Quantum Technologies

Glossary

Terms, units and notation from the eight Quantum Technologies folios, written for physicists and engineers outside quantum information science.

01Notation, units and conventions

The shorthand the folios use without stopping: Dirac notation, operators, complexity notation, and the units in which loss, key and entanglement are counted.

Ket notation

Dirac's notation for quantum states: a ket is a column vector in Hilbert space, a bra its conjugate transpose, and their inner product. is an operator (outer product). For qubits, and label the computational basis, and is shorthand for .

In the folios: Quantum Foundations and Theory › The postulates; Quantum Information › States are density operators; Quantum Algorithms › Phase estimation and the QFT; Quantum AI › Variational quantum models; Building a Quantum Computer › The qubit and its coherence; Quantum Hardware Engineering › Reading out a qubitSee also Hilbert space, Probability amplitude, Born rule, Qubit, Tensor product

Hilbert space

A complex vector space with an inner product, complete with respect to the norm that inner product defines. In quantum theory every system is assigned one, and its pure states are unit rays in it. Its dimension can be finite (2 for a qubit or a spin-½) or infinite (a particle in space). Von Neumann made it the mathematical setting of the theory in 1932.

In the folio: Quantum Foundations and Theory › The postulatesSee also Ket notation, Ray, Tensor product

Ray

The set of all vectors that differ from a given unit vector only by an overall phase. A pure state is a ray rather than a single vector because the global phase has no observable consequence.

In the folio: Quantum Foundations and Theory › The postulatesSee also Global phase, Hilbert space

Projector

An operator with , which maps any state onto a subspace. Each outcome of an ideal measurement is associated with one projector; together they sum to the identity, so the outcome probabilities sum to one.

In the folio: Quantum Foundations and Theory › The postulatesSee also Observable, Born rule, Gleason's theorem

Tensor product

The way quantum state spaces combine: the joint space of systems A and B is , whose dimension is the product of the parts' dimensions. Many states in this space are not products of states of the parts, and this is the origin of entanglement. denotes parallel uses of a channel.

In the folios: Quantum Foundations and Theory › The postulates; Quantum Information › States are density operatorsSee also Entanglement, Hilbert space, Exchange symmetry, Partial trace, Regularisation

Global phase

A common factor multiplying the whole state. It cancels in every probability and expectation value and is therefore unobservable, which is why states are rays rather than vectors.

In the folio: Quantum Foundations and Theory › The postulatesSee also Relative phase, Ray

Relative phase

The phase difference between components of a superposition, for example in . Unlike a global phase it is physical: it sets the position of interference fringes and, as the folio puts it, carries all interference.

In the folio: Quantum Foundations and Theory › The postulatesSee also Global phase, Interference term

Commutator

The operator . Observables whose operators commute can share eigenstates and be sharp together; a non-zero commutator is the mathematical source of uncertainty relations and of Heisenberg-picture dynamics.

In the folio: Quantum Foundations and Theory › Uncertainty from non-commutationSee also Canonical commutation relation, Robertson uncertainty relation, Heisenberg picture

Pauli matrices;

The three Hermitian, unitary matrices , written , , in quantum information. Together with the identity they span all qubit operators. is a bit flip and a phase flip, and these are the corrections Bob applies in teleportation and the encodings Alice uses in superdense coding.

In the folios: Quantum Foundations and Theory › No-go theorems; Quantum Information › States are density operators; Building a Quantum Computer › Engineering the gatesSee also Peres–Mermin square, Tensor product, Bloch vector, Quantum teleportation, Superdense coding

Atomic mass unitu, Da

The unit of molecular mass, one twelfth of the mass of a carbon-12 atom; also called the dalton. A C molecule is 720 u, about kg.

In the folio: Quantum Foundations and Theory › Probing the quantum–classical boundarySee also Fullerene

Quantum of action

Planck's constant , introduced in 1900 to explain black-body radiation: energy is exchanged with radiation of frequency only in multiples of . The reduced constant sets the scale below which quantum effects matter.

(exact, SI 2019)

In the folio: Quantum Foundations and Theory › MilestonesSee also Light quanta, Classical limit

Bloch sphereBloch ball

A unit sphere on which every pure qubit state is a point, with at the north pole, at the south pole and superpositions in between; the polar angle sets the populations and the azimuth the relative phase. Single-qubit gates are rotations of the sphere, which makes it the natural picture for drive pulses and for dephasing (a spreading of ).

In the folios: Quantum Information › States are density operators; Building a Quantum Computer › The qubit and its coherenceSee also Bloch vector, Pure state, Mixed state, Depolarising channel, Ket notation

Bloch vector

The real three-vector that fixes a qubit's density operator through its Pauli components. Its length measures how pure the state is: for pure states and for mixed ones.

In the folio: Quantum Information › States are density operatorsSee also Bloch sphere, Pauli matrices, Purity

Positive semidefinite operator

A Hermitian operator with no negative eigenvalues, written . This guarantees that every measurement gives non-negative probabilities. The same symbol appears in the Choi condition for complete positivity.

In the folio: Quantum Information › States are density operatorsSee also Density operator, Choi matrix

Ebit

The unit of entanglement: one maximally entangled pair of qubits (one Bell pair). The rate plot gives the capacity of a link in "ebits or secret bits per channel use", meaning the number of Bell pairs or secret-key bits that can be produced per optical mode sent down the fibre.

In the folios: Quantum Information › Entanglement is a resource; Quantum Networking › Loss sets the rateSee also Bell pair, Resource inequality, Entanglement entropy, Secret bits per channel use, Repeaterless bound

Big-O notation

Asymptotic notation for how a cost grows with problem size, ignoring constant factors: means at most proportional to for large . The folio's cost panel warns that the ignored constants matter, because a fault-tolerant quantum operation can be about times slower than a classical one.

In the folio: Quantum Algorithms › Phase estimation and the QFTSee also Speed-up, Break-even point

Normalisation

"The norm of the Hamiltonian's description": for written as a sum of Pauli strings, typically . It plays the role of the block-encoding subnormalisation , so simulation cost grows as ; reducing (e.g. by tensor hypercontraction) was key to cheaper chemistry estimates.

In the folio: Quantum Algorithms › Simulating quantum systemsSee also Qubitisation, Subnormalisation, Block encoding

Bits per photon

Information carried per received photon, ; also called photon information efficiency. It is the figure of merit for power-starved links such as deep-space optical communication. At low photon numbers the Holevo limit grows without bound, as bits per photon. Homodyne reception saturates at and heterodyne at .

Holevo: for

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Holevo limit, Homodyne detection, Heterodyne detection, Pulse-position modulation

Alice, Bob and Eve

The conventional names in cryptography for the sender (Alice), the receiver (Bob) and the eavesdropper (Eve). In QKD security proofs Eve is allowed to control the channel completely, limited only by the laws of physics.

In the folios: Quantum Communications › QKD protocol families; Quantum Networking › What quantum networks enableSee also Trusted device, Quantum key distribution

DecibeldB

A logarithmic unit for loss or gain: a loss of dB means a fraction of the power survives. Thus 30 dB is a factor 1,000 and 120 dB a factor . Because fibre loss in dB adds linearly with length, the transmitted fraction falls exponentially.

In the folios: Quantum Communications › Links: fibre, air and space; Quantum Networking › Loss sets the rate; Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Transmissivity, Fibre attenuation, Cryogenic attenuation

C band

The conventional telecom window, about 1530–1565 nm, where silica fibre has its lowest loss (0.18 dB/km at 1550 nm on the folio). It is also where erbium-doped amplifiers work, which helps classical traffic but not single-photon qubits.

In the folio: Quantum Networking › Light carries the qubitsSee also O band, Telecom band, Quantum frequency conversion

O band

The "original" telecom window, about 1260–1360 nm, with near-zero chromatic dispersion and loss of about 0.33 dB/km at 1310 nm. It is a common target for converted photons from diamond nodes, for example 737 → 1350 nm.

In the folio: Quantum Networking › Light carries the qubitsSee also C band, Quantum frequency conversion

Telecom band

The near-infrared wavelengths used by optical-fibre communication, chiefly the O band near 1310 nm and the C band near 1550 nm, where fibre loss is lowest. Most matter qubits emit at shorter, much lossier wavelengths, so their photons must be converted to these bands for long links.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also C band, O band, Quantum frequency conversion

Secret bits per channel use

The key rate counted per optical mode or pulse sent, independent of clock speed. Multiplying by the source repetition rate (e.g. 10 GHz) gives bits per second. It is the natural unit for comparing protocols against the PLOB bound.

In the folio: Quantum Networking › Loss sets the rateSee also Ebit, Repeaterless bound

Expectation value

The mean outcome of measuring an observable on a state; it is the output of a variational model. On hardware it is estimated by averaging over many repeated runs (shots), so a small value or a small difference needs many shots to resolve.

In the folio: Quantum AI › Variational quantum modelsSee also Shot, Variational quantum model, Gradient variance

Shot

One run of a circuit ending in a measurement. Estimating a quantity to precision takes roughly shots, which is why exponentially small gradients mean "exponentially many measurements are needed to train".

In the folio: Quantum AI › Trainability: barren plateausSee also Expectation value, Barren plateau

MillikelvinmK

One thousandth of a kelvin. Superconducting and spin qubits run at about 10 mK. At that temperature a 5 GHz mode holds only about thermal photons, so it sits essentially in its ground state.

;

In the folio: Quantum Hardware Engineering › Why millikelvinSee also Thermal photon number, Qubit energy quantum

02Foundations and theory

The postulates, what measurement does, and the theorems that rule out whole classes of classical explanation.

Density operator

A positive operator of unit trace that describes a quantum state in general, including statistical mixtures and the state of a subsystem of a larger entangled system. A pure state corresponds to ; for a mixture is a weighted sum of such projectors. Its diagonal elements in a basis are probabilities; its off-diagonal elements (coherences) carry the capacity to interfere.

,

In the folios: Quantum Foundations and Theory › The postulates; Quantum Information › States are density operatorsSee also Populations and coherences, Reduced density matrix, Improper mixture, Pure state, Mixed state

Observable

A measurable quantity, represented by a self-adjoint operator on the Hilbert space. Its spectral decomposition lists the possible outcomes (the eigenvalues ) and the projectors onto the corresponding eigenspaces, which enter the Born rule.

In the folio: Quantum Foundations and Theory › The postulatesSee also Projector, Born rule, Incompatible observables

Born rule

The postulate that converts amplitudes into probabilities: the probability of outcome is the squared magnitude of the state's component in the corresponding eigenspace. Proposed by Born in 1926, it is the only link between the formalism and experimental frequencies. Gleason's theorem shows it is the only consistent rule in dimension three or more, but why it holds remains one of the folio's open problems.

(non-degenerate case)

In the folios: Quantum Foundations and Theory › The postulates; Quantum Algorithms › Where speed-ups come fromSee also Gleason's theorem, Probability amplitude, State update rule, Output readout

State update ruleLüders rule, "collapse"

The postulate that, after an ideal measurement gives outcome , the state is projected onto the matching eigenspace and renormalised. Unlike Schrödinger evolution it is non-linear, irreversible and random, which is the "second kind of change" whose relation to ordinary dynamics constitutes the measurement problem.

In the folio: Quantum Foundations and Theory › The postulatesSee also Measurement problem, Born rule, Unitary evolution

Probability amplitudeamplitude

A complex number, such as or a wavefunction value , whose squared magnitude gives a probability. Amplitudes for indistinguishable alternatives add before squaring, which is the origin of all quantum interference; probabilities are never fixed by amplitudes alone but by .

In the folios: Quantum Foundations and Theory › Superposition and interference; Quantum Algorithms › Where speed-ups come fromSee also Superposition principle, Interference term, Born rule, Quantum interference, Ket notation

Superposition principle

Any linear combination of allowed states is itself an allowed state, because the Schrödinger equation is linear. A superposition is not a statistical mixture of its components: its terms can interfere, and the cross term "has no classical counterpart".

In the folio: Quantum Foundations and Theory › Superposition and interferenceSee also Probability amplitude, Interference term, Density operator

Interference term

The cross term that appears when two amplitudes are added and then squared. It produces the fringes in a double-slit pattern and is erased by any record, however inaccessible, of which path was taken.

In the folio: Quantum Foundations and Theory › Superposition and interferenceSee also Which-path information, Fringe visibility, Decoherence

De Broglie wavelength

The wavelength associated with a particle of momentum , proposed by de Broglie in 1924. In a double slit of spacing observed at distance it sets the fringe spacing ; for heavy molecules it is far smaller than the molecule itself, which makes matter-wave interferometry so demanding.

,

In the folio: Quantum Foundations and Theory › Superposition and interferenceSee also Matter-wave interferometry, Thermal de Broglie wavelength

Which-path information

Any record, in a detector, the environment or the particle's own internal state, that distinguishes which alternative (slit, arm, branch) a quantum object took. Once such information exists, even if nobody reads it, the corresponding interference disappears.

In the folio: Quantum Foundations and Theory › Superposition and interferenceSee also Path distinguishability, Duality relation, Decoherence

Fringe visibility

The contrast of an interference pattern, , between 0 (no fringes) and 1 (perfect fringes). It is the standard measure of how much coherence survives in an interferometer.

In the folio: Quantum Foundations and Theory › Superposition and interferenceSee also Duality relation, Path distinguishability

Path distinguishability

A number between 0 and 1 measuring how well the path taken in an interferometer could in principle be inferred from the available which-path record; means the path is fully known.

In the folio: Quantum Foundations and Theory › Superposition and interferenceSee also Duality relation, Which-path information, Fringe visibility

Duality relationEnglert–Greenberger,

The quantitative form of wave–particle complementarity: path distinguishability and fringe visibility cannot both be large. The folio cites Englert (1996); equality holds for pure states. It replaces the qualitative "either wave or particle" with a trade-off that can be measured.

In the folio: Quantum Foundations and Theory › Superposition and interferenceSee also Complementarity, Path distinguishability, Fringe visibility

Complementarity

Bohr's principle that some properties, such as wave-like interference and particle-like path, are revealed only by mutually exclusive experimental arrangements. The duality relation turns it into a quantitative statement.

In the folio: Quantum Foundations and Theory › Superposition and interferenceSee also Duality relation, Copenhagen interpretation

Canonical commutation relation

The defining relation between position and momentum operators along the same axis. It implies that position and momentum wavefunctions are Fourier transforms of each other and yields the Heisenberg bound .

In the folio: Quantum Foundations and Theory › Uncertainty from non-commutationSee also Commutator, Robertson uncertainty relation, Minimum-uncertainty state

Robertson uncertainty relation

The general uncertainty relation for any two observables, where is the standard deviation of outcomes in a given state. It is a property of the state itself, not of clumsy measurement: it bounds the spreads of separate, ideal measurements on identically prepared systems.

In the folio: Quantum Foundations and Theory › Uncertainty from non-commutationSee also Commutator, Incompatible observables, Error–disturbance relation

Incompatible observables

Observables whose operators do not commute and so have no complete set of common eigenstates. They "cannot both be sharp in any state", and measuring one in general randomises the other.

In the folio: Quantum Foundations and Theory › Uncertainty from non-commutationSee also Commutator, Robertson uncertainty relation, Complementarity

Minimum-uncertainty stateGaussian wave packet

A state that saturates the bound . For position and momentum it is a Gaussian wave packet, whose Fourier transform is again Gaussian; squeezing it in necessarily broadens it in .

In the folio: Quantum Foundations and Theory › Uncertainty from non-commutationSee also Canonical commutation relation, Robertson uncertainty relation

Energy–time uncertainty relationMandelstam–Tamm

A relation of the form in which time is a parameter, not an operator, so it is not a Robertson relation. In the Mandelstam–Tamm version is the time a state needs to change appreciably (for instance to evolve to an orthogonal state), given its energy spread .

In the folio: Quantum Foundations and Theory › Uncertainty from non-commutationSee also Robertson uncertainty relation, Unitary evolution

Error–disturbance relationOzawa

A distinct, measurement-based relation (Ozawa 2003) bounding how accurately one observable can be measured against how much that measurement disturbs an incompatible one. It corrects the naive "Heisenberg microscope" form , which can be violated.

In the folio: Quantum Foundations and Theory › Uncertainty from non-commutationSee also Robertson uncertainty relation, Incompatible observables

Entropic uncertainty relationMaassen–Uffink

An uncertainty relation phrased with Shannon entropies of the outcome distributions of two measurements instead of standard deviations (Maassen–Uffink 1988). Here is the largest squared overlap between eigenvectors of the two observables; for two mutually unbiased qubit bases , so the entropies must total at least one bit. It is the form used in security proofs for quantum cryptography.

,

In the folio: Quantum Foundations and Theory › Uncertainty from non-commutationSee also Robertson uncertainty relation, Incompatible observables

Unitary evolution

The time evolution generated by the Schrödinger equation for a time-independent Hamiltonian . A unitary operator preserves inner products, so probabilities are conserved and the evolution is reversible and linear. This is the "first kind of change" in the postulates.

In the folio: Quantum Foundations and Theory › Dynamics: three equivalent picturesSee also Schrödinger picture, State update rule, Measurement problem

Schrödinger picture

The formulation in which states evolve in time and operators representing observables are fixed. It is the most common starting point for wave mechanics and for quantum circuits.

In the folio: Quantum Foundations and Theory › Dynamics: three equivalent picturesSee also Heisenberg picture, Path integral, Unitary evolution

Heisenberg picture

The formulation in which states are fixed and operators carry the time dependence, . It gives every prediction the Schrödinger picture does, and makes the analogy with classical equations of motion explicit.

(no explicit time dependence)

In the folio: Quantum Foundations and Theory › Dynamics: three equivalent picturesSee also Schrödinger picture, Ehrenfest theorem, Commutator

Ehrenfest theorem

The statement that expectation values obey equations resembling Newton's laws: "Newton's law for averages". The match with classical motion is exact only when , that is, when the wave packet is narrow on the scale over which the force varies.

In the folio: Quantum Foundations and Theory › Dynamics: three equivalent picturesSee also Heisenberg picture, Classical limit

Path integralFeynman,

Feynman's formulation (1948), in which the amplitude to go from to is a sum over every possible path, each weighted by a phase equal to its classical action in units of . It is equivalent to the Schrödinger and Heisenberg pictures and is the basis of quantum field theory and perturbation theory.

In the folio: Quantum Foundations and Theory › Dynamics: three equivalent picturesSee also Propagator, Stationary-phase approximation, Classical limit

Propagator

The amplitude for a particle at to be found at a given time later; equivalently the position-space matrix element of the evolution operator, . Convolving it with an initial wavefunction gives the wavefunction at the later time.

In the folio: Quantum Foundations and Theory › Dynamics: three equivalent picturesSee also Path integral, Unitary evolution

Stationary-phase approximation

An asymptotic method for integrals of rapidly oscillating phases: contributions cancel except near points where the phase is stationary. Applied to the path integral when the action is large compared with , it leaves only the neighbourhood of the classical path, where .

(classical path)

In the folio: Quantum Foundations and Theory › Dynamics: three equivalent picturesSee also Classical limit, Path integral

Classical limit

The regime in which actions are large compared with , so phases of neighbouring paths cancel except near the path of stationary action and classical mechanics emerges as a stationary-phase approximation. This is why sets the scale of quantum effects; decoherence explains why interference between macroscopically different alternatives is in practice not seen.

In the folio: Quantum Foundations and Theory › Dynamics: three equivalent picturesSee also Stationary-phase approximation, Ehrenfest theorem, Decoherence

Irreducible representationWigner classification

A representation of a symmetry group that has no smaller invariant subspace. Wigner (1939) showed that elementary particles correspond to irreducible unitary representations of the Poincaré group (the symmetry group of special-relativistic spacetime), which are labelled by mass and spin.

In the folio: Quantum Foundations and Theory › Spin, symmetry, identical particlesSee also Spinor, Spin–statistics theorem

Identical particles

Particles of the same species, which in quantum theory are truly indistinguishable: no measurement can tell which is "particle 1". Consequently the many-particle state must be symmetric or antisymmetric under exchange, with consequences from Bose–Einstein condensation to the periodic table.

In the folio: Quantum Foundations and Theory › Spin, symmetry, identical particlesSee also Exchange symmetry, Boson, Fermion

Exchange symmetry

The requirement that swapping two identical particles leaves the wavefunction unchanged (bosons, sign ) or flips its sign (fermions, sign ). In the composition postulate this is why states of identical particles are "(anti)symmetrised".

In the folio: Quantum Foundations and Theory › Spin, symmetry, identical particlesSee also Boson, Fermion, Bunching

Boson

A particle of integer spin (0, 1, 2, …), whose many-particle wavefunction is symmetric under exchange. Photons, gluons, the Higgs boson and composite particles such as He atoms are bosons; any number can occupy the same state.

In the folio: Quantum Foundations and Theory › Spin, symmetry, identical particlesSee also Fermion, Exchange symmetry, Bunching

Fermion

A particle of half-integer spin (½, 3/2, …), whose many-particle wavefunction is antisymmetric under exchange. Electrons, protons, neutrons and quarks are fermions; antisymmetry gives a node where two fermions would coincide and hence the exclusion principle.

In the folio: Quantum Foundations and Theory › Spin, symmetry, identical particlesSee also Boson, Pauli exclusion principle, Exchange symmetry

Bunching

The enhanced probability of finding identical bosons close together, compared with distinguishable particles, arising from constructive interference of exchange amplitudes. Fermions show the opposite, a reduced probability (a node on the diagonal of the two-particle density).

In the folio: Quantum Foundations and Theory › Spin, symmetry, identical particlesSee also Boson, Fermion, Exchange symmetry

Spin–statistics theorem

The theorem that particles of integer spin are bosons and those of half-integer spin are fermions. It cannot be derived in non-relativistic quantum mechanics, where it is put in by hand; it was proved in relativistic quantum field theory (Pauli 1940).

In the folio: Quantum Foundations and Theory › Spin, symmetry, identical particlesSee also Boson, Fermion, Irreducible representation

Spinor

The kind of object that describes a spin-½ state. Under a full rotation a spinor changes sign, returning to itself only after . The sign is invisible for a lone particle but appears as a relative phase in interference, and was seen in neutron interferometry in 1975.

for spin ½

In the folio: Quantum Foundations and Theory › Spin, symmetry, identical particlesSee also Neutron interferometry, Relative phase

Pauli exclusion principle

No two identical fermions can occupy the same single-particle quantum state, a direct consequence of antisymmetry. It underlies atomic shell structure, chemistry, the rigidity of solids and the stability of matter.

In the folio: Quantum Foundations and Theory › Spin, symmetry, identical particlesSee also Fermion, Spin–statistics theorem

Measurement problem

The conflict between the two kinds of change in the postulates. Treated quantum mechanically, a measurement only entangles system and apparatus, so linear dynamics yields a superposition of records, never one definite outcome; yet experiments always show a single result. Every interpretation in the folio is a different response to it.

In the folio: Quantum Foundations and Theory › The measurement problemSee also Pre-measurement, Maudlin's trilemma, Decoherence

Pre-measurementvon Neumann measurement

Von Neumann's model of measurement as an ordinary unitary interaction that correlates a pointer state of the apparatus with each eigenstate of the measured system. The result is an entangled state of system and apparatus, not a definite reading, which is the starting point of the measurement problem.

In the folio: Quantum Foundations and Theory › The measurement problemSee also Measurement problem, Entanglement, Pointer state

Entanglement

A correlation between quantum systems that has no classical counterpart. A pure joint state is entangled when it is not a product (a product state). A mixed state is entangled when it is not separable. In quantum information it is treated as a resource, counted in ebits, that LOCC cannot create but can consume to teleport qubits, double classical capacity or distil secret keys.

In the folios: Quantum Foundations and Theory › The measurement problem; Quantum Information › Entanglement is a resourceSee also Tensor product, Bell's theorem, Decoherence, Schmidt decomposition, Ebit

Wigner's friend

Wigner's thought experiment in which a friend measures a system inside a closed laboratory while Wigner, outside, describes the whole laboratory, friend included, as being in superposition. It sharpens the measurement problem by asking whose description is correct.

In the folio: Quantum Foundations and Theory › The measurement problemSee also Frauchiger–Renner theorem, Local friendliness, Measurement problem

Frauchiger–Renner theorem

A 2018 extension of Wigner's friend with two friends and two outside observers. It shows that agents who all use quantum theory and reason about each other's conclusions can be forced into contradiction unless one natural assumption (universal validity of quantum theory, consistency between agents, or single outcomes) is dropped.

In the folio: Quantum Foundations and Theory › The measurement problemSee also Wigner's friend, Local friendliness

Local friendliness

A set of assumptions (the friends' observations are absolute events, plus a locality condition and free choice of settings) that implies inequalities on Wigner's-friend-type experiments, stronger than Bell's. Experiments reported in 2020, with photonic "friends", violated these inequalities, showing that one assumption must fail.

In the folio: Quantum Foundations and Theory › The measurement problemSee also Wigner's friend, Frauchiger–Renner theorem, Bell's theorem

Maudlin's trilemma

Maudlin's (1995) formulation of the measurement problem: the claims " is complete", " always evolves linearly" and "each measurement has one definite outcome" are mutually inconsistent, so at most two can hold. Many worlds keeps the first two, collapse models keep completeness and definite outcomes, and pilot wave and QBism keep linearity and definite outcomes.

In the folio: Quantum Foundations and Theory › The measurement problemSee also Measurement problem, Many-worlds interpretation, Objective collapse models, Pilot-wave theory

Decoherence

The rapid loss of observable interference in a system that becomes entangled with, and leaves records in, its environment. Tracing out the environment suppresses the off-diagonal elements of the system's density matrix between distinguishable alternatives. It is the main practical obstacle to building quantum computers and the main reason macroscopic objects look classical, but it does not by itself explain why one outcome occurs.

In the folios: Quantum Foundations and Theory › Decoherence; Building a Quantum Computer › The qubit and its coherenceSee also Partial trace, Populations and coherences, Decoherence time, Improper mixture, Relaxation time

Partial trace

The operation that discards subsystem B and returns the reduced state of A, which is all that measurements on A alone can reveal. When the joint state is entangled, the reduced state is mixed even though the whole is pure. In the Stinespring picture, "traced out" means the environment is discarded in this way.

In the folios: Quantum Foundations and Theory › Decoherence; Quantum Information › States are density operatorsSee also Reduced density matrix, Density operator, Tensor product, Mixed state, Stinespring dilation

Reduced density matrix

The density operator of a subsystem, obtained by the partial trace of the joint state. If the subsystem is entangled with something else, its reduced state is mixed even though the global state is pure.

In the folio: Quantum Foundations and Theory › DecoherenceSee also Partial trace, Improper mixture, Density operator

Populations and coherences

The diagonal entries of a density matrix in a chosen basis (populations: the occupation probabilities) and its off-diagonal entries (coherences: what distinguishes a superposition from a classical mixture). For a qubit, coherences are the and components of the Bloch vector. Dephasing erases them while keeping the populations.

In the folios: Quantum Foundations and Theory › Decoherence; Quantum Information › Channels are CPTP mapsSee also Decoherence, Density operator, Fringe visibility, Dephasing channel, Bloch vector

Decoherence time

The time over which the coherences between two alternatives decay. For a particle of mass in a superposition of positions separated by , in contact with an environment at temperature , it is shorter than the relaxation time by . For 1 g at room temperature and cm, (Zurek), which is why decoherence acts at "extraordinary speed".

In the folio: Quantum Foundations and Theory › DecoherenceSee also Relaxation time, Thermal de Broglie wavelength, Decoherence

Relaxation time

In Zurek's estimate of the decoherence time, the time scale on which the environment damps the system's motion classically (the inverse of the friction or damping rate). Decoherence of macroscopic superpositions is enormously faster than this relaxation.

In the folios: Quantum Foundations and Theory › Decoherence; Building a Quantum Computer › The qubit and its coherence; Quantum Hardware Engineering › Materials and fabricationSee also Decoherence time, Coherence time, Pure dephasing time, Decoherence, Two-level-system defect

Thermal de Broglie wavelength

A de Broglie wavelength corresponding to thermal momentum. In Zurek's decoherence estimate it is defined as ; other fields often use , so factors of order unity depend on convention. Superpositions much wider than decohere almost instantly.

(Zurek's convention)

In the folio: Quantum Foundations and Theory › DecoherenceSee also Decoherence time, De Broglie wavelength

Pointer state

A state of a system (originally of a measuring apparatus's pointer) that is robust under its interaction with the environment, so it is recorded without being disturbed. For large objects, localised position states are pointer states, which is why we see objects in definite places.

In the folio: Quantum Foundations and Theory › DecoherenceSee also Einselection, Quantum Darwinism, Pre-measurement

Einselectionenvironment-induced superselection

Zurek's term for the process by which the system–environment coupling picks out a preferred set of pointer states: superpositions of pointer states decohere quickly, while pointer states themselves persist.

In the folio: Quantum Foundations and Theory › DecoherenceSee also Pointer state, Decoherence, Quantum Darwinism

Quantum Darwinism

Zurek's account of objectivity: information about pointer states is copied redundantly into many fragments of the environment (for example scattered photons), so many observers can independently read the same result without disturbing the system and therefore agree.

In the folio: Quantum Foundations and Theory › DecoherenceSee also Einselection, Pointer state

Improper mixture

A mixed reduced state that arises from tracing out part of an entangled pure state, as opposed to a proper mixture, which describes ignorance of which pure state was actually prepared. The two give identical local statistics, but for an improper mixture there is no fact about which component is "really" there; this is why decoherence explains why interference is unobservable, not why one outcome occurs.

In the folio: Quantum Foundations and Theory › DecoherenceSee also Reduced density matrix, Decoherence, Measurement problem

Interpretation of quantum mechanics

An account of what the formalism says about reality, and in particular of how it answers the measurement problem. Each gives up something different. All but objective collapse models reproduce the standard predictions exactly, so they cannot be told apart by present experiments.

In the folio: Quantum Foundations and Theory › InterpretationsSee also Copenhagen interpretation, Many-worlds interpretation, Pilot-wave theory, Objective collapse models

Copenhagen interpretation

The family of views associated with Bohr and Heisenberg from 1927 on, in which the wavefunction is a tool for predicting the results of classically described experiments. There is one outcome, at measurement, and measurement is treated as primitive rather than analysed. It makes no new predictions.

In the folio: Quantum Foundations and Theory › InterpretationsSee also Complementarity, Measurement problem, Interpretation of quantum mechanics

Many-worlds interpretationEverett, relative-state

Everett's 1957 proposal that the wavefunction is physically real and complete and always evolves unitarily. Every outcome occurs, each in its own decohered branch, so the measurement problem is resolved by denying a single outcome. It makes no new predictions; deriving the Born rule within it is a central debate.

In the folio: Quantum Foundations and Theory › InterpretationsSee also Decoherence, Maudlin's trilemma, Born rule

Pilot-wave theoryde Broglie–Bohm, Bohmian mechanics

A hidden-variable theory (de Broglie 1927, Bohm 1952) in which particles always have definite positions, guided by a real wavefunction that evolves by the Schrödinger equation. The outcome is fixed by the positions, and the guidance is explicitly non-local. When positions are distributed according to (quantum equilibrium) it reproduces every standard prediction.

