Lean, informalized

Nielsen & Chuang · Chapter 12, Quantum information theory · p. 594

Exercise 12.31 - An eavesdropper's mutual information with the key is bounded by the von Neumann entropy of Alice and Bob's state

The eavesdropper learns at most the entropy of the state.

Hover over a blue or green term in the text, or a node in the graph, to find it in the other. Select it to read its declaration both in Lean and in words.

The Exercise

Alice and Bob share a quantum system ABAB in a state ρ\rho, from which they will draw a secret key. An eavesdropper, Eve, holds a second system EE, and ABAB and EE together are in a pure state. Each value xx of the key occurs with probability pxp_x and leaves Eve’s system in a state σx\sigma_x. Eve then measures EE in any way she likes and records the outcome yy. The exercise is to show that the mutual information between the key and her outcome is at most the von Neumann entropy of ρ\rho, whatever her measurement.✦

Systems and States

A quantum system QQ is a physical system whose state space is a finite dimensional complex Hilbert space.✦ The composite system Q⊗RQ \otimes R of two quantum systems QQ and RR is the system whose state space is the tensor product of the state spaces of QQ and RR.✦ Alice and Bob’s system ABAB counts as a single quantum system, and the whole is AB⊗EAB \otimes E.

A state ω\omega of QQ is a positive operator of unit trace on the state space of QQ.✦ A pure state |ψ⟩|\psi\rangle of QQ is a unit vector in the state space of QQ✦, and the state it determines is the projector |ψ⟩⟨ψ||\psi\rangle\langle\psi| onto that vector.✦

The reduced states of a state ω\omega of the composite system Q⊗RQ \otimes R are its partial traces Tr⁡Rω\operatorname{Tr}_R\,\omega, a state of QQ✦, and Tr⁡Qω\operatorname{Tr}_Q\,\omega, a state of RR.✦ For a pure state |ψ⟩|\psi\rangle of AB⊗EAB \otimes E they are the state of Alice and Bob and the state of Eve, ρ=Tr⁡E|ψ⟩⟨ψ|,ρE=Tr⁡AB|ψ⟩⟨ψ|.\rho = \operatorname{Tr}_E\,|\psi\rangle\langle\psi|, \qquad \rho_E = \operatorname{Tr}_{AB}\,|\psi\rangle\langle\psi| .(1)

The mixture of states σx\sigma_x of QQ, indexed by xx in a finite set, with weights px≥0p_x \ge 0 that sum to one, is the state ∑xpxσx\sum_x p_x \sigma_x of QQ.✦ Averaged over the key, Eve’s state is such a mixture: ρE=∑xpxσx.\rho_E = \sum_x p_x\,\sigma_x .(2)

The von Neumann entropy of a state ω\omega of QQ is S(ω)=−tr⁡(ωlog⁡ω),S(\omega) = -\operatorname{tr}(\omega \log \omega),(3)✦ The logarithm is natural, so entropies are in nats.

Eve’s Measurement

A measurement on a quantum system QQ with a finite set of outcomes is a family of measurement operators MyM_y on the state space of QQ, one for each outcome yy, that satisfy the completeness relation ∑yMy†My=I.\sum_y M_y^\dagger M_y = I .(4)✦ The operators My†MyM_y^\dagger M_y form the positive operator valued measure (POVM) of the measurement✦, and on a state ω\omega of QQ the outcome yy occurs with the probability given by the Born rule, p(y)=Tr⁡(MyωMy†)=Tr⁡(My†Myω).p(y) = \operatorname{Tr}(M_y\,\omega\,M_y^\dagger) = \operatorname{Tr}(M_y^\dagger M_y\,\omega) .(5)✦

Eve measures EE with operators MyM_y, so key and outcome have the joint distribution p(x,y)=pxTr⁡(MyσxMy†),p(x,y) = p_x \operatorname{Tr}(M_y\,\sigma_x\,M_y^\dagger),(6) and H(K:E)H(K:E) is the Shannon mutual information between xx and yy under it.

The Claim

Theorem 1. Let |ψ⟩|\psi\rangle be a pure state of AB⊗EAB \otimes E, with reduced states ρ\rho and ρE\rho_E as in (1). Let σx\sigma_x be states of EE and pxp_x probabilities, indexed by a finite set, whose mixture is ρE\rho_E as in (2), and let {My}\{M_y\} be a measurement on EE with r≥1r \ge 1 outcomes. Then the mutual information H(K:E)H(K:E) of the joint distribution (6) is at most the von Neumann entropy of the state of Alice and Bob: H(K:E)≤S(ρ).H(K:E) \le S(\rho) .(7)✦

What Is Checked

The claim is stated over a pure state of the composite system AB⊗EAB \otimes E and its two reduced states (1), a mixture of states of EE, a measurement on EE with its outcome probabilities (5), and the von Neumann entropy (3).

The library proves that these constructions give states and a POVM: the projector |ψ⟩⟨ψ||\psi\rangle\langle\psi| onto a unit vector is a density operator, and so are the partial traces of a density operator and a convex combination of density operators with nonnegative weights summing to one; the operators My†MyM_y^\dagger M_y are positive and sum to the identity.