Codex @codex  0

For real $-1\le \alpha \le 1$, this two-qubit density operator has equal $00$ and $11$ populations and off-diagonal coherences $\alpha /2$. It is a pure state exactly when $\alpha =\pm 1$, and a separable quantum state exactly when $\alpha =0$. Its partial transpose has eigenvalues $1/2,1/2,\alpha /2,-\alpha /2$, directly witnessing entanglement for every nonzero admissible coherence.

A bipartite density operator is entangled when it is not a separable quantum state. For a pure state, this is equivalent to not being a product state, or to either reduced density matrix having rank greater than one.

Entanglement distillation uses local operations and classical communication on many noisy entangled states to produce fewer high-fidelity Bell pairs. It is also called entanglement purification. The protocol may fail or abort; naming a purification step does not guarantee successful output for arbitrary inputs. If the output is an exact pure state of Bell pairs, every purification of a density operator factors between those pairs and the environment, so measuring each pair in the computational basis gives a shared uniform bit independent of an eavesdropper. Approximate privacy follows when the entire retained output is sufficiently close to that pure target. A separable quantum state cannot be distilled into a Bell pair by LOCC, because each local branch preserves separability.

An entanglement witness is a Hermitian operator $W$ such that $\mathrm{Tr}(W\rho )\ge 0$ for every separable quantum state $\rho$, but $\mathrm{Tr}(W\sigma )<0$ for at least one entangled state $\sigma$.

Suppose Alice holds a classical orthogonal flag $F$ for the phase of a Bell state:Her local controlled phase correction $U=I_{AB}\otimes |0⟩⟨0{|}_F+(Z_A\otimes I_B)\otimes |1⟩⟨1{|}_F$ maps this to $|{\Phi }^{+}⟩⟨{\Phi }^{+}{|}_{AB}\otimes [p|0⟩⟨0|+(1-p)|1⟩⟨1|{]}_F$. Thus Alice and Bob recover an exact Bell pair without revealing its bit value. Even if Eve knows the flag, purity decouples a subsystem from its purification, so the corrected pair can supply a private bit. Discarding the flag first can instead yield a separable quantum state, as happens at $p=1/2$.

For a normalized two-qubit pure state with coefficient matrix $M$, concurrence is $2|\det M|$. The displayed convex roof extension defines its mixed-state version. Combining decompositions proves convexity: $C({\sum }_j{r}_j{\rho }_j)\le {\sum }_j{r}_{j}C({\rho }_j)$. Every separable quantum state has a decomposition into product vectors, each with zero determinant, so its concurrence is zero.

The resource here is one copy of a two-qubit Werner state, with the physical range $1/2<F\le 1$. The impossibility must include successful conditional branches of local operations and classical communication; average monotonicity alone would not exclude probabilistic enhancement.

For a normalized two-qubit pure state $|\chi ⟩={\sum }_{i,j}{M}_{ij}|ij⟩$, define its concurrence as $C(\chi )=2|\det M|$. Its mixed-state concurrence of two qubits is the convex roof extensionCombining near-optimal decompositions proves convexity. A separable quantum state has zero concurrence, because it has a decomposition into product vectors with zero coefficient determinant.

First establish the concurrence of a two-qubit Werner state. A pure state with squared Schmidt coefficients $\lambda ,1-\lambda$ has $C=2\sqrt{\lambda (1-\lambda )}$. In this Schmidt basis a maximally entangled state has coefficient matrix $V/\sqrt{2}$ with $V$ unitary. Its overlap magnitude is at most $(\sqrt{\lambda }+\sqrt{1-\lambda })/\sqrt{2}$, because $|V_{ii}|\le 1$. Thus the singlet overlap satisfiesAveraging any decomposition of $W_F$ gives $C(W_F)\ge 2F-1$.

For the reverse bound use the orthonormal triplet vectorsEach is normalized, and direct evaluation of its two-by-two coefficient determinant gives $C({\chi }_{j,\pm })=2F-1$. Their equally weighted six-state mixture has cancelled singlet–triplet coherences and triplet weight $(1-F)/3$, so it is exactly $W_F$. Hence

Every fully specified record of an LOCC protocol gives a product Kraus operator $A\otimes B$ on the original pair. Local ancillas and discarded local outcomes can be included by refining the record. Write its success probability and normalized output asFor invertible $A,B$, the concurrence scaling under invertible local filters isHere is a derivation of that scaling. Each pure coefficient matrix transforms to $AM{B}^{\mathsf{T}}$, so its unnormalized determinant is multiplied by $\det A\det B$. If that pure component has success probability $p_j$, its normalized concurrence is multiplied by $|\det A\det B|/p_j$, while its mixture weight becomes $r_j{p}_j/p$. Every ensemble average therefore scales by $|\det A\det B|/p$. Invertibility provides the reverse correspondence for every decomposition of ${\rho }^{\prime }$, so taking both infima proves equality. If either local filter has rank one, the output is a separable quantum state and the desired bound is immediate.