In the folio: Quantum Foundations and Theory › InterpretationsSee also Quantum equilibrium, Hidden variables, Bell nonlocality

Quantum equilibrium

In pilot-wave theory, the condition that particle positions are distributed as . It is preserved by the dynamics and guarantees agreement with the Born rule; departures from it ("quantum non-equilibrium") would give new predictions, but none have been observed.

In the folio: Quantum Foundations and Theory › InterpretationsSee also Pilot-wave theory, Born rule

Hidden variables

Additional variables, beyond the quantum state, that would fix or influence measurement outcomes, so that quantum probabilities reflect ignorance of them. The no-go theorems of Bell, Kochen–Specker, PBR and Leggett–Garg each rule out whole classes of such models.

In the folio: Quantum Foundations and Theory › No-go theoremsSee also Bell's theorem, Kochen–Specker theorem, Psi-ontic and psi-epistemic models

Bell nonlocality

The property of some entangled states that their measurement statistics cannot be reproduced by any local hidden-variable model. It is shown experimentally by violating a Bell inequality such as CHSH. Nonlocality does not allow signalling, but it can certify randomness and security without trusting the devices.

In the folios: Quantum Foundations and Theory › No-go theorems; Quantum Information › Bell nonlocalitySee also Bell's theorem, Pilot-wave theory, EPR paradox, CHSH inequality, Local hidden-variable model

Objective collapse models

Theories that modify the Schrödinger equation with small non-linear, stochastic terms so that superpositions collapse spontaneously, negligibly for microscopic systems but rapidly for macroscopic ones. The wavefunction is real and there is one outcome, by stochastic collapse. They are the only interpretations in the table with new predictions: spontaneous heating and loss of large-scale interference.

In the folio: Quantum Foundations and Theory › InterpretationsSee also GRW model, Continuous spontaneous localisation, Diósi–Penrose model

GRW modelGhirardi–Rimini–Weber

The first objective collapse model (Ghirardi, Rimini and Weber 1986). Each particle's wavefunction suffers, at random times, a spontaneous localisation to a width of about m; the rate per particle is tiny (originally about ), but in a body of particles collapse happens almost at once.

In the folio: Quantum Foundations and Theory › InterpretationsSee also Objective collapse models, Continuous spontaneous localisation

Continuous spontaneous localisationCSL

A refinement of GRW in which collapse acts continuously through a noise field coupled to mass density, with two parameters: a collapse rate and a correlation length . Matter-wave interferometry, mechanical cat states, heating measurements and gravitational-wave detectors all bound these parameters.

In the folio: Quantum Foundations and Theory › InterpretationsSee also GRW model, Objective collapse models, Matter-wave interferometry

Diósi–Penrose model

A collapse model in which gravity triggers collapse: a superposition of different mass distributions decays in a time of order , where is the gravitational self-energy of the difference between them. The folio reports that an underground X-ray search excluded its parameter-free version (2020), by looking for the radiation its collapse noise would cause.

In the folio: Quantum Foundations and Theory › InterpretationsSee also Objective collapse models, Gravity-induced entanglement

QBismquantum Bayesianism

An interpretation (Caves, Fuchs and Schack 2002) in which the wavefunction represents an agent's degrees of belief about future experiences, not a physical object. Each agent has one outcome in their own experience, and collapse is simply updating belief. It makes no new predictions.

In the folio: Quantum Foundations and Theory › InterpretationsSee also Interpretation of quantum mechanics, Relational quantum mechanics

Relational quantum mechanics

Rovelli's 1996 interpretation in which states and measured values are relative to another physical system, not absolute. Outcomes are relative to each observing system, so the measurement problem is resolved by making facts observer-relative. It makes no new predictions.

In the folio: Quantum Foundations and Theory › InterpretationsSee also QBism, Wigner's friend

Bell's theorem

The 1964 theorem that no local hidden-variable theory can reproduce all the correlations of entangled quantum systems. It turns the EPR debate into a testable inequality; violations have been observed, without loopholes since 2015.

In the folios: Quantum Foundations and Theory › No-go theorems; Quantum Information › MilestonesSee also CHSH inequality, Local hidden-variable model, Loophole-free Bell test, EPR paradox, Bell nonlocality

Local hidden-variable modelLHV

A classical explanation of correlations in which each outcome is fixed by the local measurement setting and shared pre-existing variables, with no influence from the distant setting. All such models satisfy in the CHSH test, and the best one gives a correlation that is linear in the angle.

In the folios: Quantum Foundations and Theory › No-go theorems; Quantum Information › Bell nonlocalitySee also Bell's theorem, Hidden variables, CHSH inequality

CHSH inequality

The Bell inequality of Clauser, Horne, Shimony and Holt (1969), built from two measurement settings per side. is the average product of the outcomes for settings and . Local models obey , quantum mechanics reaches up to , and the algebraic maximum is 4.

(local), (quantum)

In the folios: Quantum Foundations and Theory › No-go theorems; Quantum Information › Bell nonlocalitySee also Tsirelson bound, Bell's theorem, Local hidden-variable model, Singlet

Tsirelson bound

The maximum value of the CHSH quantity that quantum mechanics allows, , reached with maximally entangled states and optimal settings. That nature stops there, rather than at the algebraic maximum of 4, bears on the open question of which principles single out quantum theory.

In the folios: Quantum Foundations and Theory › No-go theorems; Quantum Information › Bell nonlocalitySee also CHSH inequality, Singlet

Kochen–Specker theorem

The 1967 theorem that, in Hilbert spaces of dimension three or more, it is impossible to assign definite values to all observables independently of which other compatible observables are measured with them. Hidden variables must therefore be contextual.

In the folio: Quantum Foundations and Theory › No-go theoremsSee also Contextuality, Peres–Mermin square, Gleason's theorem

Contextuality

The property that the value a hidden-variable model assigns to an observable must depend on the measurement context, that is, on which compatible observables are measured alongside it. Quantum theory is contextual by the Kochen–Specker theorem; contextuality is also considered a resource for quantum computational advantage.

In the folio: Quantum Foundations and Theory › No-go theoremsSee also Kochen–Specker theorem, Peres–Mermin square

Peres–Mermin square

A array of two-qubit Pauli observables in which the three operators in each row and column commute. The rows each multiply to and the first two columns to , but the last column multiplies to , so no assignment of values can satisfy all six product constraints: a simple proof of the Kochen–Specker theorem.

In the folio: Quantum Foundations and Theory › No-go theoremsSee also Kochen–Specker theorem, Pauli matrices, Contextuality

Gleason's theorem

The 1957 theorem that in Hilbert spaces of dimension three or more, any assignment of probabilities to projectors that is non-contextual (adds to one over every orthonormal frame regardless of the frame) must take the form for some density operator. The Born rule is thus forced; the Kochen–Specker theorem follows as a corollary.

In the folio: Quantum Foundations and Theory › No-go theoremsSee also Born rule, Kochen–Specker theorem, Projector

PBR theoremPusey–Barrett–Rudolph

The 2012 theorem that, if independently prepared systems have independent hidden states, distinct pure quantum states cannot share hidden states. Within such models the wavefunction must be ontic (real) rather than merely knowledge.

In the folio: Quantum Foundations and Theory › No-go theoremsSee also Psi-ontic and psi-epistemic models, Hidden variables

Psi-ontic and psi-epistemic models-ontic, -epistemic

Two classes of hidden-variable (ontological) models. In a -ontic model each hidden state determines the wavefunction, so the distributions over for distinct states never overlap; in a -epistemic model they can overlap, so is partly a state of knowledge. The PBR theorem rules out the epistemic class under its preparation-independence assumption.

In the folio: Quantum Foundations and Theory › No-go theoremsSee also PBR theorem, Hidden variables

Leggett–Garg inequality

A Bell-like inequality for correlations of one system at different times (Leggett and Garg 1985), with the correlation between measurements at times and . Macrorealism requires ; a precessing qubit, with between successive times, reaches 1.5 at .

In the folio: Quantum Foundations and Theory › No-go theoremsSee also Macrorealism, Bell's theorem

Macrorealism

The view, formalised by Leggett and Garg, that a macroscopic system with two or more distinguishable states is always in one of them, and that this can be checked without disturbing its later behaviour (non-invasive measurability). It bounds correlations in time, .

In the folio: Quantum Foundations and Theory › No-go theoremsSee also Leggett–Garg inequality, Schrödinger cat state

Matter-wave interferometry

Interference experiments with massive particles, from electrons (diffraction, 1927) and neutrons (1974) to C fullerenes (1999) and molecules of more than 25,000 u and about 2,000 atoms (2019). Each heavier object tests whether superposition survives, and together they bound collapse models.

In the folio: Quantum Foundations and Theory › Probing the quantum–classical boundarySee also De Broglie wavelength, Neutron interferometry, Continuous spontaneous localisation

FullereneC

A closed carbon cage molecule; C ("buckyball") has 60 atoms and a mass of 720 u. Its interference in 1999 was the first for a molecule large and hot enough to emit thermal radiation, a landmark for testing decoherence.

In the folio: Quantum Foundations and Theory › Probing the quantum–classical boundarySee also Matter-wave interferometry, Atomic mass unit

Neutron interferometry

Interferometry in which a neutron beam is split and recombined, typically by Bragg diffraction in a single silicon crystal, first done in 1974. In 1975 it showed that a rotation multiplies a spin-½ state by ; later it displayed the effect of gravity on a quantum phase.

In the folio: Quantum Foundations and Theory › Probing the quantum–classical boundarySee also Spinor, Matter-wave interferometry

Schrödinger cat state

A superposition of two macroscopically or mesoscopically distinct states, named after Schrödinger's 1935 thought experiment with a cat. In 2023 a cat state of motion was prepared in a 16 µg oscillator (Bild et al.), the heaviest object on the folio's mass scale.

In the folio: Quantum Foundations and Theory › Probing the quantum–classical boundarySee also Macrorealism, Objective collapse models, Measurement problem

Gravity-induced entanglement

A proposed test of whether gravity obeys quantum theory: if two masses, each in a spatial superposition, become entangled solely through their gravitational interaction, gravity must be able to carry quantum information. The open question "can it entangle two masses?" has not yet been answered experimentally.

In the folio: Quantum Foundations and Theory › Open problemsSee also Entanglement, Diósi–Penrose model

Light quanta

Einstein's 1905 hypothesis that light itself consists of quanta of energy , later called photons. It explained the photoelectric effect and was the first claim that the quantum is a property of radiation, not only of its emission.

In the folio: Quantum Foundations and Theory › MilestonesSee also Quantum of action

Matrix mechanics

Heisenberg's 1925 formulation of quantum mechanics in terms of arrays (matrices) of transition quantities, developed with Born and Jordan. It was soon shown to be equivalent to Schrödinger's 1926 wave mechanics and survives as the Heisenberg picture.

In the folio: Quantum Foundations and Theory › MilestonesSee also Heisenberg picture, Schrödinger picture

EPR paradoxEinstein–Podolsky–Rosen

The 1935 argument by Einstein, Podolsky and Rosen that the perfect correlations of an entangled pair imply quantum mechanics is incomplete. In the same year Schrödinger named the phenomenon entanglement. Bell's theorem later showed that the "elements of reality" EPR sought cannot be local.

In the folios: Quantum Foundations and Theory › Milestones; Quantum Information › MilestonesSee also Bell's theorem, Entanglement, Bell nonlocality

03Quantum information

States, entanglement, entropy and channels: what quantum systems can store, send and hide.

Pure state

A state of maximal knowledge, described by a single state vector , or equivalently by the rank-one projector . For a qubit, pure states lie on the surface of the Bloch ball () and have purity 1.

In the folio: Quantum Information › States are density operatorsSee also Mixed state, Density operator, Bloch sphere, Purity

Mixed state

A state that cannot be written as a single state vector. It arises from classical ignorance about which pure state was prepared, or as the reduced state of one part of an entangled system. For a qubit, mixed states lie strictly inside the Bloch ball () and have purity below 1.

In the folio: Quantum Information › States are density operatorsSee also Pure state, Maximally mixed state, Partial trace, Purity

Qubit

A quantum two-level system used as the unit of quantum information; unlike a bit it can be in any superposition of its two basis states and . Every hardware platform must isolate two levels from a larger spectrum, drive them coherently, couple pairs and read them out while keeping the environment from learning the state.

In the folios: Quantum Information › States are density operators; Quantum Algorithms › Phase estimation and the QFT; Quantum AI › Variational quantum models; Building a Quantum Computer › The qubit and its coherenceSee also Bloch sphere, Ebit, Schumacher compression, Ket notation, Logical qubit

Maximally mixed state

The qubit state ( is the identity), at the centre of the Bloch ball. It gives completely random outcomes for every measurement and has the maximal entropy of 1 bit. Each half of a Bell pair, viewed alone, is maximally mixed, which is why Bob learns nothing in teleportation until the classical bits arrive.

In the folio: Quantum Information › States are density operatorsSee also Bloch sphere, Von Neumann entropy, Quantum teleportation

Purity

A scalar measure of how mixed a state is. It equals 1 for pure states and for the maximally mixed state in dimension . For a qubit it depends only on the length of the Bloch vector.

In the folio: Quantum Information › States are density operatorsSee also Bloch vector, Pure state, Mixed state

POVMpositive operator-valued measure

The most general description of a quantum measurement: a set of positive operators summing to the identity, with outcome probabilities given by the Born rule. It includes projective (von Neumann) measurements as a special case. It also covers noisy detectors and measurements with more outcomes than the system has dimensions.

In the folio: Quantum Information › States are density operatorsSee also Density operator, Accessible information

Ensemble

A collection of states prepared with probabilities , written . Different ensembles can average to the same density operator (for example equal mixtures of or of both give ), and then no measurement can tell them apart. Ensembles are also how classical messages are encoded into quantum states, which the Holevo quantity bounds.

In the folio: Quantum Information › States are density operatorsSee also Density operator, Holevo quantity

Schmidt decomposition

A canonical form of any pure bipartite state as a single sum over paired orthonormal bases, with non-negative weights. The state is a product exactly when only one Schmidt coefficient is non-zero. The coefficients alone fix how much entanglement it holds.

In the folio: Quantum Information › Entanglement is a resourceSee also Schmidt coefficients, Entanglement entropy, Entanglement

Schmidt coefficients

The weights (summing to 1) in the Schmidt decomposition. They are also the eigenvalues of either reduced state. For two qubits, or gives a product state and gives a Bell state with 1 ebit.

In the folio: Quantum Information › Entanglement is a resourceSee also Schmidt decomposition, Entanglement entropy

Entanglement entropy

The unique measure of entanglement for pure bipartite states: the von Neumann entropy of either reduced state. It counts how many Bell pairs the state is worth under LOCC in the many-copy limit. For two qubits it reaches its maximum of 1 ebit at the Bell states.

In the folio: Quantum Information › Entanglement is a resourceSee also Schmidt coefficients, Ebit, Von Neumann entropy, Entanglement concentration and dilution

Bell pair, Bell state

Two qubits in one of the four maximally entangled Bell states. A Bell pair is the basic "service" a quantum network delivers. It is used up when it is consumed, for example when it is measured for a key bit or used to teleport a qubit, so the network must keep generating fresh pairs.

,

In the folios: Quantum Information › Entanglement is a resource; Quantum Networking › Why quantum networks differSee also Ebit, Singlet, Bell measurement, Fidelity

Singlet

The antisymmetric Bell state , the spin-0 state of two spin-½ particles. Measured along directions at angle , its spins are anticorrelated with correlation . With optimal measurement angles this reaches the Tsirelson bound.

In the folio: Quantum Information › Bell nonlocalitySee also Bell pair, CHSH inequality, Tsirelson bound

LOCClocal operations and classical communication

The class of protocols in which separated parties act only on their own systems and talk over classical channels. LOCC cannot create entanglement, so entanglement is the resource whose value is defined by what LOCC can do with it.

In the folio: Quantum Information › Entanglement is a resourceSee also Entanglement, Entanglement concentration and dilution, Separable state

Entanglement concentration and dilution

The two LOCC procedures that make pure-state entanglement interchangeable. Concentration (distillation) turns copies of a partly entangled pure state into about Bell pairs. Dilution turns about Bell pairs back into copies. Both are asymptotically lossless, and this is what makes the unique pure-state measure.

In the folio: Quantum Information › Entanglement is a resourceSee also LOCC, Entanglement entropy, Entanglement purification

Separable state

A mixed state of two systems that can be prepared by LOCC: a probabilistic mixture of product states. A state that is not separable is entangled. Deciding whether a given state is separable is NP-hard in general (Gurvits, 2003).

In the folio: Quantum Information › Entanglement is a resourceSee also Peres–Horodecki criterion, Entanglement, LOCC

Peres–Horodecki criterionPPT criterion

An entanglement test based on the partial transpose: transposing only subsystem B's indices of . If the result has a negative eigenvalue (negative partial transpose, NPT), the state is certainly entangled. The test is decisive for and systems; in larger dimensions some entangled states have a positive partial transpose (PPT).

In the folio: Quantum Information › Entanglement is a resourceSee also Separable state, Bound entanglement

Bound entanglement

Entanglement that cannot be distilled into Bell pairs by LOCC, even though it took entanglement to create the state. All PPT entangled states are bound. Whether bound-entangled states with a negative partial transpose exist is a long-standing open problem named in the folio.

In the folio: Quantum Information › Open problemsSee also Peres–Horodecki criterion, Entanglement purification

Quantum channel,

The general description of a physical process acting on a quantum system, including noise, transmission and storage. It is a linear map from input density operators to output density operators. Kraus operators, a Stinespring dilation and a Choi matrix are three equivalent ways to describe one.

In the folio: Quantum Information › Channels are CPTP mapsSee also CPTP map, Kraus operators, Stinespring dilation, Choi matrix

CPTP mapcompletely positive trace-preserving

The mathematical requirement on a quantum channel. Trace-preserving means probabilities still sum to 1. Completely positive means the map gives a valid state even when it acts on one half of an entangled system. Every physical process, noise included, is of this form.

In the folio: Quantum Information › Channels are CPTP mapsSee also Complete positivity, Quantum channel, Kraus operators

Complete positivityCP

A map is completely positive if maps positive operators to positive operators for every size of ancillary system. Plain positivity is not enough: transposition maps states to states but fails on half of an entangled pair. This is why the partial transpose can detect entanglement.

In the folio: Quantum Information › Channels are CPTP mapsSee also CPTP map, Choi matrix, Peres–Horodecki criterion

Kraus operators

The operators of the operator-sum (Kraus) form of a channel. The completeness condition makes the map trace-preserving, and denotes the Hermitian adjoint. Each can be read as one possible "error" that happens with a state-dependent probability.

In the folio: Quantum Information › Channels are CPTP mapsSee also CPTP map, Stinespring dilation

Stinespring dilation

The theorem (Stinespring, 1955) that every channel can be realised as a unitary interaction of the system with an environment starting in a fixed state , after which the environment is traced out. Noise is therefore information leaking into an environment, an idea used throughout capacity and security proofs.

In the folio: Quantum Information › Channels are CPTP mapsSee also Kraus operators, Partial trace, Quantum channel

Choi matrix

The operator obtained by applying a channel to one half of an (unnormalised) maximally entangled state. It encodes the channel completely. Choi's theorem says the map is completely positive exactly when this matrix is positive semidefinite, which gives a practical test.

In the folio: Quantum Information › Channels are CPTP mapsSee also Complete positivity, Positive semidefinite operator

Depolarising channel

The noise model that, with some probability, replaces the state by the maximally mixed state. It shrinks the Bloch ball uniformly towards the centre. It is the standard symmetric noise model for qubits, yet its quantum capacity is still unknown.

In the folio: Quantum Information › Channels are CPTP mapsSee also Bloch sphere, Quantum capacity, Maximally mixed state

Dephasing channel

Noise that destroys superpositions between and but leaves their probabilities untouched. It squeezes the Bloch ball into a cigar along the axis. It models pure dephasing, the -type decay of qubit coherence.

In the folio: Quantum Information › Channels are CPTP mapsSee also Populations and coherences, Amplitude damping channel, Bloch sphere

Amplitude damping channel

Noise that models energy loss, such as spontaneous emission or photon loss, taking to with some probability. It shrinks the Bloch ball and pulls every state towards . In hardware it corresponds to energy relaxation with time constant .

In the folio: Quantum Information › Channels are CPTP mapsSee also Dephasing channel, Depolarising channel, Bloch sphere

Von Neumann entropy

The quantum generalisation of Shannon entropy: the Shannon entropy of the eigenvalues of , measured in bits when the logarithm is base 2. It is 0 for pure states and for the maximally mixed state of dimension . Operationally it is the number of qubits per symbol needed to compress a quantum source.

In the folio: Quantum Information › Entropy measures quantum informationSee also Shannon entropy, Schumacher compression, Conditional entropy

Shannon entropy

The classical measure of uncertainty, or information content, of a random variable: bits. Shannon's 1948 theory shows it is the optimal compression rate. in the uncertainty relation is the entropy of a measurement outcome conditioned on a quantum memory.

In the folio: Quantum Information › Entropy measures quantum informationSee also Von Neumann entropy, Binary entropy, Channel capacity

Binary entropy

The Shannon entropy of a coin with bias . In QKD, is both the error-correction cost and the information an eavesdropper may have gained, per sifted bit at error rate . Since , the BB84 key rate falls to zero near .

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › From raw clicks to a secret keySee also Key rate, Quantum bit error rate, Shannon entropy, Decoy-state key rate

Quantum mutual information

The total correlation, classical and quantum, between systems A and B. For a Bell pair it equals 2 bits, twice the classical maximum for two bits. It sets the entanglement-assisted capacity of a channel.

In the folio: Quantum Information › Entropy measures quantum informationSee also Conditional entropy, Entanglement-assisted capacity, Von Neumann entropy

Conditional entropy

The entropy of A given access to B. Classically it is never negative; quantum mechanically it can be. A negative value is a signature of entanglement: for a Bell pair . Its negative is the number of ebits left over in state merging.

In the folio: Quantum Information › Entropy measures quantum informationSee also State merging, Quantum mutual information, Entropic uncertainty relation with quantum memory, Coherent information

Relative entropy

A measure of how distinguishable state is from state (Umegaki's quantum Kullback–Leibler divergence). It is non-negative, zero only when the states are equal, and not symmetric, so it is not a distance. Most other entropic quantities can be written as relative entropies.

In the folio: Quantum Information › Entropy measures quantum informationSee also Data-processing inequality, Von Neumann entropy

Holevo quantity

For an ensemble of states sent with probabilities , the entropy of the average state minus the average entropy. It upper-bounds the classical information any measurement can extract (the Holevo bound), and its maximum over ensembles gives a channel's one-shot classical capacity.

In the folio: Quantum Information › Entropy measures quantum informationSee also Holevo bound, Accessible information, HSW theorem, Ensemble

Strong subadditivitySSA

The fundamental inequality of quantum entropy, proved by Lieb and Ruskai in 1973. It is equivalent to the statement that conditioning cannot increase entropy, . Almost every coding theorem in quantum information depends on it.

In the folio: Quantum Information › Entropy measures quantum informationSee also Data-processing inequality, Conditional entropy

Data-processing inequality

The principle that no channel can make two states more distinguishable: relative entropy can only decrease under any CPTP map. It formalises "post-processing cannot create information" and is the source of many converse (upper-bound) proofs.

In the folio: Quantum Information › Entropy measures quantum informationSee also Relative entropy, CPTP map, Strong subadditivity

Schumacher compression

The quantum analogue of Shannon's source coding theorem (Schumacher, 1995). Many copies of a source with state can be faithfully compressed to qubits per symbol, and no further. This gave von Neumann entropy its operational meaning and the qubit its role as a unit of information.

In the folio: Quantum Information › Entropy measures quantum informationSee also Von Neumann entropy, Qubit

State merging

The task of transferring A's share of a joint state to B, who already holds a correlated system, using LOCC and shared entanglement (Horodecki, Oppenheim and Winter, 2005). The entanglement cost is ebits. When that is negative, the transfer leaves ebits for later use, which gives negative conditional entropy a physical meaning.

In the folio: Quantum Information › Entropy measures quantum informationSee also Conditional entropy, Ebit, LOCC

Device-independent cryptography

Key distribution (and related tasks) whose security follows from an observed Bell violation alone. It needs no trusted model of the sources or detectors, which may even come from an adversary. It requires loophole-free conditions and is currently far slower than standard QKD.

In the folios: Quantum Information › Bell nonlocality; Quantum Networking › Stages of a quantum internetSee also Bell nonlocality, Quantum key distribution, Certified randomness, E91, Device-independent QKD

Certified randomness

Random numbers whose unpredictability is guaranteed by a Bell violation rather than by trust in the hardware. Because no local model can reproduce the correlations, the outcomes cannot have been fixed in advance.

In the folio: Quantum Information › Bell nonlocalitySee also Bell nonlocality, Device-independent cryptography

Resource inequality, ,

A bookkeeping notation for what a protocol consumes and produces. is one shared ebit, one classical bit sent and one qubit sent. "" means the resources on the left can simulate those on the right. Teleportation and superdense coding are the two basic trades.

teleportation:

superdense coding:

In the folio: Quantum Information › Protocols: trading ebits, bits and qubitsSee also Ebit, Quantum teleportation, Superdense coding

Quantum teleportation

A protocol that transfers an unknown qubit state using one shared Bell pair and two classical bits (Bennett et al., 1993). Alice makes a Bell measurement on her qubit and her half of the pair. Bob then applies and according to her two bits. Nothing travels faster than light and the original is destroyed, as no-cloning requires. First demonstrated with photons in 1997.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Networking › A protocol stack for entanglementSee also Bell measurement, Resource inequality, No-cloning theorem, Pauli matrices, Bell pair

Bell measurementBSM

A joint measurement of two qubits in the Bell basis, with four outcomes (two bits). In circuits it is a CNOT followed by a Hadamard and two computational-basis measurements. It is the key step of teleportation, superdense decoding and entanglement swapping. With linear optics alone, only two of the four Bell states can be told apart.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Networking › Heralded entanglementSee also Bell pair, CNOT gate, Hadamard gate, Entanglement swapping, Heralded entanglement

Hadamard gate

The single-qubit gate . It maps to the equal superpositions and swaps the and bases. In the teleportation and superdense circuits it converts a Bell measurement into a computational-basis one. (Not to be confused with the Shannon entropy .)

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Algorithms › Phase estimation and the QFT; Building a Quantum Computer › Engineering the gatesSee also CNOT gate, Bell measurement, Uniform superposition, Quantum circuit, Universal gate set

CNOT gatecontrolled-NOT

The two-qubit gate that flips the target qubit () when the control qubit (dot) is . With the Hadamard gate it creates and analyses Bell states, and with single-qubit gates it is universal for quantum computation.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Building a Quantum Computer › Engineering the gatesSee also Hadamard gate, Bell measurement, Controlled-Z gate, Universal gate set, Cirac–Zoller gate

Superdense coding

A protocol that sends two classical bits by transmitting one qubit, using a Bell pair shared in advance (Bennett and Wiesner, 1992). Alice applies one of four Pauli operations to her half, selecting one of four orthogonal Bell states, and Bob's Bell measurement reads off both bits. Without prior entanglement the Holevo bound allows only one bit per qubit.

In the folio: Quantum Information › Protocols: trading ebits, bits and qubitsSee also Resource inequality, Holevo bound, Bell pair, Quantum teleportation

Quantum key distributionQKD

A method by which two parties, Alice and Bob, grow a shared secret key by exchanging quantum states of light and then post-processing the results over an authenticated classical channel. Any eavesdropping disturbs the states and shows up as errors, so security follows from quantum physics rather than computational hardness. Per the folio, it needs dedicated optical links, reaches about 100 km per link and relies on trusted nodes beyond that.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › The quantum threat, two answers; Quantum Networking › What quantum networks enableSee also BB84, E91, Quantum bit error rate, Key rate, Key growing

BB84

The first QKD protocol (Bennett and Brassard, 1984). Alice sends single photons prepared in one of two conjugate bases, for example rectilinear or diagonal polarisation. Bob measures in a randomly chosen basis, and the two keep only the results where their bases agree. Eavesdropping causes errors because the bases are mutually non-orthogonal. In practice it is run with weak laser pulses and decoy states.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › QKD protocol families; Quantum Networking › MilestonesSee also Quantum key distribution, Sifting, Key rate, E91, Decoy states

E91

The entanglement-based QKD protocol of Artur Ekert (Phys. Rev. Lett. 67, 661, 1991). Alice and Bob measure shared entangled pairs and use a violation of a Bell (CHSH) inequality to certify that no eavesdropper holds information. It is the conceptual ancestor of device-independent QKD.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › QKD protocol families; Quantum Networking › MilestonesSee also BB84, CHSH inequality, Device-independent cryptography, Entanglement-based QKD, Bell violation

Sifting

The QKD step in which Alice and Bob publicly compare their basis choices (not their bits) and discard the rounds where the bases differ. On average half the bits survive, forming the sifted key.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › From raw clicks to a secret keySee also BB84, Quantum bit error rate, Raw key, Parameter estimation

Quantum bit error rateQBER,

The fraction of sifted-key bits on which Alice and Bob disagree, from channel noise, detector imperfections and possible eavesdropping. All errors are conservatively attributed to Eve. For BB84 with ideal one-way error correction, secure key is possible only below about 11%.

BB84 threshold

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › From raw clicks to a secret keySee also Key rate, Sifting, Binary entropy, Secret fraction, Error correction

Error correction

Also called information reconciliation: the classical step that makes Alice's and Bob's keys identical using public discussion, for example with LDPC codes or the Cascade protocol. Every bit disclosed counts as leaked to Eve, about bits per key bit.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › From raw clicks to a secret keySee also Privacy amplification, Binary entropy, Quantum key distribution, LDPC code, Cascade

Privacy amplification

The final step: Alice and Bob compress the corrected key with a randomly chosen universal hash function, so that Eve's partial information about it is reduced to a negligible amount. The output is shorter by roughly the amount Eve could know.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › From raw clicks to a secret keySee also Error correction, Key rate, Universal hashing, Composable security

Key rate

The number of final secret-key bits produced per pulse sent (or per second). It falls with channel loss, as for most protocols and for twin-field QKD. At the longest record distances, keys accumulate at bits per second or less.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › QKD protocol familiesSee also Binary entropy, Quantum bit error rate, Repeaterless bound, Decoy-state key rate, Secret fraction

Entanglement swapping

A Bell-state measurement on one qubit from each of two pairs, A–R and R–B, leaves A and B entangled even though they never interacted. It is the quantum counterpart of store-and-forward and the basic step of every repeater. Proposed in 1993 (Żukowski, Zeilinger, Horne and Ekert).

