Solutions to all three questions.[ref] All logarithms are base two; information entropy is measured in bits and code rates in bits per channel use. Terms are zero. Question 3(b) contains an incorrect hint; its requested conclusion is proved directly below for deterministic channel codes. The repeat-until-success protocol in Question 3(c) requires to terminate.
First, the binary translation of a quaternary prefix code is still a prefix code: every translated codeword length is even, and a binary prefix relation would split into complete two-bit blocks, giving a prefix relation between the original quaternary codewords. Binary Huffman coding is optimal among binary prefix codes, so
For the other direction, let and round these binary codeword lengths to quaternary lengths . The Kraft inequality gives
The quaternary converse of the Kraft inequality supplies a quaternary prefix code with lengths . Optimality of the quaternary Huffman code then implies
Thus binary translation of an optimal quaternary code costs at most one extra bit per source symbol:
The quaternary Huffman code uses the usual adjustment of adding zero-weight dummy leaves when needed. If the alphabet has one symbol, both optimal codes may use the empty codeword, giving the trivial endpoint.
The specified transition law is a binary erasure channel. For an input bit with , its Shannon entropy is the binary entropy . A non-erased output determines , whereas the erasure symbol leaves its probability distribution unchanged because the erasure event is independent of . Thus
Maximizing the mutual information over the input probability distribution, with equality at , gives
This includes , a noiseless binary channel, and , a completely erased channel with zero channel capacity.
For , the total number of forward channel uses is , so the random code rate of a message with bits is
The independent and identically distributed random variables have finite expectation . By the strong law of large numbers,
Thus the protocol reaches the binary erasure channel channel capacity in its asymptotic forward throughput while guaranteeing zero error on every completed message. Its random transmission length and use of channel feedback distinguish it from the fixed-length channel codes in part (b). Independent erasure indicators suffice for this calculation; the message bits themselves need not be independent or uniformly distributed. At , the algorithm never produces a completed transmission, so as a completed-code rate is undefined; the physical throughput is zero.
For , use repeat-until-success coding over an erasure channel: delete every erasure symbol from the received sequence and retain the non-erased bits in order. Each message bit contributes a string of erasures followed by exactly one correct non-erased copy. The channel encoder advances to the next bit only after this successful copy, so the retained bits are precisely . Hence
Indeed, , so each stage and the finite collection of stages terminate almost surely. The protocol uses channel feedback: Alice must know whether an erasure occurred before deciding whether to repeat. This feedback is implicit in the stated algorithm and is not counted as a forward channel use.
At , no stage ever finishes, so there is no terminating zero-error decoder for arbitrary messages. This endpoint is excluded from the operational claim above.
Let the unknown input qubit be , with . Alice holds , Bob holds , and the shared Bell pair is . All three-qubit strings below use the order . Initially,
The Bell-basis teleportation identity gives
Thus a perfect Bell state analyzer on Alice's two qubits identifies the Pauli operator affecting Bob's quantum state.
To display the intermediate three-qubit states explicitly, realize that Bell-basis measurement by a controlled-NOT gate , a Hadamard gate on , and two computational-basis measurements. After the controlled-NOT gate,
After the Hadamard gate,
Measuring gives with probability for each outcome, independently of . Conditional on that result, the normalized three-qubit post-measurement state is
If the Bell state analyzer is instead regarded as an ideal direct projective measurement preserving the measured qubits, replace here by the corresponding Bell state; Bob's factor is identical. A destructive optical analyzer records the same label but absorbs Alice's photons.
Alice sends the two classical bits to Bob. During transmission the above conditional three-qubit state is unchanged. Bob then applies the inverse Pauli operator :
The final conditional three-qubit state is therefore . The protocol transmits two classical bits per teleported qubit, consuming one shared Bell pair. Without Alice's record Bob averages over four Pauli operators and has density matrix , so quantum teleportation respects the no-communication theorem. Alice's input has been measured and is no longer an independent copy, consistent with the no-cloning theorem.
