arxiv: v1 [quant-ph] 27 May 2015

Transcription

1 Clssicl Verifiction of Quntum Proofs rxiv: v1 [qunt-ph] 7 My 015 Zhengfeng Ji Institute for Quntum Computing nd School of Computer Science, University of Wterloo, Wterloo, Ontrio, Cnd Stte Key Lbortory of Computer Science, Institute of Softwre, Chinese Acdemy of Sciences, Beijing, Chin Abstrct We present clssicl interctive protocol tht verifies the vlidity of quntum witness stte for the locl Hmiltonin problem. It follows from this protocol tht pproximting the non-locl vlue of multi-plyer one-round gme to inverse polynomil precision is QMAhrd. Our work mkes n interesting connection between the theory of QMA-completeness nd Hmiltonin complexity on one hnd nd the study of non-locl gmes nd Bell inequlities on the other. 1 Introduction The concept of efficient proof verifiction is of fundmentl importnce to the theory of computtion. The complexity clss NP bstrcts the notion of checking written proof strings by polynomil-time deterministic verifier. It is hrd to overstte the importnce of NP nd NPcompleteness theory [19, 33, 43] to the development of theoreticl computer science in the pst severl decdes. Interctive models of proof verifiction ws proposed nd studied by Bbi [7] nd Goldwsser, Micli, nd Rckoff [6]. It is generlized to the multiple-prover setting by Ben-Or, Goldwsser, Kilin nd Wigderson [10]. The efforts to understnd these interctive proof systems opened the door to series of brekthroughs in computtionl complexity theory e.g., [5, 6, 8, 44, 57]). Of prticulr interest to this work is the multi-plyer one-round gme, gme theoreticl model for interctive proof verifiction. In this model, the verifier smples tuple of questions nd sends them to the plyers nd receives nswers bck from the plyers in one round. The plyers my gree on prticulr strtegy, but re otherwise not llowed to communicte with ech other during the gme. The verifier decides whether to ccept or to reject bsed on the questions nd nswers. A method clled orculriztion [4] tht enforces the functionl behvior of the plyers provides multi-plyer-gme chrcteriztion of NP, in which the questions re bit strings of length logrithmic in input length nd nswers re strings of constnt number of bits. We emphsize tht this is n exponentil sve in the number of bits communicted from the provers to the verifier compred with the stndrd wy of proof communiction in which the prover send the full proof string to the verifier. This is one of the resons behind the unexpected power of multi-prover interctive proof systems nd the possibility of chieving probbilisticlly checkble proofs [5, 6, ]. The study of quntum vrints of proof verifiction systems provides both fruitful wy of understnding proof verifiction in the context of quntum computing nd n insightful ngle from which to view unique quntum phenomen such s entnglement nd non-loclity. 1

2 A quntum nlog of efficient verifiction of written proofs ws proposed by Kitev [4, 36, 37]. In this generliztion, quntum witness stte plys the role of the written proof nd polynomil-time quntum computer checks whether the witness stte is vlid for the input. Kitev introduces the clss QMA of problems tht dmit efficient verifible quntum proofs. He lso estblishes the quntum nlog of the Cook-Levin theorem by showing tht the locl Hmiltonin problem, the nturl quntum version of the constrint stisfction problems, is complete for QMA. The study of locl Hmiltonin problems, the structure of entnglement in the ground sttes of locl Hmiltonins, nd the quntum PCP conjecture see e.g., []) form new reserch direction clled Hmiltonin complexity [5, 5]. Quntum interctive proof systems, model in which quntum polynomil-time verifier exchnges quntum messges with n ll-powerful prover, were first studied by Kitev nd Wtrous [38, 63]. It is now known tht the clss of lnguges expressible by such proof systems, QIP, is the sme s its clssicl counterprt, IP [30]. In quntum multi-prover interctive proof systems, shred entnglement mong the provers plys n essentil role. It is known tht, without shred entnglement, or with limited mount of entnglement, the collection of lnguges tht hve quntum multi-prover interctive proof systems, QMIP, equls to the clssicl counterprt, MIP [39] nd, hence, lso equls to NEXP [8]). The clsses QMIP nd MIP, corresponding to the collections of lnguges tht hve entngled multi-prover interctive proofs with quntum nd clssicl messges respectively, re lso known to be the sme [56]. There is recent evidence showing tht entngled provers my be more powerful thn clssicl provers [3]. But full understnding of these two complexity clsses is still out of rech. In this work, we focus on the multi-prover one-round gmes with entngled provers. For multi-plyer one-round gme, its clssicl vlue is the mximum cceptnce probbility tht clssicl strtegies cn chieve nd its non-locl vlue is the mximum cceptnce probbility tht entngled plyers cn chieve. In generl, the non-locl vlue cn be strictly lrger thn the clssicl vlue of multi-plyer gme. It is pointed out in [16] tht this my cuse problems in multi-prover interctive proof systems s provers with shred entnglement my brek the soundness condition of clssiclly sound protocol. One striking exmple is given by the soclled mgic squre gme [48, 53], which hs non-locl vlue one even though it corresponds to system of constrints with no clssicl solution [16]. Strong evidences re lso given in tht pper tht the entnglement between the plyers my indeed weken the power of two-plyer XOR gmes. Severl methods hve been proposed to control the cheting bility of entngled provers nd recover soundness in certin cses. It is proved tht pproximting the non-locl vlue of multi-plyer gme to inverse-polynomil precision is NP-hrd [8, 35]. Severl nturl problems rise from the study of non-loclity, including the binry constrint system gme [17], the quntum coloring gme [14] nd the gme corresponding to the Kochen-Specker sets [40], re shown to be NP-hrd in [31]. By proving tht the multi-linerity test [8] is sound ginst entngled provers, Ito nd Vidick proved the continment of NEXP in MIP [9]. This ws lter improved to the result tht three-plyer XOR gmes re NP-hrd to pproximte even to constnt precision [6]. However, fter mny yers of reserch, there is still no upper bound on the expressive power of multi-plyer interctive proofs with entngled provers. This leves open the possibility tht even clssicl verifier my be ble to design protocol in which only provers with entnglement cn follow nd convince the verifier of sttements tht clssicl provers cnnot prove. In this pper, we present multi-plyer one-round gme for the locl Hmiltonin problem in which the verifier is clssicl nd smples questions of logrithmic size nd expects nswers