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Networking › Quantum repeatersSee also Quantum repeater, Bell measurement, Quantum teleportation, Swap fidelity

Quantum repeater

A chain of stations () that divides a long link into short elementary links of length , entangles each one by heralding, then joins them by entanglement swapping and protects fidelity by purification or error correction. With memories, it turns the exponential loss of direct transmission into roughly polynomial scaling. Proposed by Briegel, Dür, Cirac and Zoller in 1998.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Networking › Quantum repeatersSee also Entanglement swapping, Quantum memory, Entanglement purification, Repeaterless bound, Quantum repeater generations

Quantum memory

A device that stores a quantum state, ideally one received from or entangled with a photon, and returns it on demand. Its key figures are efficiency, storage (coherence) time, fidelity, bandwidth and multimode capacity. In the stages of a quantum internet, adding memory enables stored entanglement, blind computing and clock networks.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Networking › Stages of a quantum internet; Quantum AI › Where advantage is provenSee also Quantum repeater, Entanglement swapping, Memory qubit, Coherence time, Multiplexing

Entanglement purificationdistillation

A procedure that uses local operations and classical communication to turn several noisy entangled pairs into fewer pairs of higher fidelity. It is probabilistic and needs two-way classical exchange, and it replaces classical forward error correction in first-generation repeaters.

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Networking › Quantum repeatersSee also Quantum repeater, Entanglement concentration and dilution, Bound entanglement, BBPSSW protocol, Fidelity

Transmissivity

The fraction of photons (or optical power) that survives a channel, between 0 and 1. In QKD, key rates are quoted as scaling with or . In dB, the loss is , so 0.2 dB/km of fibre gives for length in km.

loss (dB)

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › Light as a channel: the Holevo limit; Quantum Networking › Light carries the qubitsSee also Repeaterless bound, Quantum repeater, Decibel, Pure-loss channel, Fibre attenuation

Repeaterless boundPLOB

The maximum secret-key rate of any point-to-point QKD protocol over a lossy channel without quantum repeaters (Pirandola, Laurenza, Ottaviani and Banchi, 2017). It is about bits per mode at high loss, so ordinary protocols such as BB84 scale at best linearly in . Twin-field QKD beats it by scaling as . The folio's "1.44 η scaling" label refers to this bound.

for

In the folios: Quantum Information › Protocols: trading ebits, bits and qubits; Quantum Communications › QKD protocol families; Quantum Networking › Loss sets the rateSee also Transmissivity, Quantum repeater, Key rate, Twin-field QKD

No-cloning theorem

No physical process can make an independent copy of an unknown quantum state (Wootters and Zurek; Dieks, 1982). For networking this means a lost or corrupted photonic qubit cannot be amplified, regenerated, buffered as a copy or resent. Copies are "free" in a classical network but "impossible" in a quantum one.

is impossible

In the folios: Quantum Information › What quantum information forbids; Quantum Networking › Why quantum networks differSee also Quantum teleportation, Quantum key distribution, Erasure channel, Heralding, Entanglement purification

No-signalling

The principle that local measurements on one half of an entangled pair cannot change the statistics seen at the other half, so entanglement on its own cannot carry a message or beat light speed. Every use of entanglement in a network therefore also needs classical communication.

In the folios: Quantum Information › What quantum information forbids; Quantum Networking › Why quantum networks differSee also Bell nonlocality, Quantum teleportation, Partial trace, Classical channel

Holevo bound

Holevo's 1973 theorem that the classical information extractable from an ensemble of quantum states is at most the Holevo quantity . Since for qubits, at most bits can be read out of qubits, even though describing the state takes exponentially many amplitudes.

In the folio: Quantum Information › What quantum information forbidsSee also Holevo quantity, Accessible information, Superdense coding

Accessible information

The maximum classical mutual information between the label of an ensemble and the outcome of any measurement (POVM) on the received state. It is generally hard to compute, and the Holevo quantity bounds it from above.

In the folio: Quantum Information › What quantum information forbidsSee also Holevo bound, Holevo quantity, POVM

Monogamy of entanglement

The fact that entanglement cannot be freely shared. If A is maximally entangled with B, it can have no entanglement, or even classical correlation, with C. For qubits this is the Coffman–Kundu–Wootters inequality (2000). Monogamy is why entanglement-based keys are private.

In the folio: Quantum Information › What quantum information forbidsSee also Concurrence, Quantum key distribution

Concurrence

An entanglement measure for two qubits introduced by Wootters (1998), ranging from 0 (separable) to 1 (Bell state). It has a closed form for any two-qubit mixed state. is its generalisation to the split between qubit A and the pair BC.

In the folio: Quantum Information › What quantum information forbidsSee also Monogamy of entanglement, Entanglement entropy

Entropic uncertainty relation with quantum memory

An uncertainty principle for an observer B who holds a quantum memory entangled with the measured system A (Berta et al., 2010). The bound on the entropies of the outcomes of incompatible measurements and is lowered by the conditional entropy . With a maximally entangled memory and Bob can predict both outcomes. The relation underpins modern QKD security proofs.

In the folio: Quantum Information › What quantum information forbidsSee also Mutually unbiased bases, Conditional entropy, Shannon entropy

Mutually unbiased basesMUBs

Two bases in which every state of one gives uniformly random outcomes in the other, like the and (rectilinear and diagonal) bases of a qubit. The overlap constant is then , which is for a qubit, making the uncertainty bound as large as possible. BB84 uses this pair.

In the folio: Quantum Information › What quantum information forbidsSee also Entropic uncertainty relation with quantum memory, BB84

Channel capacity

The highest rate, in bits or qubits per channel use, at which information can be sent with vanishing error over many uses. A quantum channel has several capacities depending on what is sent (classical or quantum data) and what is shared beforehand (for example entanglement). Unlike Shannon's formula, most require regularisation.

In the folio: Quantum Information › Channel capacitiesSee also Classical capacity, Quantum capacity, Entanglement-assisted capacity, Regularisation

Single-letter formula

A capacity expression computed from one use of the channel, like Shannon's . Single-letter formulas are computable; the entanglement-assisted capacity has one, but the classical and quantum capacities of a general quantum channel do not.

In the folio: Quantum Information › Channel capacitiesSee also Regularisation, Entanglement-assisted capacity

Regularisation

Taking the limit of a one-shot quantity over parallel channel uses, needed when entangled inputs across uses can beat independent ones. Regularised formulas are generally not computable. Whether a computable formula for quantum capacity exists is an open problem.

In the folio: Quantum Information › Channel capacitiesSee also Single-letter formula, Classical capacity, Quantum capacity

Classical capacity

The best rate of sending classical bits through a quantum channel without prior entanglement. By the HSW theorem it is the regularised Holevo quantity of the channel. Hastings (2009) showed that is not additive, so the regularisation cannot be dropped in general.

In the folio: Quantum Information › Channel capacitiesSee also HSW theorem, Holevo quantity, Regularisation

HSW theoremHolevo–Schumacher–Westmoreland

The coding theorem (Holevo, 1998; Schumacher and Westmoreland, 1997) showing that the Holevo quantity maximised over input ensembles is an achievable rate for classical communication over a quantum channel with product-state inputs. Regularised, it gives the classical capacity.

In the folio: Quantum Information › Channel capacitiesSee also Classical capacity, Holevo quantity

Quantum capacity

The best rate, in qubits per use, at which quantum states can be sent faithfully, equivalent to how fast entanglement can be generated. The LSD theorem gives it as regularised coherent information. It can show superactivation, and it is unknown even for the qubit depolarising channel.

In the folio: Quantum Information › Channel capacitiesSee also Coherent information, LSD theorem, Superactivation, Depolarising channel

Coherent information

The quantum analogue of mutual information for sending quantum data: , the output entropy minus the entropy leaked to the environment, maximised over inputs. It equals for a purified input and can be negative.

In the folio: Quantum Information › Channel capacitiesSee also Quantum capacity, Conditional entropy, Stinespring dilation

LSD theoremLloyd–Shor–Devetak

The quantum channel coding theorem (Lloyd, 1997; Shor, 2002; Devetak, 2005): the regularised coherent information is the quantum capacity.

In the folio: Quantum Information › Channel capacitiesSee also Quantum capacity, Coherent information

Superactivation

The effect, found by Smith and Yard (2008), that two channels each with zero quantum capacity can have positive capacity when used together. Their example paired a PPT entangling channel with a 50% erasure channel. Quantum capacity is therefore not a simple property of single channels.

In the folio: Quantum Information › Channel capacitiesSee also Quantum capacity, Erasure channel, Bound entanglement

Entanglement-assisted capacity

The classical capacity when sender and receiver share unlimited prior entanglement (Bennett, Shor, Smolin and Thapliyal, 2002). It has a single-letter formula, the maximal quantum mutual information between a purifying reference and the channel output, making it the quantum analogue of Shannon's formula.

In the folio: Quantum Information › Channel capacitiesSee also Quantum mutual information, Superdense coding, Single-letter formula

Erasure channel

A channel that delivers the input intact with probability , or else replaces it by a flag telling the receiver it was lost. All three capacities are known exactly. vanishes at , since otherwise receiver and environment would share a clone.

In the folio: Quantum Information › Channel capacitiesSee also Channel capacity, No-cloning theorem, Superactivation

Multipartite entanglement

Entanglement among three or more parties. Unlike the two-party case it has no single measure or ordering: for three qubits there are already two inequivalent classes, GHZ and W, that cannot be converted into each other even probabilistically. How to classify and quantify it in general is open.

In the folio: Quantum Information › Open problemsSee also Entanglement, Monogamy of entanglement

Quantum internet

A prospective network that distributes entanglement between distant nodes on demand. It would enable QKD, distributed and blind quantum computing, and networked sensing. Its achievable rates across continents depend on repeaters, memories and satellites.

In the folios: Quantum Information › Open problems; Quantum Networking › Stages of a quantum internetSee also Quantum repeater, Entanglement swapping, Micius satellite, Stages of a quantum internet, Quantum network

Black-hole information problem

The puzzle, raised by Hawking, of whether information that falls into a black hole is lost when the hole evaporates by thermal radiation, which would violate the unitarity of quantum mechanics. Quantum-information ideas such as entanglement entropy and error-correcting codes, together with holography, now drive the proposals that spacetime geometry itself is built from entanglement.

In the folio: Quantum Information › Open problemsSee also Entanglement entropy, Von Neumann entropy

04Algorithms and complexity

Where speed-ups come from, the main algorithm families, and the cost of running them for real.

Quantum algorithm

A step-by-step procedure for a quantum computer: prepare qubits, apply a sequence of unitary gates, measure, and usually finish with classical post-processing. Its power comes from arranging interference so that wrong answers cancel and right answers reinforce, not from "trying all answers at once". A quantum algorithm is useful only if its speed-up survives every step from problem formulation to verified answer.

In the folio: Quantum Algorithms › Where speed-ups come fromSee also Quantum interference, Quantum parallelism, Quantum circuit, Speed-up

Quantum interference

The addition of probability amplitudes from different computational paths leading to the same outcome. Paths "with scattered phases" sum to nearly zero (cancelled), while paths "in phase" add to a large amplitude and a likely outcome. Every quantum speed-up is, at bottom, a choreography of interference.

In the folio: Quantum Algorithms › Where speed-ups come fromSee also Probability amplitude, Quantum parallelism, Quantum algorithm

Quantum parallelism

The fact that a unitary acting on a superposition of inputs evaluates a function on all of them in one step. On its own it gives no advantage, because a measurement returns only one outcome at random; the folio stresses that "parallelism alone is not enough" without interference to concentrate amplitude on useful answers.

In the folio: Quantum Algorithms › Where speed-ups come fromSee also Quantum interference, Born rule, Output readout

Speed-up

The ratio, as problem size grows, between the cost of the best known (or provably best) classical method and that of the quantum algorithm. The folio grades speed-ups as exponential, super-polynomial, quadratic or heuristic; the grade matters because slow fault-tolerant gates mean only large speed-ups pay off in practice.

In the folio: Quantum Algorithms › The algorithm mapSee also Exponential speed-up, Super-polynomial speed-up, Quadratic speed-up, Break-even point

Exponential speed-up

A quantum algorithm whose cost grows only polynomially (sometimes polylogarithmically) in the problem size where the best known classical algorithm's cost grows exponentially. Many early quantum ML claims of this kind hid costs in data loading, readout or conditioning (Aaronson 2015), or were later dequantised.

In the folios: Quantum Algorithms › Where speed-ups come from; Quantum AI › The fine printSee also Hidden structure, Hamiltonian simulation, Super-polynomial speed-up, Quadratic speed-up, Dequantisation

Super-polynomial speed-up

A speed-up larger than any polynomial but not necessarily exponential. Shor's algorithm is labelled this way because the best classical factoring method, the number field sieve, is sub-exponential, running in roughly time.

In the folio: Quantum Algorithms › The algorithm mapSee also Shor's algorithm, Exponential speed-up, Speed-up

Quadratic speed-up

A quantum cost proportional to the square root of the classical cost, versus , as in Grover search and amplitude estimation. It is provably the best possible for unstructured search, but in the folio's illustration it breaks even only after about 3 hours, so quadratic gains are easily eroded by slow logical gates.

quantum runtime

In the folios: Quantum Algorithms › Speed-ups and the real cost; Quantum AI › The fine printSee also Grover's algorithm, Amplitude estimation, Break-even point, Super-quadratic speed-up, Exponential speed-up

Super-quadratic speed-up

Any speed-up larger than quadratic, such as quartic (quantum cost ), polynomial of higher degree or exponential. Babbush et al. (2021) and Hoefler, Häner and Troyer (2023) argue that practical advantage on early fault-tolerant machines needs super-quadratic, ideally exponential, speed-ups; in the folio's illustration a quartic speed-up breaks even after about 5 s.

quartic: quantum runtime

In the folio: Quantum Algorithms › Speed-ups and the real costSee also Quadratic speed-up, Break-even point, Exponential speed-up

Hidden structure

Algebraic regularity in a problem, such as a period of a function or a symmetry group, that a quantum Fourier transform can expose. Formally many such problems are instances of the hidden subgroup problem; factoring, discrete logarithms and Simon's problem all belong here and are the source of exponential speed-ups.

In the folio: Quantum Algorithms › Where speed-ups come fromSee also Quantum Fourier transform, Period finding, Simon's algorithm, Exponential speed-up

Unstructured search

Finding a marked item among when the only access is a yes/no oracle and nothing is known about where solutions lie. Classically this needs about queries; Grover's algorithm needs about , which the BBBV bound shows is optimal.

In the folio: Quantum Algorithms › Where speed-ups come fromSee also Grover's algorithm, Oracle, BBBV lower bound

Oracle

A black-box subroutine that evaluates a function, used reversibly on quantum states; typically it flips a phase or a target bit when the input is a solution. Algorithm costs are often counted in oracle calls ("queries"), and in practice each call must itself be compiled into gates, which the folio's cost chart prices at 0.1 s per fault-tolerant call against 1 µs classically.

(phase oracle)

In the folio: Quantum Algorithms › From problem to answerSee also Query complexity, Unstructured search, Oracle separation

Query complexity

The number of oracle calls an algorithm needs, ignoring other work. It is the setting in which quantum lower bounds can actually be proven, such as the optimality of search, and in which the first quantum–classical separations were found.

In the folio: Quantum Algorithms › Where speed-ups come fromSee also Oracle, BBBV lower bound, Oracle separation

BBBV lower bound

The theorem of Bennett, Bernstein, Brassard and Vazirani (1997) that any quantum algorithm for unstructured search over items needs of order oracle queries. It proves Grover's algorithm optimal and shows that quantum computers cannot solve NP-complete problems by brute-force search exponentially faster.

queries

In the folio: Quantum Algorithms › Where speed-ups come fromSee also Unstructured search, Grover's algorithm, NP-complete

Oracle separation

A proof that, relative to some black-box oracle, one model of computation needs far fewer queries than another. Deutsch–Jozsa (1992) separated quantum from deterministic classical computing, and Simon (1994) gave an exponential separation from randomised classical computing, which directly inspired Shor.

In the folio: Quantum Algorithms › MilestonesSee also Deutsch–Jozsa algorithm, Simon's algorithm, Query complexity

Quantum circuit

The standard way of writing a quantum algorithm: horizontal wires are qubits, boxes are gates applied left to right, dots joined by vertical lines mark controls, and meter symbols are measurements. Double lines in the folio's phase-estimation diagram mark the eigenstate register .

In the folios: Quantum Algorithms › Phase estimation and the QFT; Quantum AI › Variational quantum modelsSee also Hadamard gate, Controlled unitary, Circuit depth, Parameterised quantum circuit, Qubit

Controlled unitarycontrolled-

A gate that applies to a target register only when a control qubit is , and acts coherently on superpositions of the control. Phase estimation uses controlled powers (drawn as , , ), so the number of applications doubles with each extra bit of precision.

In the folio: Quantum Algorithms › Phase estimation and the QFTSee also Quantum phase estimation, Phase kickback

Quantum Fourier transformQFT

The discrete Fourier transform applied to the amplitudes of an -qubit state, . It "turns phases into measurable bits" and needs only gates, against for the classical FFT on the same vector; the catch is that its output is a quantum state, not a readable list of numbers. Its inverse, , ends phase estimation.

In the folio: Quantum Algorithms › Phase estimation and the QFTSee also Quantum phase estimation, Fast Fourier transform, Hidden structure, Output readout

Fast Fourier transformFFT

The classical algorithm computing a discrete Fourier transform of length in operations, i.e. for . It is the benchmark against which the folio compares the QFT's gates.

In the folio: Quantum Algorithms › Phase estimation and the QFTSee also Quantum Fourier transform, Big-O notation

Quantum phase estimationQPE

The algorithm (Kitaev, 1995) that reads out the eigenphase of a unitary given its eigenstate : Hadamards prepare control qubits, controlled powers of imprint the phase by kickback, and an inverse QFT converts it to binary digits. It is "the engine inside Shor's algorithm and quantum chemistry", where encodes time evolution and gives an energy.

precision costs uses of

In the folio: Quantum Algorithms › Phase estimation and the QFTSee also Eigenphase, Phase kickback, Quantum Fourier transform, Heisenberg limit

Eigenphase

The number defining an eigenvalue of a unitary; every eigenvalue of a unitary has unit modulus, so the phase carries all the information. Phase estimation outputs the "bits of "; for the phase gives an energy eigenvalue of .

In the folio: Quantum Algorithms › Phase estimation and the QFTSee also Quantum phase estimation, Ground-state problem

Phase kickback

The effect whereby a controlled- acting on an eigenstate of leaves the target unchanged ("eigenstate, untouched") and transfers the eigenvalue's phase to the control qubit instead. In phase estimation the -th control picks up , writing successive binary digits of into relative phases.

In the folio: Quantum Algorithms › Phase estimation and the QFTSee also Controlled unitary, Quantum phase estimation

Precision

The target additive error of an estimated quantity (a phase, an energy, an expectation value). The folio contrasts cost for phase and amplitude estimation with the samples of classical Monte Carlo or repeated measurement.

In the folio: Quantum Algorithms › Phase estimation and the QFTSee also Heisenberg limit, Amplitude estimation

Heisenberg limit

The fundamental scaling in which estimation error falls as in the total number of uses of the probed process, rather than the "standard quantum limit" of independent repetitions. Phase estimation reaches it: precision costs uses of .

(vs. )

In the folios: Quantum Algorithms › Phase estimation and the QFT; Quantum Networking › What quantum networks enableSee also Quantum phase estimation, Precision, Amplitude estimation, Clock network

Shor's algorithm

Peter Shor's 1994 algorithm that factors integers and computes discrete logarithms in polynomial time by reducing them to period finding, solved with the QFT. It "breaks RSA and elliptic-curve cryptography" but needs full fault tolerance; the latest estimate for RSA-2048 is under 1 million physical qubits, under a week (Gidney 2025).

In the folios: Quantum Algorithms › The algorithm map; Quantum Communications › The quantum threat, two answers; Building a Quantum Computer › Overhead: how many qubits?See also Period finding, RSA-2048, Discrete logarithm, Fault tolerance, RSA

Period finding

The task of finding the period of a function such as . Superposing many , evaluating , and applying a QFT produces peaks at multiples of ; factoring reduces to it because yields a factor of via .

In the folio: Quantum Algorithms › Phase estimation and the QFTSee also Shor's algorithm, Quantum Fourier transform, Continued fractions

Continued fractions

The classical expansion of a real number as , whose truncations give its best rational approximations. In Shor's algorithm this post-processing step turns the measured approximation of into the period .

In the folio: Quantum Algorithms › From problem to answerSee also Period finding, Shor's algorithm

Grover's algorithm

Lov Grover's 1996 search algorithm, which finds one of marked items among in about oracle calls by rotating the state "step by step, from the uniform superposition towards the marked solutions". Its quadratic speed-up is provably optimal, but slow logical gates erode the gain in practice.

steps

In the folios: Quantum Algorithms › Amplitude amplification; Quantum Networking › What quantum networks enableSee also Amplitude amplification, Grover iteration, Unstructured search, BBBV lower bound, Distributed quantum computing

Amplitude amplification

The generalisation of Grover's algorithm (Brassard, Høyer, Mosca and Tapp, 2000) to any quantum subroutine that succeeds with probability : about repetitions of a reflection pair boost the success probability to near 1, instead of the classical repetitions. It "speeds up any probabilistic subroutine" quadratically.

In the folio: Quantum Algorithms › Amplitude amplificationSee also Grover's algorithm, Grover iteration, Amplitude estimation

Uniform superposition

The equal-weight superposition of all basis states, prepared by Hadamards on every qubit; it is Grover's starting state. Its small angle to the non-solution axis is what each Grover step increases.

In the folio: Quantum Algorithms › Amplitude amplificationSee also Hadamard gate, Grover angle, Marked state

Marked state

The normalised superposition of all solutions ("solutions ") that the oracle recognises. Grover's algorithm acts entirely in the two-dimensional plane spanned by and the normalised non-solution state .

In the folio: Quantum Algorithms › Amplitude amplificationSee also Uniform superposition, Oracle, Grover iteration

Grover iteration

One step of Grover's algorithm: a reflection about the non-solution axis (the oracle, flipping the sign of solutions) followed by a reflection about the starting state (the "diffusion" operator). Two reflections make a rotation by , so after steps the state sits at angle .

In the folio: Quantum Algorithms › Amplitude amplificationSee also Grover angle, Success probability, Amplitude amplification

Grover angle

The angle between the starting state and the non-solution axis, set by the fraction of solutions. Because is small, about rotations by reach the solution axis.

In the folio: Quantum Algorithms › Amplitude amplificationSee also Grover iteration, Success probability

Success probability

The probability that measuring after Grover steps returns a solution. It oscillates with , so overshooting the optimal number of steps lowers it again; the optimum is near .

In the folio: Quantum Algorithms › Amplitude amplificationSee also Grover angle, Grover's algorithm

Amplitude estimation

An algorithm (Brassard, Høyer, Mosca and Tapp, 2000) that estimates a success probability or mean value by applying phase estimation to the Grover operator. It gives Monte Carlo averages, e.g. in risk analysis, with rather than samples, a quadratic speed-up "useful only for very costly samples".

In the folio: Quantum Algorithms › Amplitude amplificationSee also Amplitude amplification, Quantum phase estimation, Heisenberg limit, Quadratic speed-up

State preparation

Loading the input of a quantum algorithm: an initial state, an oracle circuit or a block encoding (step 2, "Prepare", of the folio's pipeline). For chemistry it means preparing a state close to the ground state; for data problems, encoding classical numbers into amplitudes, which can be costly.

In the folio: Quantum Algorithms › From problem to answerSee also Data-loading problem, Block encoding, Overlap

Data-loading problem

The bottleneck that writing classical numbers into a quantum state generally takes about steps ("loading classical numbers can cost steps"), which can wipe out a speed-up that is polylogarithmic in . Hypothetical quantum random-access memory (QRAM) would ease it but has not been built at scale; simulation avoids it because "the problem is already quantum".

In the folio: Quantum Algorithms › From problem to answerSee also State preparation, HHL algorithm, Hamiltonian simulation, Output readout

Output readout

The constraint that measurement yields only a few bits or expectation values per run, never the full state ("reading out a whole vector erases the gain"). Reconstructing all amplitudes would need of order repetitions, so useful algorithms must output a compact answer.

In the folio: Quantum Algorithms › From problem to answerSee also Born rule, Data-loading problem, HHL algorithm

Circuit depth

The number of sequential layers of gates in a circuit, which sets its runtime. The folio warns that the core algorithm's depth "must fit the error-corrected budget": the number of logical operations a fault-tolerant machine can perform before logical errors become likely.

In the folios: Quantum Algorithms › From problem to answer; Quantum AI › Trainability: barren plateausSee also Fault tolerance, Logical qubit, Quantum circuit, Expressivity, Barren plateau

Error mitigation

Classical post-processing techniques (e.g. zero-noise extrapolation, probabilistic error cancellation) that reduce the bias that noise causes in measured expectation values, without full error correction. They typically cost extra repetitions that grow exponentially with circuit size, so they suit only modest circuits.

In the folio: Quantum Algorithms › From problem to answerSee also Quantum error correction, Noisy intermediate-scale quantum

Verification

Checking that a quantum computer's output is correct. Some outputs are easy to check classically, such as factors (multiply them), but most, such as a simulated energy or sampled distribution, are not; the folio insists "verification is part of the application", and lists verifying classically uncheckable results as an open problem.

In the folio: Quantum Algorithms › From problem to answerSee also Shor's algorithm, Quantum echoes, Beyond-classical computation

Hamiltonian simulation

Computing the time evolution under a Hamiltonian , Feynman's original motivation and "still the most natural application". Lloyd (1996) showed that local Hamiltonians can be simulated efficiently on a universal quantum computer, giving exponential speed-ups over classical methods; no data-loading penalty applies because the input is a compact description of .

In the folio: Quantum Algorithms › Simulating quantum systemsSee also Product formula, Qubitisation, Local Hamiltonian, Quantum phase estimation

Local Hamiltonian

A Hamiltonian that is a sum of terms each acting on only a few particles or qubits, as in physical systems with short-range interactions. Its description grows only polynomially with system size, which makes it "the natural input" for quantum simulation.

, each acting on qubits

In the folio: Quantum Algorithms › The algorithm mapSee also Hamiltonian simulation, Product formula

Product formulaTrotter–Suzuki

A simulation method that splits and approximates by repetitions of short evolutions under each part separately. It is "simple, hardware-friendly", and higher-order (Suzuki) formulas reduce the error; for the first-order (Lie–Trotter) formula the error scales with the commutator .

In the folio: Quantum Algorithms › Simulating quantum systemsSee also Trotter error, Hamiltonian simulation, Qubitisation

Trotter error

The error of a product formula, arising because and do not commute. For first order it falls as , so the number of steps needed for fixed accuracy grows with the simulation time and the size of the commutator.

In the folio: Quantum Algorithms › Simulating quantum systemsSee also Product formula

Qubitisation

A technique (Low and Chuang) that turns a block encoding of into a quantum walk whose eigenphases are functions of 's eigenvalues, enabling simulation and phase estimation with optimal query cost. It underlies the FeMoco estimate in the folio's resource table.

cost (folio; optimal is )

In the folio: Quantum Algorithms › Simulating quantum systemsSee also Block encoding, Normalisation, Quantum signal processing, FeMoco

Ground-state problem

Finding the lowest-energy eigenstate and energy of a Hamiltonian, central to chemistry and materials. Phase estimation solves it efficiently only if one can prepare a state with substantial overlap with the true ground state; in general (the local Hamiltonian problem) it is believed hard even for quantum computers.

In the folio: Quantum Algorithms › Simulating quantum systemsSee also Overlap, Quantum phase estimation, Variational quantum eigensolver

Overlap

The squared inner product between the trial state fed into phase estimation and the true ground state ; it is the probability that phase estimation returns the ground-state energy. A small overlap means many repetitions, so "a good initial guess is essential", and preparing one is listed as an open problem.

success probability

In the folios: Quantum Algorithms › Simulating quantum systems; Quantum AI › Quantum kernelsSee also Ground-state problem, State preparation, Quantum phase estimation, Quantum kernel, Ket notation

FeMoco

The iron–molybdenum cofactor, the active site of the nitrogenase enzyme by which bacteria fix atmospheric nitrogen into ammonia at room temperature. Its strongly correlated electronic structure defeats classical methods, making it a benchmark for quantum chemistry: about 4 million physical qubits, about 4 days, with phase estimation and qubitisation (Lee et al. 2021).

In the folio: Quantum Algorithms › Resource estimatesSee also Qubitisation, Resource estimate, Ground-state problem

Block encoding

A way of representing a general (non-unitary) matrix inside a larger unitary , placing in its top-left block (" sits in a corner of "). It is the common input format of modern quantum algorithms: once is block-encoded, QSVT can apply polynomial functions to it.

In the folio: Quantum Algorithms › One framework: block encodings and QSVTSee also Subnormalisation, Quantum singular value transformation, Qubitisation

Subnormalisation

The scale factor needed so that fits inside a unitary. Larger means the useful signal is smaller, and algorithm costs grow in proportion to it.

In the folio: Quantum Algorithms › One framework: block encodings and QSVTSee also Block encoding, Normalisation

Quantum singular value transformationQSVT

A framework (Gilyén, Su, Low and Wiebe, 2019) that, using calls to a block encoding interleaved with single-qubit phase rotations, applies a degree- polynomial to the singular values of . "Choosing the polynomial selects the algorithm": search, Hamiltonian simulation (), linear systems () and eigenvalue filtering (sign function) all become special cases, with cost set by how well a low-degree polynomial approximates the target.

,

In the folio: Quantum Algorithms › One framework: block encodings and QSVTSee also Block encoding, Quantum signal processing, Eigenvalue filtering, HHL algorithm

Quantum signal processingQSP

The single-qubit precursor of QSVT (Low and Chuang, 2017): alternating a fixed signal rotation with tunable phase rotations makes a qubit's response a chosen polynomial of the signal. The phase angles are computed classically and encode which function is implemented.

In the folio: Quantum Algorithms › MilestonesSee also Quantum singular value transformation, Qubitisation

Eigenvalue filtering

Projecting a state onto the eigenvectors of a matrix whose eigenvalues lie on one side of a threshold, implemented in QSVT by a polynomial approximating the sign function (the folio shows a degree-21 polynomial). It is used to prepare ground states and to test whether an energy lies below a given value.

In the folio: Quantum Algorithms › One framework: block encodings and QSVTSee also Quantum singular value transformation, Ground-state problem

Logical qubit

A qubit encoded redundantly across many physical qubits by a quantum error-correcting code, so that its error rate can be made very low. "Logical quantum operations are far slower than classical ones": in the folio's illustration a fault-tolerant oracle call takes 0.1 s, against 1 µs for a classical one. Estimates quoted in logical qubits, such as about 2,300 for elliptic-curve P-256, exclude this overhead.

