soundness proof).

    2. (b)

      Otherwise, output a NO-instance for 2𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬.

This reduction clearly runs in poly(n) time.

If xAyes, then the history state |ψhist(2) defined in Equation 6 is consistent with density matrices ρij by ˜4.5.

Using the Extraction Lemma it can be argued that if xAno, that is, if there is a check that fails, and the 2-local density matrices are low-energy, then there is no consistent state, exactly as desired. Note that the fact that the local density matrices are low-energy is enforced by the reduction (if they are not, a trivial NO instance is output).

5 𝒌𝗣𝘂𝗿𝗲𝗖𝗟𝗗𝗠 is in 𝗣𝗦𝗣𝗔𝗖𝗘

In this section we set out to prove the containment of 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 in 𝖯𝖲𝖯𝖠𝖢𝖤. However, the techniques we develop for this result turn out to be much more general and lead to a poly-logarithmic time parallel algorithm (i.e., 𝖭𝖢) for solving quadratic systems with few constraints.

See 1.8 At a high level, the proof consists of three steps. First, we reduce 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 to deciding if p(Q(X)) has any zeros. Here p:poly(n) is a degree poly(n) polynomial in poly(n) variables and Q:exp(n)poly(n) is a quadratic polynomial. Next, we use results by Grigoriev and Pasechnik [14] that reduce finding zeros of p(Q(X)) to finding limits of zeros of smaller systems. There will be exp(n) smaller systems, each consisting of poly(n) equations of degree at most exp(n). Crucially, these equation will have at most poly(n) variables. We modify this reduction to work in 𝖯𝖲𝖯𝖠𝖢𝖤. We then compute these limits efficiently in parallel using an algorithm for the first-order theory of the reals by Renegar [27], making the total computation a 𝖯𝖲𝖯𝖠𝖢𝖤 computation and proving the theorem.

5.1 𝗣𝘂𝗿𝗲𝗦𝘂𝗽𝗲𝗿𝗤𝗠𝗔 as a polynomial system

We first describe how to reduce 𝖯𝗎𝗋𝖾𝖲𝗎𝗉𝖾𝗋𝖰𝖬𝖠 to a GP system.

Definition 5.1 (Grigoriev-Pasechnik system (GP system) [14]).

A GP system is a polynomial of the form p(Q(X)) where p:k is a degree d polynomial and Q=(Q1,,Qk):Nk is a quadratic map. Both are assumed to have coefficients in .121212The techniques by Grigoriev and Pasechnik are valid in the more general case where is replaced by an arbitrary real closed field 𝕂 and with a computable subring of that field. We say a GP system is satisfiable if there exists xN such that p(Q(x))=0.

Consider a super-verifier 𝒱={(Vi,ri,si)}[k] where k=poly(n). In this section we will let Vi denote the POVM measurement operator implemented by the circuit so that the acceptance probability p(V,ψ)=ψ|Vi|ψ. In the YES-case, there exists some quantum state |ψ2n such that for all i,

|ψ|Vi|ψri|si (7)

whereas in the NO-case there will be at least one i for which |ψ|Vi|ψri|>si. Note that depending on the δ parameter in Definition 3.1, there could be more such i but this is not required for our methods. What is required for our method to work is that k, the total number of different (Vi,ri,si) the super-verifier could output, is polynomial.

To distinguish the two cases, we write the n-qubit state |ψ as an exponentially long vector in N. Here and in the rest of this section N=2n. For each entry of the vector we introduce two variables: one for the real part and one for the complex part. That is, we write

|ψ=(a1+b1iaN+bNi.) (8)

Note that for any assignment of the variables (a1,b1,,aN,bN)2N we get an (unnormalized) vector in (2)n. We now construct a GP system that is satisfiable if and only if an accepting proof state exists.