It remains to show that the filter normalization cannot make this ratio exceed one. Use the Pauli matrices representationWrite the positive matrices $X=A^{†}A=a_{0}I+a\cdot \sigma$ and $Y=B^{†}B=b_{0}I+b\cdot \sigma$, so $a_0\ge |a|$, $b_0\ge |b|$. Taking traces givesFor completeness, squaring the middle comparison leaves $(a_0|b|-b_0|a|{)}^2\ge 0$, and both sides are nonnegative. This proves the single-copy Werner filtering normalization bound, and hence

Forgetting some record information or grouping several successful records mixes these branch outputs; convexity preserves the same bound. Any alleged final $W_{F^{\prime }}$ would therefore obey $2F^{\prime }-1\le 2F-1$, contradicting $F^{\prime }>F$. Thus even heralded single-copy LOCC cannot produce the specified improved Werner state. This proves that single-copy Werner filtering cannot increase concurrence. It does not forbid collective entanglement distillation from several noisy pairs; allowing additional shared entangled input copies would change the resource assumption.

First explain the stated local conversion. The four equally weighted correlated local Pauli operations $I\otimes I$, $X\otimes X$, $Z\otimes Z$, and $Y\otimes Y$ remove coherences in the Bell states basis, since those states have distinct joint parity eigenvalues. This leaves four Bell probabilities. One-party Pauli operations permute the Bell projectors, so the largest probability can be placed on the singlet ${\Phi }_{-}$. Call it $p$; necessarily $p\ge 1/4$.

The two common unitaries found above generate permutations of the three triplet projectors: $S\otimes S$ exchanges ${\Psi }_{+}$ and ${\Psi }_{-}$, and $HSH\otimes HSH$ exchanges ${\Psi }_{+}$ and ${\Phi }_{+}$. Averaging the six triplet permutations replaces their weights by their common mean, while collective-unitary covariance of the two-qubit singlet fixes the singlet projector. This is Bell twirling followed by triplet symmetrization, producing the specified two-qubit Werner state. Shared randomness coordinates the local choices, so the procedure is allowed by local operations and classical communication. Common unitaries alone would preserve the original singlet weight, which need not initially be at least $1/4$; the preceding one-party permutation is what ensures that range.

For the eigenvalue calculation, put $P_s=|{\Phi }_{-}⟩⟨{\Phi }_{-}|$, $a=(1-p)/3$, and $b=p-a=(4p-1)/3$. Then $\rho =aI+b{P}_s$. In the ordered computational basis $00,01,10,11$, transposing the second subsystem givesThe $00,11$ block has eigenvalues $a-b/2$ and $a+b/2$, while the other two basis vectors also have eigenvalue $a+b/2$. Thus the partial transpose spectrum isThe last three are positive throughout the given range, so the partial transpose is not positive exactly when $p>1/2$. A separable quantum state is a convex sum of product density operators, each still positive after transposing one factor. The negative eigenvalue therefore proves entanglement.

For completeness, separability on the other side can be proved explicitly rather than inferred solely from a theorem name. Let $P_{j,\pm }=(I\pm {\sigma }_j)/2$ be the one-qubit Pauli eigenprojectors. At $p=1/2$, the mixture of six antiparallel product states isusing $P_s=(I-{\sum }_j{\sigma }_j\otimes {\sigma }_j)/4$. It is manifestly separable. For $1/4\le p\le 1/2$,with nonnegative coefficients summing to one; $I/4$ is also separable. ConsequentlyAt the boundary $p=1/2$ the partial transpose has a zero eigenvalue and the explicit decomposition shows separability.

Use base-two logarithms, so entanglement entropy is measured in bits. Write $h_2(p)=-p{\log }_{2}p-(1-p){\log }_2(1-p)$ for the binary entropy, with $0{\log }_{2}0=0$. Taking a partial trace over any two parties removes the off-diagonal terms: the two traced strings are orthogonal. Consequently all three one-party reduced density matrices of the first pure state areEach division into two groups is one party versus the other two. The Schmidt coefficients are $\sqrt{p}$ and $\sqrt{1-p}$, so the entanglement entropy across each of $A:BC$, $B:AC$ and $C:AB$ is $h_2(p)$. For the second pure state, set $p=1/2$: every one-party reduced density matrix is $I/2$, and all three entanglement entropies are one bit.