In quantum dense coding, a shared Bell pair lets Alice send two classical bits by transmitting one qubit. Use photon polarization as the computational basis, , , and define the Bell states
Alice and Bob initially share . Alice encodes a two-bit message by applying the Pauli operator to her qubit:
The last minus sign is a global phase. Alice transmits her photon to Bob, who now holds both qubits and uses a Bell-basis measurement to identify the message. The four Bell states are orthogonal, so an ideal Bell state analyzer decodes them without error. The resource cost is one previously shared Bell pair and one transmitted qubit per two classical bits; the shared quantum entanglement is consumed. Before transmission Bob's reduced density matrix is for every message, consistent with the no-communication theorem.
The BBO crystal supplies the polarization-entangled photon pair. An ultraviolet laser pumps this nonlinear optical crystal; spontaneous parametric down-conversion produces signal and idler photons with and phase matching . In a noncollinear type-II phase matching arrangement, collect the intersections of the two emission cones. The alternatives and must be indistinguishable in arrival time, spectrum and spatial mode. Compensation of birefringence and adjustment of the relative quantum phase then give ; a local Pauli X gate converts it to . Half-wave plates and other waveplates implement Alice's Pauli gates. The BBO is the pair source; the message is encoded subsequently by the local optical elements.[ref]
A basic passive linear optics Bell state analyzer with no extra resources identifies only two of the four polarization Bell states unambiguously. Thus the ideal two-bit capacity presupposes complete Bell-basis measurement; that basic optical implementation alone does not attain it deterministically.
In entanglement swapping, start with independent Bell pairs . Send qubits 2 and 3 to a central Bell state analyzer, retaining 1 and 4 at separate endpoints. Reordering the tensor product factors to group 23 and 14 gives the identity
Consequently each ideal Bell-basis measurement outcome has probability and projects 14 onto the corresponding Bell state, even though those two photons have never interacted. Communicating the two-bit result permits an endpoint Pauli gate to convert every outcome into the same chosen Bell pair. Without that record, the endpoints have , a product state, rather than a known entangled state.
The optical Bell state analyzer overlaps photons 2 and 3 at a balanced beam splitter, with matched spatial modes, spectra and arrival times, and resolves the output photon polarizations using polarizing beam splitters and single-photon detectors. Two-photon interference maps Bell states to different output patterns. The antisymmetric gives one photon in each output with opposite polarizations. The symmetric gives two opposite-polarization photons in the same output; the two polarization detectors there can resolve this pattern. The states give same-polarization pairs and remain mutually ambiguous in this basic setup. The detected pattern therefore heralds a particular endpoint Bell state. With ideal detection this arrangement succeeds unambiguously on two of four equally likely inputs, with probability ; the successful events can be selected. A complete analyzer would accept all four outcomes. The endpoint quantum entanglement is conditional on the measurement record, so it enables no instantaneous signalling.[ref]
For quantum key distribution with Bell pairs, a source distributes one photon to Alice and its partner to Bob. One implementation is the Ekert protocol, using the spin singlet state . Each party independently chooses a polarization measurement setting after distribution. Equal settings give opposite outcomes; Bob reverses his outcome-to-bit assignment so these rounds give matching random bits. Other setting pairs test a Bell inequality, with ideal spin singlet state correlation for the corresponding Bloch sphere axes. The optical polarizer angles correspond to twice those angles on the appropriate Bloch sphere great circle.