First, to ensure that the aj,bj represent a normalized quantum state we define

Q0(a1,b1,,aN,bN)=|ψ21=(j=1Naj2+bj2)1 (9)

Next, note that ψ|Vi|ψ is already a quadratic equations. Although |ψ can have a complex part ψ|Vi|ψ will be real since Vi is positive semidefinite. We define

Qi(a1,b1,,aN,bN)=ψ|Vi|ψri,for i[k]. (10)

In order to handle the inequalities in Equation 7 we will add slack variables c1,ck and define Qk+i=ci,for 1ik. We now put all constraints together and define

p(y0,,y2k)=y02+j=1k(yj2+yk+j2sj2)2. (11)

We then have

p(Q(a1,b1,aN,bN,c1,,ck))=(|ψ21)2+j=1k((ψ|Vj|ψri)2+cj2sj2)2. (12)

Note that p(Q(X)) will be zero only when all component parts are zero. The first term enforces that the norm of |ψ is 1. Meanwhile, the j-th term in the sum makes sure that (ψ|Vj|ψrj)2 can be made equal to sj2 by adding some nonnegative value cj2. In other words, it ensures that |ψ|Vj|ψrj|sj. We conclude that p(Q(a1,b1,aN,bN,c1,,ck)) has a zero if and only if there exists some quantum state |ψ such that for all i, |ψ|Vi|ψri|si, which is exactly as we set out to construct.

5.2 Reducing the number of variables

In this subsection, we consider a general GP system p(Q(X))=ζ and describe Grigoriev and Pasechnik’s methods for reducing the number of variables. The full version [18] of the work contains a quite thorough treatment of their methods, reproducing large parts of their construction. We hope this makes their methods easily accessible to other quantum theorists.

Without loss of generality, we can write Q as

Qj:X12X𝖳HjX+bj𝖳X+cj,j[k],cj,bjN,Hj=Hj𝖳N×N. (13)

Define pi=p(Y)Yi for all i[k].

For their main construction, Grigoriev and Pasechnik rely on some assumptions. These assumptions hold generically, but could fail in certain degenerate cases. We will later discuss how these assumptions are removed. We assume the following:

  1. (1)

    The set Z=Z(p(Q(X))) of zeros of p(Q(X)) is bounded, i.e., there is some r such that X>rp(Q(X))0. In our case, this assumption is trivially satisfied because of the normalization constraint Equation 9.

  2. (2)

    ζ is a regular value of p(Q(x)) and p(Y). That is, there exists no Xn (respectively Yk) with p(Q(X))=ζ (respectively p(Y)=ζ) for which p(Q(X))=0 (respectively p(Y)=0).

  3. (3)

    The matrices H^i obtained from Hi by deleting the first row are in r-general position. I.e.,

    rk(i=1ktiH^i)r,t{(p1(Q(X)),,pk(Q(X)))XZ}. (14)

    Note that Assumption 2 implies that t is never 0 in the above.

We are now ready to summarize Grigoriev and Pasechnik’s construction as the following theorem.

Theorem 5.2 ([14, Theorem 4.5]).

Let p,Q be a GP system satisfying the three assumptions above. Then, one can construct sets Vc(U,W), such that Vc(U,W) intersects every connected component of Z.

The sets Vc(U,W), also called “pieces”, are indexed by row sets U{2,,N} and column sets W[N] such that r|U|=|W|N1. For such a W, let ϕW denote the polynomial

ϕW:Nk+N|W|,X(Q(X)XW¯). (15)

Here W¯=[N]\W. For each Vc(U,W), the set ϕW(Vc(U,W))k×N|W| is defined as the set of points satisfying the following equations:

p(Y) =ζ, (16a)
ΩdetΦ(Y)UW 0, (16b)
Ω2Y =Ω2Q(ϕUW1(Y,T)), (16c)
Ωb(Y)U¯ =ΩΦ(Y)U¯WΦ(Y)UW1b(Y)U, (16d)
detΦ(Y)UW =0U,W:|U|=|W|=|U|+1,UU{2,,N}, (16e)
WW[N].

Here Φ(Y)=j=1kpj(Y)H^j and ϕUW1(Y,T) is the inverse of ϕW on ϕW(Vc(U,W)), given by

ϕUW1:k×N|W|N,(YT)(Φ(Y)UW1(b(Y)UΦ(Y)UW¯T)T) (17)

If r=Nk+1 (which will be ensured later with Lemma 5.4), then there are NO(k) pieces, each defined by O(k2) polynomials of degree O(N) in O(k) variables.

Lastly, if the coefficients of p and Q are integers of bit length at most L, then ϕUW1 and the equations defining the Vc(U,W) can be computed from the coefficients of Q and p in time poly(logN,logd,k,logL) using (dN)O(k)LO(1) parallel processors.

 Remark 5.3.