In the folios: Quantum Algorithms › Resource estimates; Building a Quantum Computer › From physical qubits to a computationSee also Physical qubit, Quantum error correction, Fault tolerance, Logical error rate, Lattice surgery

Physical qubit

An actual hardware qubit (a superconducting circuit, trapped ion, neutral atom and so on), noisy at the level of roughly one error per thousand operations. Physical-qubit counts such as "under 1 million" for RSA-2048 include all error-correction overhead and so are the numbers that hardware must reach.

In the folio: Quantum Algorithms › Resource estimatesSee also Logical qubit, Physical error rate

Quantum error correctionQEC

Encoding logical qubits in many physical qubits and repeatedly measuring error syndromes to detect and correct faults without disturbing the encoded information. The surface code, the usual basis of resource estimates, needs hundreds to thousands of physical qubits per logical qubit at physical error rates near .

In the folios: Quantum Algorithms › Resource estimates; Quantum AI › AI for quantum technology; Building a Quantum Computer › Error correction sets the scale; Quantum Hardware Engineering › Control electronicsSee also Logical qubit, Error-correction cycle, Fault tolerance, Syndrome, Decoder

Fault tolerance

The ability to run arbitrarily long computations reliably on error-corrected hardware, possible once physical error rates are below a code's threshold. Shor's algorithm "needs full fault tolerance"; whether useful algorithms can run before it is one of the folio's open problems.

In the folios: Quantum Algorithms › The algorithm map; Quantum Networking › Stages of a quantum internet; Building a Quantum Computer › From physical qubits to a computationSee also Quantum error correction, Logical qubit, Noisy intermediate-scale quantum, Quantum error-correcting code, Few-qubit fault tolerant

Error-correction cycle

One round of measuring every stabilizer of a code, after which the syndrome is passed to the decoder. Its duration sets the logical clock speed: about 1 µs on superconducting chips, but milliseconds on atom-based machines because imaging and atom transport are slow, a gap of – in wall-clock time.

per cycle (assumed)

In the folios: Quantum Algorithms › Resource estimates; Building a Quantum Computer › Speed against coherenceSee also Quantum error correction, Physical error rate, Syndrome extraction, Real-time decoding, Gates per coherence time

Physical error rate

The probability of an error per physical operation (gate, idle step or measurement), arising from decoherence, control error, leakage and loss. Today's best platforms reach ; error correction only helps when is below the code's threshold.

In the folios: Quantum Algorithms › Resource estimates; Building a Quantum Computer › Error correction sets the scaleSee also Physical qubit, Error-correction cycle, Threshold, Gate fidelity, Logical error rate

Noisy intermediate-scale quantumNISQ

John Preskill's 2018 term for today's devices of tens to a few thousand physical qubits without full error correction. Variational algorithms such as VQE and QAOA were designed for this regime; "can useful algorithms run before full fault tolerance?" remains open.

In the folio: Quantum Algorithms › Open problemsSee also Fault tolerance, Variational quantum eigensolver, Quantum approximate optimisation algorithm, Error mitigation

Break-even point

The problem size, or runtime, at which a quantum algorithm's total runtime falls below the classical one despite its slower operations. With a classical oracle call of 1 µs and a fault-tolerant quantum call of 0.1 s, a quadratic speed-up breaks even at about 3 hours of runtime and a quartic one at about 5 s.

, runtime s

In the folio: Quantum Algorithms › Speed-ups and the real costSee also Quadratic speed-up, Super-quadratic speed-up, Classical parallelism

Classical parallelism

Spreading a classical computation over many processors. Brute-force search parallelises almost perfectly, which pushes the quantum break-even point even later; the folio's break-even times are "before accounting for classical parallelism".

In the folio: Quantum Algorithms › Speed-ups and the real costSee also Break-even point, Quadratic speed-up

Resource estimate

An end-to-end count of the qubits, gates and wall-clock time a fully compiled, error-corrected algorithm needs for a concrete problem instance. Such estimates "turn asymptotic speed-ups into qubits and hours", and have fallen steadily, e.g. RSA-2048 from 20 million physical qubits in 2019 to under 1 million in 2025.

In the folio: Quantum Algorithms › Resource estimatesSee also RSA-2048, FeMoco, Logical qubit, Physical qubit

RSA-2048

The RSA public-key cryptosystem with a 2048-bit modulus, whose security rests on the difficulty of factoring; factoring it with Shor's algorithm is the standard benchmark for fault-tolerant machines. Gidney (2025) estimated under one million noisy qubits running for under a week, assuming , a 1 µs cycle and a planar grid; earlier estimates required about 20 million.

In the folios: Quantum Algorithms › Resource estimates; Building a Quantum Computer › Overhead: how many qubits?See also Shor's algorithm, Resource estimate, Elliptic-curve cryptography, Logical qubit

Elliptic-curve cryptographyECC, P-256

Public-key cryptography based on the discrete logarithm problem in the group of points on an elliptic curve; P-256 is the standard NIST 256-bit curve used in TLS and digital signatures. Shor's algorithm breaks it with about 2,300 logical qubits (Roetteller et al. 2017), fewer than RSA-2048 needs.

In the folios: Quantum Algorithms › Resource estimates; Quantum Communications › The quantum threat, two answersSee also Discrete logarithm, Shor's algorithm, RSA-2048, RSA

Discrete logarithm

The problem of finding from . It is believed to be hard for classical computers but is solved efficiently by Shor's algorithm. Liu, Arunachalam & Temme (2021) built a classification task on it for which a quantum kernel has a rigorous, noise-robust speed-up. The task is constructed for this purpose rather than drawn from practice.

In the folios: Quantum Algorithms › The algorithm map; Quantum AI › Quantum kernelsSee also Shor's algorithm, Elliptic-curve cryptography, Hidden structure, Quantum kernel, Exponential separation

Complexity class

A set of decision problems solvable within a given resource bound on a given model of computation, such as polynomial time on a classical (P) or quantum (BQP) computer. The folio's Venn diagram shows the widely believed relationships among P, NP, BQP and PSPACE; "none of the separations is proven".

In the folio: Quantum Algorithms › What quantum computers can solveSee also P, NP, BQP, PSPACE

BQP

"Bounded-error quantum polynomial time": problems a quantum computer can solve in polynomial time with error probability at most 1/3 (any constant below 1/2 works, since repetition reduces it). It contains P and factoring, is contained in PSPACE, and is believed not to contain the NP-complete problems.

(proven)

In the folio: Quantum Algorithms › What quantum computers can solveSee also P, NP, NP-complete, Polynomial hierarchy

P

The class of decision problems solvable by a deterministic classical computer in time polynomial in the input size, the usual meaning of "efficiently solvable" classically. P lies inside both NP and BQP.

In the folio: Quantum Algorithms › What quantum computers can solveSee also BQP, NP, Complexity class

NP

"Nondeterministic polynomial time": decision problems whose yes-answers have a certificate that can be checked in polynomial time. Factoring (as a decision problem) is in NP but not believed NP-complete, so it can sit in the overlap of NP and BQP.

In the folio: Quantum Algorithms › What quantum computers can solveSee also NP-complete, P, BQP

NP-complete

The hardest problems in NP, such as Boolean satisfiability or the travelling-salesman decision problem: any NP problem reduces to them in polynomial time. "Quantum computers are not expected to solve NP-complete problems efficiently"; Grover search gives at most a quadratic speed-up over brute force.

In the folio: Quantum Algorithms › What quantum computers can solveSee also NP, BQP, BBBV lower bound

PSPACE

The class of problems solvable with polynomial memory, with no limit on time. It contains P, NP, BQP and the polynomial hierarchy, and serves as the outer boundary in the folio's Venn diagram.

In the folio: Quantum Algorithms › What quantum computers can solveSee also BQP, Polynomial hierarchy, Complexity class

Polynomial hierarchyPH

A tower of complexity classes generalising NP with alternating "there exists"/"for all" quantifiers; it lies inside PSPACE. Where BQP sits relative to NP and PH is open, although Raz and Tal (2018) showed an oracle relative to which BQP is not contained in PH.

In the folio: Quantum Algorithms › Open problemsSee also BQP, NP, PSPACE

Bounded error

The requirement that an algorithm return the correct answer with probability at least some constant above 1/2 (conventionally 2/3). Because quantum algorithms are inherently probabilistic, this is the natural notion of correctness; repeating and taking a majority vote drives the error down exponentially.

In the folio: Quantum Algorithms › What quantum computers can solveSee also BQP

Quantum walk

The quantum analogue of a random walk on a graph, evolving coherently rather than stochastically, so it spreads quadratically faster. It gives speed-ups for graph and search problems, up to exponential "only for specially structured problems", as in the 2003 glued-trees algorithm of Childs and co-workers.

In the folio: Quantum Algorithms › The algorithm mapSee also Speed-up, Qubitisation, Amplitude amplification

HHL algorithmHHL

The 2009 quantum algorithm of Harrow, Hassidim and Lloyd for linear systems . It prepares a state proportional to the solution in time polylogarithmic in the dimension for sparse, well-conditioned matrices, and it underlies many claimed exponential speed-ups for ML. The folio rates such linear-algebra speed-ups "doubtful in practice" because of loading, readout and dequantisation.

cost (sparsity , condition number , precision )

In the folios: Quantum Algorithms › The algorithm map; Quantum AI › MilestonesSee also Condition number, Data-loading problem, Output readout, Quantum singular value transformation, Readout problem

Condition number

The ratio of the largest to the smallest singular value of a matrix, measuring how sensitive the solution of is to errors. Quantum linear-system algorithms cost at least linear in , so the "conditioning" caveat means ill-conditioned problems lose the speed-up.

In the folios: Quantum Algorithms › The algorithm map; Quantum AI › The fine printSee also HHL algorithm

Variational quantum eigensolverVQE

A hybrid algorithm (Peruzzo et al., 2014) in which a shallow parametrised quantum circuit prepares trial states, their energy is measured, and a classical optimiser adjusts the parameters to minimise it. Aimed at ground states on noisy hardware, it is heuristic: "no performance guarantees" and stiff competition from classical methods.

In the folios: Quantum Algorithms › The algorithm map; Quantum AI › MilestonesSee also Quantum approximate optimisation algorithm, Heuristic algorithm, Ground-state problem, Noisy intermediate-scale quantum, Parameterised quantum circuit

Quantum approximate optimisation algorithmQAOA

A variational algorithm (Farhi, Goldstone & Gutmann, 2014) for combinatorial optimisation. It alternates layers that apply the problem's cost Hamiltonian and a mixing Hamiltonian, with angles tuned by a classical optimiser. The folio lists it as "unproven": there is no demonstrated scaling advantage over the best classical solvers.

In the folios: Quantum Algorithms › The algorithm map; Quantum AI › Status of the claimsSee also Variational quantum eigensolver, Heuristic algorithm, Quantum annealing, Classical optimiser

Heuristic algorithm

An algorithm that often works well in practice but has no proven guarantee on accuracy or running time. The folio labels VQE and QAOA "heuristic" because their advantage, if any, can be established only empirically against the best classical heuristics.

In the folio: Quantum Algorithms › The algorithm mapSee also Variational quantum eigensolver, Quantum approximate optimisation algorithm

Universal quantum computer

A quantum machine able to simulate any other quantum computation efficiently, the quantum analogue of a universal Turing machine. David Deutsch defined it in 1985, founding quantum computation as a field.

In the folio: Quantum Algorithms › MilestonesSee also Deutsch–Jozsa algorithm, Quantum circuit

Deutsch–Jozsa algorithm

The 1992 algorithm that decides with a single oracle query whether a Boolean function is constant or balanced, a task needing up to queries for a deterministic classical computer. It gave the first "oracle separation from deterministic computing", though a randomised classical algorithm also does well.

In the folio: Quantum Algorithms › MilestonesSee also Oracle separation, Simon's algorithm, Universal quantum computer

Simon's algorithm

Daniel Simon's 1994 algorithm that finds a hidden XOR-period of a function, with , in about queries, while any classical randomised algorithm needs about . It was the first exponential separation from probabilistic classical computing and the direct inspiration for Shor's algorithm.

In the folio: Quantum Algorithms › MilestonesSee also Oracle separation, Hidden structure, Shor's algorithm

05Communications and cryptography

The limits of light as a channel, quantum key distribution and the attacks on it, and the post-quantum alternative.

RSA

The Rivest–Shamir–Adleman public-key cryptosystem, whose security rests on the difficulty of factoring the product of two large primes. A large fault-tolerant quantum computer running Shor's algorithm would factor such numbers efficiently, so RSA is not quantum-safe.

In the folio: Quantum Communications › The quantum threat, two answersSee also Shor's algorithm, Post-quantum cryptography

Harvest now, decrypt later

The strategy of recording encrypted traffic today and storing it until a quantum computer can decrypt it. It means that data with a long secrecy lifetime is already at risk, even before such a machine exists: "the clock is already running".

In the folio: Quantum Communications › The quantum threat, two answersSee also Mosca's inequality, Cryptanalytic quantum computer

Mosca's inequality

A planning rule due to Michele Mosca. Let be the time data must stay secret, the time needed to migrate to quantum-safe cryptography, and the time until a cryptanalytic quantum computer exists. If , some data will be exposed, so migration must start now.

act if

In the folio: Quantum Communications › The quantum threat, two answersSee also Harvest now, decrypt later, Post-quantum cryptography

Cryptanalytic quantum computerCRQC

A quantum computer large and reliable enough (that is, fault-tolerant) to run Shor's algorithm against keys of practical size, such as 2048-bit RSA. Often called a cryptographically relevant quantum computer. No such machine exists yet; the uncertain date of its arrival is in Mosca's inequality.

In the folio: Quantum Communications › The quantum threat, two answersSee also Shor's algorithm, Mosca's inequality

Post-quantum cryptographyPQC

Classical public-key algorithms believed to resist both classical and quantum attack. They rest on mathematical problems such as hard lattice and hash problems, for which no efficient quantum algorithm is known. PQC runs as software on existing networks with unlimited reach, but its security is computational, not physical. The folio notes that French, German, Dutch and Swedish security agencies (2024) advise prioritising it.

In the folio: Quantum Communications › The quantum threat, two answersSee also NIST FIPS 203–205, Lattice-based cryptography, Quantum key distribution

Lattice-based cryptography

Cryptography whose security rests on hard problems in high-dimensional lattices, such as learning with errors (finding a short or closest vector). These problems are believed to be hard even for quantum computers. They underlie the NIST standards ML-KEM (FIPS 203) and ML-DSA (FIPS 204).

In the folio: Quantum Communications › The quantum threat, two answersSee also Post-quantum cryptography, NIST FIPS 203–205, Hash-based signature

Hash-based signature

A digital signature built only from a cryptographic hash function, so its security needs nothing beyond the hash being hard to invert or collide. It is the most conservative post-quantum option and is standardised by NIST as SLH-DSA (FIPS 205, based on SPHINCS+).

In the folio: Quantum Communications › The quantum threat, two answersSee also Post-quantum cryptography, NIST FIPS 203–205

Holevo limit

The maximum rate of classical information that can be sent through a quantum channel, allowing any encoding into quantum states and any measurement, including joint measurements over many symbols. For the lossy optical channel it was computed by Giovannetti et al. (2004). It exceeds the capacity of any conventional homodyne or heterodyne receiver, most dramatically at low photon numbers.

bits per mode

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Pure-loss channel, Bose entropy function, Joint detection, Bits per photon

Pure-loss channel

The simplest model of an optical link: a beam splitter of transmissivity that passes a fraction of the light and adds only vacuum noise, with no thermal or excess noise. Its classical capacity is bits per mode for mean transmitted photon number .

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Holevo limit, Transmissivity, Bose entropy function

Mean photon number,

The average number of photons per optical mode (per symbol). The folio uses for the transmitted value and for the received value; for a coherent state, . In weak-light communication and QKD it is often far below one.

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Coherent state, Optical mode, Bits per photon

Optical mode

One degree of freedom of the electromagnetic field, defined by its frequency, polarisation, spatial profile and time slot. One use of a channel sends one mode, so capacities are quoted in bits per mode.

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Mean photon number, Holevo limit

Bose entropy function

The von Neumann entropy, in bits, of a thermal (Bose–Einstein) state of one mode with mean photon number . It gives the classical capacity of the pure-loss channel when evaluated at the received photon number .

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Holevo limit, Pure-loss channel

Homodyne detection

Measurement of one quadrature of an optical field by interfering it with a strong local oscillator of the same frequency and phase on a balanced detector. It is the standard coherent receiver and the measurement used in CV-QKD. With Gaussian signals its capacity is bits per mode, at most bits per photon.

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Heterodyne detection, Coherent receiver, Continuous-variable QKD, Standard quantum limit

Heterodyne detection

Simultaneous measurement of both quadratures of an optical field, using a local oscillator offset in frequency (or two homodynes). Measuring both quadratures adds a unit of vacuum noise. Its capacity is bits per mode, at most bits per photon.

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Homodyne detection, Coherent receiver

Coherent receiver

A conventional optical receiver that mixes the signal with a local oscillator, that is, a homodyne or heterodyne receiver, as in modern fibre telecom. Its performance is limited by shot noise, and it falls well short of the Holevo limit at low photon numbers.

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Homodyne detection, Heterodyne detection, Holevo limit

Photon counting

Direct detection of individual photons with single-photon detectors, recording clicks rather than field amplitudes. Combined with pulse-position modulation, it beats coherent detection in the photon-starved regime. It is also the basis of the Kennedy and Dolinar receivers.

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Pulse-position modulation, Kennedy receiver, Dolinar receiver, Single-photon avalanche diode

Pulse-position modulationPPM

A modulation format in which each symbol is a single optical pulse placed in one of time slots, so one detected photon carries bits. Read out by photon counting, it gives many bits per photon. Deep-space optical links use it for exactly this reason.

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Photon counting, Bits per photon

Joint detection

A collective quantum measurement made on many received symbols together, rather than on each symbol separately. Also called a joint or collective measurement. Reaching the Holevo limit generally requires it, and building practical joint-detection receivers is an open problem.

In the folio: Quantum Communications › Light as a channel: the Holevo limitSee also Holevo limit

Non-orthogonal states

Quantum states with nonzero overlap , which no measurement can distinguish with certainty. This limits optical receivers, because coherent states are never orthogonal. It also protects QKD, because an eavesdropper cannot read the states without errors.

In the folio: Quantum Communications › Quantum-limited detectionSee also Helstrom bound, Coherent state, BB84

Coherent state

The quantum state of an ideal laser mode, labelled by a complex amplitude with mean photon number and Poisson photon statistics. Two coherent states always overlap, which is why weak optical signals cannot be read perfectly.

In the folio: Quantum Communications › Quantum-limited detectionSee also Non-orthogonal states, Binary phase-shift keying, Weak coherent pulse

Binary phase-shift keyingBPSK

Encoding one bit per symbol in the optical phase, sending or . It is the textbook case for comparing optical receivers against the Helstrom bound.

In the folio: Quantum Communications › Quantum-limited detectionSee also Coherent state, Helstrom bound

Helstrom bound

The minimum error probability for distinguishing two equally likely quantum states, set by quantum mechanics and reached by an optimal measurement (Helstrom, Quantum Detection and Estimation Theory, 1976). For BPSK coherent states it falls as about , far below homodyne detection.

In the folio: Quantum Communications › Quantum-limited detectionSee also Non-orthogonal states, Dolinar receiver, Standard quantum limit

Standard quantum limitSQL

In optical detection, the error performance of an ideal conventional (homodyne) receiver, limited by shot noise, also called the shot-noise limit. For BPSK it is . Receivers using photon counting and feedback can beat it.

In the folio: Quantum Communications › Quantum-limited detectionSee also Homodyne detection, Kennedy receiver, Dolinar receiver

Kennedy receiver

A BPSK receiver proposed by R. S. Kennedy (1973). It adds a local field that displaces to vacuum and to , then counts photons. Its error beats homodyne detection above a fraction of a photon per symbol but stays a factor two above the Helstrom bound.

In the folio: Quantum Communications › Quantum-limited detectionSee also Dolinar receiver, Helstrom bound, Photon counting

Dolinar receiver

A receiver proposed by S. Dolinar (1973) that reaches the Helstrom bound for two coherent states. It combines photon counting with real-time feedback that adjusts the displacement field after each detection. It was demonstrated in 2007 (Cook, Martin and Geremia, Nature 446, 774), beating the shot-noise limit.

In the folio: Quantum Communications › Quantum-limited detectionSee also Helstrom bound, Kennedy receiver, Standard quantum limit

Trusted device

A component whose behaviour is assumed to match its model: "trusted, characterised" on the folio, as opposed to "untrusted, may be adversarial". Each QKD family removes a different component from the trusted set. MDI-QKD removes the detectors and device-independent QKD removes everything except the observed Bell violation. Each step trades rate and complexity for weaker assumptions.

In the folio: Quantum Communications › QKD protocol familiesSee also Measurement-device-independent QKD, Device-independent QKD, Implementation attack

Decoy states

A countermeasure to the photon-number-splitting attack (Hwang 2003; Lo, Ma and Chen 2005). Alice randomly varies the intensity of her pulses, and the statistics of these decoy pulses let her bound the yield and error of the single-photon component. This makes BB84 with an attenuated laser nearly as secure and efficient as with a true single-photon source. The folio's record for decoy-state BB84 is 421 km fibre (2018).

In the folio: Quantum Communications › QKD protocol familiesSee also BB84, Photon-number splitting, Decoy-state key rate

Entanglement-based QKD

QKD in which a source distributes entangled photon pairs to Alice and Bob, who measure them in random bases. Because security can be verified from the correlations, the source itself may be untrusted. Examples are E91 and BBM92. The folio's record is 1,120 km via satellite (2020).

In the folio: Quantum Communications › QKD protocol familiesSee also E91, BBM92, Micius satellite

BBM92

The entanglement-based version of BB84 (Bennett, Brassard and Mermin, 1992). Alice and Bob measure entangled pairs in two bases and sift as in BB84, checking the error rate instead of a Bell inequality. It showed that prepare-and-measure and entanglement-based QKD are equivalent.

In the folio: Quantum Communications › QKD protocol familiesSee also BB84, E91, Entanglement-based QKD

Continuous-variable QKDCV-QKD

QKD that encodes key in the continuous quadrature amplitudes of coherent states and reads them with homodyne or heterodyne detection rather than single-photon detectors. It uses standard telecom components but is more sensitive to loss. The folio's record is 202 km fibre (2020).

In the folio: Quantum Communications › QKD protocol familiesSee also GG02, Homodyne detection, Coherent state

GG02

The Gaussian-modulated coherent-state CV-QKD protocol of Grosshans and Grangier (Phys. Rev. Lett. 88, 057902, 2002). Alice sends coherent states with Gaussian-distributed quadratures and Bob measures with homodyne detection.

In the folio: Quantum Communications › QKD protocol familiesSee also Continuous-variable QKD, Coherent state

Measurement-device-independent QKDMDI-QKD

A protocol (Lo, Curty and Qi, Phys. Rev. Lett. 108, 130503, 2012) in which Alice and Bob each send states to an untrusted central relay that performs a Bell-state measurement and announces the result. Because security does not depend on how the measurement is made, all detector attacks are removed. The folio's record is 404 km fibre (2016).

In the folio: Quantum Communications › QKD protocol familiesSee also Trusted device, Detector blinding, Twin-field QKD

Twin-field QKDTF-QKD

A variant of MDI-QKD (Lucamarini et al., Nature 557, 400, 2018) in which Alice and Bob send phase-coherent weak fields that interfere at a central relay. A single-photon detection there correlates their phases. The key rate scales as rather than , beating the repeaterless bound without a quantum repeater. The folio's record is 1,002 km of fibre (2023).

rate

In the folios: Quantum Communications › QKD protocol families; Quantum Networking › Loss sets the rateSee also Measurement-device-independent QKD, Repeaterless bound, Transmissivity, Middle station, Quantum key distribution

Device-independent QKDDI-QKD

QKD whose security follows only from the observed violation of a Bell inequality, treating Alice's and Bob's devices as black boxes that may be adversarial. It needs a loophole-free Bell violation with high detection efficiency, so rates are still far from practical. The folio gives demonstrations over 400 m (atoms) and 2 m (ions) in 2022.

In the folios: Quantum Communications › QKD protocol families; Quantum Networking › What quantum networks enableSee also Bell violation, E91, Trusted device, Loophole-free Bell test, Quantum key distribution

Bell violation

Correlations between measurements on separated systems that exceed the bound obeyed by any local hidden-variable model, as tested by a Bell (for example CHSH) inequality. A violation certifies entanglement and that outcomes are unpredictable to any third party. A loophole-free violation closes the detection and locality loopholes, and is what device-independent QKD and certified randomness require.

In the folio: Quantum Communications › QKD protocol familiesSee also Device-independent QKD, E91, Quantum random number generator

Raw key

The string of detection events ("clicks") and corresponding settings recorded during transmission, before sifting, error correction and privacy amplification. It is noisy and partly known to Eve, and post-processing turns it into a much shorter secret key.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Sifting, Privacy amplification

Parameter estimation

Labelled "Estimation" on the folio. Alice and Bob reveal a random sample of the sifted key to measure the quantum bit error rate and the photon statistics, including the decoy-state yields. These numbers bound how much Eve can know and so set how much key to discard.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Quantum bit error rate, Decoy states, Privacy amplification

LDPC code

A low-density parity-check code: a linear error-correcting code with a sparse parity-check matrix, decoded iteratively by belief propagation. It operates close to the Shannon limit with a single round of communication, so it is widely used for QKD error correction.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Error correction, Reconciliation efficiency

Cascade

An interactive error-correction protocol (Brassard and Salvail, 1993). The key is shuffled and split into blocks, block parities are compared, and errors are located by binary search over several passes. It is very efficient but needs many rounds of communication.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Error correction, LDPC code

Reconciliation efficiency

The ratio of the information actually disclosed during error correction to the Shannon minimum ; is ideal. The folio uses a practical , which lowers the error threshold for positive key from 11% to about 10%.

leakage bits per bit

In the folio: Quantum Communications › From raw clicks to a secret keySee also Error correction, Secret fraction

Universal hashing

A family of hash functions in which any two distinct inputs collide with probability at most for an -bit output, when the function is chosen at random. Toeplitz-matrix hashing is a common example. The leftover hash lemma guarantees that it extracts nearly uniform, secret key.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Privacy amplification

Decoy-state key rate

The asymptotic secret-key rate per pulse of BB84 with weak coherent pulses and decoy states, from the GLLP analysis (Gottesman, Lo, Lütkenhaus and Preskill, 2004) as made practical by Lo, Ma and Chen (2005). Only single-photon pulses contribute secret key, while error correction must be paid on all detected signals.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Gain and error rate, Decoy states, Binary entropy, Reconciliation efficiency

Gain and error rate, , ,

In decoy-state QKD, the gain is the probability that a signal pulse of mean photon number produces a detection, and is the error rate among those detections; both are measured. and are the gain and error rate of the single-photon component, which cannot be measured directly and are bounded using decoys.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Decoy-state key rate, Decoy states

Secret fraction

The fraction of sifted bits that survives as secret key after error correction and privacy amplification, plotted on the folio against . With ideal error correction it falls to zero at , and with slightly earlier.

(BB84, single photons)

In the folio: Quantum Communications › From raw clicks to a secret keySee also Quantum bit error rate, Reconciliation efficiency

Composable security

A security definition under which a key that is secure on its own remains secure when used inside any larger protocol, for example as a one-time pad. It is formalised by requiring the real key to be -close to an ideal, uniform key unknown to Eve.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Security parameter, Finite-key analysis

Security parameter

The maximum distance (in trace distance) between the real key state and a perfect key. It bounds the probability that the key fails in any way, so the protocol is called -secure. The folio quotes as typical.

typically

In the folio: Quantum Communications › From raw clicks to a secret keySee also Composable security, Finite-key analysis

Finite-key analysis

Security analysis that accounts for the statistical uncertainty of estimating parameters from a finite number of signals. It yields a shorter key than asymptotic formulas, and it is required for a real, composably secure key.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Composable security, Security parameter, Parameter estimation

Key growing

The folio's warning box "Key growing, not key creation": QKD needs an authenticated public channel. Authentication consumes a short pre-shared key, or relies on a post-quantum signature. QKD therefore expands an existing secret into a long one; it cannot start one between strangers.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Authenticated classical channel, Quantum key distribution

Authenticated classical channel

A public channel whose messages cannot be forged or altered, though they may be read. QKD's sifting, estimation and error-correction messages must travel over one, typically protected by information-theoretic (Wegman–Carter) authentication using a pre-shared key. Without it, Eve could impersonate Alice to Bob and Bob to Alice.

In the folio: Quantum Communications › From raw clicks to a secret keySee also Key growing

Fibre attenuation, dB/km

The loss of optical power per unit length in optical fibre, about 0.2 dB/km for standard single-mode fibre at the 1,550 nm telecom wavelength, mainly from Rayleigh scattering. Ultra-low-loss fibre reaches about 0.16 dB/km. At 0.2 dB/km, 100 km costs 20 dB (1%), and 600 km costs 120 dB.

standard 0.2 dB/km; ultra-low-loss 0.16 dB/km

In the folios: Quantum Communications › Links: fibre, air and space; Quantum Networking › Light carries the qubitsSee also Decibel, Transmissivity, Free-space diffraction loss, C band, O band

Free-space diffraction loss

In the far field a beam spreads by diffraction, so the fraction caught by a receiving telescope falls only as , not exponentially. That makes long satellite links less lossy than equally long fibre. and are the transmitter and receiver telescope diameters, the wavelength and the distance.

In the folio: Quantum Communications › Links: fibre, air and spaceSee also Satellite QKD, Fibre attenuation

Satellite QKD

QKD between a satellite and ground stations through free space, exploiting diffraction-limited rather than exponential loss to span continental distances. Atmospheric turbulence, pointing errors and daylight background add loss and noise, so most links operate at night. The folio gives the Micius downlink loss as 22–35 dB over 645–1,200 km slant range.

In the folios: Quantum Communications › Links: fibre, air and space; Quantum Networking › MilestonesSee also Micius satellite, Free-space diffraction loss, Slant range, Jinan-1, Trusted node

Slant range

The line-of-sight distance between a satellite and a ground station, which is longer than the satellite's altitude except directly overhead. For Micius (orbit about 500 km) the folio gives 645–1,200 km.

In the folio: Quantum Communications › Links: fibre, air and spaceSee also Satellite QKD, Micius satellite

Trusted nodetrusted repeater

An intermediate station that runs separate QKD links to each neighbour and passes keys along by one-time-pad encryption. Called a trusted relay on the folio, it holds every key in the clear and must therefore be physically secure. Trusted nodes extend QKD beyond the roughly 100 km reach of a single link, but they weaken its end-to-end guarantee. Removing them needs quantum repeaters.

In the folios: Quantum Communications › Links: fibre, air and space; Quantum Networking › Stages of a quantum internetSee also Chinese integrated quantum network, Quantum key distribution, Repeaterless bound, Stages of a quantum internet, Jinan-1

Implementation attack

An attack, often called quantum hacking, that exploits the gap between the idealised device model in a security proof and real hardware, rather than breaking the protocol itself. Examples are photon-number splitting, detector blinding, Trojan-horse and time-shift attacks. Countermeasures, MDI and DI protocols, and certification all address it.