Over an authenticated public classical channel, Alice and Bob announce settings and detection times, select coincident detection rounds, and perform key sifting. They reveal a test sample to estimate the quantum bit error rate and the chosen Bell inequality signal, discarding all revealed bits. Excess disturbance causes an abort. Otherwise information reconciliation makes the retained strings agree and privacy amplification shortens them to remove an adversary's residual information, including information disclosed during reconciliation. The tested quantum entanglement supplies correlations unavailable to an independently prepared classical mixture; a security claim also requires stated detector and sampling assumptions.[ref]
Each photon polarization analyzer uses a setting-dependent waveplate followed by a polarizing beam splitter. A single-photon detector on each output converts the routed photon into an electrical click, recording the outcome and its time. For example, a single-photon avalanche diode is a reverse-biased photodiode operated above breakdown: absorption creates a charge carrier, impact ionization triggers an avalanche, and the resulting pulse is registered. A quenching circuit lowers the bias to stop the avalanche and then resets the device. The detector dead time during recovery limits the count rate; dark counts produce false clicks, and imperfect detection loses rounds. The polarization information comes from the preceding analyzer, while the detector registers which output fired. Coincidence timing associates Alice's and Bob's records with the same emitted pair. [ref]
For one input bit, a Boolean function is specified by the pair , and counts its satisfying assignments. In the ordered computational basis , the supplied phase oracle convention gives
Here is exclusive or: the oracle changes the sign of the inputs with . With the identity matrix and the Pauli Z gate, all four cases are
The two middle cases are balanced Boolean functions; the others are constant functions. The specified zero-state sign change and the Hadamard gate are
Use the top qubit as the first tensor product factor. Write the controlled unitary gate as . Reading the bracketed quantum circuit from left to right, its four operations are , , , . Thus the target operation in its control-one branch is
where the rightmost matrix acts first. The control-zero branch is the identity operator. The Hadamard conjugation of a controlled gate identity gives
Indeed, on control zero the replacement applies to the target, while on control one both sides apply . By linearity, the identity holds on every quantum superposition and therefore in every repetition of the bracket. This replaces the two internal controlled Hadamard gates as a pair.
The global phase of a controlled quantum gate must be preserved: , whereas . Consequently the minus signs in and the special phase oracles cannot be discarded as an unobservable global phase of the complete quantum circuit.
Write and , with the top wire carrying , the middle wire , and the bottom wire the ancilla bit . The binary inner product is , where is exclusive or. Let denote a CNOT gate controlled by wire and targeting . The four linear Boolean functions and their Boolean quantum oracles are:
Reversible circuit for : three unchanged wires
The CNOT gates in the last row commute: their common target acquires the exclusive or of the two controls. Each input wire is preserved, and applying any of these reversible circuits twice restores .
Figure 1.
The four two-bit linear oracles and their exact simplifications after Hadamard gates on all three wires; a filled dot is a control and a circled plus is a target
. Details.
For classical reversible computation, call the unknown function oracle on and . The resulting ancilla bits are respectively and :
Use a fresh zero ancilla bit for each call, or preserve the first result in workspace before restoring the target to zero. Thus two classical calls determine the two-bit string.
For input bits, query the standard basis strings , since . This gives an upper bound of calls. It is also optimal for exact identification: every classical query reveals at most one new bit, since is unchanged and reveals just when is known. A depth- decision tree has at most answer histories, but must distinguish possible hidden strings. Hence , including adaptive strategies. The classical query complexity of linear Boolean function identification is therefore
Use base-two logarithms for Von Neumann entropy, so the units are bits, and adopt . All systems here may be taken finite-dimensional; the entropy arguments also apply when the displayed Von Neumann entropies are finite. The density operator of the joint pure state is . It is a rank-one orthogonal projector, whose only nonzero eigenvalue is one. Consequently
The reduced density matrices are and . The quantum conditional entropy is defined by the entropy difference
For the pure state under consideration this becomes . To determine when it is negative, write the Schmidt decomposition
The eigenvalues of are the , together with possible zeros. Each contribution is nonnegative, and their sum vanishes exactly when one eigenvalue equals one. Equivalently the Schmidt rank is one and is a product state. If the pure state is entangled, then , every nonzero eigenvalue is strictly below one, and the Von Neumann entropy is strictly positive. Thus the pure-state negative conditional entropy criterion gives
The purity assumption matters: for mixed density operators, negative quantum conditional entropy is not necessary for entanglement.