3 of constnt size. As corollry, the problem of pproximting the non-locl vlue of multiprover one-round gme is QMA-hrd, improving the NP-hrdness results in previous works. It mkes n interesting connection between the theory of QMA-completeness nd Hmiltonin complexity on one hnd, nd the study of non-locl gmes nd Bell-inequlities on the other. This lso provides n exmple tht clssicl verifier cn design protocols mking essentil use of the shred entnglement between the provers nd expect them to do things tht is impossible for provers without shred entnglement unless NP = QMA. Our work cn be thought of s de-quntiztion of the Fitzsimons-Vidick protocol [3] of both the verifier nd the messges. The verifier communictes with multiple entngled provers nd delegtes the quntum verifiction procedure to the provers. In this sense, this work is lso relevnt to the developments in the delegtion of quntum computtion nd blind quntum computing [3, 13, 4, 56]. The previous works usully use cluster stte [55] or EPR sttes nd teleporttion to encode quntum computtion, while our pproch hs the dditionl freedom to encode quntum dt directly mong the provers. This llows us to go from the delegtion of quntum computtion to the delegtion of quntum proof verifiction. The min result of this pper is stted in the following theorem. Theorem 1. For integer r 4, ny promise problem L = L yes,l no ) in QMA, nd ny instnce x of the problem, there exists n r -plyer one-round gme nd rel numbers c, s [0,1], c s 1/poly x ) such tht 1. The questions re clssicl bit strings of length Olog x )).. The nswers re clssicl bit strings of length O1). 3. If x L yes, then the non-locl vlue of the gme is t lest c. 4. If x L no, then the non-locl vlue of the gme is t most s. A direct corollry is tht pproximting the non-locl vlue of multi-plyer gme is QMAhrd. Corollry. Given multi-plyer one-round gme in which the questions re strings of Olog n) bits nd nswers re of strings of O1) bits, it is QMA-hrd to pproximte the non-locl vlue of the gme to inverse polynomil precision. The sme problem for the clssicl vlue is obviously in NP. This mens tht the non-locl vlue of multi-plyer one-round gmes is strictly hrder to pproximte thn the clssicl vlue unless NP = QMA. Our result hs the following consequence for the multi-prover interctive proofs with entngled provers by scling up the problem size. It is slight improvement of the results obtined in [3]. Let QMA EXP be the collection of problems tht hve quntum witnesses of exponentilly mny qubits verifible by quntum exponentil-time mchine, nd let MIP r, t,c, s) be the clss of lnguges tht hve r -prover, t-round interctive proofs with clssicl polynomiltime verifier, entngled provers, nd completeness c, soundness s. Corollry 3. For some choices of completeness nd soundness c, s nd polynomil pn), with c s = Ωexp pn))), QMA EXP MIP 4,1,c, s), nd hence unless NEXP = QMA EXP. MIP MIP 4,1,c, s) 3

4 1.1 Techniques nd Proof Overview The min technicl difficulty we fce is how clssicl verifier cn check the quntum witness stte distributed mong number of plyers. In one-round gme, the only thing tht the clssicl verifier cn collect is some informtion bout the conditionl distributions Pr q) for ll possible questions q nd nswers. Consider the sitution of remote stte certifiction, in which two plyers A nd B shre quntum stte ρ AB nd wnt to convince the verifier of this fct. If the stte ρ AB is n EPR stte )/, this is possible in some sense by the verifier plying the CHSH gme [15] with the plyers. The rigidity of the CHSH gme [46, 56] implies tht if the plyers win the CHSH gme with lmost optiml probbility, then the stte is close to the EPR stte up to locl isometries. If the stte is mixed, however, the sitution becomes problemtic in very strong sense. Suppose the two plyers wnt to prove tht ρ AB is the Werner stte [64] ρ W φ) = d φ)i + dφ 1)SWAP d d 3, d where SWAP d is unitry opertor stisfying SWAP d i, j = j,i for ll 0 i, j d 1. It is shown by Werner [64] tht, for some choices of φ, the stte is n entngled stte, but ny prescribed locl mesurement setting on A nd B performed on the stte ρ W produces distributions Pr q) tht hve locl hidden vrible models. Tht is, the distribution cn be exctly reproduced by two clssicl plyers with shred rndomness nd no shred entngled sttes whtsoever! It is nturl to consider methods from the study of device-independent quntum informtion processing or self-testing quntum devices e.g., [1, 45, 47, 49]). For exmple, such ides hve successful pplictions in chieving the clssicl commnd of quntum system s shown in [56]. A key ingredient behind such device independent setting is the rigidity of non-locl gmes such s the CHSH gme. By the definition of rigidity, however, the plyers will essentilly shre specific entngled stte, such s the EPR stte or the GHZ stte )/, nd perform prescribed mesurements on the stte. This seems contrdictory to wht we need here the bility to store the quntum witness stte distributed mong the plyers. The quntum witness stte is usully n entngled stte with complex structures tht re fr wy from wht EPR or GHZ sttes cn represent. Our solution tht resolves the bove mentioned difficulties is to encode the quntum witness stte by certin stbilizer code nd ply new gme, which we cll the stbilizer gme, defined by the stbilizer. We prove rigidity theorem for the stbilizer gme which roughly sttes tht the only wy for the plyers to win the gme with high probbility is to shre correctly encoded stte of the stbilizer code, perform mesurements ccording to the mesurement specifictions given in the questions, nd respond with the mesurement outcome. Tht is, the stbilizer gme we construct provides device-independent verifiction of the encoding of the corresponding stbilizer code. Hving both the rigidity property nd the bility to encode quntum dt, the stbilizer gme serves s n essentil tool for our work nd my find other pplictions in deviceindependent quntum informtion processing. For exmple, in the remote stte certifiction problem discussed bove, lthough it is impossible for the plyers to certify the Werner stte ρ W, the stbilizer gmes provide wy to certify n encoded Werner stte using stbilizer code. In [3], quntum error correcting codes re lso employed in n essentil wy. The intuition is tht, by the quntum error correction property, there will be only one qubit of the plyer tht cn pss the encoding check of the error correcting code once the rest of the plyers respond with the correct qubit. In our cse, the stbilizer codes hve the sme effect but lso hve n importnt dditionl use. Nmely, they re responsible for enforcing the plyers to mesure their systems ccording to the mesurement specifictions they receive. Insted of using the 4