In the folio: Quantum Communications › Attacks on real devicesSee also Photon-number splitting, Detector blinding, Trojan-horse attack, Time-shift attack

Weak coherent pulseWCP

A strongly attenuated laser pulse used in place of a true single photon, with mean photon number typically below one. Its photon number is Poisson-distributed, so some pulses carry two or more photons. That is the weakness exploited by photon-number splitting.

In the folio: Quantum Communications › Attacks on real devicesSee also Coherent state, Photon-number splitting, Decoy states

Photon-number splittingPNS

An attack on QKD with weak laser pulses: Eve splits off and keeps one photon from each multi-photon pulse and forwards the rest. She measures her copy after the bases are announced, learning the bit without causing errors. Decoy states reveal the attack (Hwang 2003; Lo, Ma and Chen 2005).

In the folio: Quantum Communications › Attacks on real devicesSee also Weak coherent pulse, Decoy states

Single-photon avalanche diodeSPAD

A photodiode biased above breakdown so that a single absorbed photon triggers a macroscopic avalanche current, the "click". InGaAs SPADs are the usual detectors in fibre QKD. Bright light can push them into a classical, linear mode, which is the basis of detector blinding.

In the folio: Quantum Communications › Attacks on real devicesSee also Detector blinding, Photon counting

Detector blinding

An attack in which Eve shines bright light on Bob's single-photon avalanche detectors so that they act as classical, linear detectors. She then sends tailored pulses that dictate which detector clicks, so she controls the key without causing errors. It was demonstrated on commercial systems by Lydersen et al. (Nat. Photon. 4, 686, 2010). Countermeasures are MDI-QKD and monitoring the detector photocurrent.

In the folio: Quantum Communications › Attacks on real devicesSee also Single-photon avalanche diode, Measurement-device-independent QKD, Implementation attack

Trojan-horse attack

An attack in which Eve injects probe light into Alice's (or Bob's) equipment and reads the modulator setting from the back-reflection. Countermeasures are optical isolators, filters and power monitors at the transmitter.

In the folio: Quantum Communications › Attacks on real devicesSee also Implementation attack, Optical isolator

Optical isolator

A non-reciprocal device, usually based on the Faraday effect, that passes light in one direction and strongly attenuates it in the other. In QKD transmitters it blocks injected probe light used in Trojan-horse attacks.

In the folio: Quantum Communications › Attacks on real devicesSee also Trojan-horse attack

Time-shift attack

An attack exploiting detector efficiency mismatch: if Bob's two detectors (, ) have efficiencies that peak at slightly different times, Eve can shift photon arrival times to bias which one clicks. This gives her partial information without measuring the photons (proposed by Qi et al. 2007). Countermeasures are symmetrised detection and random detector assignment.

In the folio: Quantum Communications › Attacks on real devicesSee also Detector efficiency mismatch, Implementation attack

Detector efficiency mismatch

A difference between the detection efficiencies of Bob's detectors as a function of time, frequency or another degree of freedom. It breaks the assumption that a click does not reveal which basis or bit is likely, and it enables the time-shift attack.

In the folio: Quantum Communications › Attacks on real devicesSee also Time-shift attack

Quantum random number generatorQRNG

A device that draws random numbers from quantum measurement outcomes, such as photon arrival times or vacuum fluctuations, whose unpredictability is fundamental rather than chaotic. With a Bell violation, the randomness can be certified even if the device is untrusted (device-independent randomness).

In the folio: Quantum Communications › Beyond key distributionSee also Bell violation, Device-independent QKD

Quantum digital signatureQDS

A signature scheme (Gottesman and Chuang 2001) in which a message is signed with quantum states. Non-repudiation and transferability then rest on physics rather than computational hardness. Non-repudiation means the signer cannot deny a signature; transferability means a recipient can forward it and it will be accepted.

In the folio: Quantum Communications › Beyond key distributionSee also Post-quantum cryptography, Hash-based signature

Conference key agreement

Distribution of one common secret key to more than two parties at once, for example by measuring a shared multipartite GHZ-type entangled state.

In the folio: Quantum Communications › Beyond key distributionSee also GHZ state, Quantum secret sharing

Quantum secret sharing

A protocol that splits a secret among several parties using entanglement, so that only authorised groups can rebuild it and no subset outside them learns anything. It was first proposed by Hillery, Bužek and Berthiaume (1999) using GHZ states.

In the folio: Quantum Communications › Beyond key distributionSee also GHZ state, Conference key agreement

GHZ state

The Greenberger–Horne–Zeilinger state, a maximally entangled state of three or more qubits. Its perfect multi-party correlations are the resource behind conference keys and quantum secret sharing.

In the folio: Quantum Communications › Beyond key distributionSee also Conference key agreement, Quantum secret sharing

Quantum secure direct communicationQSDC

Transmission of a message itself, rather than a key, directly on quantum states, with eavesdropping detected before the message is revealed. An early protocol is that of Long and Liu (2002).

In the folio: Quantum Communications › Beyond key distributionSee also Quantum key distribution

Conjugate coding

Stephen Wiesner's idea, from about 1970 and published in 1983, of encoding information in two conjugate bases so that reading one destroys the other. It was proposed for unforgeable quantum money and inspired BB84. The first QKD experiment followed in 1989, over 32 cm in air.

In the folio: Quantum Communications › MilestonesSee also BB84, Non-orthogonal states

06Networking

Photons, memories and repeaters, and the protocol stack being built for a quantum internet.

Quantum network

A network whose job is to share entanglement between distant nodes, not to move classical data. Shared entanglement is then used up for tasks such as key distribution, teleporting qubits, blind or distributed computing and sensing. The no-cloning theorem rules out the classical toolkit of amplifying, copying and retransmitting signals, so loss and errors have to be handled in new ways.

In the folio: Quantum Networking › Why quantum networks differSee also Bell pair, No-cloning theorem, Quantum internet, Entanglement distribution

Entanglement distribution

Creating entangled pairs shared between distant parties, usually by sending one or both photons of a pair through fibre or free space. In the stages of a quantum internet it is the step that allows device-independent protocols between end users.

In the folio: Quantum Networking › Stages of a quantum internetSee also Bell pair, Heralded entanglement, Micius satellite

Heraldingherald

A classical signal, usually a particular pattern of detector clicks, that announces that a probabilistic event such as entanglement generation has succeeded. Since lost photons cannot be resent as copies, networks "herald and retry": they attempt repeatedly and keep only the attempts that are heralded as successful.

In the folio: Quantum Networking › Heralded entanglementSee also Heralded entanglement, Classical channel, Bell measurement

Quantum error-correcting codequantum codes

A way of encoding logical qubits redundantly in many physical qubits so that errors can be detected and corrected without measuring the encoded information. In networks, codes take over from purification in second-generation repeaters and from both heralding and purification in third-generation repeaters.

In the folio: Quantum Networking › Why quantum networks differSee also Quantum repeater generations, Entanglement purification, Fault tolerance

Forward error correctionFEC

A classical technique that adds redundant parity bits to transmitted data so that the receiver can correct errors without asking for retransmission. The quantum counterparts are purification and quantum codes.

In the folio: Quantum Networking › Why quantum networks differSee also Automatic repeat request, Quantum error-correcting code

Automatic repeat requestARQ

A classical error-control scheme where the receiver acknowledges each packet and the sender resends any that are lost or corrupted. It relies on keeping a copy, which the no-cloning theorem forbids for unknown quantum states.

In the folio: Quantum Networking › Why quantum networks differSee also Forward error correction, No-cloning theorem

Cutoff time

The maximum time a stored entangled qubit is kept before it is thrown away, because its fidelity decays while the memory decoheres. Cutoffs trade rate against fidelity, and they are needed because quantum memories cannot "hold data indefinitely" the way classical buffers can.

In the folio: Quantum Networking › Why quantum networks differSee also Quantum memory, Coherence time, Routing and scheduling

Classical channel

The ordinary communication link that every quantum network needs. Heralds, swap outcomes and Pauli corrections travel over it, and entanglement alone carries no message. End-to-end latency is therefore bounded by light in fibre, about 5 µs per km.

, i.e.

In the folio: Quantum Networking › Why quantum networks differSee also Heralding, Pauli correction, No-signalling

Pauli correction

A single-qubit , or (Pauli) operation applied after a Bell-state measurement, chosen by the measurement's classical outcome, that turns the resulting state into the intended one. In teleportation and swapping the corrections can be applied only after the classical outcome arrives.

In the folio: Quantum Networking › Why quantum networks differSee also Quantum teleportation, Entanglement swapping, Bell measurement

Photonic qubitflying qubit

A qubit encoded in a degree of freedom of a single photon. Photons barely interact with their environment, so they keep their state well in transit, but they are lost, and fibre loss grows exponentially with length. The folio shows four common encodings: polarisation, time bin, frequency and path.

In the folios: Quantum Networking › Light carries the qubits; Building a Quantum Computer › The qubit and its coherence; Quantum Hardware Engineering › Photonic hardwareSee also Polarisation encoding, Time-bin encoding, Frequency encoding, Path encoding, DiVincenzo criteria

Polarisation encoding,

The qubit basis states are horizontal and vertical polarisation of a photon. It is simple to prepare and measure in free space, but in fibre the polarisation drifts with stress and temperature, so active compensation is usually needed.

In the folio: Quantum Networking › Light carries the qubitsSee also Photonic qubit, Time-bin encoding

Time-bin encoding,

The qubit basis states are a photon arriving in an early or a late time slot. Superpositions are analysed with unbalanced interferometers. This encoding is robust to polarisation drift in long fibres.

In the folio: Quantum Networking › Light carries the qubitsSee also Photonic qubit, Polarisation encoding

Frequency encoding,

The qubit basis states are two distinct optical frequencies, or colours, of a photon. It suits frequency-multiplexed links and atomic transitions with two resolved lines.

In the folio: Quantum Networking › Light carries the qubitsSee also Photonic qubit, Quantum frequency conversion

Path encodingdual-rail

The qubit basis states are a photon in one of two spatial modes, for example the two outputs of a beam splitter. It is common on integrated photonic chips, but hard to keep phase-stable over long distances.

In the folio: Quantum Networking › Light carries the qubitsSee also Photonic qubit

Quantum frequency conversion

A nonlinear-optical process, typically difference-frequency generation with a strong pump in a χ⁽²⁾ crystal or waveguide, that shifts a single photon's wavelength while preserving its qubit state. It moves visible or near-infrared photons from matter qubits (e.g. 737 → 1350 nm) into the low-loss O or C band. Its efficiency and added noise photons limit the link.

In the folio: Quantum Networking › Light carries the qubitsSee also Telecom band, Spin–photon interface, Silicon-vacancy centre

Matter qubit

A qubit stored in a material system, such as an electron or nuclear spin, an atom or an ion, rather than in light. Matter qubits can be stored, processed and measured on demand, but most emit in the visible or near infrared, where fibre is lossy.

In the folio: Quantum Networking › Light carries the qubitsSee also Communication qubit, Memory qubit, Spin–photon interface

Quantum network node

A site in the network holding a communication qubit that emits photons entangled with its spin, longer-lived memory qubits, often a frequency converter, and classical control and heralding electronics. End nodes run applications. Repeater nodes swap and purify entanglement.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Communication qubit, Memory qubit, Spin–photon interface

Spin–photon interface

A matter qubit with an optical transition that lets its spin state become entangled with an emitted photon's polarisation, time bin or frequency. It is the link between stationary and flying qubits. Its brightness, indistinguishability and wavelength set the rate of entanglement generation.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Communication qubit, Photonic qubit, Heralded entanglement

Communication qubit

The qubit in a node that has the optical interface and emits photons entangled with its spin, for example the electron spin of an NV or SiV centre. Once a link is heralded, its state is usually moved to a memory qubit so the communication qubit can try again.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Memory qubit, Spin–photon interface

Memory qubit

A longer-lived qubit in a node, for example a nearby nuclear spin, that stores entanglement while other links are being made. Memories must outlive the expected wait for heralds, and only memories make repeater stations useful beyond one middle station.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Quantum memory, Communication qubit, Coherence time

Coherence time

The time over which a qubit's superposition keeps a well-defined phase. It is limited both by energy relaxation and by pure dephasing from low-frequency noise, and it cannot exceed . The folio's point is that coherence is now limited less by circuit design than by atomic-scale imperfections in materials and interfaces.

In the folios: Quantum Networking › Nodes: spin–photon interfaces; Building a Quantum Computer › The qubit and its coherence; Quantum Hardware Engineering › Materials and fabricationSee also Memory qubit, Cutoff time, Relaxation time, Pure dephasing time, Dynamical decoupling

Diamond colour centre

A point defect in diamond, such as the NV or SiV centre, whose electron spin has an optical transition. It serves as the communication qubit, while nearby ¹³C nuclear spins act as memories (up to ~1 min). Diamond colour centres were used in the 2015 loophole-free Bell test, the 2021 three-node network and the 2024 deployed-fibre experiments.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Nitrogen-vacancy centre, Silicon-vacancy centre, Carbon-13 nuclear spin

Nitrogen-vacancy centreNV

A diamond defect made of a substitutional nitrogen next to a lattice vacancy. Its electron spin can be optically initialised and read out, and it emits at 637 nm (the zero-phonon line). Only a few per cent of its light falls in that line, and fibre loss at 637 nm is high. Delft NV networks gave the 2015 loophole-free Bell test and the 2021 three-node network.

zero-phonon line 637 nm

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Diamond colour centre, Loophole-free Bell test, Three-node network

Silicon-vacancy centreSiV

A diamond defect in which a silicon atom sits between two vacant lattice sites. It emits narrow-band light at 737 nm and works well in nanophotonic cavities, but needs millikelvin temperatures for long spin coherence. SiV nodes were entangled over deployed Boston fibre in 2024 (Knaut et al.), with photons converted 737 → 1350 nm.

emission 737 nm

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Diamond colour centre, Quantum frequency conversion, Deployed-fibre entanglement

Carbon-13 nuclear spinC

The spin-½ isotope of carbon, about 1.1 % of natural diamond. The nuclear spins near a colour centre are controlled through the electron spin and act as long-lived memory qubits, up to ~1 min on the folio.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Memory qubit, Diamond colour centre

Trapped ions and atoms

Single ions held by electric fields, or neutral atoms held in optical traps or cavities. They emit photons on atomic lines (e.g. 854 nm for Ca⁺ and 780 nm for Rb) and store qubits in hyperfine states for seconds or more. They underpin the 2022 device-independent QKD experiments and the 2025 Oxford distributed-computing demonstration.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Hyperfine qubit, Device-independent QKD, Distributed quantum computing

Hyperfine qubithyperfine states

A qubit stored in two hyperfine levels of an atom's or ion's electronic ground state, split by microwave frequencies (12.6 GHz in ). Because the levels do not decay radiatively, is effectively unlimited; an "optical" qubit instead uses a long-lived metastable level hundreds of THz above the ground state.

In the folios: Quantum Networking › Nodes: spin–photon interfaces; Building a Quantum Computer › Trapped ionsSee also Trapped ions and atoms, Coherence time, Clock state, Trapped ions, Neutral atoms

Rare-earth-doped crystal

A crystal such as Y₂SiO₅ doped with rare-earth ions (e.g. europium, erbium) whose 4f transitions are shielded from the host lattice. Ensembles of these ions make multimode memories with spin coherence of up to hours. Er emits at 1536 nm, directly in the C band, and Eu at 580 nm.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Atomic ensemble, Multiplexing, C band

Atomic ensemble

A cloud of many atoms, such as rubidium (780–795 nm), that stores a photon as a collective excitation shared by all of them. Collective enhancement gives efficient light–matter coupling without a single-atom cavity, with storage of ms to s. It is the medium of the DLCZ repeater.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Collective excitation, DLCZ protocol

Collective excitation

A single quantum of excitation spread coherently across all atoms of an ensemble (a spin wave). Its phase pattern remembers the direction of the absorbed or emitted photon, so it can be read out efficiently into a well-defined optical mode.

In the folio: Quantum Networking › Nodes: spin–photon interfacesSee also Atomic ensemble, DLCZ protocol

Quantum dot

A region of semiconductor, about 100 nm across, in which electrostatic gate voltages confine a single electron or hole, an "artificial atom". In Si/SiGe devices the electron sits in a strained silicon quantum well between SiGe layers; in Si-MOS it sits under an oxide, and Ge devices use holes. A donor qubit instead uses the electron or nuclear spin of an implanted atom such as phosphorus.

In the folios: Quantum Networking › Nodes: spin–photon interfaces; Building a Quantum Computer › Semiconductor spin qubitsSee also Spin–photon interface, Photonic qubit, Spin qubit, Plunger and barrier gates

Middle station

An intermediate station halfway along a link where photons from both ends meet for a joint measurement. Each photon then crosses only half the loss, so the rate scales as instead of . More stations (e.g. seven ideal repeaters, ) improve the scaling further, but only if they hold memories.

In the folio: Quantum Networking › Loss sets the rateSee also Twin-field QKD, Quantum repeater, Heralded entanglement

Free-space link

An optical link through air or space instead of fibre. Loss comes mainly from diffraction, which spreads the beam so received power falls only as , not exponentially, plus atmospheric absorption and turbulence. That is why satellites such as Micius and Jinan-1 can reach thousands of kilometres.

loss

In the folio: Quantum Networking › Loss sets the rateSee also Micius satellite, Jinan-1, Satellite QKD

Heralded entanglement

Entanglement between two distant matter qubits, produced when each node emits a photon entangled with its spin and a detection pattern at a midpoint station announces success. The click pattern projects the spins into an entangled state without revealing it. Each attempt waits for the herald to return, so the attempt rate is limited to about , 4,000 per second over 50 km.

attempt rate

In the folio: Quantum Networking › Heralded entanglementSee also Bell measurement, Single-click scheme, Barrett–Kok scheme

Single-click schemesingle-photon scheme

A heralding protocol in which each node's spin is only weakly excited, with bright-state population , and a single detector click at the midpoint heralds entanglement. It is fast, but fidelity is at most (from cases where both nodes emitted) and it needs optical phase stability across the whole link.

fidelity

In the folio: Quantum Networking › Heralded entanglementSee also Barrett–Kok scheme, Heralded entanglement, Optical phase stability

Barrett–Kok schemetwo-click scheme

A heralding protocol (Barrett and Kok, 2005) that needs one click in each of two rounds, with the spins flipped in between, so both photons must arrive. It is insensitive to the optical phase and robust, but slower, because its success probability scales as the square of the single-photon probability.

In the folio: Quantum Networking › Heralded entanglementSee also Single-click scheme, Heralded entanglement

Optical phase stability

The requirement that the optical path lengths from both nodes to the midpoint stay fixed to a small fraction of a wavelength during each attempt. Single-click and twin-field schemes need it, which is technically demanding over tens of kilometres of deployed fibre.

In the folio: Quantum Networking › Heralded entanglementSee also Single-click scheme, Twin-field QKD

Elementary link

One short segment of a repeater chain, between neighbouring stations, over which entanglement is generated directly by heralding. Its length sets the per-attempt loss and the classical round-trip time.

In the folio: Quantum Networking › Quantum repeatersSee also Quantum repeater, Heralded entanglement

Fidelity

For a shared pair, the overlap of the actual state with the target Bell state. is perfect, is a fully mixed two-qubit state, and is needed for the pair to be entangled and purifiable. Errors compound at each swap, so a repeater must keep above the threshold for the application.

In the folio: Quantum Networking › Quantum repeatersSee also Werner state, Swap fidelity, BBPSSW protocol

Werner state

A two-qubit state that is a mixture of one Bell state with weight and the other three Bell states equally, a standard model of noisy entangled pairs. Its single parameter makes swap and purification formulas simple.

In the folio: Quantum Networking › Quantum repeatersSee also Fidelity, Swap fidelity

Swap fidelity

The fidelity of the pair produced by swapping two Werner pairs of fidelities and with an ideal Bell measurement. It is lower than either input, so fidelity drops with every swap.

In the folio: Quantum Networking › Quantum repeatersSee also Entanglement swapping, Werner state, Fidelity

BBPSSW protocol

The first entanglement purification protocol (Bennett, Brassard, Popescu, Schumacher, Smolin and Wootters, 1996). Two pairs of fidelity are combined by local CNOTs and measurement, and on success they become one better pair. It costs a probabilistic, two-way classical exchange, and repeated rounds climb towards .

Werner input:

In the folio: Quantum Networking › Quantum repeatersSee also Entanglement purification, Fidelity, Werner state

Quantum repeater generations

A classification by Muralidharan et al. (2016) based on how loss and errors are handled. First: heralded generation and purification, with rate limited by two-way signalling (~). Second: heralded generation and quantum error correction, limited by link generation. Third: quantum error correction for both, limited by local gate speed. Third-generation repeaters send encoded photons one way and need no long-lived memories, but require short spacing and very low loss per link.

In the folio: Quantum Networking › Quantum repeatersSee also Quantum repeater, Entanglement purification, Quantum error-correcting code, Two-way signalling

Two-way signalling

The need to send classical messages back and forth (heralds, purification outcomes) before the next step can proceed. Each round costs about in time, which caps the rate of first-generation repeaters and forces memories to wait.

In the folio: Quantum Networking › Quantum repeatersSee also Quantum repeater generations, Classical channel

Quantum network protocol stack

A layered architecture modelled on classical networking that separates physics from service: physical, link, network, transport and application layers. Each layer hands the one above a pair of agreed fidelity, not raw clicks. Proposed by Dahlberg et al. (2019) and run end to end on a three-node NV network by Pompili et al. (2022).

In the folio: Quantum Networking › A protocol stack for entanglementSee also Physical layer, Link layer, Network layer, Transport layer

Physical layerPHY

The bottom layer, handling timed photon emission, frequency conversion, detection, attempts and heralds. In classical networking PHY is the hardware layer that turns bits into signals on a medium.

In the folio: Quantum Networking › A protocol stack for entanglementSee also Quantum network protocol stack, Link layer

Link layer

The layer that delivers robust heralded entanglement between neighbouring nodes at a requested fidelity, hiding retries and failed attempts. Its classical analogue is MAC/LLC.

In the folio: Quantum Networking › A protocol stack for entanglementSee also Quantum network protocol stack, Medium access control and logical link control

Network layer

The layer that produces end-to-end pairs across several hops by routing, swapping and purification. Its classical analogue is IP.

In the folio: Quantum Networking › A protocol stack for entanglementSee also Quantum network protocol stack, Internet Protocol, Routing and scheduling

Transport layer

The layer that delivers qubits by teleportation over established end-to-end pairs. Its classical analogue is TCP/UDP.

In the folio: Quantum Networking › A protocol stack for entanglementSee also Quantum teleportation, TCP and UDP

Application layer

The top layer: QKD, blind computing, sensing and similar tasks that consume end-to-end entanglement.

In the folio: Quantum Networking › A protocol stack for entanglementSee also Quantum network protocol stack, Quantum key distribution, Blind quantum computing

Medium access control and logical link controlMAC / LLC

Classical data-link sublayers. MAC governs access to a shared medium and addressing between neighbours. LLC handles framing, flow control and link-level error control. On the folio they are the classical analogue of the quantum link layer.

In the folio: Quantum Networking › A protocol stack for entanglementSee also Link layer

Internet ProtocolIP

The classical network-layer protocol that addresses and routes packets across many hops between end hosts. On the folio it is the analogue of the quantum network layer.

In the folio: Quantum Networking › A protocol stack for entanglementSee also Network layer

TCP and UDP

The classical transport protocols. TCP (Transmission Control Protocol) gives reliable, ordered delivery with retransmission. UDP (User Datagram Protocol) sends datagrams without guarantees. On the folio they are the analogue of the quantum transport layer.

In the folio: Quantum Networking › A protocol stack for entanglementSee also Transport layer

Stages of a quantum internet

A roadmap by Wehner, Elkouss and Hanson (2018) in which each stage adds a capability and enables new applications: trusted repeater, prepare-and-measure, entanglement distribution, quantum memory, few-qubit fault tolerant, and quantum computing. The folio numbers them 1–6 (the paper uses 0–5). Deployed backbones today operate at stage 1 or 2, and laboratory networks with memory nodes reach stages 3 and 4.

In the folio: Quantum Networking › Stages of a quantum internetSee also Trusted node, Prepare-and-measure, Few-qubit fault tolerant, Quantum internet

Prepare-and-measure

A protocol class, such as BB84, in which one party prepares single qubits and the other measures them, with no shared entanglement. As a network stage it gives end-to-end QKD without trusting intermediate nodes.

In the folio: Quantum Networking › Stages of a quantum internetSee also BB84, Stages of a quantum internet

Few-qubit fault tolerant

The stage in which nodes can carry out error-protected local operations on a few qubits, enabling fault-tolerant repeater operation and more complex distributed protocols.

In the folio: Quantum Networking › Stages of a quantum internetSee also Fault tolerance, Stages of a quantum internet

Blind quantum computing

A protocol in which a client sends randomly rotated qubits to a remote quantum server, which carries out the computation without learning the input, output or algorithm (universal blind quantum computation, Broadbent, Fitzsimons and Kashefi 2009). The client needs only to prepare single qubits.

,

In the folio: Quantum Networking › What quantum networks enableSee also Application layer, Quantum memory

Distributed quantum computing

Linking quantum processor modules by heralded entanglement so that they act as one processor, with two-qubit gates between modules done by gate teleportation. Oxford (2025, Main et al.) teleported a CZ gate at 86 % fidelity and ran a distributed Grover search.

In the folio: Quantum Networking › What quantum networks enableSee also Gate teleportation, Controlled-Z gate, Grover's algorithm

Gate teleportation

Carrying out a two-qubit gate between qubits in separate modules by consuming a shared Bell pair, applying local operations and measurements, and sending classical outcomes for corrections. The gate's fidelity is limited by the fidelity of the shared pair.

In the folio: Quantum Networking › What quantum networks enableSee also Distributed quantum computing, Quantum teleportation, Controlled-Z gate

Controlled-Z gateCZ

A two-qubit gate that flips the sign of the component and leaves the other basis states unchanged. It is the native entangling gate of superconducting circuits (via flux-tuned or exchange coupling) and of neutral atoms (via the Rydberg blockade), and it becomes a CNOT with two Hadamard gates.

In the folios: Quantum Networking › What quantum networks enable; Building a Quantum Computer › Engineering the gatesSee also Gate teleportation, Distributed quantum computing, CNOT gate, ZZ interaction, Rydberg blockade

Clock network

A network of atomic clocks in separate locations that share entanglement, so that together they can approach the Heisenberg limit for a shared time standard, beyond what independent clocks allow (proposed by Kómár et al. 2014).

In the folio: Quantum Networking › What quantum networks enableSee also Heisenberg limit, Quantum memory

Long-baseline telescopequantum-assisted interferometry

A proposal (Gottesman, Jennewein and Croke, 2012) in which shared entanglement, in place of a physical optical link, is used to interfere starlight collected at distant telescopes. This would extend optical interferometer baselines, and hence angular resolution, for sharper images.

In the folio: Quantum Networking › What quantum networks enableSee also Entanglement distribution, Quantum memory

DLCZ protocol

The repeater scheme of Duan, Lukin, Cirac and Zoller (2001) using atomic ensembles and linear optics. A weak excitation scatters a photon while storing a collective excitation, single-photon detection heralds entanglement between ensembles, and later readout allows swapping.

In the folio: Quantum Networking › MilestonesSee also Atomic ensemble, Collective excitation, Quantum repeater

Multiplexing

Running many probabilistic attempts in parallel (in space or time) and switching the successful output into place, so that heralded single-photon sources and fusions that each succeed only sometimes yield near-deterministic operation. Its large hardware cost is a main drawback of photonics.

In the folios: Quantum Networking › Open problems; Building a Quantum Computer › PhotonicsSee also Quantum memory, Rare-earth-doped crystal, Fusion-based quantum computing, Photonics

Microwave-to-optical transducer

A device that converts a quantum state between a microwave photon (gigahertz) and an optical photon (about 200 THz at telecom wavelengths), using electro-optic, optomechanical or magnetic intermediaries. It would let superconducting machines be linked or wired by optical fibre. The folio quotes a few percent efficiency at about one added photon of noise (2024–25), far from the near-unit efficiency needed.

In the folios: Quantum Networking › Open problems; Quantum Hardware Engineering › Photonic hardwareSee also Quantum frequency conversion, Telecom band, Added noise, Quantum link, Optical link

Routing and scheduling

Deciding which paths, swaps and purifications to perform, and when, so that end-to-end pairs are delivered before stored pairs decay past their cutoff. It is a network-layer problem with no classical counterpart, because every stored pair is losing fidelity while it waits.

In the folio: Quantum Networking › Open problemsSee also Network layer, Cutoff time

Repeater chain

A linear series of repeater stations between two end nodes. Whether, and when, a multi-node chain with memories will beat direct transmission (or twin-field QKD) over hundreds of kilometres is one of the field's open benchmarks.

In the folio: Quantum Networking › Open problemsSee also Quantum repeater, Repeaterless bound, Twin-field QKD

Network verification

Checking, from the user's side only, that an untrusted network really delivers the promised entanglement or service, for example by device-independent tests or verifiable blind computing.

In the folio: Quantum Networking › Open problemsSee also Device-independent cryptography, Blind quantum computing

07Quantum AI and machine learning

Quantum models for learning, machine learning for quantum technology, and the fine print on claimed speed-ups.

Quantum AI

An umbrella term covering two distinct directions: using quantum computers to perform machine learning, and using machine learning (AI) to build, control and simulate quantum technology. The folio sorts work by whether the data and the model are classical or quantum, because that choice largely decides whether a quantum advantage is possible.

In the folio: Quantum AI › Two directions, four quadrantsSee also Quantum machine learning, Data–model quadrants, Quantum advantage

Quantum machine learningQML

Machine learning in which the model, or part of the learning procedure, runs on a quantum processor. The folio reserves "quantum ML proper" for the CQ quadrant (classical data, quantum model), for example quantum kernels and variational circuits. ML stands for machine learning.

In the folio: Quantum AI › Two directions, four quadrantsSee also Data–model quadrants, Variational quantum model, Quantum kernel

Data–model quadrantsCC, CQ, QC, QQ

A two-letter classification of learning tasks: the first letter says whether the data are classical (C) or quantum (Q); the second says whether the model that processes them is classical or quantum. CC is today's machine learning; CQ is quantum ML on classical data; QC is AI applied to quantum systems (decoding, tomography, control); QQ is learning from quantum experiments with a quantum learner. The folio places proven advantages in the quantum-data row.

In the folio: Quantum AI › Two directions, four quadrantsSee also Quantum data, Quantum machine learning, Quantum advantage

Quantum data

Data that arrive as quantum states, for example the output of a quantum experiment, sensor or simulation, rather than as classical numbers. Because such states need not be measured before processing, a quantum learner can handle them directly, which is where provable learning advantages have been found.