Theorem 5.2 still holds with the same runtime and processor bounds when the GP system has coefficients in [C] of degree O(1) (instead of ), for real constants C=(C1,,Cm)m and m=O(k). The algorithm then also outputs the equations for the pieces with coefficients in [C]. Note that the input and output representations treat these constants symbolically (i.e. like free variables), so that the output is independent of the actual value of C. In the proof of Theorem 5.2 the additional constants can be handled just like the variables.

5.2.1 Removing the assumptions

We now turn to the removal of the assumptions made in Theorem 5.2. To do so, Grigoriev and Pasechnik use limit arguments. The key idea is that if we perturb the initial system of polynomials slightly, there will be at most finitely many values of the perturbation for which the assumptions fail. Hence, if the perturbation is sufficiently small, all assumptions will hold. They then argue that the solutions to our initial system are equal to the solutions of the perturbed system if we let the perturbation go to zero. The assumptions will hold in the limit. We will later discuss how we can compute these limits.

The following lemma deals with the general position assumption.

Lemma 5.4 ([14, Lemma 5.2]).

Let p,Q be a GP system and write Q as

Qj:X12X𝖳HjX+bj𝖳X+cj,j[k],cj,bjN,Hj=Hj𝖳N×N. (18)

Define J(j) to be the N×N matrix with diagonal (1j1,2j1,,Nj1) and perturb Q by defining

Q~j(X,ε)=Qj(X)+ε2X𝖳J(j)X. (19)

Then, there is some constant ε such that for 0<ε<ε, the matrices H~j(ε) obtained by deleting the first row of Hj+εJ(j) will be in Nk+1 general position. In fact, for all 0yk the matrix

A(y,ε)=j=1Yj(Hj+εJ(j)) (20)

will have rk(A)Nk+1.

Next, Grigoriev and Pasechnik deal with the assumption 2 by showing that any ζ0 that is sufficiently close to zero is a regular value of p(Q(X)) and p(Y).

Lemma 5.5 ([14, Lemma 5.3]).

Let p:k and Q:nk be polynomials. Then p(Y) and p(Q(X)) each have at most finitely many critical values.

We have now established that p(Q~(X,ε))ζ satisfies all assumptions required for Theorem 5.2 when ε,ζ are sufficiently small. In order to use this to find solutions to our original equation we need to relate Z=Z(p(Q(X))) to Z~(ζ,ε)=Z(p(Q~(X,ε))ζ). Clearly, if ζ and ε are very small and X is a zero of p(Q~(X,ε))ζ then p(Q(X)) will be close to zero. This could suffice for finding approximate solutions, but to solve the problem exactly we need something more. Grigoriev and Pasechnik provide this by proving that Z coincides exactly with the limit of Z~(ζ,ε) as ζ,ε0. They consider the solutions of p(Q~(X,ε))ζ as Puiseux series in ζ and ε and prove that the limits of these are exactly the zeros of p(Q(X)). For us, however, it will be more convenient to consider Z~(ζ,ε) as sets depending on ζ and ε and take the limit of these sets as ζ,ε0. In the rest of the paper we use the following notion of limits of sets. Strictly speaking, our definition is that of the Kuratowski limit inferior, which of course coincides with the Kuratowski limit if this exists.

Definition 5.6.

For ε(0,1) let Sεn. Then we define

limε0Sε={Xn:r>0ε0ε<ε0YSε s.t. XY<r}. (21)
Theorem 5.7 ([14, Theorem 5.4]).

For fixed ε,ζ, let Z~(ε,ζ) be the zeros of p(Q~(X,ε))ζ and let Z=Z(p(Q(X))) be the zeros of p(Q(X)). Then we have

Z=limζ0limε0Z~(ε,ζ). (22)

To test whether Z is empty, it suffices to check whether there is a sequence of nonempty Z~.

Lemma 5.8.

Z iff there exists a sequence ζn,εn0 such that Z~(εn,ζn).

Proof.

If Z, then by Theorem 5.7, for every sufficiently small ζ>0, there exists an εζ, such that Z~(ε,ζ)0 for all ε(0,εζ]. Thus, we can easily construct the sequence ζn=O(1/n),εn=εζn with Z~(εn,ζn).