A discrete memoryless channel is specified by discrete input and output alphabets and a transition probability , with and . Its successive outputs are conditionally independent given the inputs, with the same transition rule at every use:
Operationally, its channel capacity is the supremum of communication rates in bits per use attainable by increasingly long block codes with decoding error probability tending to zero. For finite alphabets, the equivalent Shannon characterization is
where is Shannon entropy, is classical conditional entropy, and the maximization is over the input probability distribution.
For the channel in question, the transition matrix, with input symbols indexing rows, is
Every row has the same Shannon entropy, namely the binary entropy . Consequently for every input probability distribution. Since the output has three symbols, the maximum entropy on a finite alphabet gives
Choose a uniform input. Each column of sums to one, so for every output symbol and the upper bound is attained. Finally
Thus the cyclic ternary channel capacity is
achieved by a uniform input probability distribution. This is a weakly symmetric channel capacity calculation: the matrix rows are permutations and the column sums agree. The channel is not the usual ternary symmetric-error channel, since an error has only one possible changed output for each input.
Under the intended assumption that one use of the quantum channel transmits one qubit without noise, Alice can communicate two classical bits with certainty if she and Bob already share a Bell pair. She uses superdense coding. The prior distribution of the Bell pair must be a resource available before the permitted channel use; distributing it through that same channel would consume another use.
Take the shared Bell state to be , with Alice holding the first qubit. For a two-bit message , Alice applies the local unitary operation to her qubit. The four encoded pure states are, up to irrelevant global phases,
They are orthogonal: for any matrix on the first qubit, , and the four Pauli operators are orthogonal in the trace inner product. Explicitly,
Alice sends her qubit through the quantum channel once. Bob now holds both qubits and performs a Bell-basis measurement. Its four orthogonal projectors identify with certainty, giving
Before the transmission, Bob's reduced density matrix is for every message, so shared entanglement alone does not convey the message.
Without shared entanglement, a noiseless single-qubit transmission cannot perfectly distinguish four messages: perfect discrimination requires orthogonal state supports, and its two-dimensional Hilbert space has room for at most two nonzero mutually orthogonal supports. The Holevo bound also limits its accessible classical information to one bit. For the usual protocol starting with a shared two-qubit pure state and using local unitary encodings, exact two-bit transmission requires a maximally mixed Bob marginal. Indeed all encoded joint states are pure and have the same , while Subadditivity of Von Neumann entropy gives their average entropy at most . Four equally likely perfectly distinguishable messages have average Von Neumann entropy two, forcing and hence a maximally entangled state.
The specification “quantum channel” alone does not determine its dimension or noise, so the one-qubit, noiseless interpretation is needed for this particular conclusion. A noiseless four-dimensional channel could send four orthogonal states without any shared entanglement; a completely depolarizing qubit channel cannot transmit the message even with a shared Bell pair, since its output is independent of Alice's encoding. Shared entanglement is therefore the extra resource for the intended single-qubit channel, not a guarantee for every unspecified quantum channel.
Use for exclusive or and regard all bits as elements of . For every public label , Alice computes the indicator function
while Bob computes from the known truth table. Exactly one of the is one, so the separated Boolean decomposition is
For each , they invoke an independent PR box with respective input bits and receive outputs . These satisfy . Alice forms , and Bob forms . Taking the exclusive or of all box constraints proves
Alice sends the single bit . Bob combines it with his locally known , obtaining
This is one-bit computation using Popescu–Rohrlich boxes. It uses boxes; decomposing by Bob's input instead gives , so the smaller truth-table factorization uses at most . No efficiency bound on local calculation or box use is needed for the stated unlimited resource.
Each PR box has uniform local output distributions regardless of the other party's input. Independent invocations therefore give Bob a uniform output string before the message, carrying no information about . The useful correlation becomes accessible through Alice's final bit; the construction respects the no-signalling property of the boxes.