5 decoding circuit of the code, we mesure the logicl X, Z opertors on the encoded stte. As result, our proof directly pplies to quntum error detecting codes s well. The proof of the rigidity for the stbilizer gmes consists of two steps. In the first step, n ide motivted by the CHSH gme is employed nd we introduce the specil-plyer stbilizer gme. Using similr techniques for proving the rigidity of the CHSH gme, we estblish pir of nti-commuting reflections in the strtegy for the specil plyer. Then, quntity clled consistency is used to promote this prtil rigidity of the specil-plyer stbilizer gme to the full rigidity property of the stbilizer gme itself. Consistency nd nother stte dependent distnce mesure of two quntum mesurements ppered before in the nlysis of non-locl gmes nd re intensively used in mny proofs of this pper. We then consider the multi-qubit stbilizer gme, the non-locl gme version of the stbilizer encoding check in [3]. We prove prtil rigidity theorem for the multi-qubit stbilizer gme. This is chieved by estblishing the pproximte commuttivity of reflections corresponding to mesurement specifictions on different qubits, the proof of which uses the consistency property gin in n essentil wy. Finlly, the multi-qubit stbilizer gme is performed in the gme for the locl Hmiltonin problem with high probbility to regulrize the behvior of the plyers. Two dditionl difficulties rise s the verifier only hs limited ccess to the quntum witness stte. First, since the verifier cn only enforce Puli mesurements on the witness stte, the mesurement of energy of the locl Hmiltonin uses Puli mesurements only. This will be less efficient thn hving the quntum dt nd mesuring directly the POVM corresponding to ech term of the Hmiltonin s is done in [3], but there will only be constnt overhed compred to the direct mesurement pproch. Second, for convenience, we work with stbilizer codes whose genertors re the tensor products of Puli I, X, Z opertors. Alterntively, one my design n extended version of the stbilizer gme using ides from the extended CHSH gme proposed in [56] to include Puli Y opertors in the problem. The current form of the stbilizer gme is, however, much esier to nlyze. As result, by the rigidity property, the verifier only hve ccess to Puli X, Z mesurements on the quntum witness stte. This requires tht the Hmiltonin in the locl Hmiltonin problem hs terms in the rel liner spn of tensor products of I, X nd Z opertors. Fortuntely, s observed in [1], such restricted version of the locl Hmiltonin problem remins QMA-complete. 1. Open Problems We briefly mention severl relted open problems. One mjor wekness of our result for the multi-prover interctive proofs with entngled provers in Corollry 3 is the exponentil smll gp between the completeness nd soundness prmeters. It is n intriguing nd chllenging problem to improve this nd show tht QMA EXP is contined in MIP. Second, s we don t hve ny upper bound on the power of non-locl gmes, it remins possible to prove even stronger hrdness results thn the QMA-hrdness shown in this pper. A possible cndidte problem is to show QMA)-hrdness of non-locl gmes. Finlly, it is n interesting question to sk whether one cn improve the completeness prmeter of our protocol. For exmple, re there non-locl gmes with perfect completeness for QMA 1? It seems tht, to chieve this, we need to redesign the stbilizer gme nd simplify the form of the locl Hmiltonins to improve the efficiency of the energy mesurement. 5

6 1.3 Orgniztions The rest of the pper is orgnized s follows. In Sec., we introduce the notions nd relted concepts used in this pper. The stbilizer gmes re introduced nd nlyzed in Sec. 3. The non-locl gme for the locl Hmiltonin problem is given nd nlyzed in Sec. 4. Preliminries.1 Notions We use clligrphic H to denote Hilbert spces, nd DH ), LH ), HermH ), PosH ) to denote the set of density opertors, bounded liner opertors, Hermitin opertors nd positive semidefinite opertors on H. Two-dimensionl Hilbert spces C corresponding to qubit is denoted by B. For two Hermitin opertors M, N HermH ), we write M N to men N M PosH ). For mtrix M, M is defined to be M M. For string x, x denotes its length. For positive integer k, [k] is the bbrevition of the set {1,,...,k}. For two complex numbers x, y, we use x ɛ y s shorthnd notion for x y Oɛ). Two-qubit unitry gtes CNOT nd SWAP re defined s CNOT i, j = i i j, SWAP i, j = j,i, for i, j {0,1}. Let ρ DH ) be quntum stte on H. For opertors M, N LH ), introduce the following notions tr ρ M) = trmρ), M, N ρ = tr ρ M N ), M ρ = M, M ρ. 1) 1b) 1c) It is strightforwrd to verify tht, ρ is semi-inner-product, ρ is seminorm nd they become n inner product nd norm, respectively, when ρ is full-rnk stte. In prticulr, the Cuchy-Schwrz inequlity holds M, N ρ M ρ N ρ, or more explicitly, [ tr ρ M 1/ N ) tr ρ M M) tr ρ N N )]. For stte ρ DH A H B ), nd n opertor M LH A ), we my lso write tr ρ M) even though the stte ρ nd the opertor M do not ct on the sme spce. In this cse, it is understood tht tr ρ M) = tr ρ A M) where ρ A is the reduced stte of ρ on system A. This is one reson tht mkes tr ρ ) esy to use s it is not necessry to specify the correct reduced stte explicitly ll the time. A quntum mesurement is described by collection M = {M } of mesurement opertors. These re opertors cting on the stte spce H of the system being mesured. In this pper, we lwys use superscript to index the mesurement outcomes nd subscript to index different quntum mesurements. The mesurement opertors stisfy the completeness eqution M ) M = I. 6

7 If the stte of the system before the mesurement is ρ DH ), the probbility tht outcome occurs is given by tr M ) M ρ ) = M ρ, nd the post-mesurement stte of the system is M ρm ) M. ρ A positive opertor vlued mesure POVM) is collection of positive semidefinite opertors {M }, such tht M = I. POVMs give descriptions of quntum mesurements when the post-mesurement stte is not importnt in the nlysis. The probbility tht the mesurement hs outcome on stte ρ is given by tr ρ M ). A projective quntum mesurement is described by {M } where ech opertor M is projection nd M = I. A reflection R is Hermitin mtrix squred to I. It nturlly describes two-outcome projective quntum mesurement {R } where for = 0, 1. The Puli opertors I = [ ] 1 0, X = 0 1 R = I + 1) R, [ ] 0 1, Y = 1 0 [ ] 0 i, Z = i 0 [ ] 1 0, 0 1 re exmples of -by- reflections. We lso use σ 0,σ 1,σ,σ 3 to represent the four Puli opertors. A multi-qubit Puli opertor is of X Z -form if ech tensor fctor is one of I, X nd Z. A Hermitin mtrix H is of X Z -form if it is in the rel liner spn of X Z -from Puli opertors. Define X nd Z s X = X + Z, Z = X Z, ) nd W s W = cosπ/8)x + sinπ/8)z. 3) It is esy to verify tht W is reflection nd X = W X W, X = W X W, Z = W Z W, Z = W Z W. Tht is, under the conjugtion of W, X nd Z re mpped to X nd Z respectively, nd vice vers. The reflections X, Z, X, Z nd W re illustrte in Fig. 1. They ply n importnt role in the CHSH gme nd the stbilizer gmes introduced in this pper.. Non-Locl Gmes A multi-plyer one-round gme involves two or more plyers nd verifier who communictes with the plyers clssiclly in one round. The verifier smples questions nd sends them out to the plyers nd expects to receive nswers bck. He then decides whether to ccept or reject 7