In the folio: Quantum AI › Two directions, four quadrantsSee also Data–model quadrants, Quantum memory, Learning from experiments

Quantum advantage

A task on which a quantum device does better than the best classical method, in run time, number of samples or experiments, or accuracy. The folio separates proven advantages (rigorous separations, mostly for quantum data) from plausible, unproven or doubtful claims, and stresses that the classical comparison keeps moving.

In the folios: Quantum AI › Status of the claims; Building a Quantum Computer › Open problemsSee also Exponential separation, Exponential speed-up, Quadratic speed-up, Beyond-classical computation, Logical error rate

Quantum state tomography

Reconstructing an unknown quantum state from measurements on many identically prepared copies. Full tomography needs a number of measurements that grows exponentially with qubit number, which is why learned and randomised methods, such as neural-network estimators and classical shadows, are used instead.

In the folio: Quantum AI › Two directions, four quadrantsSee also Classical shadows, Neural quantum state, Quantum data

Parameterised quantum circuitPQC

A quantum circuit whose gates contain adjustable angles . With data-encoding gates added, it acts as a trainable model, also called a variational circuit or quantum neural network.

In the folio: Quantum AI › Variational quantum modelsSee also Variational quantum model, Trainable layer, Data encoding

Variational quantum model

A hybrid model in which a parameterised circuit encodes the input , applies trainable gates, and is measured to produce an output ; a classical optimiser then updates the parameters in a loop. It is the main near-term approach to quantum ML, but suffers from barren plateaus and, according to the folio, has shown no practical advantage on real data.

In the folio: Quantum AI › Variational quantum modelsSee also Parameterised quantum circuit, Classical optimiser, Barren plateau, Fourier-series picture of quantum models

Data encoding

The gates that load a classical input into a quantum state, typically as rotation angles. Repeating the encoding layer ("data re-uploading") enlarges the set of frequencies the model can represent. How the data are encoded largely decides what the model can learn and what it costs.

In the folio: Quantum AI › Variational quantum modelsSee also Feature map, Amplitude encoding, Fourier-series picture of quantum models

Trainable layer

A block of parameterised gates whose angles are the model's learnable weights, the quantum analogue of the weight layers in a neural network.

In the folio: Quantum AI › Variational quantum modelsSee also Parameterised quantum circuit, Parameter-shift rule

Classical optimiser

The conventional algorithm, such as gradient descent or a gradient-free method, that updates a variational circuit's parameters from the measured outputs. The quantum processor only evaluates the model; the learning loop is classical.

In the folio: Quantum AI › Variational quantum modelsSee also Variational quantum model, Parameter-shift rule

Parameter-shift rule

A formula that gives the exact gradient of an expectation value from two extra runs of the same circuit, with the parameter shifted by . It lets gradients be "measured on the hardware itself" instead of by finite differences. It holds for gates of the form with a Pauli operator.

In the folio: Quantum AI › Variational quantum modelsSee also Expectation value, Classical optimiser, Trainable layer

Fourier-series picture of quantum models

The result (Schuld, Sweke & Meyer, 2021) that a variational model's output is a truncated Fourier series in the input. The frequencies are fixed by the encoding gates, and the trainable gates only set the coefficients . It shows what such a model can and cannot express.

In the folio: Quantum AI › Variational quantum modelsSee also Data encoding, Expressivity, Variational quantum model

Quantum kernel

A similarity measure between two data points, computed as the overlap of the quantum states they are mapped to. The quantum hardware estimates the kernel matrix, and a classical support-vector machine does the learning. A rigorous speed-up exists for a task built on the discrete logarithm (Liu, Arunachalam, Temme 2021), but for generic feature maps the kernel values concentrate and learning fails.

In the folio: Quantum AI › Quantum kernelsSee also Feature map, Kernel matrix, Support-vector machine, Exponential concentration

Feature map

The map from a classical input to a quantum state (drawn as in the diagram), carried out by data-encoding gates. As in classical kernel methods, it embeds data in a large feature space where classes may become separable.

In the folio: Quantum AI › Quantum kernelsSee also Quantum kernel, Data encoding, Feature space

Feature space

The space in which a feature map places the data. For qubits it is the -dimensional state space, and it is often cited as the source of a quantum model's power. Its size is also a liability, because random states in a huge space are nearly orthogonal, which produces kernel concentration and barren plateaus.

In the folio: Quantum AI › Quantum kernelsSee also Feature map, Exponential concentration, Barren plateau

Kernel matrix

The table of kernel values for every pair of training points, also called the Gram matrix. In a quantum kernel method it is estimated on hardware and then passed to a classical learner. Its block structure shows how well the classes are separated.

In the folio: Quantum AI › Quantum kernelsSee also Quantum kernel, Support-vector machine

Support-vector machineSVM

A classical learning algorithm that finds the maximum-margin boundary between classes. Through the kernel trick it works with a kernel matrix alone, without ever constructing the feature vectors, which makes it a natural partner for quantum kernels.

In the folio: Quantum AI › Quantum kernelsSee also Kernel matrix, Quantum kernel

Exponential concentration

The effect whereby, for generic feature maps, kernel values (or cost functions) bunch exponentially closely around a fixed value as the number of qubits grows. Telling them apart then takes exponentially many shots, so "the model stops learning". It is the kernel-method counterpart of the barren plateau.

In the folio: Quantum AI › Quantum kernelsSee also Quantum kernel, Barren plateau, Shot

Barren plateau

A cost landscape that is almost flat everywhere: for expressive, randomly initialised circuits, the variance of the gradient falls exponentially with qubit number (McClean et al. 2018). The folio lists circuit depth and expressivity, global cost functions, entangled inputs and hardware noise as causes. It is the main obstacle to training variational models at scale.

In the folio: Quantum AI › Trainability: barren plateausSee also Gradient variance, Global cost function, Expressivity, Double bind

Cost function

The quantity, built from measured expectation values, that training minimises; is its derivative with respect to the -th parameter.

In the folio: Quantum AI › Trainability: barren plateausSee also Global cost function, Local cost function, Barren plateau

Global cost function

A cost that depends on all qubits at once, for example the probability that the whole register returns to . Even shallow circuits with such costs show barren plateaus; the folio sketches the gradient variance falling as for deep random circuits with global cost.

In the folio: Quantum AI › Trainability: barren plateausSee also Local cost function, Barren plateau

Local cost function

A cost built from observables acting on only a few qubits each. With shallow circuits it keeps gradient variance decaying only polynomially in , which keeps training feasible.

In the folio: Quantum AI › Trainability: barren plateausSee also Global cost function, Barren plateau, Circuit depth

Gradient variance

The spread of a cost-function gradient over random parameter choices. If it is exponentially small, a typical gradient is too small to detect without exponentially many shots. The folio's chart runs from down to over 0–40 qubits.

In the folio: Quantum AI › Trainability: barren plateausSee also Barren plateau, Shot, Cost function

Expressivity

How much of the space of possible states or unitaries a parameterised circuit can reach. High expressivity seems desirable but spreads the circuit's outputs so evenly that gradients vanish; it is one of the folio's listed causes of barren plateaus.

In the folio: Quantum AI › Trainability: barren plateausSee also Barren plateau, Circuit depth, Fourier-series picture of quantum models

Classical simulability

The property of a quantum computation whose outputs a classical computer can reproduce efficiently, for example with tensor networks. A model that is classically simulable cannot give a quantum advantage, however it is run.

In the folio: Quantum AI › Trainability: barren plateausSee also Double bind, Tensor network, Dequantisation

Double bind

The folio's name for the tension that architectures with provably trainable gradients can often also be simulated efficiently on classical computers. Avoiding barren plateaus therefore tends to remove the quantum advantage, and "trainability and quantum advantage may pull in opposite directions". It appears again among the open problems.

In the folio: Quantum AI › Trainability: barren plateausSee also Barren plateau, Classical simulability

Amplitude encoding

Storing numbers as the amplitudes of a state of only qubits. The compression is exponential, but preparing the state generally needs quantum RAM, not yet built, or about operations, which can cancel the claimed speed-up.

In the folio: Quantum AI › The fine printSee also Quantum random-access memory, Data encoding, Exponential speed-up

Quantum random-access memoryQRAM

A hypothetical device that loads a superposition of classical data entries into qubits in time logarithmic in the data size. Many quantum ML speed-ups assume it, but no large, error-tolerant QRAM has been built.

In the folio: Quantum AI › The fine printSee also Amplitude encoding, Dequantisation

Readout problem

The catch that many quantum linear-algebra algorithms output a quantum state, not a list of numbers. Each measurement reveals only a sample, so extracting the full answer "costs as much as the speed-up saves"; only global properties of the output can be read cheaply.

In the folio: Quantum AI › The fine printSee also HHL algorithm, Exponential speed-up

Dequantisation

Showing that a classical algorithm, given comparable sampling access to the data, matches a claimed quantum speed-up up to polynomial factors. Ewin Tang (2019) dequantised the quantum recommendation-system algorithm, and successors have done the same for many quantum linear-algebra ML claims.

In the folio: Quantum AI › The fine printSee also Sampling access, Exponential speed-up, HHL algorithm

Sampling access

A classical data structure that lets an algorithm draw entries of a vector or matrix with probability proportional to their squared magnitude. It is the classical counterpart of QRAM-style state preparation, and granting it to classical algorithms makes the comparison with quantum ones fair.

In the folio: Quantum AI › The fine printSee also Dequantisation, Quantum random-access memory

Error-correction overhead

The extra qubits, gate operations and time that quantum error correction adds, especially for non-Clifford T gates. Because each logical operation is far slower than a classical one, modest polynomial speed-ups can vanish at realistic sizes (Babbush et al. 2021).

In the folio: Quantum AI › The fine printSee also Quadratic speed-up, Quantum error correction, T gate

Measure-first learning

The conventional strategy of measuring each quantum state as soon as it is produced and learning from the classical outcomes. For certain tasks it provably needs a number of experiments growing as , against for a learner with quantum memory.

In the folio: Quantum AI › Where advantage is provenSee also Quantum memory, Exponential separation

Exponential separation

A proof that one class of algorithms needs exponentially more of some resource (time, samples, experiments) than another for the same task. For learning from quantum data such separations are proven unconditionally and have been demonstrated experimentally, which is why the folio marks that direction "established".

In the folio: Quantum AI › Where advantage is provenSee also Quantum memory, Quantum advantage, Learning from experiments

Learning from experiments

The QQ setting in which a quantum learner receives quantum states directly from a physical experiment. Huang et al. (2022) demonstrated an exponential reduction in experiments with up to 40 superconducting qubits and 1,300 gates on Google's processor. It was the first experimental quantum advantage in learning.

In the folio: Quantum AI › Where advantage is provenSee also Quantum memory, Photonic learning advantage, Superconducting circuits, Quantum data

Superconducting circuits

Qubits formed by the lowest two levels of an anharmonic LC oscillator built from a Josephson junction, patterned lithographically and operated at about 10 mK. The folio quotes 2Q gates of 20–100 ns, 2Q fidelities of 99.5–99.9% and coherence of 0.05–1 ms; they have the fastest gates and about 1 µs error-correction cycles, but are limited by wiring, cryogenic heat load and materials defects.

In the folios: Quantum AI › Where advantage is proven; Building a Quantum Computer › Superconducting circuits; Quantum Hardware Engineering › What limits scaleSee also Sycamore, IBM 127-qubit utility experiment, Qubit, Transmon, Josephson junction

Quantum generative model

A model that learns a probability distribution and generates new samples from it, for example a Born machine, whose samples are measurement outcomes of a parameterised circuit. The folio rates these "plausible": they rest on the hardness of sampling quantum distributions, but their usefulness for real data is unclear.

In the folio: Quantum AI › Status of the claimsSee also Sampling hardness, Parameterised quantum circuit

Sampling hardness

Strong complexity-theoretic evidence that classical computers cannot efficiently sample from the output distributions of certain quantum circuits; it is the basis of random-circuit-sampling "beyond classical" experiments. It suggests quantum generative models can represent distributions that classical ones cannot, without showing those distributions are useful.

In the folio: Quantum AI › Status of the claimsSee also Quantum generative model, Beyond-classical computation

Quantum annealing

An analogue optimisation method that slowly evolves a quantum system from a simple ground state towards the ground state of a Hamiltonian that encodes the problem, as in D-Wave's machines. Like QAOA, it has shown no demonstrated scaling advantage over the best classical solvers.

In the folio: Quantum AI › Status of the claimsSee also Quantum approximate optimisation algorithm

Near term

The era of noisy quantum processors with tens to a few thousand qubits and no full error correction, often called NISQ (noisy intermediate-scale quantum). Claims rated "doubtful near term" might still hold on future fault-tolerant machines.

In the folio: Quantum AI › Status of the claimsSee also Quantum error correction, Variational quantum model

Syndrome

The set of parity-check (stabiliser) outcomes measured in each error-correction cycle. It reveals which errors probably occurred without disturbing the encoded information. A large stream of syndrome bits must flow from the readout electronics to a classical decoder every cycle.

In the folios: Quantum AI › AI for quantum technology; Quantum Hardware Engineering › Control electronicsSee also Decoder, Quantum error correction, Real-time decoding

Decoder

The classical algorithm that turns a stream of error syndromes into the most likely correction. It must be both accurate and fast enough to keep pace with the quantum hardware.

In the folio: Quantum AI › AI for quantum technologySee also Syndrome, Minimum-weight perfect matching, Neural decoder, Real-time decoding

Neural decoder

A decoder implemented as a trained neural network, which reads syndromes and proposes corrections. It can learn the device's actual, correlated noise rather than an idealised model; the folio counts neural decoders among the established AI-for-quantum tools.

In the folio: Quantum AI › AI for quantum technologySee also AlphaQubit, Decoder, Minimum-weight perfect matching

Minimum-weight perfect matchingMWPM

The standard surface-code decoder: flagged syndrome changes are treated as nodes of a graph and paired up by the shortest total set of error chains, found efficiently with Edmonds' blossom algorithm. Belief propagation, an iterative message-passing alternative from classical LDPC decoding, is preferred for qLDPC codes.

In the folios: Quantum AI › AI for quantum technology; Building a Quantum Computer › From physical qubits to a computationSee also Decoder, Neural decoder, AlphaQubit, Real-time decoding, Surface code

Real-time decoding

Classical processing that turns each round of syndrome data into an inference of which errors occurred, fast enough to keep pace with the error-correction cycle (about 1 µs on superconducting chips). Common decoders are minimum-weight perfect matching, belief propagation (often for qLDPC codes) and neural networks; whether they can run at µs latency on millions of syndrome bits per second is an open problem.

In the folios: Quantum AI › Open problems; Building a Quantum Computer › From physical qubits to a computation; Quantum Hardware Engineering › Control electronicsSee also AlphaQubit, Decoder, Neural decoder, Minimum-weight perfect matching, Syndrome extraction

Reinforcement learningRL

Machine learning in which an agent learns a strategy by trial and error, guided by a reward. In quantum control an RL agent designs pulse shapes or calibration sequences by trying them on the device or a simulation and being rewarded for high gate fidelity.

In the folio: Quantum AI › AI for quantum technologySee also Control pulse, Bayesian optimisation, Calibration

Bayesian optimisation

A method for tuning expensive, noisy black-box functions with few evaluations. It builds a probabilistic model of the objective, usually a Gaussian process, and chooses each next trial where improvement is most likely. It is used to retune the many parameters of quantum hardware automatically.

In the folio: Quantum AI › AI for quantum technologySee also Calibration, Reinforcement learning

Control pulse

The shaped microwave, laser or voltage signal that implements a gate on a physical qubit. Its envelope (the folio shows one "shaped by an RL agent") is tuned to maximise fidelity and suppress leakage and crosstalk.

In the folio: Quantum AI › AI for quantum technologySee also Reinforcement learning, Calibration

Calibration

Measuring and adjusting the control parameters of a quantum processor, such as qubit frequencies, pulse amplitudes and readout thresholds, which drift over time. Machine learning now retunes "hundreds of drifting parameters automatically"; the folio counts automated calibration as established.

In the folios: Quantum AI › AI for quantum technology; Quantum Hardware Engineering › Control electronicsSee also Control pulse, Bayesian optimisation, Reinforcement learning, Compiler (quantum), Readout threshold

Neural quantum stateNQS,

A neural network used as a variational wavefunction. It takes a configuration (for example a list of spins) and returns its amplitude , and its weights are optimised to approximate a ground state or dynamics. It was introduced by Carleo & Troyer (2017) and now competes directly with quantum simulators.

In the folio: Quantum AI › AI for quantum technologySee also Variational Monte Carlo, FermiNet, Tensor network

Variational Monte CarloVMC

A classical method that minimises the energy of a trial wavefunction, estimating the expectation values by Monte Carlo sampling of configurations. Neural quantum states and FermiNet are trained this way.

In the folio: Quantum AI › AI for quantum technologySee also Neural quantum state, FermiNet

Circuit compilation

Translating a quantum algorithm into the native gates of a given device while minimising cost, such as gate count, depth or the number of T gates. Learned and search-based compilers now cut gate counts beyond hand-designed rules.

In the folio: Quantum AI › AI for quantum technologySee also T gate, T count, AlphaTensor-Quantum

T gate

The single-qubit gate that multiplies by , an eighth-turn about . It is the non-Clifford ingredient that makes a gate set universal, but it cannot be applied transversally in most codes, so fault-tolerant machines supply it through magic states; T-gate counts dominate resource estimates.

In the folios: Quantum AI › AI for quantum technology; Building a Quantum Computer › Magic statesSee also T count, Error-correction overhead, AlphaTensor-Quantum, Magic state, Clifford gate

T count

The number of T gates in a circuit, the standard cost measure for fault-tolerant quantum computing. Reducing it directly reduces the qubits and time needed.

In the folio: Quantum AI › AI for quantum technologySee also T gate, Circuit compilation, AlphaTensor-Quantum

Tensor network

A classical representation of a many-body state or circuit as a network of small, contracted tensors (for example matrix product states). It is efficient whenever entanglement is limited, and it is the leading tool for classically simulating, and so testing, quantum-advantage claims.

In the folio: Quantum AI › Classical AI raises the barSee also Classical simulability, Neural quantum state, Beyond-classical computation

Machine-learned potential

A neural-network or other ML model of the interatomic energy surface, trained on quantum-chemistry data. It gives near-ab-initio accuracy at much lower cost, which pushes accurate classical simulation further and raises the threshold for useful quantum chemistry.

In the folio: Quantum AI › Classical AI raises the barSee also FermiNet, Neural quantum state

Quantum sensor

A device that uses quantum states, such as superposition, entanglement or squeezing, to measure fields, time or forces beyond classical limits. Feeding its quantum output directly into a quantum processor, rather than measuring first, is the QQ scenario where learning advantages are proven.

In the folio: Quantum AI › Open problemsSee also Quantum data, Quantum memory, Learning from experiments

Classical shadows

A randomised-measurement protocol (Huang, Kueng & Preskill, 2020): apply random unitaries, measure, and keep a compact classical "shadow" of the state. From it one can predict many properties at once; observables need only about measurements rather than full tomography.

In the folio: Quantum AI › MilestonesSee also Quantum state tomography, Learning from experiments

08Building a quantum computer

Qubits, gates and noise, error correction and fault tolerance, and the physical platforms competing to scale.

Pure dephasing time

The time over which the relative phase between and is randomised by fluctuations of the qubit frequency (from flux, charge or magnetic noise) without any energy exchange. On the Bloch sphere it appears as a spreading of the azimuth .

In the folio: Building a Quantum Computer › The qubit and its coherenceSee also Coherence time, Relaxation time, Dynamical decoupling

DiVincenzo criteria

The checklist, published by David DiVincenzo in 2000, that a physical system must meet to be a quantum computer: scalable, well-characterised qubits; initialisation to a simple fiducial state; coherence much longer than the gate time; a universal set of gates; and qubit-specific measurement. Two further criteria for networks require converting stationary qubits into flying qubits and transmitting them faithfully.

In the folio: Building a Quantum Computer › The qubit and its coherenceSee also Fiducial state, Photonic qubit, Universal gate set

Fiducial state

A simple, well-known starting state, usually all qubits in , into which the register can be reliably initialised before a computation. Error correction also needs a supply of fresh ancillas reset to this state every cycle.

In the folio: Building a Quantum Computer › The qubit and its coherenceSee also DiVincenzo criteria, Ancilla qubit

Rabi frequency

The rate at which a resonant drive rotates a qubit between and , proportional to the drive amplitude; in the folio's drive Hamiltonian is the pulse envelope, the drive frequency and the drive phase, which sets the rotation axis. Pulse shaping of is how single-qubit gates are engineered.

In the folio: Building a Quantum Computer › Engineering the gatesSee also Rabi oscillation, Rotating-wave approximation, Detuning

Detuning

The difference between the qubit's transition frequency and the drive frequency. On resonance () the drive fully inverts the qubit; with detuning the rotation axis tilts and the oscillation becomes faster but incomplete.

In the folio: Building a Quantum Computer › Engineering the gatesSee also Rabi frequency, Rotating frame

Rotating frame

A description of the qubit in a reference frame that rotates about at the drive frequency , so that a resonant drive looks static. It removes the fast GHz precession and leaves only the slow dynamics set by the detuning and the Rabi frequency.

In the folio: Building a Quantum Computer › Engineering the gatesSee also Rotating-wave approximation, Detuning

Rotating-wave approximationRWA

The step, valid when the drive is weak compared with the qubit frequency, of discarding terms oscillating at about in the rotating frame. It turns the oscillating drive into a fixed rotation axis in the plane set by the drive phase .

In the folio: Building a Quantum Computer › Engineering the gatesSee also Rotating frame, Rabi frequency

Rabi oscillation

The periodic swing of the excited-state probability under a constant resonant drive, plotted against the pulse area . Its slow damping in the folio's plot reflects decoherence; calibrating it fixes the pulse lengths for every single-qubit gate.

on resonance

In the folio: Building a Quantum Computer › Engineering the gatesSee also Pi pulse, Rabi frequency

Pi pulse,

A drive pulse of area , which flips to and so implements an X gate; a pulse rotates halfway and creates an equal superposition. Sequences of such pulses also make up spin echoes and dynamical decoupling.

In the folio: Building a Quantum Computer › Engineering the gatesSee also X gate, Rabi oscillation, Dynamical decoupling

X gate

The quantum NOT gate, equal to the Pauli matrix : it swaps and , a rotation by about the axis of the Bloch sphere. Physically it is a calibrated pulse.

In the folio: Building a Quantum Computer › Engineering the gatesSee also Pauli matrices, Pi pulse

Two-qubit gate2Q gate

An operation that acts jointly on two qubits and can create entanglement, made by switching on a physical interaction between them for a controlled time. It is usually the slowest and least accurate operation on a platform, so the folio quotes "2Q gate" time and "2Q fidelity" for each one.

In the folio: Building a Quantum Computer › Engineering the gatesSee also Controlled-Z gate, CNOT gate, Gate fidelity

iSWAP gateiSWAP

A two-qubit gate that exchanges and while adding a phase to each; it arises naturally from resonant exchange (XY) coupling between two superconducting qubits. Like CZ it is entangling and, with single-qubit gates, universal.

In the folio: Building a Quantum Computer › Superconducting circuitsSee also Controlled-Z gate, Tunable coupler, Exchange interaction

ZZ interaction

A coupling of the form that shifts a qubit's frequency depending on its neighbour's state, accumulating a conditional phase. In superconducting chips it is switched on by tuning qubit or coupler frequencies with magnetic flux, giving a CZ gate; when not wanted it is a source of crosstalk.

In the folio: Building a Quantum Computer › Engineering the gatesSee also Controlled-Z gate, Tunable coupler

Exchange interaction

The Heisenberg coupling between two spins that arises when their wavefunctions overlap; its strength grows steeply as a barrier between them is lowered. In spin qubits it is switched on by pulsing the barrier-gate voltage , which gives fast two-qubit gates.

In the folio: Building a Quantum Computer › Semiconductor spin qubitsSee also Plunger and barrier gates, Quantum dot, iSWAP gate

Universal gate set

A finite set of gates from which any quantum operation can be approximated arbitrarily well. The folio's example is the standard one; without the non-Clifford T gate the set would be efficiently simulable classically.

In the folio: Building a Quantum Computer › Engineering the gatesSee also Hadamard gate, Phase gate, T gate, Solovay–Kitaev theorem

Phase gate

The single-qubit gate that multiplies by , a quarter-turn about the axis; it is the square of the T gate and a Clifford gate.

In the folio: Building a Quantum Computer › Engineering the gatesSee also T gate, Clifford gate, Universal gate set

Solovay–Kitaev theorem

The result that any single-qubit gate can be approximated to accuracy by a sequence of only gates from a universal set, with a small constant (about 4 in the standard construction, lower in later variants). It guarantees that compiling arbitrary rotations into a discrete gate set costs only a polylogarithmic overhead.

In the folio: Building a Quantum Computer › Engineering the gatesSee also Universal gate set, T gate

Gate fidelity

A measure, between 0 and 1 (quoted in per cent), of how closely an implemented gate matches the ideal one; the error per gate is roughly . The folio's "2Q fidelity" values range from 99–99.7% for spin qubits to 99.9–99.97% for trapped ions; 99.9% corresponds to an error of .

error

In the folio: Building a Quantum Computer › Six physical routes to a qubitSee also Two-qubit gate, Physical error rate

Logical error rate

The probability that an encoded qubit suffers an uncorrected error, usually quoted per error-correction cycle. Below threshold it falls exponentially with code distance; useful algorithms with or more logical operations need .

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Threshold, Code distance, Error-suppression factor

Stabilizer

A multi-qubit Pauli operator, such as or on four neighbouring data qubits, that leaves every valid code state unchanged (eigenvalue ). Measuring stabilizers reveals whether and where an error occurred while giving no information about the encoded logical state.

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Syndrome extraction, Surface code, Pauli matrices

Data qubit

A physical qubit that holds part of the encoded logical state in an error-correcting code (dark dots in the folio's surface-code diagram). It is never measured during the computation; its errors are inferred from the ancillas.

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Ancilla qubit, Surface code

Ancilla qubit

An auxiliary qubit used to measure a stabilizer: it is entangled with a few data qubits and then measured, giving one syndrome bit per cycle (open circles in the folio's diagram). The word is also used for helper photons in photonic fusion.

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Data qubit, Syndrome extraction, Stabilizer

Surface code

The leading error-correcting code for hardware with nearest-neighbour coupling on a square grid: data qubits sit on a lattice and weight-4 - and -type stabilizers are measured on alternating plaquettes. The "rotated" layout shown in the folio uses data and ancilla qubits per logical qubit and tolerates physical error rates up to about 1%.

qubits per patch

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Code distance, Threshold, Stabilizer, Lattice surgery

Code distance

The minimum number of physical errors needed to cause an undetectable logical error, equal to the weight of the shortest logical operator. A code of distance corrects up to errors, so raising suppresses the logical error rate exponentially below threshold.

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Logical operator, Logical error rate, Surface code

Logical operator

A Pauli operator that commutes with all stabilizers yet changes the encoded state, for example a chain of or operators running across a surface-code patch (amber line in the folio). Its minimum weight equals the code distance, so an error must span the patch to corrupt the logical qubit.

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Code distance, Stabilizer

Threshold

The physical error rate below which enlarging a code reduces the logical error rate, and above which it makes things worse. For the surface code ; the folio's chart shows rising with for and falling steeply for .

(surface code)

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Error-suppression factor, Logical error rate, Physical error rate

Error-suppression factor

The factor by which the logical error rate drops each time the code distance is increased by two; is the experimental signature of operating below threshold. Google's Willow processor (2024) measured , with a logical error of 0.143% per cycle at on 101 qubits.

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Threshold, Willow, Logical error rate

Colour code

A topological stabilizer code on a three-colourable lattice (e.g. hexagons), whose checks act on six qubits in the common layout. It encodes with fewer qubits than the surface code at the same distance and allows all Clifford gates transversally, at the cost of higher-weight, longer-range checks.

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Surface code, Transversal gate, Clifford gate

Quantum LDPC codeqLDPC

A quantum low-density parity-check code: every check acts on a few qubits and every qubit is in a few checks, but the checks are not confined to nearest neighbours. "High-rate" members encode many logical qubits per block (a high ratio ), cutting the qubit overhead roughly tenfold relative to the surface code, but they need long-range couplings, natural for movable atoms.

In the folio: Building a Quantum Computer › Overhead: how many qubits?See also Gross code, Code parameters, Surface code

Code parameters

The standard label of a quantum code: physical data qubits encoding logical qubits with distance ; double brackets distinguish quantum from classical codes. Ancillas for measuring checks are usually counted separately, which is why the gross code uses 288 physical qubits in total.

In the folio: Building a Quantum Computer › Overhead: how many qubits?See also Gross code, Code distance

Gross code

The bivariate-bicycle qLDPC code of Bravyi et al. (2024), named after a gross (144). It stores twelve logical qubits at distance 12 in 288 physical qubits, against for twelve surface-code patches, about 12× fewer.

: 144 data + 144 check qubits

In the folio: Building a Quantum Computer › Overhead: how many qubits?See also Bivariate-bicycle code, Quantum LDPC code, Code parameters

Bivariate-bicycle code

A family of qLDPC codes whose checks are defined by two commuting cyclic shifts on a torus-like grid; each check acts on six qubits, and the connectivity fits on two planar layers of couplers. IBM proposed it (Bravyi et al., Nature 627, 778, 2024) as a superconducting-friendly route to high-rate error correction.

In the folio: Building a Quantum Computer › Overhead: how many qubits?See also Gross code, Quantum LDPC code

Bosonic code

A code that stores a qubit in the many levels of a single harmonic oscillator, such as a microwave cavity or an optical mode, so that part of the error protection is built into one physical element. Cat and GKP codes are the main examples.

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Cat qubit, GKP code

Cat qubit

A bosonic qubit encoded in superpositions of two coherent states and of a microwave resonator, named after Schrödinger's cat. Bit flips are suppressed exponentially in the photon number , leaving mainly phase flips, which a simple repetition code can correct; Alice & Bob and AWS pursue this approach.

In the folio: Building a Quantum Computer › Superconducting circuitsSee also Bosonic code, Superconducting circuits

GKP code

The Gottesman–Kitaev–Preskill (2001) code, which encodes a qubit in grid-like states of an oscillator's position and momentum so that small displacements can be detected and corrected. It is used both in microwave cavities and as an optical qubit in photonic architectures.

In the folio: Building a Quantum Computer › PhotonicsSee also Bosonic code, Photonic qubit

Transversal gate

A logical gate applied qubit by qubit, each physical qubit in one code block interacting only with the corresponding qubit in another, so that a single fault cannot spread within a block. Ions and atoms, which can bring whole blocks together, can apply some logical gates this way; no code allows a universal set transversally.

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Logical qubit, Magic state, Colour code

Josephson junction

Two superconductors separated by a thin insulating barrier, through which Cooper pairs tunnel; it acts as a nonlinear, lossless inductor with energy , where is the superconducting phase difference. This nonlinearity makes the oscillator's levels unequally spaced so that two of them can be addressed as a qubit.