The target states here are qubit states, as appropriate to sharing singlet states of two qubits. Write and choose . These form an orthonormal basis, and the shared Bell state can be expressed as
Alice knows the classical description of , so she can perform the projective measurement in this basis. The outcome has probability and leaves Bob in , up to an irrelevant overall phase. Alice sends a success bit: one for this outcome and zero for the other. Bob keeps his qubit only on success. This proves heralded remote preparation of an arbitrary qubit:
The other outcome leaves at Bob's side; the protocol makes no claim of success in that branch.
For a block of targets, share independent singlet states. Alice measures her th qubit in the basis . She sends one bit indicating whether all outcomes were of the successful kind. Because the pairs are independent, all-success has probability ; conditioned on it, Bob's joint state is precisely . Thus one-bit heralding of a remote state preparation block gives
On failure Bob discards the block, so he does not need a list of which component states failed.
For asymptotic remote state preparation by block indexing, prelabel a supply of independent candidate blocks, each containing singlet states. Alice measures blocks until she finds the first all-success block, of index . She does not send a flag after each trial. Since is the success probability of each block,
This geometric distribution is independent of the target states. The probability of never succeeding is . Alice needs to communicate only ; Bob retrieves the labelled qubits in that block, and thereby knows that every requested state was prepared exactly.
Here is an explicit prefix code for a rare geometric success. Set and divide , where . Encode as ones followed by zero, then encode in exactly bits. Bob can decode this without knowing any target-state description. The message length is . With ,
Since ,
This version succeeds exactly with probability one and has the stated expected classical communication cost. It consumes singlet states on average, compatible with the unlimited entanglement assumption.
There is also a fixed-message-length version. Try at most candidate blocks and send the first successful index, or a zero codeword reporting that none succeeded. Encoding the possibilities uses bits. Its failure probability is
Thus fixed-length communication approaches one bit per state with success probability tending to one; variable-length communication achieves exact eventual success with expected cost approaching one bit per state. Before the index arrives, Bob's unconditional state remains independent of the target descriptions, in agreement with the no-signalling theorem.
For each hidden variable , a deterministic local hidden-variable model assigns values to all settings. The responses depend only on the local setting; their averaging distribution is setting independent, as required by measurement independence.
Let be the sum of the nonnegative modular representatives in the chained modular Bell inequality. Before reduction modulo , the chain telescopes:
Reduction changes this integer only by multiples of . Since all reduced terms are nonnegative,
The smallest possible nonnegative value in this residue class is . Averaging over the hidden variable proves
Adding local random seeds to gives the same result for stochastic local hidden-variable theories.
For the coplanar qubit realization of the chained Bell inequality, share
At angle in the plane, use the projective measurement of the observable
Here are Pauli matrices, and the classical bit records eigenvalue . Since and both crossed expected values vanish in this Bell state,
The one-party expected values vanish, so the complete joint probabilities are
For binary outcomes, is one exactly when , while is one exactly when . Consequently
For , set and choose Alice's angle and Bob's angle . Every adjacent pair or differs by , giving expectation . The closing pair has angle difference ; its agreement probability is also . Thus every one of the terms contributes equally:
Indeed for , so this value is below . For an explicit two-setting instance, Alice measures and Bob measures . The four relevant expected values sum to
violating the local bound one. At there is no violation; the two terms always sum to one. As , the displayed quantum value is asymptotic to and approaches the algebraic lower bound zero.
The violation rules out a local hidden-variable theory with setting-independent preassigned local responses reproducing these quantum correlations. It does not permit faster-than-light communication: the joint formula gives each local outcome probability , independent of the remote setting, as required by the no-signalling theorem. The contradiction concerns the joint correlations and the Bell assumptions, not the ability to send a signal.
Figure 1.
Coplanar chained Bell measurements and their quantum violation of the local bound
. Details.
Digital acquisition converts a continuous voltage signal into timed numerical samples. A practical chain is a suitably buffered and amplified sensor signal, an analogue anti-aliasing filter, a sampling or sample-and-hold stage, an analog-to-digital converter, and a clocked data-storage system. Choose the gain so that the interesting variation uses the available input range without clipping. Finite input impedance can load a sensor, so an appropriate buffer or operational amplifier may be needed.