8 X Z W X π/8 Z Figure 1: Reflections X, Z, X, Z, W in the x, z-plne of the Bloch sphere. bsed on the questions nd nswers. The plyers re llowed to gree on strtegy before the gme strts, but cnnot communicte with ech other during the gme. Let there be r plyers, 1),),...,r ). Let Γ i ) be finite set of questions for plyer i ) nd Λ i ) be finite set of possible nswers from plyer i ). An r -plyer gme is defined by distribution π over r i=1 Γi ) nd function V : r i=1 Λi ) r i=1 Γi ) [0,1], specifying the cceptnce probbility. By convexity rgument, it suffices to consider the strtegy of clssicl plyers described by functions f i ) : Γ i ) Λ i ). The vlue of the strtegy is the cceptnce probbility ω = E q π V q), q), for q = q 1, q,..., q r ) distributed ccording to π nd q) = f 1) q 1 ), f ) q ),..., f r ) q r ) ). The clssicl vlue of the gme is the mximum of the vlues of ll clssicl strtegies. An XOR gme is multi-plyer gme in which ech plyer nswers bit i nd the verifier ccepts or rejects depending only on the prity of r i=1 i. More precisely, there is function ˆV : {0,1} r i=1 Γi ) [0,1] such tht V, q) = ˆV r i, q ), for ll q r i=1 Γi ), r i=1 Λi ). In most of the gmes considered in this pper, the verifier ccepts or rejects only depending on the prity of some, not ll, of the nswer bits. We cll them generlized XOR gmes. In non-locl gme, the plyers re llowed to shre n rbitrry entngled stte before the gme strts. A quntum strtegy S for the non-locl gme is described by the shred stte ρ, the mesurements { M q i ) } i tht plyer i ) performs when the question is qi Γ i ). The vlue of the strtegy is defined s ω S ) = E q π i=1 [tr ρ r i=1 M i ), i q i ) V, q) ], for = 1,,..., r ) nd q = q 1, q,..., q r ). The non-locl vlue of the gme is the supremum of the vlues of ll quntum strtegies. The CHSH gme [15] is rgubly one of the most importnt non-locl gmes. It rises from the study of fundmentl questions in quntum mechnics such s entnglement nd nonloclity vi Bell inequlities [9]. The CHSH gme is two-plyer XOR gme. The verifier smples two bits q 1 nd q independently nd uniformly t rndom, sends q 1 to the first plyer nd q to the second plyer. The verifier ccepts if nd only if two nswer bits 1 nd stisfy 8

9 1 = q 1 q. The clssicl vlue of the gme is 3/4 = 0.75 nd the non-locl vlue of the gme is ω CHSH = + )/ [59]. In n optiml strtegy for the CHSH gme, the plyers shre n EPR stte )/, nd the first plyer obtins the nswer by mesuring X or Z ) if the question is 0 or 1 respectively), while the second plyer mesures X or Z ) in Eq. ) if the question is 0 or 1). The rigidity property of the CHSH gme roughly sttes tht this is essentilly the only strtegy for the plyers to chieve the non-locl vlue, up to locl isometries. Furthermore, ny strtegy tht hs vlue close to the gme vlue must be close to this optiml strtegy in some sense. Rigidity of the CHSH gme nd other non-locl gmes hs found interesting pplictions in certifible rndomness genertion e.g., [18, 50, 54, 60]), device-independent quntum cryptogrphy e.g., [1, 50, 61]) nd clssicl commnd of quntum systems [56]..3 Quntum Proofs nd Locl Hmiltonin Problems The ide of efficient proof verifiction of NP hs nturl quntum generliztion given in the following definition. Definition 4. The complexity clss QMA is the set of promise problems L = L yes,l no ) such tht there is polynomil p ) nd quntum polynomil-time verifier V, nd Completeness. If x L yes, there exists stte ψ of p x ) qubits, Pr [ V ccepts x ψ ] 3, Soundness. If x L no, then for ll stte ψ of p x ) qubits, Pr [ V ccepts x ψ ] 1 3. Definition 5 Locl Hmiltonin Problems). An instnce of the k-locl Hmiltonin problem of n-qubits is described by the tuple H,,b), where the Hmiltonin H = m j =1 H j nd ech term H j cts non-trivilly on t most k-qubits, H j is positive semidefinite nd H j 1,,b R re numbers stisfying b 1/polyn). Let the ground stte energy of the Hmiltonin H be λ min = min ρ D H,ρ. In the k-locl Hmiltonin problem, H,,b) is yes-instnce if λmin m nd no-instnce if λ min bm. The quntum nlog of the Cook-Levin theorem by Kitev sttes tht the k-locl Hmiltonin problem is QMA-complete for k 5 [4, 36]. This ws lter improved to -locl nd more physicl Hmiltonins in series of works see e.g., [0, 34, 51])..4 Quntum Error Correction nd Stbilizer Formlism A quntum error correcting code encodes number of qubits, clled the logicl qubits, into lrger number of physicl qubits with the im of protecting the quntum informtion in the logicl qubits from certin types of noises. The stbilizer formlism provides convenient lnguge nd gret mount of exmples of quntum error correcting codes. We present severl relevnt definitions nd fcts bout the stbilizer codes nd refer the reder to the thesis of Gottesmn [7] for more detils. Let P r be the group generted by the r -fold tensor product of Puli opertors P r = {e iφ r } P j, for φ {0,π/,π,3π/}, P j {I, X,Y, Z }. j =1 9

10 A stbilizer S is n belin subgroup of P r not contining I r. The stbilizer provides succinct description of subspce of C ) r, the simultneous +1-eigenspce of the opertors in S. This subspce is clled the code spce of the stbilizer. A set of opertors in S is clled the genertors of S if they generte the group S. The weight of n opertor in P r is the number of non-identity tensor fctors in it. Let C S) be the centrlizer of S in P r, the set of opertors in P r tht commutes with S. The distnce of the stbilizer code is d if there is no opertor of weight less thn d in C S) S. The logicl X nd Z opertors L X nd L Z re pir of nti-commuting opertors in C S) S. As simple exmple, the opertors X X nd Z Z generte stbilizer for the EPR stte. The fmous five-qubit code [11, 41] hs stbilizer representtion given in Fig.. The five-qubit code encodes one logicl qubit in five physicl qubits nd hs distnce 3. The logicl X nd Z opertors re X 5 nd Z 5. This will be the stbilizer code we use most of the time s the exmple. Opertors X 4 nd Z 4 generte the stbilizer for the four-qubit quntum error detecting code. It hs distnce nd encodes two qubits. The opertors X X I I nd Z I Z I form pir of nti-commuting opertors nd cn serve s the logicl X nd Z opertors. There is nother pir of the logicl opertors for the other encoded qubit tht we do not use..5 Stte-Dependent Distnce Mesures of Quntum Mesurements We introduce distnce mesure nd consistency mesure of quntum mesurements tht will be helpful in our tretment of non-locl gmes. They grow out of the study of non-locl gmes [8, 9, 6] nd my be useful in more generl contexts. A common feture of them is tht they re both stte-dependent. A generl question tht one usully fces is wht the consequences re if mesurement {M1 } is used in plce of {M0 } in non-locl gme by one of the plyers. Will it chnge the overll nlysis t lot? More concretely, suppose tht the stte of joint quntum system H A nd H B is ρ nd tht {M0 }, {M 1 } re quntum mesurements on system A. The post-mesurement sttes re ρ i = M i ρm i ), 4) for i = 0, 1, respectively, depending on which mesurement is performed. By the monotonicity of the trce distnce, the difference will be bounded by D tr ρ 0,ρ 1 ) no mtter wht opertion follows the mesurement. In prticulr, in non-locl gme, if Bob mesures on his system H B nd then the verifier mkes the decision, the cceptnce probbilities will differ by t most D tr ρ 0,ρ 1 ). The quntity defined next provides wy to bound the distnce D tr ρ 0,ρ 1 ). Definition 6. For two quntum mesurements M i = { M } i with i = 0,1 tht hve the sme set of possible outcomes, define [ d ρ M 0, M 1 ) = M 0 M1 1/. ρ] 5) More explicitly, [ d ρ M 0, M 1 ) = Re tr ρ M 0 ) M1 ) ] 1/. 6) Lemm 7. Let M i = { M } i for i = 0,1 be two quntum mesurements with the sme set of possible outcomes, nd ρ i be the post-mesurement sttes in Eq. 4). Then D tr ρ 0,ρ 1 ) d ρ M 0, M 1 ). 10