Now given a sequence ζn,εn with Z~(εn,ζn), we can select XnZ~(εn,ζn), and since Z~(ε,ζ) is bounded (for sufficiently small ε,ζ), we can apply the Bolzano-Weierstrass theorem to pick a subsequence XnX. We have p(Q~(Xn,εn))=ζn. Due to continuity it follows limnp(Q~(Xn,εn))=p(Q(X))=0 and XZ.

5.3 Solving the smaller systems using algorithms for the first-order theory of the reals

We now have a way to determine if p(Q(X)) has a zero: first, we consider the perturbed system p(Q~(X,ε))ζ. By Lemma 5.8 it suffices to check if there is a sequence of nonempty Z~. For sufficiently small ζ,ε we can use Theorem 5.2 with Remark 5.3 (setting C(ζ,ε)) to find sets Vc(U,W,ζ,ε) such that U,WVc(U,W,ζ,ε) intersects all connected components of Z~(ζ,ε). In particular, a sequence of nonempty Z~ exists iff there exists a sequence of nonempty ϕW(Vc(U,W,ζ,ε),ε). Here

ϕW:(X,ε)(Q~(X,ε)XW¯). (23)

The sets ϕW(Vc(U,W,ζ,ε),ε) will be defined as the solutions to

p(Y) =ζ, (24a)
ΩdetΦ(Y,ε)UW 0, (24b)
Ω2Y =Ω2Q~(ϕUW1(Y,T,ε),ε), (24c)
Ωb(Y)U¯ =ΩΦ(Y,ε)U¯WΦ(Y,ε)UW1b(Y)U, (24d)
detΦ(Y,ε)UW =0U,W:|U|=|W|=|U|+1,UU{2,,n}, (24e)
WW[n],

where we have written Q~j(X,ε)=12X𝖳Hj(ε)X+bj𝖳X+cj (see Lemma 5.4) and Φ(Y,ε)=j=1kpj(Y)H^j(ε) for H^j(ε) the matrix Hj(ε) with the first row deleted.

We will write the existence of such a sequence of ϕW(Vc(U,W,ζ,ε),ε) as a sentence in the first-order theory of the reals.

Definition 5.9 (First-order theory of the reals).

The first-order theory of the reals is concerned with sentences of the form

Q1x1n1Q2x2n2QqxqnqP(x1,,xq), (25)

where

  • the Qi are alternating quantifiers

  • P is a quantifier-free Boolean formula in atomic formulas of the form f(x1,,xq)Δ0. Here f:n1××nq is a polynomial with integer coefficients and Δ is one of the relation symbols ,<,=,>,,.

We write the set of all true sentences of this form as Th().

Theorem 5.10 ([27, Theorem 1.1]).

There is an algorithm that, given a sentence φ of the form of Equation 25 involving only polynomials with integer coefficients131313To deal with algebraic coefficients we can add additional variables and polynomials enforcing that these variables take the value of the required algebraic numbers., decides whether φTh(). The algorithm uses L2(md)2O(q)i=1qni parallel processors and requires log(L)(2q(i=1qni)log(md))O(1)+Time(P) time. Here L denotes the maximal bit size of the coefficients of the polynomials in φ, m the number of polynomial (in)equalities in φ, d the maximal degree of these polynomials, and Time(P) the worst case time required for computing P when the atomic formulas are substituted for Boolean values.

Combining this result with Lemma 5.8 we get the following result. See 1.13

Proof.

By Lemma 5.8, it suffices to check whether there exists a sequence of ε,ζ0, such that Z~(ε,ζ). By Lemma 5.4, assumption (3) is satisfied for sufficiently small ε (independent of ζ). By Lemma 5.5, for every ε there exist only a finite number of critical values (or “bad” ζ). Thus, if there exist a suitable sequence ε,ζ, we may also assume that the assumptions of Section 5.2 hold. By Theorem 5.2, there must be a subsequence (εn,ζn)0 and U,W such that Z~(εn,ζn)Vc(U,W,εn,ζn) for all n. Therefore Z is equivalent to the following FOTR sentence being true for some U,W, which we can test in parallel:

ΞU,Wγ>0ε,ζ(0,γ)Y,T:(Y,T)ϕW(Vc(U,W,ε,ζ)), (26)

where (Y,T)ϕW(Vc(U,W,ζ,ε)) is shorthand for (Y,T) satisfies Equation 24, which then implies ϕUW1(Y,T,ε)Z~(ε,ζ). We can test this sentence using Theorem 5.10. The complexity bounds follow from those of Theorems 5.10 and 5.2.