Sampling makes time discrete. If the conditioned signal is confined below frequency , choose a sampling rate , allowing a transition band for the physical filter. The Nyquist–Shannon sampling theorem permits ideal reconstruction of a suitably bandlimited function from exact samples. Without filtering, components separated by integer multiples of have identical samples; in particular real sinusoids at and can be indistinguishable. This aliasing cannot generally be undone by later digital filtering. Oversampling can ease filter design, but does not replace the requirement to suppress unwanted high-frequency content before sampling.
Amplitude quantization is separate from sampling. A uniform -bit converter covering voltage span has step . Rounding an in-range input gives the uniform-quantization error bound . If the rounding errors can additionally be modeled as uniform and uncorrelated, their standard deviation is . This statistical estimate is not a guarantee for a constant input or a coherent periodic signal. More bits increase resolution, but accuracy also depends on voltage-reference calibration, offset, gain error, nonlinearity and electronic noise. Out-of-range signals clip and invalidate the rounding bound.
Clock quality matters too. Timing jitter gives a voltage error approximately ; for a sinusoid its scale grows with . A clock calibration error biases measured frequencies and time intervals. Simultaneous multichannel signals need known relative timing, and the sampling and analogue settling times must be appropriate to the signal bandwidth.
For channels the raw recording rate is approximately bits per second, before overhead, so storage and sustained transfer speed must prevent missing data. Store units, channel identities, timestamps, sampling rate, input ranges and calibration information along with the readings. Preserve the original samples when applying digital filters or other processing. Averaging can improve precision for independent fluctuating errors, but cannot restore aliased frequencies, clipped peaks or a fixed rounding bias. Digital recording makes reproducible analysis and transmission possible when its sampling, amplitude and timing limitations are all controlled.
Quantum cryptography includes quantum key distribution, which uses quantum transmissions and authenticated public discussion to establish a secret random key. In BB84, the sender independently chooses a random bit and either the computational or Hadamard basis, sending one of . A receiver independently chooses one of those two bases. They announce bases after receipt, retain matching-basis positions and reveal a random sample of those bits to estimate noise or eavesdropping. Ideal uniform independent basis choices retain about half of the detected signals before testing and further processing.[ref]
The no-cloning theorem prevents an adversary from copying arbitrary unknown nonorthogonal signal states perfectly. In a simple intercept–resend attack, the adversary chooses a random protocol basis. On half of the sifted positions it is the wrong basis, and the resent state then yields an erroneous receiver bit with probability one half. Thus the BB84 intercept-resend error rate is
if every signal is intercepted, or when an independently selected fraction is attacked this way. This is an illustrative attack calculation, not a security proof against all possible quantum attacks.
After parameter estimation, classical error reconciliation aligns the remaining keys; privacy amplification compresses them to remove the adversary's bounded information, including information leaked during public reconciliation. The classical channel requires message authentication, otherwise an attacker could impersonate each party to the other. Real sources, losses, multiphoton pulses and detector behavior must fit the security model. A low observed error rate alone is insufficient to certify arbitrary hardware. Finally the protocol distributes a key; encrypting a later message is a separate step.
For the exact difference, the representability condition becomes
Within the same operand square , the closed diagonal band between and is representable. Above the upper line, gives negative overflow; below the lower line, gives positive overflow. The right-hand panel of the figure shows these regions, including their representable boundary points.
Positive overflow can occur only when and ; negative overflow can occur only when and . The corresponding exact inequalities are still required: operands with different signs do not always overflow. Same-sign subtraction is always representable. In sign-bit terms, subtraction overflows exactly when the operands have different signs and the wrapped result's sign differs from that of .
One must test subtraction directly or use its correct overflow rule: forming -y in the same bits fails at , even though some differences with that operand are representable. For example is valid.