11 Proof. Let ψ H A H B H C be purifiction of ρ. Then D tr ρ 0,ρ 1 ) D tr M0 ψ ), M1 ψ )) [ = 1 ψ M0 ) M1 ψ ] 1/ [ 1 )] ψ M0 ) M1 1/ ψ [ Re tr ρ M 0 ) M ) ] 1/ 1 = d ρ M 0, M 1 ). The first inequlity follows from the monotonicity of the trce distnce. The second line follows by direct clcultion of the trce distnce for two pure sttes. The third line is from 1 x 1 x) for x [0,1]. As discussed bove, direct corollry of the bove lemm is tht when mesurement M 0 is replced with M 1 in strtegy for non-locl gme using shred stte ρ, the cceptnce probbility chnge by t most d ρ M 0, M 1 ). This clim works for ll types of quntum mesurements including the generl quntum mesurement, POVMs, projective quntum mesurements nd binry projective mesurements described by reflections. For M i = { M } i, i = 0,1, describing two POVMs tht stisfy M = I, define the correspond- i ing distnce s [ d ρ M 0, M 1 ) = Re For projective mesurements M i = { M } i, define [ d ρ M 0, M 1 ) = Re tr ρ M 0 M1 ) ] 1/. tr ρ M 0 M1 ) ] 1/. Finlly, for reflections R 0,R 1, let R i = I + 1) R i be the projective mesurement opertors correspond to R i. Define d ρ R 0,R 1 ) = d ρ {R0 },{R 1 }) [ = Re I + 1) R 0 tr ρ = [ )] 1/. 1 Retr ρ R0 R 1 It is esy to verify tht d ρ stisfy the tringle inequlity. Lemm 8. Let M 0, M 1, M be three mesurements on stte ρ. Then d ρ M 0, M ) d ρ M 0, M 1 ) + d ρ M 1, M ). I + 1) R 1 ) ] 1/ The next importnt quntity mesures the consistency of two quntum mesurements. 11

12 Definition 9. Let ρ DH A H B ) be the shred stte between system A nd B, let M = { M }, N = { N } be POVMs on system A nd B respectively hving the sme set of possible outcomes. Define the consistency of M, N on stte ρ s C ρ M, N ) = tr ρ M N ). 7) M nd N re clled ɛ-consistent on stte ρ if C ρ M, N ) 1 ɛ. For two reflections R, S, let {R }, {S } be their corresponding projective mesurements. Define C ρ R,S) = C ρ {R },{S }) = 1 + tr ρr S). 8) The condition tr ρ R S) ɛ 1, or equivlently, R,S re Oɛ)-consistent on ρ, cn be thought of s quntittive wy of sying tht ρ is pproximtely stbilized by R S. The consistency of mesurements puts strong structurl constrints on the strtegies of nonlocl gme. It will be key ingredient in our proof of the min result. In the following lemm, it is proved tht if two mesurements M 0, M 1 re consistent with the sme mesurement N, then M 0, M 1 must be close to ech other in terms of the distnce d ρ. Lemm 10. Let ρ DH A H B ) be stte on system A nd B. Let M i = { M } i for i = 0,1 be POVMs on system A, N = { N } be POVM on system B. If for i = 0,1, then Proof. First prove tht [ 1 tr ρ M0 C ρ M i, N ) 1 ɛ, d ρ M 0, M 1 ) O ɛ). ) 1 M1 ) ] N ɛ 0. 9) By the Cuchy-Schwrz inequlity, the bsolute vlue of the left hnd side is t most [ 1 tr ρ M0 ) [ 1 N ]tr ρ M1 ) N ] tr ρ [ 1 M 0 ) N ] tr ρ [ 1 M 1 ) N ] [ ) tr ρ 1 M ] 0 N ɛ, tr ρ [ 1 M 1 ) N ] where the first inequlity follows from the fct tht 1 x) 1 x for x [0,1], the second inequlity is nother Cuchy-Schwrz inequlity nd the lst inequlity follows from the condition tht C ρ M i, N ) 1 ɛ. Similrly, by using the Cuchy-Schwrz inequlity twice, we hve tr ρ [ M0 M1 1 N )] ɛ 0. 10) Adding Eqs. 9) nd 10) gives ] tr ρ [ M0 M1 [ ɛ tr ρ M0 N ] + ɛ = 1. The lemm follows by the definition of d ρ for POVMs. tr ρ [ M 1 N ] 1 1

13 In the nlysis, it is useful to hve quntity chrcterizing the pproximte commuttivity of two projective mesurements M = {M } nd N = {N } on stte ρ. The quntity we choose is [M, N ] ρ. For reflections R,S, let {R } nd {S } be the projective mesurements correspond to R nd S respectively. The commuttivity of these two mesurements on stte ρ {0,1} [R,S ] ρ = {0,1} = 1 8 [R,S] ρ. [ I + 1) R, I + ] 1) S ρ For this reson, [R,S] ρ equivlently serves s bound on the pproximte commuttivity of the two projective mesurements defined by R,S. 3 Stbilizer Gmes nd Rigidity 3.1 CHSH Gme Revisited Before introducing the stbilizer gmes, it is beneficil to revisit the CHSH gme in the stbilizer formlism. Recll tht the EPR stte Φ = )/ is stbilizer stte defined by two genertors g 1 = X X nd g = Z Z, nd the eigenstte of eigenvlue of the opertor g 1 + g. If verifier hs trusted mesuring devices, it suffices to perform the projective mesurements ssocited with the reflections g 1, g to check whether the stte is n EPR stte. However, this simple mesurement setting does not correspond to ny non-trivil schemes tht llow device-independent certifiction of the EPR stte. In the CHSH gme, one of the two plyers is sked to mesure her shre of Φ with X, Z, the other is sked to mesure X, Z in Eq. ), the π/4 rotted versions of X, Z. This motivtes us to consider the genertors g 1 = X X nd g = Z Z. By the conjugtion reltion of X, Z nd X, Z, they generte stbilizer for the stte Φ = I W Φ nd Φ g i i=1 Expnding the X, Z in g 1 nd g using X nd Z gives four opertors Φ =. 11) h 1 = X X, h = X Z, h 3 = Z X, h 4 = Z Z, 1) such tht h 1 +h = g 1 nd h 3 +h 4 = g. The four opertors h i in Eq. 1) recover exctly the CHSH gme by encoding the Puli opertors X, Z in h i s questions 0,1 nd the sign ±1 of h i s the expected prity of nswers. The Eq. 11) becomes Φ 4 h i Φ =, which is n explntion of the quntum dvntge in the CHSH gme. i=1 13