The proof of Theorem 1.8 now follows directly from applying Theorem 1.13 to the discussion in Section 5.1.

6 Approximation and Optimization

In the previous section, we showed how to solve the (decision) 𝖯𝗎𝗋𝖾𝖢𝖫𝖣𝖬 problem. Next, we give a parallel polynomial time algorithm (i.e. (function) 𝖭𝖢(poly)) to compute an approximate description of the consistent state. It is worth emphasizing that our algorithm computes an approximation to an exactly consistent state, and not just a state that is approximately consistent.

If the density matrices are slightly perturbed, there may not be a perfectly consistent state. We can compute the state that minimizes the “error” (e.g. the minimum α such that the given instance is a YES-instance per Definition 2.1) by solving OptGP as defined in Definition 1.14.

Theorem 1.15. [Restated, see original statement.]

Let r,p,Q be an OptGP instance. There is a parallel algorithm that computes a δ-approximation to θ=minXZr(Q(X)) and to some X with r(Q(X))=θ and p(Q(X))=0. The algorithm uses poly(L,|logδ|,(kNd)O(k2)) parallel processors and needs poly(logN,logd,k,logL,log|logδ|) time.

6.1 Computing the minimum

The first step in solving the approximation problem of Theorem 1.15 is to compute θ. For that, we will use Renegar’s algorithm for finding approximate solutions to first-order theory of the reals formulas.

Theorem 6.1 ([29, Theorem 1.2]).

Let φ(y) be a formula as in Equation 25 involving free variables yl, let 0<ε<r be powers of 2 and define sol(φ,r)={yl:φ(y)yr}. Then there exists an algorithm that constructs a set {yi}i, such that for every connected component of sol(φ,r), there is at least one yi within distance ε of the component.

The algorithm can be implemented using (L+|logε|+|logr|)O(1)(md)2O(q)lj=1qnj parallel processors. It then requires time [2ql(j=1qnj)log(mdL+|logε|+|logr|)]O(1)+Time(P). Here m is the number of polynomials in φ, d their maximum degree, L the maximum bit length of the coefficients of these polynomials, q the number of quantifiers and Time(P) the worst case parallel time to compute P when the atomic formulas are substituted for Boolean values.

It is relatively straightforward to compute θ with the above theorem. To that end, define pθ(Y)(p(Y))2+(r(Y)θ)2. We will compute θ by finding the minimum θ for which ZθZ(pθ(Q(X))). Since Z is compact, the minimum θ=minXZr(Q(X)) must exist. Hence, there must exist a piece U,W, such that the FOTR sentence ΞU,W(θ) is true, where ΞU,W(θ) is defined as in Equation 26, but with the additional parameter θ (see Remark 5.3). Note that since θ is minimal, ΞU,W(θ)θ<θ cannot hold. Formally, θ is minimal iff the sentence following sentence is true:

ΞU,Wθ:ΞU,W(θ)(θθ) (27)

Since t is a free variable in the above sentence, we can approximate it using Theorem 6.1 for all pieces in parallel, and then take the minimum.

6.2 Computing the solution vector

Next, we are going to show how to compute X such that p(Q(X))=0 and r(Q(x))=θ and thereby prove Theorem 1.15. Naively, we could use Theorem 6.1 to compute X. However, that will not lead to the desired runtime since the dimension of X is exponentially large. We modify ΞU,W from Equation 26 to find “good enough” (Y~,T~)Z~(ε,ζ) with X~ϕU,W1(Y~,T~,ε), such that there exists some XZ with XX~δ for some desired accuracy parameter δ, which can be chosen exponentially small in N. The existence of Y~,T~ follows by a similar to the proof of Lemma 5.8.

We will use a univariate representation to compute Y~,T~ exactly and then Theorem 6.1 to obtain approximations to the entries of X~ in parallel. 141414One could also compute X~ numerically, but then numerical errors need to be considered. The next theorem shows how to compute univariate representations of the solutions to an FOTR sentence. It is a straightforward combination of [27, Proposition 2.3.1 and 3.8.1] and [28, Proposition 6.2.2].

Theorem 6.2.