,

In the folios: Building a Quantum Computer › Superconducting circuits; Quantum Hardware Engineering › Materials and fabricationSee also Charging energy, Transmon, Anharmonicity, Josephson effect, Josephson energy

Charging energy

The electrostatic energy cost of adding one electron charge to the circuit's island, set by its total capacitance. The ratio determines the qubit type: in the transmon , which makes the qubit insensitive to charge noise. In the folio's Hamiltonian is the number of Cooper pairs on the island and the offset charge set by stray fields or a gate voltage.

;

In the folio: Building a Quantum Computer › Superconducting circuitsSee also Josephson junction, Transmon, Cooper-pair box

Transmon

The most widely used superconducting qubit: a Josephson junction shunted by a large capacitor, making it insensitive to charge noise. Its frequency, typically 4–8 GHz, is set by the Josephson energy and charging energy . Its levels are only weakly anharmonic (a few hundred MHz), which makes leakage to a concern. Tantalum transmons exceeded ms in 2021.

In the folios: Building a Quantum Computer › Superconducting circuits; Quantum Hardware Engineering › Materials and fabricationSee also Anharmonicity, Charging energy, Cooper-pair box, Fluxonium, Josephson energy

Fluxonium

A superconducting qubit in which a small Josephson junction is shunted by a large "superinductance", usually a chain of many larger junctions. It has a low transition frequency, large anharmonicity and millisecond-scale coherence, at the cost of more complex control than the transmon.

In the folio: Building a Quantum Computer › Superconducting circuitsSee also Transmon, Josephson junction

Anharmonicity

The difference between the and transition frequencies, . It isolates the qubit levels so that a pulse at does not excite ; for a transmon MHz, which limits how short pulses can be before causing leakage.

In the folio: Building a Quantum Computer › Superconducting circuitsSee also Transmon, Leakage

Tunable coupler

An extra circuit element, often itself a flux-tunable transmon, placed between two qubits so that their interaction can be switched from near zero to strong by a flux pulse. It gives CZ or iSWAP gates with low idle crosstalk.

In the folio: Building a Quantum Computer › Superconducting circuitsSee also Controlled-Z gate, iSWAP gate, ZZ interaction

Dispersive readout

The standard way to measure a superconducting qubit without directly absorbing its energy. The qubit is coupled to a readout resonator detuned from it, so the resonator's frequency depends on the qubit state. A microwave tone reflected from or transmitted past the resonator picks up a state-dependent phase. When digitised, this shows up as one of two clusters in the IQ plane. The folio quotes fidelity above 99% in a few hundred nanoseconds.

In the folios: Building a Quantum Computer › Superconducting circuits; Quantum Hardware Engineering › Reading out a qubitSee also Superconducting circuits, Transmon, Dispersive shift, Readout resonator, IQ plane

Two-level-system defectTLS

An atomic-scale defect in an amorphous material, such as an atom or charge tunnelling between two nearly equivalent positions, that behaves as a tiny quantum two-level system. TLSs in the oxides at every metal, substrate and air interface absorb microwave energy resonantly. They are the leading loss mechanism in superconducting circuits, and their fluctuations produce noise and drifting . Their microscopic nature is an open problem.

In the folios: Building a Quantum Computer › Superconducting circuits; Quantum Hardware Engineering › Materials and fabricationSee also Relaxation time, Superconducting circuits, Internal quality factor, 1/f noise, Aluminium oxide tunnel barrier

Dilution refrigerator

A cryostat that reaches a few millikelvin continuously by mixing the two stable isotopes of helium. It is the standard home for superconducting and spin qubits, which sit on its coldest plate under a stack of progressively warmer stages. Heinz London proposed the principle in 1951; Das, de Bruyn Ouboter and Taconis built the first one in 1965. Modern "dry" fridges use a pulse-tube cooler instead of a liquid-helium bath for the upper stages.

In the folios: Building a Quantum Computer › Superconducting circuits; Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Superconducting circuits, Cryo-CMOS, Mixing chamber, Pulse-tube cooler, Helium-3–helium-4 mixture

Trapped ions

Qubits stored in hyperfine or optical levels of single atomic ions, such as , or , held in RF Paul traps in ultra-high vacuum. The folio quotes 2Q fidelities of 99.9–99.97%, 2Q gates of 10–300 µs and coherence from 1 s to more than 1 h: the best fidelities and all-to-all connectivity, but slow gates.

In the folios: Building a Quantum Computer › Trapped ions; Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Paul trap, Mølmer–Sørensen gate, Quantum charge-coupled device, Optical qubit, Motional heating

Paul trap

An ion trap that confines charged particles with a rapidly oscillating (radio-frequency) quadrupole electric field, giving a time-averaged restoring force. Wolfgang Paul shared the 1989 Nobel Prize with Hans Dehmelt, who developed the Penning trap and single-ion spectroscopy, and Norman Ramsey. Modern quantum-computing ion traps are Paul traps, often microfabricated.

In the folios: Building a Quantum Computer › Trapped ions; Quantum Hardware Engineering › MilestonesSee also Trapped ions, Quantum charge-coupled device, Surface-electrode ion trap

Clock state

A pair of atomic levels (typically hyperfine sublevels with ) whose energy difference is first-order insensitive to magnetic field, so qubit frequency hardly fluctuates with field noise. The ion's clock qubit at 12.6 GHz gives coherence times beyond an hour.

In the folio: Building a Quantum Computer › Trapped ionsSee also Hyperfine qubit, Pure dephasing time

Motional mode

A collective vibration of the ion chain, quantised as phonons, shared by all ions because they repel each other through the Coulomb force. It serves as a quantum bus: a spin-dependent force couples each ion's qubit to the mode and so to every other ion, which gives all-to-all connectivity, but long chains crowd the mode spectrum.

In the folio: Building a Quantum Computer › Trapped ionsSee also Mølmer–Sørensen gate, All-to-all connectivity

Mølmer–Sørensen gateMS

The standard trapped-ion entangling gate (Mølmer and Sørensen, 1999): a bichromatic laser or magnetic-gradient field applies a spin-dependent force that briefly excites a shared motional mode and leaves the two ions entangled via an effective interaction. It is robust to the ions' thermal motion.

In the folio: Building a Quantum Computer › Trapped ionsSee also Motional mode, Trapped ions, Cirac–Zoller gate

Quantum charge-coupled deviceQCCD

A trapped-ion architecture in which ions are shuttled between dedicated zones for storage, gates and readout on a segmented trap chip. The name echoes the charge-coupled device (CCD). It avoids long, slow ion chains but makes transport speed and heating central engineering problems.

In the folios: Building a Quantum Computer › Trapped ions; Quantum Hardware Engineering › What limits scaleSee also Paul trap, Trapped ions, Shuttling, Surface-electrode ion trap

All-to-all connectivity

The ability to apply a two-qubit gate directly between any pair of qubits, as in a trapped-ion chain or a reconfigurable atom array, rather than only between neighbours. It avoids the overhead of swapping qubits around and suits high-rate codes.

In the folio: Building a Quantum Computer › Trapped ionsSee also Motional mode, Optical tweezer, Quantum LDPC code

Ultra-high vacuumUHV

Pressures below about mbar; atom and ion experiments run near mbar. Collisions with residual background gas knock atoms out of their traps, so vacuum quality limits how long an array survives. Cryogenic vacuum systems push it further.

In the folios: Building a Quantum Computer › Trapped ions; Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Trapped ions, Atom loss, Neutral atoms

Neutral atoms

Qubits in hyperfine or nuclear-spin clock states of uncharged atoms such as , or Sr, cooled to µK and held in optical tweezer arrays. The folio quotes 2Q gates of 0.2–1 µs, 2Q fidelities of 99.5–99.7% and arrays of more than 6,000 atoms; atoms can be moved mid-circuit, but cycles take milliseconds.

In the folios: Building a Quantum Computer › Neutral atoms; Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Optical tweezer, Rydberg blockade, Atom loss, Rydberg laser, Atom rearrangement

Optical tweezer

A tightly focused laser beam whose intensity maximum traps a single neutral atom through the optical dipole force. Large arrays are made by splitting one beam with a spatial light modulator or an acousto-optic deflector. Loading is random (roughly half the sites fill), so arrays must be rearranged.

In the folios: Building a Quantum Computer › Neutral atoms; Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Neutral atoms, All-to-all connectivity, Spatial light modulator, Acousto-optic modulator, Atom rearrangement

Rydberg state

A highly excited atomic state with principal quantum number –70, whose electron orbits far from the core and gives the atom an enormous polarisability. Two Rydberg atoms interact by a van der Waals energy shift that is strong over micrometres, which neutral-atom gates exploit.

, with

In the folio: Building a Quantum Computer › Neutral atomsSee also Rydberg blockade, Neutral atoms

Rydberg blockade

The suppression of double excitation of two nearby atoms: within the blockade radius the van der Waals shift of the doubly excited state exceeds the laser coupling, so only one atom can be excited and the pair is driven collectively at . This conditional dynamics yields a native CZ gate.

–

In the folio: Building a Quantum Computer › Neutral atomsSee also Rydberg state, Controlled-Z gate, Neutral atoms

Atom loss

The disappearance of an atom from its tweezer or an ion from its trap, through background-gas collisions, imaging heating or excitation errors. It is a leakage-type error that requires the site to be refilled. Remedies are stabilised lasers, better vacuum and continuous reloading from a reservoir.

In the folios: Building a Quantum Computer › Neutral atoms; Quantum Hardware Engineering › Noise and error sourcesSee also Leakage, Correlated errors, Ultra-high vacuum, Atom rearrangement

Photonics

A platform in which qubits are single photons (or GKP states of light) guided in integrated photonic chips at room temperature, with superconducting detectors at 1–4 K. Photons barely decohere and network natively over fibre, but do not interact, so entanglement comes from interference plus detection; loss per element is the key metric.

In the folio: Building a Quantum Computer › PhotonicsSee also Photonic qubit, Fusion-based quantum computing, Superconducting nanowire single-photon detector

Beam splitter

A linear-optical element (on chip, a directional coupler) that mixes two modes, mapping a photon creation operator to a superposition of the two output modes. Networks of beam splitters and phase shifters implement single-photon gates and the interference used for fusion.

In the folio: Building a Quantum Computer › PhotonicsSee also Photonic qubit, Fusion-based quantum computing

Fusion-based quantum computingFBQC

A photonic architecture in which small entangled resource states are joined by "fusions", entangling two-photon measurements made with beam splitters and detectors, into a large fault-tolerant cluster. A linear-optics fusion succeeds with probability ½, rising to ¾ with ancilla photons, so failures must be tolerated by the code.

(→ with ancillas)

In the folio: Building a Quantum Computer › PhotonicsSee also Measurement-based quantum computing, Resource state, Multiplexing

Measurement-based quantum computingMBQC

A model (Raussendorf and Briegel, 2001) in which a large entangled cluster state is prepared first and the computation is then driven entirely by single-qubit measurements, with later measurement bases chosen from earlier outcomes. It suits photons, which are easy to measure but hard to make interact.

In the folio: Building a Quantum Computer › PhotonicsSee also Cluster state, Fusion-based quantum computing

Cluster state

A highly entangled multi-qubit state defined on a graph, made by preparing each qubit in and applying CZ between neighbours. A three-dimensional cluster can carry a fault-tolerant code, which photonic machines build by fusing small resource states.

In the folio: Building a Quantum Computer › PhotonicsSee also Measurement-based quantum computing, Resource state

Resource state

A small, fixed entangled state of a few photons, produced repeatedly by the hardware and consumed by fusions to grow the large cluster that carries the computation.

In the folio: Building a Quantum Computer › PhotonicsSee also Fusion-based quantum computing, Cluster state

Superconducting nanowire single-photon detectorSNSPD

A detector made of a thin superconducting nanowire biased just below its critical current: an absorbed photon creates a resistive hotspot and a voltage pulse. Operated at 1–4 K, SNSPDs offer detection efficiencies above 90%, low dark counts and picosecond timing, essential for photonic qubits and fusions.

efficiency (Reddy 2020); jitter (Korzh 2020)

In the folios: Building a Quantum Computer › Photonics; Quantum Hardware Engineering › Photonic hardwareSee also Photonics, Fusion-based quantum computing, Timing jitter, Photonic qubit

Spin qubit

A qubit stored in the spin of a single electron (or hole) confined in a gate-defined quantum dot, usually in silicon or silicon–germanium. Spin qubits are tiny and can be made on 300 mm CMOS lines. Their first bottlenecks are device uniformity and interconnect fan-out. They sit in the dilution refrigerator alongside superconducting qubits, though some operate at around 1 K.

In the folios: Building a Quantum Computer › Semiconductor spin qubits; Quantum Hardware Engineering › What limits scaleSee also Quantum dot, Exchange interaction, Isotopically enriched silicon-28, 300 mm CMOS process, Charge noise

Plunger and barrier gatesP, B

The metal electrodes above a quantum-dot device: plunger gates (P) set each dot's potential and electron number, while barrier gates (B) between dots control tunnelling. Pulsing a barrier gate switches the exchange coupling on and off for two-qubit gates.

In the folio: Building a Quantum Computer › Semiconductor spin qubitsSee also Exchange interaction, Quantum dot

Electric-dipole spin resonanceEDSR

Driving a spin qubit with an oscillating electric field from a gate electrode instead of an oscillating magnetic field. A nearby micromagnet creates a magnetic field gradient, so shaking the electron in space makes it feel an oscillating magnetic field at the Zeeman frequency .

In the folio: Building a Quantum Computer › Semiconductor spin qubitsSee also Micromagnet, Spin qubit

Micromagnet

A small ferromagnetic structure (often cobalt) deposited on a spin-qubit device to produce a strong local field gradient. It enables electric-dipole spin resonance and gives each dot a slightly different Zeeman frequency for individual addressing.

In the folio: Building a Quantum Computer › Semiconductor spin qubitsSee also Electric-dipole spin resonance

Isotopically enriched silicon-28

Silicon purified to almost pure , which has no nuclear spin. Natural silicon contains about 4.7% , whose nuclear spins form a fluctuating magnetic bath that dephases electron spin qubits. Enrichment removes most of it and extends coherence dramatically.

In the folios: Building a Quantum Computer › Semiconductor spin qubits; Quantum Hardware Engineering › Materials and fabricationSee also Spin qubit, Pure dephasing time, 300 mm CMOS process

Charge noise

Slow, typically , fluctuations of electric fields from charges hopping in defects and interfaces. In spin qubits it shifts dot potentials and exchange couplings, causing dephasing and gate errors; it is the main noise source in purified silicon.

In the folios: Building a Quantum Computer › Semiconductor spin qubits; Quantum Hardware Engineering › Noise and error sourcesSee also Spin qubit, Pure dephasing time, 1/f noise, Sweet spot

Cryo-CMOS

Conventional CMOS control and readout electronics designed to run at cryogenic temperatures, typically the 4 K stage. With controllers inside the cryostat, few cables need to leave it. The limit is the electronics' own power dissipation against the stage's watt-level cooling budget. Cryo-CMOS qubit controllers appeared in 2019.

In the folios: Building a Quantum Computer › Semiconductor spin qubits; Quantum Hardware Engineering › Wiring and the heat budgetSee also Dilution refrigerator, Spin qubit, Heat budget, Single-flux-quantum logic, Fan-out

Topological qubits

Qubits stored non-locally in the fermion parity shared by spatially separated Majorana zero modes, or in non-Abelian anyons of quantum Hall states, so that local noise cannot read or flip them. Protection in hardware could cut error-correction overhead, but the folio marks the platform "early research": no benchmarked qubit or two-qubit fidelity yet, and evidence for topological protection is debated.

In the folio: Building a Quantum Computer › Topological qubitsSee also Majorana zero mode, Non-Abelian anyon, Fermion parity

Majorana zero mode

A zero-energy quasiparticle state bound to the ends of a one-dimensional topological superconductor, described by a self-adjoint operator that is "half" of an ordinary fermion. Two separated modes , together define one fermionic level whose occupancy encodes the qubit.

In the folio: Building a Quantum Computer › Topological qubitsSee also Fermion parity, Topological superconductor, Braiding

Fermion parity

Whether a superconducting system holds an even or odd number of fermions; for a pair of Majorana modes it is the eigenvalue of . Because it is shared by both wire ends, local noise cannot change it; reading it out by parity measurement was reported by Microsoft in 2025 (Nature 638, 651).

In the folio: Building a Quantum Computer › Topological qubitsSee also Majorana zero mode, Topological qubits

Topological superconductor

A superconducting phase with a topologically non-trivial band structure that hosts Majorana zero modes at its boundaries. Microsoft's devices engineer one from an InAs semiconductor nanowire with an Al superconducting shell in a magnetic field along the wire; the end modes decay into the wire over a coherence length , and their residual splitting falls as for wire length .

,

In the folio: Building a Quantum Computer › Topological qubitsSee also Majorana zero mode, Topological qubits

Non-Abelian anyon

A quasiparticle in two dimensions whose exchange changes the system's state by a matrix rather than a phase, so the order of exchanges matters and information can be stored in their collective state. The fractional quantum Hall state, studied at Nokia Bell Labs, is the leading candidate; Majorana zero modes behave the same way.

In the folio: Building a Quantum Computer › Topological qubitsSee also Braiding, Majorana zero mode

Braiding

Moving non-Abelian anyons or Majorana modes around each other, which applies a gate that depends only on the topology of the paths and is therefore insensitive to small errors. For Majoranas braiding gives only Clifford gates, so universality still needs magic states.

In the folio: Building a Quantum Computer › Topological qubitsSee also Non-Abelian anyon, Clifford gate, Magic state

Dynamical decoupling

A sequence of pulses (the simplest being a single Hahn spin echo) that repeatedly reverses a qubit's phase evolution, cancelling slow frequency noise and extending . The folio's coherence bars show under echo or dynamical decoupling.

In the folios: Building a Quantum Computer › Speed against coherence; Quantum Hardware Engineering › Noise and error sourcesSee also Coherence time, Pi pulse, 1/f noise, Sweet spot

Gates per coherence time

The ratio of coherence time to two-qubit gate time, a rough measure of how many operations a qubit survives. The folio's log-scale chart gives about for superconducting and spin qubits, for neutral atoms and for trapped ions; absolute speed matters too, because it sets the error-correction cycle.

In the folio: Building a Quantum Computer › Speed against coherenceSee also Error-correction cycle, Coherence time, Two-qubit gate

Syndrome extraction

The repeated measurement of all stabilizers through ancilla qubits in each error-correction cycle. The resulting pattern of outcomes, the syndrome, locates errors without revealing the encoded state.

In the folio: Building a Quantum Computer › From physical qubits to a computationSee also Stabilizer, Ancilla qubit, Real-time decoding

Leakage

An error that takes a qubit out of its computational subspace, for instance into in a transmon or out of the trap altogether for an atom. Standard error correction assumes errors stay within the two levels, so leaked qubits are especially damaging. It is mitigated by shaped pulses such as DRAG and by dedicated leakage-removal operations.

In the folios: Building a Quantum Computer › From physical qubits to a computation; Quantum Hardware Engineering › Noise and error sourcesSee also Anharmonicity, Atom loss, Correlated errors, DRAG pulse, Ket notation

Clifford gate

A gate that maps Pauli operators to Pauli operators under conjugation, generated by , and CNOT. Clifford circuits are efficiently simulable classically and easy to do fault-tolerantly (by lattice surgery, transversally or by braiding), but need a non-Clifford gate such as for universality.

In the folio: Building a Quantum Computer › From physical qubits to a computationSee also T gate, Magic state, Lattice surgery

Lattice surgery

A method of performing logical operations between surface-code patches by temporarily merging and splitting their boundaries and measuring joint logical operators. It realises Clifford gates using only nearest-neighbour operations on a planar grid.

In the folio: Building a Quantum Computer › From physical qubits to a computationSee also Surface code, Clifford gate, Logical qubit

Magic state

A special ancilla state, such as , which, consumed by a Clifford circuit, implements the non-Clifford T gate and makes fault-tolerant computation universal. Noisy copies are purified by distillation (many in, fewer better out) or, more cheaply, grown by cultivation inside a small code patch.

In the folio: Building a Quantum Computer › Magic statesSee also T gate, Magic-state distillation, Clifford gate

Magic-state distillation

A protocol (Bravyi and Kitaev, 2005) that takes many noisy magic states and, using only Clifford operations and measurement, outputs fewer states of much higher fidelity. Its "factories" historically dominated fault-tolerant footprints; magic-state cultivation (Gidney, Shutty and Jones, 2024) instead grows a high-fidelity state gradually within one patch at far lower cost.

In the folio: Building a Quantum Computer › Magic statesSee also Magic state, T gate

Planar grid

A hardware layout in which each qubit couples only to its nearest neighbours on a flat square lattice, as on most superconducting chips. The surface code needs nothing more; high-rate qLDPC codes need longer-range couplings, possible with multilayer couplers or movable atoms.

In the folio: Building a Quantum Computer › Overhead: how many qubits?See also Surface code, Quantum LDPC code

Cirac–Zoller gate

The 1995 proposal by Ignacio Cirac and Peter Zoller for a two-qubit gate between trapped ions using a shared motional mode as a bus, the first concrete design for a quantum computer. The first ion CNOT was demonstrated the same year by Monroe, Wineland and colleagues.

In the folio: Building a Quantum Computer › MilestonesSee also Trapped ions, Motional mode, Mølmer–Sørensen gate

Loss–DiVincenzo proposal

The 1998 proposal by Daniel Loss and David DiVincenzo to use the spin of single electrons in coupled quantum dots as qubits, with gates by the exchange interaction. It founded the semiconductor spin-qubit field.

In the folio: Building a Quantum Computer › MilestonesSee also Spin qubit, Exchange interaction

Cooper-pair box

A small superconducting island coupled to a reservoir through a Josephson junction, with , whose charge states form a qubit. Coherent control of one by Nakamura, Pashkin and Tsai in 1999 was the first superconducting qubit; its sensitivity to charge noise led to the transmon in 2007.

In the folio: Building a Quantum Computer › MilestonesSee also Transmon, Charging energy

KLM scheme

The 2001 proposal by Knill, Laflamme and Milburn showing that universal quantum computing is possible with single photons, linear optics and photodetection alone, using measurement and feed-forward to make probabilistic gates near-deterministic. It is the conceptual basis for photonic quantum computing.

In the folio: Building a Quantum Computer › MilestonesSee also Photonics, Fusion-based quantum computing

Correlated errors

Errors that strike many qubits at once rather than independently. In superconducting chips, a cosmic ray or a radioactive decay deposits energy in the substrate, and the resulting phonons break Cooper pairs across the chip. Error-correcting codes handle such errors poorly because they assume independent errors. Bursts of this kind were measured in 2022 (McEwen et al.). Remedies include gap engineering, phonon traps and shielding.

In the folios: Building a Quantum Computer › Open problems; Quantum Hardware Engineering › Noise and error sourcesSee also Leakage, Atom loss, Threshold, Quasiparticle, Gap engineering

09Hardware engineering

Cryostats, wiring, lasers, materials and control electronics: the machinery behind the qubits.

Pulse-tube coolerPT

A closed-cycle cryocooler that cools by oscillating the pressure of helium gas through a regenerator, with no moving parts at the cold end. In a dilution refrigerator it provides the ~50 K first stage (cooling power tens of W) and the ~4 K second stage (~1–2 W) without liquid cryogens. Its mechanical vibration can couple into sensitive experiments.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Dilution refrigerator, Cooling power

Helium-3–helium-4 mixture

The working fluid of a dilution refrigerator. Below about 0.87 K a liquid mixture of the light isotope and ordinary separates into a -rich phase floating on a -rich phase. Even at absolute zero the dilute phase still holds about 6.6% . Driving across the phase boundary absorbs heat, much as evaporation does, so cooling continues down to a few millikelvin.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Mixing chamber, Still

Mixing chamberMXC

The coldest stage of a dilution refrigerator, at about 10 mK, where crosses the phase boundary and absorbs heat. The qubit chip, the first amplifiers and the isolators are mounted here. Its cooling power is tiny, about 20 µW at 20 mK, and it falls roughly as .

cooling power (: circulation rate)

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Dilution refrigerator, Cooling power, Helium-3–helium-4 mixture

Still

The stage of a dilution refrigerator at about 0.8 K, where is preferentially evaporated from the dilute phase, pumped to room temperature and recirculated. Its cooling power is about 10–40 mW. This makes it a useful place to thermalise wiring and attenuators.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Mixing chamber, Cold plate

Cold plate

An intermediate stage at about 0.1 K, between the still and the mixing chamber, with a cooling power of some hundreds of µW. It intercepts heat conducted down the cables and hosts attenuators. That spares the much weaker mixing chamber.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Still, Mixing chamber, Cryogenic attenuation

Cooling power

The heat a refrigerator stage can remove while holding its temperature. It falls from tens of watts at 50 K and ~1–2 W at 4 K to tens of microwatts at the mixing chamber. Every coaxial line conducts heat and dissipates signal power, so the number of lines a refrigerator can host, not the number of qubits a chip can hold, is often the binding constraint on scale.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Dilution refrigerator, Heat budget, High-density flex cabling

Heat budget

The allocation of each cryostat stage's limited cooling power among wiring, attenuators, amplifiers and control electronics. Each qubit typically needs a drive line and often a flux line, plus a share of a readout line. At a thousand qubits, the folio notes, "wiring becomes the machine".

In the folio: Quantum Hardware Engineering › Wiring and the heat budgetSee also Cooling power, Drive line, Cryo-CMOS, Frequency multiplexing

Thermal photon number

The mean number of thermally excited photons in an electromagnetic mode, given by the Bose–Einstein distribution. For a 5 GHz mode the folio gives 1,250 at 300 K, 16 at 4 K and at 10 mK. Stray thermal photons in a readout resonator randomly shift the qubit frequency and dephase it.

In the folio: Quantum Hardware Engineering › Why millikelvinSee also Qubit energy quantum, Cryogenic attenuation, Dispersive shift

Qubit energy quantum

The energy of one qubit excitation expressed as a temperature. It is about 0.24 K for a 5 GHz qubit, so the device must be held far below this to stay in its ground state. This is why gigahertz qubits need millikelvin temperatures.

at ( per GHz)

In the folio: Quantum Hardware Engineering › Why millikelvinSee also Thermal photon number, Millikelvin

Cryogenic attenuation

Fixed attenuators placed on drive lines at successive stages (in the folio −20 dB at 4 K, −10 dB at the still, −10 dB at the cold plate, −20 dB at the mixing chamber). Each attenuator absorbs most of the hot noise from above and re-emits only its own, colder thermal noise. Some 60 dB in total brings the ~1,000 room-temperature noise photons per mode close to the mixing-chamber level. Spreading it out lets each stage shed the dissipated heat where cooling power allows.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Thermal photon number, Decibel, Drive line

Drive line

The coaxial line that carries microwave control pulses from room temperature down to a qubit. It is attenuated stage by stage so that thermal noise from warmer stages does not excite or dephase the qubit. Several qubits can share one drive line by frequency multiplexing.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Cryogenic attenuation, Flux bias line, Readout line

Flux bias line

A line carrying a current whose magnetic flux threads a SQUID loop on the chip, tuning a qubit's frequency or a coupler's strength. Because it carries current, it is filtered (low-pass) rather than heavily attenuated, which would dissipate too much heat. Flux-tunable designs are exposed to flux noise through this degree of freedom.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Drive line, Flux noise, Sweet spot

Readout line

The output chain that carries the weak measurement signal from the chip back to room temperature. It runs through isolators, a near-quantum-limited parametric amplifier at the mixing chamber, a HEMT at 4 K and room-temperature amplifiers. It must not be attenuated, so it is protected from back-propagating noise by isolators instead. A single feedline usually serves several multiplexed readout resonators.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Isolator, Josephson parametric amplifier, High-electron-mobility transistor amplifier, Frequency multiplexing

Isolator

A non-reciprocal microwave component, usually a ferrite circulator with one port terminated, that passes signals in one direction and absorbs those travelling back. On the readout line it lets the measurement signal leave while blocking amplifier noise and pump tones from reaching the qubit. Isolators are bulky and magnetic, which makes them an obstacle to dense wiring.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Readout line, Josephson parametric amplifier

System noise temperature

The noise of a whole amplifier chain, expressed as the temperature of a resistor that would produce it at the input. By the Friis formula, the first amplifier's noise dominates and later stages are suppressed by its gain. That is why the first amplifier should be quantum-limited and sit at the coldest stage. Note that in this formula are amplifier noise temperatures and a gain, not qubit relaxation and coherence times.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Added noise, High-electron-mobility transistor amplifier, Quantum-limited amplifier

Added noise

The noise an amplifier contributes, referred to its input and counted in photons per mode. Quantum mechanics sets a floor: a phase-preserving amplifier with large gain must add at least half a photon, the bound Caves derived in 1982. The same figure is used for transducers, which the folio quotes at about one added photon.

(phase-preserving, high gain)

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Phase-preserving amplifier, Quantum-limited amplifier, Microwave-to-optical transducer

Phase-preserving amplifier

An amplifier that boosts both quadratures ( and ) of a signal equally, as ordinary amplifiers do. Because the two quadratures do not commute, such an amplifier must add at least half a photon of noise. A phase-sensitive amplifier can amplify one quadrature noiselessly at the cost of squeezing the other.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also Added noise, IQ plane

Quantum-limited amplifier

An amplifier whose added noise is at or near the quantum minimum of half a photon. In superconducting readout these are Josephson parametric amplifiers placed at the mixing chamber. Without one, the 4 K HEMT's several kelvin of noise would make fast, high-fidelity single-shot readout impossible.

In the folio: Quantum Hardware Engineering › Reading out a qubitSee also Josephson parametric amplifier, Travelling-wave parametric amplifier, Added noise

Josephson parametric amplifierJPA

A superconducting resonator made nonlinear by Josephson junctions (often a SQUID) and driven by a strong pump tone, which transfers energy to the weak signal. It reaches ~20 dB of gain with near-quantum-limited noise, but only over a narrow band of order tens of MHz. This limits how many readout tones it can amplify at once.

In the folio: Quantum Hardware Engineering › Reading out a qubitSee also Travelling-wave parametric amplifier, Quantum-limited amplifier, Josephson junction

Travelling-wave parametric amplifierTWPA

A parametric amplifier built as a superconducting transmission line loaded with thousands of Josephson junctions, so that gain builds up as the signal propagates rather than in a resonator. It gives ~20 dB over gigahertz of bandwidth, enough for many multiplexed qubits on one feedline. It was demonstrated in 2015 (Macklin et al.).

In the folio: Quantum Hardware Engineering › Reading out a qubitSee also Josephson parametric amplifier, Frequency multiplexing

High-electron-mobility transistor amplifierHEMT

A low-noise transistor amplifier based on a heterostructure two-dimensional electron gas, mounted at the 4 K stage as the second amplifier in the readout chain. Its noise temperature is a few kelvin, excellent for a transistor but tens of times the quantum limit at 5 GHz. It therefore needs a parametric amplifier in front of it.