14 3. Specil-Plyer Stbilizer Gme In this section, we introduce the stbilizer gmes with specil plyer. The construction works with ny non-trivil stbilizer code tht hs set of genertors ll in the tensor product form of I, X, Z. Consider the genertors of the stbilizer group for the five-qubit quntum code in Fig.. Its code spce is the two-dimensionl eigenspce of eigenvlue 4 of the opertor 4 j =1 g j, where g j s re opertors in Fig.. Nme g 1 g g 3 g 4 Opertor I X Z Z X X I X Z Z Z X I X Z Z Z X I X Nme Opertor g 1 I X Z Z X g X I X Z Z g 3 Z X I X Z g 4 Z Z X I X ) Stndrd genertors b) Genertors with the lst qubit rotted. Figure : Stbilizer genertors for the five-qubit code. Motivted by the CHSH gme, we pply the π/4-trick to the lst column of the four genertors in Fig.. Tht is, we replce X nd Z in the lst column with X nd Z in Eq. ). This gives us nother set of genertors, s in Fig. b, which genertes the stbilizer for the five-qubit code with the lst qubit rotted by the single-qubit unitry W in Eq. 3). If ψ is in the code spce of the five-qubit code, stte ψ = I W ) ψ 13) is in the eigenspce of 4 j =1 g with eigenvlue 4. j Expnding the primed X, Z opertors in ech of the genertors in Fig. b into X, Z, we get set of eight opertors h j s in Fig. 3. For stte ψ in Eq. 13), ψ 8 h j ψ = 4. 14) j =1 The tble in Fig. 3b is obtined by trnslting the opertors I, X, Z in Fig. 3 to the questions in the lphbet of,0,1,,3. The I opertor is lwys trnslted to, which denotes null question. The verifier will not sk nything to the plyer nd do not expect ny nswers if the question is the null question. For convenience, we sometimes ssume tht the verifier will replce with either 0 or 1 s the question nd ignore the nswers corresponding to this question. The opertors X, Z re trnslted to 0, 1 respectively in the first four columns nd to, 3 respectively in the lst column. One cn of course lso use 0, 1 in the lst the column nd the chnge is only for lter convenience. Finlly, the prity column is red off from the ±1 signs in the h i opertors. The tble in Fig. 3b specifies five-plyer gme in Fig. 4 clled the Specil-Plyer Stbilizer Gme. In the gme, the verifier rndomly selects four plyers ech time, sks question encoded with single bit nd expects single bit nswer. He ccepts or rejects depending on the prity of the nswers received. The fifth plyer is specil becuse of the π/4-rottion pplied on the fifth column of the stbilizer genertors. This breks the trnsltion invrince of the five-qubit code nd, in the honest strtegy, the fifth plyer performs differently from other plyers. It turns out tht the specil-plyer stbilizer gme in Fig. 4 hs non-locl vlue ω SPS = +, 15) 4 14

15 Nme h 1 h h 3 h 4 h 5 h 6 h 7 h 8 Opertor I X Z Z X I X Z Z Z X I X Z X X I X Z Z Z X I X X Z X I X Z Z Z X I X Z Z X I Z Prity Question ) Eight opertors obtined from Fig. b. b) The tble for the gme with specil plyer. Figure 3: Trnsltion from mesurement opertors to gme specifictions. Specil-Plyer Stbilizer Gme Let the s j for j [8] be the eight entries in the prity column of Fig. 3b nd let w j = w j,i ) be the j -th row of the question column. The verifier does the following: 1. Select n index j [8] uniformly t rndom.. For i [5], send w j,i in Fig. 3b to the plyer i ) if w j,i is not, the null question. 3. Receive bit i ) from plyer i ) if she ws sked question. 4. Accept if nd only if the prity of the nswers i i ) equls s j. Figure 4: Specil-plyer stbilizer gme for the five-qubit code. The fifth plyer is the specil plyer. the sme s tht of the CHSH gme. The following strtegy chieves the vlue. The five plyers shre the stte ψ s in Eq. 13) nd mesure X or Z ) if the question is even or odd, respectively) nd reply with the outcome. Let h j,i be the i -th Puli opertor of h j. The vlue this strtegy chieves is ω SPS = E 1 + 1) s j ψ 5 i=1 h ) j,i ψ j = 1 + Ej ψ h j ψ 16), which gives the desired vlue using Eq. 14). It is beneficil to restte the bove optiml strtegy using ψ insted of ψ. By the conjugtion reltion between X, Z nd X nd Z, the fifth plyer essentilly mesures X nd Z on the stte ψ in the code spce when the question is,3 respectively. If we think of questions 0,1,,3 s mesurement specifictions of X, Z, X, Z, then plyers who honestly follow the mesurement instructions on n encoded stte hs cceptnce probbility ω SPS. We mention without proof tht the clssicl vlue of the gme is 3/4, gin the sme s tht of the CHSH gme. We hve seen strtegy for the gme with vlue + )/4. The fct tht this vlue is optiml is given in the following theorem. The theorem lso proves n importnt structurl result bout 15

16 strtegies tht lmost chieve the non-locl vlue of the gme. Nmely, the specil plyer the fifth plyer) must mesure honestly the X nd Z mesurements up to n isometry. It is prtil rigidity property of the specil-plyer stbilizer gmes. Theorem 11. Let S = ρ, { R w i ) }) be strtegy for the specil-plyer stbilizer gme in Fig. 4 for the five-qubit code, where ρ is the stte shred between the plyers before the gme strts nd R w i ) is the reflection on Hilbert spce H i describing the projective mesurements the plyer i ) performs when receiving question w {0,1,,3}. Then the vlue of the strtegy S is t most ω SPS given in Eq. 15). Furthermore, if the vlue is t lest ω ɛ, then there exists n isometry V SPS LH 5,B H ˆ 5 ) such tht R 5) 3 = V Z I )V, nd d ρ R 5),V X I )V ) O ɛ). We note tht some previous works use different distnce mesures for mesurements in the sttement of rigidity theorem. For exmple, the quntity R S) I ψ is used in [56] for reflections R, S on stte ψ. It is esy to verify tht this is the sme s our distnce mesure d ρ R,S) up to constnt for ρ = ψ ψ. The proof of the bove theorem relies on the following lemms. Lemm 1 Jordn s Lemm [3]). For ny two reflections R 0,R 1 cting on finite dimensionl Hilbert spce H, there exists decomposition of H into orthogonl one- nd two-dimensionl subspces invrint under both R 0 nd R 1. Lemm 13. Let R be reflection nd H be Hermitin mtrix. Then Proof. We first prove tht trρ R H) trρ H. tr ρ R H) tr ρ H. Let H + nd H be the positive nd negtive prt of H = H + H for positive semidefinite H + nd H. The clim follows by direct clcultion tr ρ R H) tr ρ H =tr ρ R H + H )) tr ρ I H + + H )) = tr ρ I R) H + ) tr ρ I + R) H ) 0. A similr rgument estblishes tr ρ R H) tr ρ H, which completes the proof. Lemm 14. For θ l [0,π], C l = cosθ l, S l = sinθ l, nd ny probbility distribution over l, if E l 1 +Cl 1 ) ɛ, then E l S l 1 Oɛ). 16