Let φ(y) be a formula of the form Equation 25 with free variables yl. Then, there exists a set 𝒫(φ) of (md)2O(q)ljnj pairs of polynomials (p,F) where p: and F:l+1 with the following property. For every connected component C of {yl:φ(y)}, there is a (p,F)𝒫(φ) such that for some root t of p, Aff(F(t)) is well defined and in C. Here Aff(F(t)) denotes the affine image 1Fl+1(t)(F1(t),,Fl(t))

The sets 𝒫(φ) can be constructed in parallel using L2(md)2O(q)lj=1qnj processors and time (logL)(2ql(j=1qnj)log(md))O(1). Here m is the number of polynomial (in)equalities appearing in φ, and d is their maximum degree.

We have now established all the components to prove Theorem 1.15. The proof can be found in the full version [18].

References

  • [1] Scott Aaronson, Salman Beigi, Andrew Drucker, Bill Fefferman, and Peter Shor. The power of unentanglement. In 2008 23rd Annual IEEE Conference on Computational Complexity, pages 223–236, 2008. doi:10.1109/CCC.2008.5.
  • [2] D. Aharonov and O. Regev. A lattice problem in quantum NP. In 44th Annual IEEE Symposium on Foundations of Computer Science, 2003. Proceedings., pages 210–219, 2003. doi:10.1109/SFCS.2003.1238195.
  • [3] Sanjeev Arora and Boaz Barak. Computational Complexity: A Modern Approach. Cambridge University Press, April 2009. doi:10.1017/cbo9780511804090.
  • [4] Roozbeh Bassirian, Bill Fefferman, Itai Leigh, Kunal Marwaha, and Pei Wu. Quantum Merlin-Arthur with an internally separable proof, 2024. doi:10.48550/arXiv.2410.19152.
  • [5] Roozbeh Bassirian, Bill Fefferman, and Kunal Marwaha. Quantum Merlin-Arthur and proofs without relative phase. In Venkatesan Guruswami, editor, 15th Innovations in Theoretical Computer Science Conference (ITCS 2024), volume 287 of Leibniz International Proceedings in Informatics (LIPIcs), pages 9:1–9:19, Dagstuhl, Germany, 2024. Schloss Dagstuhl – Leibniz-Zentrum für Informatik. doi:10.4230/LIPIcs.ITCS.2024.9.
  • [6] Hugue Blier and Alain Tapp. A quantum characterization of NP. computational complexity, 21(3):499–510, September 2012. doi:10.1007/s00037-011-0016-2.
  • [7] Allan Borodin. On relating time and space to size and depth. SIAM Journal on Computing, 6(4):733–744, 1977. doi:10.1137/0206054.
  • [8] Fernando G. S. L. Brandão and Aram W. Harrow. Quantum de finetti theorems under local measurements with applications. Communications in Mathematical Physics, 353(2):469–506, July 2017. doi:10.1007/s00220-017-2880-3.
  • [9] Anne Broadbent and Alex Bredariol Grilo. QMA-hardness of consistency of local density matrices with applications to quantum zero-knowledge. SIAM Journal on Computing, 51(4):1400–1450, 2022. doi:10.1137/21M140729X.
  • [10] A. J. Coleman. Structure of fermion density matrices. Rev. Mod. Phys., 35:668–686, July 1963. doi:10.1103/RevModPhys.35.668.
  • [11] Bill Fefferman and Cedric Lin. Quantum Merlin Arthur with exponentially small gap, 2016. arXiv:1601.01975.
  • [12] Sevag Gharibian, Miklos Santha, Jamie Sikora, Aarthi Sundaram, and Justin Yirka. Quantum generalizations of the polynomial hierarchy with applications to QMA(2). computational complexity, 31(2):13, September 2022. doi:10.1007/s00037-022-00231-8.
  • [13] Dima Grigoriev. Polynomial complexity of solving systems of few algebraic equations with small degrees. In Vladimir P. Gerdt, Wolfram Koepf, Ernst W. Mayr, and Evgenii V. Vorozhtsov, editors, Computer Algebra in Scientific Computing, pages 136–139, Cham, 2013. Springer International Publishing. doi:10.1007/978-3-319-02297-0_11.
  • [14] Dima Grigoriev and Dmitrii V. Pasechnik. Polynomial-time computing over quadratic maps i: sampling in real algebraic sets. Comput. Complex., 14(1):20–52, April 2005. doi:10.1007/s00037-005-0189-7.