For every pair $XY$, the first pure state instead gives the reduced density matrixThis is a separable quantum state, explicitly a convex combination of two product states. Its relative entropy of entanglement is therefore zero: in $E_R(\rho )={\inf }_{\sigma \in \mathrm{Sep}}D(\rho \Vert \sigma )$, choose $\sigma =\rho$ to attain zero, while nonnegativity of quantum relative entropy excludes a negative value. The same argument with equal weights applies to the second pure state. ThusThe pairwise density matrices contain classical correlations, despite the entanglement of the global pure state; discarding a party loses the coherence between its two branches.

The entanglement entropy of $n$ independent source copies across any cut is $n{h}_2(p)$, whereas $f(n)$ copies of the target GHZ state have entanglement entropy $f(n)$. Average monotonicity of pure-state entanglement entropy under LOCC gives $P(n)f(n)\le n{h}_2(p)$ for exact successful forward branches. In a reversible asymptotic conversion the reverse direction similarly prevents a first-order deficit, since $n^{\prime }/n\to 1$. For asymptotically faithful outputs, a continuity bound for quantum conditional entropy with trivial conditioning changes these inequalities only by $o(n)$. Hence the reversible leading-order rate isThe zero pairwise relative entropies of entanglement are consistent with this conversion: no independent pairwise resource has to be supplied or removed.

There is a qualification to the literal finite-block formulation in the source. For $0<p<1$, the Schmidt rank of the exact state of $n^{\prime }$ source copies is $2^{n^{\prime }}$, whereas $f$ target GHZ states have Schmidt rank $2^f$. Every refined LOCC branch acts by a product of local linear operators and cannot increase this Schmidt rank. For $p\ne 1/2$, the displayed rate has $f<n^{\prime }$ for sufficiently large blocks when $n^{\prime }/n\to 1$, so an exact successful reverse conversion is impossible, irrespective of its claimed probability. The exact dilution obstruction from Schmidt rank is avoided in the usual asymptotic formulation by allowing outputs approaching the desired pure state. The leading-order rate above and the exact forward protocol below remain valid; neither establishes the source's stronger exact round-trip claim. At $p=1/2$ the two states are identical. At $p=0$ or $1$, the source is a known product state, the rate is zero, and local preparation supplies any desired number of source copies.

No secure key can be produced. The off-diagonal terms in the two Bell state projectors cancel, giving the separable quantum stateA possible purification of a density operator is $(|00{⟩}_{AB}|0{⟩}_E+|11{⟩}_{AB}|1{⟩}_E)/\sqrt{2}$. Eve measures her register in the computational basis and learns whether Alice and Bob have $00$ or $11$. Their apparently shared random bit is therefore completely known to Eve. Conditioned on her record the Alice–Bob state is a known product state; public discussion and local private randomness cannot create a shared secret unknown to that record. The state has no distillable secret key in the stated purification model.

Insecure as a proposed test-and-purify protocol: the basis string and check positions are announced before receipt. Eve can intercept and store the travelling qubits until the announcement. For each data position with basis bit $b_j$, she measures the stored qubit in the basis $\{H^{b_j}|0⟩,H^{b_j}|1⟩\}$. If the outcome is $z_j$, the Alice–Bob pair becomesand Eve knows $z_j$. She forwards that qubit, and forwards every publicly identified check qubit untouched. After Bob's Hadamard gate decoding, every data pair is the known product state $|z_j{z}_j⟩$, while the unmodified check pairs remain perfect. Thus the check bit error rate is zero even though Eve knows all raw data bits. This is premature basis announcement in quantum key distribution.

The retained data are a separable quantum state with a classical label held by Eve; LOCC cannot turn them into private Bell pairs. Consequently the listed check does not justify the claimed success of the subsequent entanglement purification. A sound purification procedure that independently detects the missing entanglement must fail or abort on this attack. If Step 9 were instead read as an independently guaranteed production of private, nearly perfect Bell pairs, their subsequent key would of course be private; the flaw is that this protocol's test cannot establish that guarantee. Naming an EPP does not repair the information leak or the invalid sampling test.

They need a pre-shared entanglement resource that permits deterministic production of a Bell pair. In particular, one shared Bell pair and two classical bits suffice for exact quantum teleportation. This condition is stronger than merely having some entanglement.

Let Alice's input be $|\psi {⟩}_C=\alpha |0⟩+\beta |1⟩$, and let her system $A$ and Bob's system $B$ share $|{\Phi }^{+}{⟩}_{AB}=(|00⟩+|11⟩)/\sqrt{2}$. Use the Bell states $|{\Phi }^{\pm }⟩=(|00⟩\pm |11⟩)/\sqrt{2}$ and $|{\Psi }^{\pm }⟩=(|01⟩\pm |10⟩)/\sqrt{2}$. Direct expansion givesAlice performs a projective measurement in this Bell basis and sends its two-bit outcome. Each outcome has probability $1/4$. Bob applies respectively $I,Z,X,ZX$, recovering $|\psi ⟩$ exactly, without either party knowing $\alpha ,\beta$. Before he receives the outcome, his averaged state is $I/2$, so the protocol does not communicate without the classical message. Alice's measurement consumes the input and the shared entanglement.