17 Proof. Let ɛ l be 1 +C l 1). Then E l ɛ l ɛ. For ech l, ɛ l 1. We clim tht for ll l, S l 1 9ɛ l. This will obviously finish the proof. As ɛ l C l = ɛ l ± ɛ l 3 ɛ l, it follows tht C l 9ɛ l. If ɛ l 1/9, the clim is trivil since θ l [0,π] nd S l 0. Otherwise, S l = 1 C l 1 9ɛ l 1 9ɛ l. Proof of Theorem 11. We first give n expression of the gme vlue for the strtegy S. For ech opertor h j in Fig. 3, define h j S ) s the opertor obtined by substituting the X, Z opertors in h j with the plyers corresponding reflections in the strtegy S. Tht is h j S ) = 1) s j where s j, w j,i re defined in Fig. 4 nd R i ) Eq. 16), the vlue of S is computed s Consider four mtrices 5 i=1 R i ) w j,i, is defined to be I. Following the similr steps s in ω S ) = 1 + Ej tr ρ h j S )). 1 S ) = I R ) 0 R3) 1 R4) 1 I I 4 R5) + R5) 3, 17) S ) = R 1) 0 I R3) 0 R4) 1 I I 4 R5) R5) 3, 17b) 3 S ) = R 1) 1 R) 0 I R4) 0 I I 4 R5) R5) 3, 17c) 4 S ) = R 1) 1 R) 1 R3) 0 I I I 4 R5) + R5) 3. 17d) In the following, we write them s l nd hide their dependence on the strtegy S when there is no mbiguity. The sum of squre of the four mtrices is 4 l=1 l = 8I j h j S ). This gives the following expression for the gme vlue ω S ) = l=1 tr ρ l ), 3 from which the optimlity of ω SPS is obvious. It lso implies tht for ny strtegy S hving vlue t lest ω SPS ɛ, 4 tr ρ 1 ) tr ρ l ) Oɛ). 18) l=1 17

18 For simplicity, let R,R 3 be the shorthnd notion of R 5) nd R 5) 3 in the rest of the proof. Following similr trunction rgument s in [56], we my ssume without loss of generlity tht the underlying Hilbert spces of the plyers re finite dimensionl so tht Jordn s Lemm pplies. Using Jordn s lemm nd dding extr dimensions if necessry, one get simultneous -by- block digonliztions of R nd R 3 such tht ech -by- block is reflection hving both ±1 eigenvlues. Hence, there is n isometry V LH 5,B H ˆ 5 ) such tht R 3 = V Z I )V, nd R = V l [ Cl S l S l C l ) ] l l V, where C l = cosθ l,s l = sinθ l for θ l [0,π] nd l is the index of the two-dimensionl invrint subspces obtined by Jordn s lemm. Substitute the expression for R nd R 3 in Eq. 18), Oɛ) tr ρ 1 ) = + 1 tr ρr R 3 + R 3 R ) + tr ρ R R + R 3 ) ) + 1 tr ρr R 3 + R 3 R ) tr ρ R + R 3 [ = + 1 ) ] tr Cl 0 ρ l l tr ρ 1 +Cl I l l ) 0 C l = E l 1 +C l 1), l l 19) where R is the reflection I R ) 0 R3) 1 R4) 1, the second line follows from Lemm 13, ρ = V ρv, nd the expecttion E l is over the probbility distribution Prl) = tr ρ I l l ). To complete the proof, consider the stte dependent distnce between reflections R nd V X I )V d ρ R,V X I )V ) = [ 1 Retr ρ R V X I )V )] 1 = 1 E l S l ) 1. This eqution nd Eq. 19) together with Lemm 14 give the second prt in the theorem. In the bove discussion, the fifth plyer plys the role of the specil plyer in the gme. It is nturl to generlize this to gme with plyer t) s the specil plyer. The five-qubit code gme with specil plyer t) is the gme defined by the tble in Fig. 3b fter cyclic rottion of the question columns such tht the specil column becomes the t-th one. This mkes use of the trnsltion invrince of the five-qubit code. For generl r -qubit stbilizer S tht hs set of X Z -form genertors g 1, g,..., g l, we need to select two genertors g t) X, g t) Z tor on the t-th qubit nd g t) Z mong g 1,..., g l for ech qubit t [r ] such tht g t) hs X oper- X hs Z opertor on the t-th qubit. This is possible in most cses s long s the distnce of the stbilizer is lrger thn or equl to nd the t-th qubit is not fixed to pure stte for ll code sttes. We cll stbilizer non-trivil if such choices of pir of genertors re possible for ll t [r ]. The choice of g t) t) nd g my not be unique, but ny such choice will X Z work. To ply the specil plyer stbilizer gme with specil plyer t), we follow the procedure in Fig. 4 with genertors g t) t) nd g. Even though the gme my not essentilly depend on ll X Z the genertors, the proof of prtil rigidity still follows in this generl cse. 18