  • [15] Alex B. Grilo, William Slofstra, and Henry Yuen. Perfect zero knowledge for quantum multiprover interactive proofs. In 2019 IEEE 60th Annual Symposium on Foundations of Computer Science (FOCS), pages 611–635, 2019. doi:10.1109/FOCS.2019.00044.
  • [16] Aram W. Harrow and Ashley Montanaro. Testing product states, quantum Merlin-Arthur games and tensor optimization. J. ACM, 60(1), February 2013. doi:10.1145/2432622.2432625.
  • [17] Fernando Granha Jeronimo and Pei Wu. The power of unentangled quantum proofs with non-negative amplitudes. In Proceedings of the 55th Annual ACM Symposium on Theory of Computing, STOC 2023, pages 1629–1642, New York, NY, USA, 2023. Association for Computing Machinery. doi:10.1145/3564246.3585248.
  • [18] Jonas Kamminga and Dorian Rudolph. On the complexity of pure-state consistency of local density matrices, 2025. arXiv:2411.03096.
  • [19] Julia Kempe, Alexei Kitaev, and Oded Regev. The complexity of the local hamiltonian problem. SIAM Journal on Computing, 35(5):1070–1097, 2006. doi:10.1137/S0097539704445226.
  • [20] A. Kitaev, A. Shen, and M. Vyalyi. Classical and Quantum Computation. American Mathematical Society, May 2002. doi:10.1090/gsm/047.
  • [21] Alexander Klyachko. Quantum marginal problem and representations of the symmetric group, 2004. arXiv:quant-ph/0409113.
  • [22] Yi-Kai Liu. Consistency of local density matrices is QMA-complete. In Josep Díaz, Klaus Jansen, José D. P. Rolim, and Uri Zwick, editors, Approximation, Randomization, and Combinatorial Optimization. Algorithms and Techniques, pages 438–449, Berlin, Heidelberg, 2006. Springer Berlin Heidelberg. doi:10.1007/11830924_40.
  • [23] Yi-Kai Liu, Matthias Christandl, and F. Verstraete. Quantum computational complexity of the N-representability problem: QMA complete. Phys. Rev. Lett., 98:110503, March 2007. doi:10.1103/PhysRevLett.98.110503.
  • [24] Chris Marriott and John Watrous. Quantum Arthur–Merlin games. computational complexity, 14(2):122–152, June 2005. doi:10.1007/s00037-005-0194-x.
  • [25] David A Mazziotti. Pure-N-representability conditions of two-fermion reduced density matrices. Physical Review A, 94(3):032516, 2016.
  • [26] Attila Pereszlényi. Multi-prover quantum Merlin-Arthur proof systems with small gap, 2012. arXiv:1205.2761.
  • [27] James Renegar. On the computational complexity and geometry of the first-order theory of the reals. part I: Introduction. preliminaries. the geometry of semi-algebraic sets. the decision problem for the existential theory of the reals. Journal of Symbolic Computation, 13(3):255–299, 1992. doi:10.1016/S0747-7171(10)80003-3.
  • [28] James Renegar. On the computational complexity and geometry of the first-order theory of the reals. part II: The general decision problem. preliminaries for quantifier elimination. Journal of Symbolic Computation, 13(3):301–327, 1992. doi:10.1016/S0747-7171(10)80004-5.
  • [29] James Renegar. On the computational complexity of approximating solutions for real algebraic formulae. SIAM Journal on Computing, 21(6):1008–1025, 1992. doi:10.1137/0221060.
  • [30] Yaoyun Shi and Xiaodi Wu. Epsilon-net method for optimizations over separable states. Theoretical Computer Science, 598:51–63, 2015. doi:10.1016/j.tcs.2015.03.031.
  • [31] Tzu-Chieh Wei, Michele Mosca, and Ashwin Nayak. Interacting boson problems can be QMA hard. Phys. Rev. Lett., 104:040501, January 2010. doi:10.1103/PhysRevLett.104.040501.
  • [32] Xiao-Dong Yu, Timo Simnacher, Nikolai Wyderka, H. Chau Nguyen, and Otfried Gühne. A complete hierarchy for the pure state marginal problem in quantum mechanics. Nature Communications, 12(1):1012, February 2021. doi:10.1038/s41467-020-20799-5.