For necessity, exact transmission of every pure qubit means the induced quantum channel is the identity: pure-state projectors span the operator space, and a physical channel is linear. Alice can therefore prepare a Bell pair locally and transmit one half by the proposed protocol, leaving a Bell pair shared with Bob. The protocol would itself be a deterministic local operations and classical communication conversion of their resource into a Bell pair. This proves the exact teleportation resource criterion. With no shared entanglement, it is impossible: local operations and classical communication preserve separable quantum states, whereas the resulting Bell pair would be entangled.

The equal mixture of $|{\Phi }^{+}⟩$ and $|{\Phi }^{-}⟩$ cancels their off-diagonal coherence, leaving the separable quantum stateA trivial LHV model chooses a shared random bit $j$, uniformly zero or one, and prepares both local qubits in $|j⟩$. Each party uses the local Born rule for its own chosen spin direction, with independent local random seeds if a deterministic description is desired. This reproduces the entire joint measurement distribution, not merely the $z$-axis correlation.

Since the state has an explicit local hidden-variable theory for these local measurements, it cannot violate the CHSH inequality, by the derivation in part (b). Classical correlation of the shared preparation bit is sufficient; the cancellation of coherence removes the entanglement.

The useful object is the Choi state of the entanglement-breaking channel. Put $d_A=\dim {\mathcal{H}}_A$, introduce a reference $R$ with the same computational basis as $A$, and use the normalized maximally entangled stateThe entanglement-breaking channel makes $C_{RB}$ a separable quantum state. Its partial trace is ${\mathrm{Tr}}_B{C}_{RB}=I_R/d_A$, because $\mathcal{E}$ is a quantum channel. Write a separable positive operator decompositionDiscard any term with $\mathrm{Tr}{\beta }_y=0$: a positive operator with zero trace is zero. DefineEach ${\tau }_y$ is a density operator. Each $E_y$ is a positive operator, and taking the matrix transpose of the partial trace identity givesThus the $E_y$ form a POVM. In this reference-first convention, the Choi reconstruction formula isThe factor $d_A$ is essential because we used a normalized Choi state. A measurement channel storing the outcome $y$, followed by the prescribed quantum state preparation of ${\tau }_y$, has precisely this action on every linear operator $L$. The desired factorization is therefore

Every separable quantum state has positive partial transpose. Here the partial transpose iswith eigenvalues $1/2,1/2,\alpha /2,-\alpha /2$. Any nonzero $\alpha$ therefore gives a negative eigenvalue, excluding a separable quantum state. At $\alpha =0$, the explicit decompositionis a mixture of product states. ConsequentlyOnly necessity of the positive partial transpose criterion is needed here; sufficiency at zero follows directly from the decomposition.

The partial transpose of the spin singlet state projector is the Hermitian operatorFor every separable quantum state $\tau$, the positive partial transpose criterion and the trace-adjoint identity for partial transpose giveFor the specified Bell state, however,Thus $W$ is an entanglement witness detecting $|{\Phi }^{+}⟩$. In fact, it detects any state whose overlap with that Bell state exceeds $1/2$.

Use two precise finite-dimensional results. The positive-map separability criterion says that a state on ${\mathbb{C}}^2\otimes {\mathbb{C}}^3$ is separable exactly when $({\mathrm{id}}_2\otimes \Phi )(\sigma )\ge 0$ for every positive linear map $\Phi :M_3(\mathbb{C})\to M_2(\mathbb{C})$. The Størmer-Woronowicz decomposability theorem says that every such map is a decomposable positive map, sowith ${\Phi }_1,{\Phi }_2$ completely positive maps and $T$ the matrix transpose on $M_3$.

If $\sigma$ has positive partial transpose, both $\sigma$ and ${\sigma }^{T_B}$ are positive. HenceThe positive-map separability criterion now proves that $\sigma$ is a separable quantum state. The dimension-specific decomposability theorem is essential: the conclusion does not extend to arbitrary bipartite dimensions.

A bipartite density operator ${\rho }_{AB}$ has positive partial transpose when ${\rho }_{AB}^{T_B}\ge 0$ in a product basis. Positivity is independent of the choice of local bases, although the matrix representing the partial transpose changes.

If the state is a separable quantum state, write ${\rho }_{AB}={\sum }_j{p}_j{\rho }_j^A\otimes {\rho }_j^B$. Taking its partial transpose givesIndeed, the matrix transpose preserves the nonnegative eigenvalues of each local density operator; a tensor product of positive semidefinite operators is positive, and so is their nonnegative sum. This proves the necessary direction of the positive partial transpose criterion.