19 More specificlly, for t [r ], let g t) t) nd g be genertors tht hve X nd Z on the t-th X Z qubit respectively. Following the ide in the design of the gme for the five-qubit code, define four opertors obtined by doing the π/4-trick on the t-th qubit to this pir of genertors h t) 1 = g t) X, ht) = g t) X Z, ht) 3 = g t) Z X, ht) t) 4 = g Z, 0) where g t) t) is the opertor obtined by chnging the X opertor of the t-th qubit of g X Z X to Z nd, similrly, g t) Z X is the opertor obtined by chnging the Z on t-th qubit of g t) Z to X. As in the cse for the five-qubit code gme, we trnslte the opertors h t) to questions w j j = w j,i ) where w j,i is in {,0,1,,3}. Following the trnsltion rule, w j,i is if the i -th tensor fctor of h j is I. It is 0, 1 if i t nd the corresponding tensor fctor is X, Z respectively, nd it is, 3 if i = t nd the tensor fctor is X, Z respectively. Similrly, define s j to be 0 or 1 if the sign of h t) is 1 or 1 respectively. The stbilizer gme with specil plyer t) is the gme defined s in Fig. 5. j Specil-Plyer Stbilizer Gme Generl Cse) For stbilizer S with X Z -form genertors, let w j,i nd s j be the questions nd prities defined by the opertors h t) in Eq. 0) for j [4]. In the specil-plyer stbilizer gme j with plyer t) s the specil plyer, the verifier performs the following steps: 1. Select n index j [4] uniformly t rndom.. For i [r ], send w j,i in Fig. 3b to the plyer i ) if w j,i is not, the null question. 3. Receive bit i ) from plyer i ) if she ws sked question. 4. Accept if nd only if the prity of the nswers i i ) equls s j. Figure 5: Specil-plyer stbilizer gme. 3.3 Stbilizer Gme The prtil rigidity of the specil-plyer stbilizer gme pplies only to the mesurements preformed by the specil plyer. It essentilly forces the specil plyer to mesure X nd Z on her system. There re, however, no rigidity known for the other plyers mesurements nd nothing is proved bout the shred stte of the strtegy. The stbilizer gme uses the specil-plyer stbilizer gme s sub-module to chieve the full rigidity properties for ll plyers. The specifiction of the Stbilizer Gme is given in Fig. 6. It is defined by the r -qubit stbilizer S with X Z -form genertors. It lso implicitly depends on fixed choice of genertors g t) X, g t) Z for ech t [r ] in order to perform the second test. The gme involves r plyers, ech of whom my receive question of two bits, nd is required to nswer one bit. The verifier s decision depends only on the prity of some of the nswer bits nd the gme is generlized XOR gme. In this pper, the number of qubits r of the stbilizer is lwys ssumed to be constnt, nd it my come in the Big-O notions in the rest of the pper. The non-locl vlue of the gme is ω S = 1 + ω SPS 19 = 6 +, 8

20 Stbilizer Gme For n r -qubit non-trivil stbilizer S with X Z -form genertors g 1, g,..., g l, define the stbilizer gme of S s follows. Let w j,i for j [l], i [r ] be, 0, or 1 if g j hs I, X, or Z on the i -th qubit respectively. Let s j for j [l] be the 0, 1 if the sign of g j is 1, 1 respectively. The verifier performs the following two tests with equl probbility: 1. Select n index j [l] uniformly t rndom. Send w j,i to the plyer i ) if w j,i. Receives bit from ech plyer. Accept if the nswers not corresponding to the null questions hve the sme prity s s j. Reject otherwise.. Select t [r ] uniformly t rndom. Ply the specil-plyer stbilizer gme with specil plyer t) in Fig. 5. Figure 6: Stbilizer gme for stbilizer S. which cn be chieved by plyers who shre n encoded stte of the stbilizer code nd mesures X, Z, X, Z when receiving 0,1,,3, respectively. This vlue is esily seen to be optiml s it sturtes the winning probbility in both tests of the stbilizer gme. The stbilizer gme hs the following rigidity property. Theorem 15. For ny non-trivil r -qubit stbilizer with X Z -form genertors, the stbilizer gme in Fig. 6 hs the following rigidity property. For ny strtegy S of the gme specified by Hilbert spces {H i } r i=1, stte ρ D r i=1 H i ), nd reflections R w i ) on H i for i [r ], w {0,1,,3}, if the vlue of the strtegy is t lest ω S ɛ, then, there re isometries V i LH i,b H ˆ i ) for i [r ], such tht the following properties holds For ll i [r ], R i ) 3 = V i Z I )V i nd where X, Z re defined in Eq. ). d ρ R i ),V i X I )V i ) Oɛ 1/ ), 1) d ρ R i ) 1,V i Z I )V i ) Oɛ 1/4 ), 1b) d ρ R i ) 0,V i X I )V i ) Oɛ 1/4 ), 1c) Let Π be the projection to the code spce of the stbilizer code of S, nd let V be the isometry r i=1 V i, then Π I,V ρv 1 Oɛ 1/4 ), where Π cts on the r qubits, ech of which is the first qubit of ech plyer fter the ppliction of isometry V. Proof. By the symmetry of the gme, it suffices to prove the sttement for one of the plyers, sy, the plyer r ). For simplicity, use R w to represent the reflection R w r ) of plyer r ). It is esy to see tht strtegy S wins the specil-plyer stbilizer gme of specil plyer r ) with probbility ω SPS Oɛ). By Theorem 11, there exists isometry V such tht R 3 = V Z I )V nd d ρ R,V X I )V ) Oɛ 1/ ). 0

21 Tking V r = W I )V, we get the first two conditions in the first item of the theorem, where W is the reflection defined in Eq. 3). Next, we prove the clim in Eqs. 1b) nd 1c). For ny X Z -form Puli opertor g, define g S ) to be the opertor obtined by replcing X with R i ) ) 0 nd Z with Ri 1. Let R be the product of the first r 1 tensor fctors of g r ) r ) S ). Here, g is the chosen genertor tht hs X on the r -th X X qubit in the stbilizer gme with specil plyer r ). As the strtegy S hs vlue t lest ω S ɛ, it hs vlue t lest 1 Oɛ) for the first test of the stbilizer gme, nd therefore, tr ρ R R 0 ) = tr ρ g r ) X S )) 1 Oɛ). ) In other words, the reflection R 0 is Oɛ)-consistent with R on ρ. We emphsize tht the reflection R cts on the joint system of the first r 1 plyers. This does not cuse ny problem s it is only used for our proof nd is never ctully mesured on the joint system. Consider new strtegy S ˆ modified from strtegy S by chnging R in the strtegy S to V r X I )V r. This new strtegy hs vlue t lest ω S O ɛ) by Lemm 7. Consider the mtrix 1 for strtegy S ˆ, s in Eq. 17), 1 S ˆ [ ) = R I I V r X + Z I ) V r ], = R I I V r X I )V r. By similr rgument tht gives Eq. 18) nd the fct tht Sˆ hs vlue t lest ω SPS O ɛ) in the second prt of the gme, we hve This gives tr ρ 1 ˆ S )) O ɛ). tr ρ R V r X I )V r ) 1 O ɛ), 3) which proves the O ɛ)-consistency of V r X I )V r nd R on ρ. The Eqs. ) nd 3) nd Lemm 10 imply tht d ρ R0,V r X I )V r ) Oɛ 1/4 ). This completes the proof for Eq. 1c). A similr rgument estblishes Eq. 1b). Finlly, to prove the second item of the theorem, consider strtegy S tht uses the sme stte ρ nd reflections R i ) 0 = V i X I )V i, R i ) = V i X I )V i, R i ) 1 = V i Z I )V i, R i ) 3 = V i Z I )V i. By Lemm 7 nd the first prt of the theorem, strtegy S hs vlue t lest ω S Oɛ1/4 ). Hence, it hs cceptnce probbility t lest 1 Oɛ 1/4 ) in the first test of the stbilizer gme. This mens tht 1 + E j tr ρ g j ) = 1 Oɛ 1/4 ), where j is uniformly rndom over [l], g j s re genertors of the stbilizer, nd ρ = V ρv. This is equivlent to l ) tr ρ g j = l Oɛ 1/4 ). 4) j =1 1