In the folio: Quantum Hardware Engineering › Inside a dilution refrigeratorSee also System noise temperature, Josephson parametric amplifier

Superconducting gap

The minimum energy needed to break a Cooper pair, which separates the superconducting ground state from its quasiparticle excitations. For aluminium the folio gives , roughly ten times a 5 GHz qubit quantum. So qubit photons cannot break pairs, but stray higher-energy radiation can.

BCS:

In the folio: Quantum Hardware Engineering › Why millikelvinSee also Critical temperature, Cooper pair, Quasiparticle, Gap engineering

Critical temperature

The temperature below which a material becomes superconducting. Aluminium, used for most junctions, has K. Niobium (about 9.2 K) and tantalum (about 4.4 K) are used for wiring and resonators. Operating far below suppresses thermal quasiparticles exponentially.

In the folio: Quantum Hardware Engineering › Why millikelvinSee also Superconducting gap, Quasiparticle

Cooper pair

A bound pair of electrons, held together by an attraction mediated by lattice vibrations, that carries supercurrent without resistance. Superconducting qubits rely on Cooper pairs tunnelling coherently through Josephson junctions. Anything that breaks pairs, such as heat, stray radiation or phonons from cosmic rays, creates lossy quasiparticles.

In the folio: Quantum Hardware Engineering › Why millikelvinSee also Superconducting gap, Quasiparticle, Correlated errors

Quasiparticle

An unpaired electron-like excitation in a superconductor, created when a Cooper pair is broken. Quasiparticles that tunnel across a junction absorb qubit energy and cause errors. In equilibrium their density is vanishingly small, scaling as . In practice it is set by stray infrared radiation and ionising events, countered by shielding, filtering and absorbers.

(equilibrium)

In the folio: Quantum Hardware Engineering › Why millikelvinSee also Superconducting gap, Correlated errors, Gap engineering, Phonon trap

Dispersive shift

The state-dependent shift of a readout resonator's frequency caused by a far-detuned qubit, typically a few MHz. It is what makes dispersive readout possible. In the two-level approximation it is set by the qubit–resonator coupling and detuning.

, (two-level approximation)

In the folio: Quantum Hardware Engineering › Reading out a qubitSee also Dispersive readout, Readout resonator

Readout resonator

A superconducting microwave resonator, usually a transmission-line section, coupled both to one qubit and to a shared feedline. Its frequency is pulled by depending on the qubit state. Giving each qubit's resonator a different frequency allows several qubits to be read on one line.

In the folio: Quantum Hardware Engineering › Reading out a qubitSee also Dispersive shift, Frequency multiplexing, Internal quality factor

IQ plane,

The plane of the in-phase () and quadrature () components of a demodulated microwave signal, which together encode its amplitude and phase. Each single-shot measurement is one point. Repeated shots form Gaussian clusters for and , whose separation relative to their width (set by amplifier noise) determines readout fidelity.

In the folio: Quantum Hardware Engineering › Reading out a qubitSee also Readout threshold, Dispersive readout, IQ up-conversion

Readout threshold

The decision boundary drawn in the IQ plane between the and clusters. Each shot is assigned to a state by which side it falls on. Thresholds drift and are among the parameters recalibrated automatically.

In the folio: Quantum Hardware Engineering › Reading out a qubitSee also IQ plane, Readout fidelity, Calibration

Readout fidelity

The probability that a single measurement reports the qubit's actual state. It is limited by cluster overlap in the IQ plane, by qubit decay during the measurement and by measurement-induced transitions. The folio quotes above 99% in a few hundred nanoseconds for superconducting qubits.

In the folio: Quantum Hardware Engineering › Reading out a qubitSee also IQ plane, Readout threshold, Quantum-limited amplifier

Frequency multiplexing

Sharing one physical line among several qubits by giving each its own frequency. Several readout resonators sit on one feedline, or several qubits are driven through one drive line. It reduces the number of cables, and so the heat load, at the cost of crosstalk and of needing broadband amplifiers.

In the folio: Quantum Hardware Engineering › Wiring and the heat budgetSee also Readout resonator, Travelling-wave parametric amplifier, Heat budget

High-density flex cabling

Flat, flexible ribbon cables carrying many microwave lines in parallel on a thin substrate, replacing individual coaxial cables. They give more lines per stage at lower heat load. IBM's 1,121-qubit Condor processor used over a mile of it.

In the folio: Quantum Hardware Engineering › Wiring and the heat budgetSee also IBM Condor, Heat budget, Cooling power

Single-flux-quantum logicSFQ

Superconducting digital electronics in which a bit is a picosecond voltage pulse whose time integral is one magnetic flux quantum, generated by switching Josephson junctions. It runs very fast at very low power. That makes it a candidate for control circuitry right next to the qubit chip.

In the folio: Quantum Hardware Engineering › Wiring and the heat budgetSee also Cryo-CMOS, Josephson junction

Josephson effect

The flow of supercurrent through a thin barrier between superconductors with no voltage applied (DC effect), and its oscillation at a frequency proportional to voltage when one is applied (AC effect). Brian Josephson predicted it in 1962. It underlies every superconducting qubit, parametric amplifier and SFQ circuit.

In the folio: Quantum Hardware Engineering › MilestonesSee also Josephson junction, Single-flux-quantum logic

Aluminium oxide tunnel barrier

The amorphous oxide, about 1–2 nm thick, grown on an aluminium bottom electrode to form the insulating layer of a Josephson junction. Its thickness sets the junction resistance exponentially. This is why resistances spread by a few percent across a wafer, and as an amorphous oxide it also hosts TLS defects.

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Josephson junction, Two-level-system defect, Laser annealing

Josephson energy

The energy scale of Cooper-pair tunnelling across a junction, fixed by its critical current. Together with the charging energy , it sets a transmon's frequency.

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Critical current, Transmon, Ambegaokar–Baratoff relation

Critical current

The largest supercurrent a Josephson junction can carry without developing a voltage. It fixes the Josephson energy and so the qubit frequency. It can be predicted from the junction's resistance via the Ambegaokar–Baratoff relation.

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Josephson energy, Normal-state resistance

Normal-state resistance

The resistance of a Josephson junction when it is not superconducting. Because it can be measured on a probe station at room temperature, it is the routine fabrication check for hitting a target qubit frequency. Strictly, the normal-state value just above is somewhat higher than the room-temperature one, and an empirical factor is applied.

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Ambegaokar–Baratoff relation, Critical current, Laser annealing

Ambegaokar–Baratoff relation

The 1963 result linking a tunnel junction's critical current to its normal-state resistance and the superconducting gap. It is why a resistance measurement predicts the qubit frequency before the chip is ever cooled.

(at )

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Critical current, Normal-state resistance, Superconducting gap

Internal quality factor

A resonator's stored energy divided by the energy lost per radian of oscillation to internal (material) losses, excluding deliberate coupling to the outside. It is the standard benchmark of materials quality. The best superconducting resonators reach –; at 5 GHz, corresponds to an energy lifetime of about 32 µs.

; lifetime

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Two-level-system defect, Relaxation time

Tantalum

A superconducting metal ( K) used for wiring, resonators and qubit capacitor pads. Its native oxide is thinner and less lossy than that of niobium. Using it lifted transmon above 0.3 ms in 2021 (Place et al.).

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Relaxation time, Transmon, Two-level-system defect

Substrate

The crystal wafer beneath a superconducting circuit, usually high-resistivity silicon or sapphire, chosen for low microwave loss. Its surfaces and interfaces host TLS defects. It is also the medium through which phonons from cosmic-ray or radioactive impacts spread across the chip.

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Two-level-system defect, Correlated errors, Phonon trap

Laser annealing

Post-fabrication tuning in which a focused laser locally heats individual Josephson junctions, altering the oxide barrier and raising its resistance. This retunes qubit frequencies. It compensates the few-percent spread in junction resistance and avoids frequency collisions between neighbouring fixed-frequency qubits.

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Normal-state resistance, Aluminium oxide tunnel barrier

300 mm CMOS process

Fabrication on the 300 mm silicon wafers and industrial process lines of the semiconductor industry. For spin qubits it promises the uniformity, yield and volume needed for millions of devices. The folio dates qubits on 300 mm wafers to 2023.

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Spin qubit, Isotopically enriched silicon-28

Surface-electrode ion trap

A Paul trap with all its electrodes patterned on the surface of a chip, holding ions some tens of micrometres above it. It can be microfabricated with many segments for transport. It can also integrate waveguides and detectors, at the cost of stronger heating from the nearby surface.

In the folio: Quantum Hardware Engineering › Materials and fabricationSee also Paul trap, Quantum charge-coupled device, Motional heating, Integrated photonics

Noise spectral density

The noise power per unit bandwidth as a function of frequency, usually plotted on log–log axes. Its shape matters as much as its size: qubits are most sensitive to low-frequency noise, which causes dephasing, and to noise at their transition frequency, which causes relaxation.

In the folio: Quantum Hardware Engineering › Noise and error sourcesSee also 1/f noise, White noise, Dynamical decoupling

1/f noise

Noise whose spectral density rises as frequency falls, roughly as with . It arises from many slow fluctuators such as TLS defects and surface spins. Flux, charge and TLS noise are all of this kind, so slow drifts dominate rather than white noise.

,

In the folio: Quantum Hardware Engineering › Noise and error sourcesSee also Noise spectral density, Flux noise, Charge noise, Two-level-system defect

White noise

Noise with a flat spectral density, equal power at all frequencies. In the folio's chart it is the floor that noise falls to at high frequency, set for example by amplifier or thermal noise.

In the folio: Quantum Hardware Engineering › Noise and error sourcesSee also Noise spectral density, 1/f noise

Flux noise

Low-frequency fluctuations of the magnetic flux threading a superconducting loop, thought to come from unpaired surface spins. Its typical size is of order at 1 Hz. It dephases flux-tunable qubits and couplers and is mitigated by operating at sweet spots.

In the folio: Quantum Hardware Engineering › Noise and error sourcesSee also 1/f noise, Sweet spot, Flux bias line

Sweet spot

An operating point at which a qubit's frequency is, to first order, insensitive to a noisy control parameter: . An example is a flux-tunable transmon biased at maximum frequency. Parking qubits there greatly reduces dephasing from flux or charge noise.

In the folio: Quantum Hardware Engineering › Noise and error sourcesSee also Flux noise, Charge noise, Dynamical decoupling

Thermal photon dephasing

Dephasing of a superconducting qubit caused by residual thermal photons in its readout resonator. Through the dispersive shift, each photon moves the qubit frequency by about at random times. It is mitigated by line attenuation, filtering and well-thermalised cold terminations ("cold loads").

In the folio: Quantum Hardware Engineering › Noise and error sourcesSee also Thermal photon number, Dispersive shift, Cryogenic attenuation

Motional heating

The gradual excitation of a trapped ion's vibrational modes by electric-field noise from the trap electrodes. It degrades the motion-mediated two-qubit gates. The rate rises steeply as the ion approaches the surface (roughly as distance). It is reduced by cryogenic traps and surface treatment.

In the folio: Quantum Hardware Engineering › Noise and error sourcesSee also Surface-electrode ion trap, Trapped ions

Gap engineering

Designing the superconducting gap profile of a circuit, for example by using electrodes of different gap on either side of a junction. Quasiparticles then lack the energy to reach or tunnel through the sensitive junction. It makes qubits more robust to quasiparticle bursts from radiation.

In the folio: Quantum Hardware Engineering › Noise and error sourcesSee also Superconducting gap, Quasiparticle, Correlated errors

Phonon trap

A patch of normal metal or low-gap superconductor on the chip or substrate that absorbs high-energy phonons, for example from a cosmic-ray impact, before they break Cooper pairs near the qubits.

In the folio: Quantum Hardware Engineering › Noise and error sourcesSee also Correlated errors, Gap engineering, Substrate

Acousto-optic modulatorAOM, AOD

A crystal in which an RF-driven sound wave forms a moving diffraction grating. It shifts the light's frequency and deflects it by an angle set by the RF frequency. AOMs switch and frequency-shift beams. Acousto-optic deflectors (AODs) use several RF tones to steer multiple beams, for instance to move atoms during rearrangement.

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Spatial light modulator, Optical tweezer, Atom rearrangement

Spatial light modulatorSLM

A pixelated liquid-crystal device that imprints a programmable phase pattern (a computed hologram) on a laser beam. Focused by a lens, it produces an arbitrary static pattern of many tweezer spots.

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Optical tweezer, Acousto-optic modulator

Numerical apertureNA

A measure of a lens's light-gathering cone, . A high-NA objective focuses tweezers to micrometre-sized spots and collects a large fraction of fluorescence photons for fast, accurate imaging.

; diffraction-limited spot

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Optical tweezer, Fluorescence imaging

Fluorescence imaging

Readout in which a resonant laser makes atoms or ions in one qubit state scatter many photons while the other state stays dark. A camera then reads every qubit in the array at once. It is fast in parallel but can heat or lose atoms.

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Numerical aperture, Neutral atoms, Trapped ions

Rydberg laser

A laser, often one of two in a two-photon scheme, that excites neutral atoms to Rydberg states: very highly excited levels with large orbitals and huge interactions. The resulting Rydberg blockade, in which one excited atom prevents excitation of its neighbours, is the basis of neutral-atom two-qubit gates.

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Neutral atoms, Laser linewidth

Repumping

Using extra lasers to return atoms or ions that have decayed into states outside the cooling cycle, such as other hyperfine levels or metastable D states, back into it. In the 866 nm and 854 nm lasers repump the and levels.

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Laser cooling, Atomic qubit species

Laser cooling

Slowing atoms or ions by making them scatter photons from laser beams tuned just below a resonance. Moving particles see light Doppler-shifted towards resonance and recoil against their motion. It is the first step in preparing every atom- and ion-based qubit.

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Optical molasses, Repumping

Optical molasses

Three pairs of counter-propagating, red-detuned laser beams that act like a viscous medium on atoms, damping their motion in all directions. It was first demonstrated in 1985 by Chu and colleagues, work recognised in the 1997 Nobel Prize.

In the folio: Quantum Hardware Engineering › MilestonesSee also Laser cooling

Atomic qubit speciesRb, ,

The elements commonly used as qubits, each needing several stabilised lasers at its own wavelengths. The folio lists rubidium at 780 and 795 nm (its D2 and D1 lines). It gives 369 nm for (cooling and detection) and 397, 729, 854 and 866 nm for (cooling, the optical qubit transition, and two repumpers).

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Neutral atoms, Trapped ions, Repumping, Optical qubit

Optical qubit

A qubit encoded in two atomic levels separated by an optical frequency, such as the 729 nm – transition in . Microwave-spaced hyperfine qubits are the alternative. Any laser phase noise transfers directly to the qubit, so optical qubits need laser linewidths at the hertz level.

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Laser linewidth, Ultra-stable cavity, Atomic qubit species

Laser linewidth

The spectral width of a laser's emission, a measure of its frequency and phase noise. For optical qubits it must reach the hertz level, about one part in of the optical frequency. This is achieved by locking the laser to an ultra-stable cavity.

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Ultra-stable cavity, Optical qubit

Ultra-stable cavity

A high-finesse optical resonator, with mirrors on a spacer of ultra-low-expansion glass or crystalline silicon, isolated from vibration and temperature changes. A laser electronically locked to it, typically by the Pound–Drever–Hall method, inherits its hertz-level frequency stability.

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Laser linewidth, Optical qubit

Atom rearrangement

Moving stochastically loaded atoms with steerable tweezers so that the occupied sites form a defect-free array. It was demonstrated in 2016 (Barredo et al.; Endres et al.). It overcame the roughly 50% random loading of single tweezers and enabled arrays of hundreds of atoms.

In the folio: Quantum Hardware Engineering › MilestonesSee also Optical tweezer, Acousto-optic modulator, Cycle time

Integrated photonics

Waveguides, modulators and detectors fabricated on a chip. For ion traps, light is routed to each ion through on-chip waveguides and grating couplers, replacing bulky free-space optics (Mehta et al., 2020). For photonic qubits, such circuits are the processor itself.

In the folio: Quantum Hardware Engineering › Atoms and ions: lasers, optics, vacuumSee also Surface-electrode ion trap, Silicon nitride waveguide

Photon loss

The chance a photon is absorbed or scattered at each optical component. Because losses multiply, survival through components falls geometrically. In the folio's chart, 200 components at 1% loss each leave about 13% of photons, at 0.1% about 82%, and at 0.01% about 98%. Engineering targets are set by how many elements a photon must cross.

survival

In the folio: Quantum Hardware Engineering › Photonic hardwareSee also Photonic qubit, Silicon nitride waveguide

Spontaneous parametric down-conversionSPDC

A nonlinear-optical process in which a pump photon splits into two lower-energy photons inside a crystal or waveguide. Detecting one heralds the other. It is probabilistic: raising the pair rate also raises the chance of unwanted multi-pair emission, so many sources must be multiplexed.

In the folio: Quantum Hardware Engineering › Photonic hardwareSee also Single-photon source, Multiplexed source

Single-photon source

A device that emits exactly one photon on demand. Semiconductor quantum dots in micro-cavities emit triggered single photons that are highly indistinguishable. Heralded SPDC is the probabilistic alternative.

In the folio: Quantum Hardware Engineering › Photonic hardwareSee also Spontaneous parametric down-conversion, Indistinguishability, Multiplexed source

Indistinguishability

The degree to which two photons are identical in every degree of freedom: frequency, timing, polarisation and spatial mode. Only indistinguishable photons interfere perfectly (Hong–Ou–Mandel interference). That interference is how photonic gates and entangling measurements work.

In the folio: Quantum Hardware Engineering › Photonic hardwareSee also Single-photon source, Photonic qubit

Multiplexed source

Many probabilistic photon sources combined through fast switches, so that whichever one fires is routed to the output. It turns probabilistic sources into nearly deterministic ones, at the cost of extra components and loss.

In the folio: Quantum Hardware Engineering › What limits scaleSee also Spontaneous parametric down-conversion, Electro-optic switch

Timing jitter

The random spread in the delay between a photon's arrival and the detector's output pulse. Low jitter allows fine time-bin encoding, high clock rates and rejection of background counts.

In the folio: Quantum Hardware Engineering › Photonic hardwareSee also Superconducting nanowire single-photon detector

Silicon nitride waveguideSiN

An optical waveguide on a chip with a silicon nitride core, prized for very low propagation loss and a wide transparent band. Silicon waveguides are more compact but lossier. Both are used for photonic quantum circuits.

In the folio: Quantum Hardware Engineering › Photonic hardwareSee also Photon loss, Integrated photonics, Electro-optic switch

Electro-optic switch

An optical switch that changes a material's refractive index with an applied voltage, for instance through the Pockels effect in lithium niobate. It routes photons in nanoseconds or faster. Such switches are needed for source multiplexing and for feed-forward in photonic quantum computing.

In the folio: Quantum Hardware Engineering › Photonic hardwareSee also Multiplexed source, Silicon nitride waveguide

Optical link

Replacing coaxial control and readout cables into a cryostat with optical fibres, which carry far more bandwidth with much less heat. Signals must be converted between optical and microwave at the cold end, which needs efficient, quiet transducers.

In the folio: Quantum Hardware Engineering › Wiring and the heat budgetSee also Microwave-to-optical transducer, Heat budget

Compiler (quantum)

Software that translates a quantum circuit into the hardware's native gates and then into a timed schedule of calibrated control pulses. It is the first stage of the control stack.

In the folio: Quantum Hardware Engineering › Control electronicsSee also FPGA sequencer, Calibration

FPGA sequencerFPGA

A field-programmable gate array, a reconfigurable digital chip, that plays out pulse schedules with nanosecond timing. It also reacts to measurement results within the coherence time, which is essential for feedback and error correction.

In the folio: Quantum Hardware Engineering › Control electronicsSee also Feedback latency, Digital-to-analogue converter, Real-time decoding

Digital-to-analogue converterDAC

The circuit that turns sampled digital waveforms into analogue voltages, running at gigasamples per second. It generates the baseband and envelopes of control pulses, or with fast RF-DACs the microwave signal itself.

In the folio: Quantum Hardware Engineering › Control electronicsSee also Gigasamples per second, IQ up-conversion, Analogue-to-digital converter

Gigasamples per secondGS/s

The sample rate of fast data converters: samples per second. By the Nyquist criterion, a converter can directly synthesise or digitise signals up to half its sample rate.

In the folio: Quantum Hardware Engineering › Control electronicsSee also Digital-to-analogue converter, Analogue-to-digital converter

IQ up-conversion

Mixing two baseband waveforms, and , with a local-oscillator tone and its 90°-shifted copy to produce a microwave pulse of fully controlled amplitude and phase. It needs careful calibration of local-oscillator leakage and sideband imbalance. Direct RF synthesis with very fast DACs is the alternative.

In the folio: Quantum Hardware Engineering › Control electronicsSee also Digital-to-analogue converter, IQ plane, Down-conversion

Down-conversion

The reverse of up-conversion on the readout path. The amplified microwave signal is mixed with a local oscillator to a low frequency and demodulated into and , giving one point in the IQ plane per measurement.

In the folio: Quantum Hardware Engineering › Control electronicsSee also IQ plane, Analogue-to-digital converter, IQ up-conversion

Analogue-to-digital converterADC

The circuit that samples the down-converted readout signal and digitises it for demodulation and state discrimination on the FPGA.

In the folio: Quantum Hardware Engineering › Control electronicsSee also Down-conversion, FPGA sequencer, Gigasamples per second

Feedback latency

The delay between measuring a qubit and acting on the result. The folio gives under 1 µs, which must be short compared with coherence times. It matters for mid-circuit measurement, active reset and error correction.

In the folio: Quantum Hardware Engineering › Control electronicsSee also FPGA sequencer, Real-time decoding

DRAG pulse

Derivative Removal by Adiabatic Gate (Motzoi et al., 2009). A control pulse with a Gaussian envelope on the quadrature and its scaled time derivative on . The derivative term cancels the drive's spectral component at the nearby transition, suppressing leakage and phase errors in weakly anharmonic qubits such as transmons. Typical length is about 20–40 ns.

,

In the folio: Quantum Hardware Engineering › Control electronicsSee also Leakage, Transmon, IQ up-conversion

Shuttling

Physically moving qubits across a chip: ions between trap zones, or electrons along chains of quantum dots in spin-qubit devices. It provides connectivity and frees space for wiring, at the cost of time and potential motional or spin errors.

In the folio: Quantum Hardware Engineering › What limits scaleSee also Quantum charge-coupled device, Spin qubit

Fan-out

The problem of routing an individual control connection from every qubit in a dense array to the outside world. For spin qubits only tens of nanometres apart, the wires, not the qubits, set the size limit. Fan-out pushes towards on-chip control and shared lines.

In the folio: Quantum Hardware Engineering › What limits scaleSee also Spin qubit, Cryo-CMOS, Frequency multiplexing

Cycle time

The time for one full repetition of an experiment or error-correction round. For neutral atoms it includes loading, rearrangement, gates and imaging, and is far slower than superconducting cycles. This is why faster imaging and reloading are priorities.

In the folio: Quantum Hardware Engineering › What limits scaleSee also Neutral atoms, Atom rearrangement, Real-time decoding

Quantum link

A connection that carries quantum states or entanglement between separate machines, so a modular system can grow beyond one cryostat or trap. The folio cites a 30 m cryogenic microwave link between two dilution refrigerators (2023, Storz et al.), with photonic links for ions and atoms as early steps.

In the folio: Quantum Hardware Engineering › What limits scaleSee also Microwave-to-optical transducer, Dilution refrigerator, Photonic qubit

10Experiments, systems and standards

Named experiments, machines, satellites, programmes and standards that the folios cite.

Loophole-free Bell test

A Bell experiment that closes both main loopholes at once. The locality loophole is closed by space-like separating the measurement choices. The detection loophole is closed by detecting enough of the particles that the missed ones cannot fake a violation. The folio cites the 2015 tests at Delft, NIST and Vienna; Delft used electron spins about 1.3 km apart, and NIST and Vienna used photons.

In the folios: Quantum Foundations and Theory › No-go theorems; Quantum Information › Bell nonlocality; Quantum Networking › MilestonesSee also Bell's theorem, Aspect experiment, Bell nonlocality, CHSH inequality, Device-independent cryptography

Solvay debates

The discussions between Bohr and Einstein at the 1927 (and 1930) Solvay conferences in Brussels, in which Einstein proposed thought experiments to evade the uncertainty principle and Bohr rebutted them. They framed the dispute over completeness that led to the EPR paper.

In the folio: Quantum Foundations and Theory › MilestonesSee also EPR paradox, Complementarity

Aspect experiment

The 1982 Bell test by Alain Aspect and colleagues in Orsay, in which the polariser settings were switched while the photons were in flight, addressing the locality loophole. It confirmed the quantum violation of Bell inequalities.

In the folio: Quantum Foundations and Theory › MilestonesSee also Bell's theorem, Loophole-free Bell test

Micius satellite

China's quantum science satellite, launched in 2016, which in 2017 distributed entangled photon pairs to ground stations more than 1,200 km apart (Yin et al.). It also demonstrated satellite QKD and ground-to-satellite teleportation, showing that space links can avoid the exponential loss of fibre.

In the folios: Quantum Information › Milestones; Quantum Communications › Links: fibre, air and space; Quantum Networking › Loss sets the rateSee also Transmissivity, Quantum internet, Loophole-free Bell test, Satellite QKD, Entanglement-based QKD

Nobel Prize in Physics 2022

Awarded to Alain Aspect, John Clauser and Anton Zeilinger for experiments with entangled photons, establishing the violation of Bell inequalities and pioneering quantum information science. Clauser was the C of CHSH, and Zeilinger's group made the 1997 photonic teleportation.

In the folio: Quantum Information › MilestonesSee also CHSH inequality, Bell nonlocality, Quantum teleportation

Quantum echoes

Experiments that evolve a quantum system forwards, perturb it, and evolve it backwards to measure out-of-time-order correlators, which reveal how information scrambles. In 2025 Google Quantum AI reported such "verifiable beyond-classical echoes": the measured quantity is beyond classical simulation yet can be cross-checked on another quantum device or in a physical system.

In the folio: Quantum Algorithms › MilestonesSee also Beyond-classical computation, Verification

Beyond-classical computation

A computation that a quantum device performs which no existing classical computer can reproduce in reasonable time, often called quantum advantage or quantum supremacy. Its scientific value depends on whether the result can be verified and whether it solves a useful problem.

In the folios: Quantum Algorithms › Milestones; Quantum AI › Classical AI raises the bar; Building a Quantum Computer › MilestonesSee also Quantum echoes, Verification, Speed-up, IBM 127-qubit utility experiment, Tensor network

NIST FIPS 203–205

The first three post-quantum Federal Information Processing Standards from the US National Institute of Standards and Technology, published in August 2024. FIPS 203 is ML-KEM, a lattice key-encapsulation mechanism derived from CRYSTALS-Kyber. FIPS 204 is ML-DSA, a lattice signature derived from CRYSTALS-Dilithium. FIPS 205 is SLH-DSA, a stateless hash-based signature derived from SPHINCS+.

In the folio: Quantum Communications › The quantum threat, two answersSee also Post-quantum cryptography, Lattice-based cryptography, Hash-based signature

ETSI QKD standards

Specifications for QKD produced by the European Telecommunications Standards Institute's Industry Specification Group on QKD (ISG-QKD, founded 2008). They cover interfaces, component characterisation and security proofs. They are one of the three standards bodies listed on the folio for QKD.

In the folio: Quantum Communications › The quantum threat, two answersSee also ITU-T Y.3800, ISO/IEC 23837

ITU-T Y.3800

A recommendation of the International Telecommunication Union's standardisation sector (2019) giving the overall framework for networks that support QKD. It defines layers, key management and the role of trusted nodes.

In the folio: Quantum Communications › The quantum threat, two answersSee also ETSI QKD standards, ISO/IEC 23837, Trusted node

ISO/IEC 23837

An international standard (2023) setting out security requirements and test and evaluation methods for QKD modules under the Common Criteria. It is a step towards certifying QKD hardware, an open problem the folio highlights.

In the folio: Quantum Communications › The quantum threat, two answersSee also ETSI QKD standards, ITU-T Y.3800, Implementation attack

European agencies' QKD position paper

A 2024 joint position paper on QKD by the French (ANSSI), German (BSI), Dutch (NLNCSA) and Swedish (Swedish NCSA) national cybersecurity agencies. It advises prioritising post-quantum cryptography and regards QKD as suited, for now, only to niche uses. The reasons it gives are QKD's limited reach, its need for trusted nodes and authentication, and the vulnerability of its implementations.

In the folio: Quantum Communications › The quantum threat, two answersSee also Post-quantum cryptography, Quantum key distribution

Chinese integrated quantum network

The space–ground QKD network described by Chen et al. (Nature 589, 214, 2021). It combines the 2,000 km Beijing–Shanghai fibre backbone (completed 2017) with 32 trusted relays and satellite links, spanning 4,600 km in total. It is the largest QKD deployment reported.

In the folio: Quantum Communications › Links: fibre, air and spaceSee also Trusted node, Micius satellite, Satellite QKD

Jinan-1

A Chinese quantum microsatellite, far smaller and cheaper than Micius, launched in 2022. In 2025 it was reported to have relayed keys over 12,900 km, between China and South Africa, acting as a trusted node in orbit.

In the folios: Quantum Communications › Links: fibre, air and space; Quantum Networking › Loss sets the rateSee also Satellite QKD, Micius satellite, Trusted node

Three-node network

The first multi-node quantum network of memory nodes (Pompili et al. 2021, Delft), with three NV-centre nodes. It demonstrated entanglement swapping and three-party entanglement, and the full protocol stack was later run end to end on it.

In the folio: Quantum Networking › MilestonesSee also Nitrogen-vacancy centre, Quantum network protocol stack, Entanglement swapping

Deployed-fibre entanglement

Entangling memory nodes over installed metropolitan telecom fibre rather than laboratory spools, reached in 2024. One example is SiV nodes linked over a 35 km fibre loop in Boston (Knaut et al.). Real fibre adds drift, noise and polarisation changes.

In the folio: Quantum Networking › MilestonesSee also Silicon-vacancy centre, Quantum frequency conversion

Photonic learning advantage

A 2025 experiment that used entangled light as a quantum memory to learn a noisy optical process in about 15 minutes, against an estimated 20 million years for a comparable classical (measure-first) strategy. It extended learning advantages from superconducting qubits to photonic, continuous-variable systems.

In the folio: Quantum AI › Where advantage is provenSee also Learning from experiments, Quantum memory, Measure-first learning

AlphaQubit

A transformer-based neural decoder from Google DeepMind and Google Quantum AI (Bausch et al., Nature 2024). It beat leading matching decoders on experimental surface-code data from the Sycamore processor. It is not yet fast enough for real-time decoding, which the folio names as the open issue.

In the folio: Quantum AI › AI for quantum technologySee also Neural decoder, Minimum-weight perfect matching, Sycamore, Real-time decoding

Sycamore

Google's superconducting quantum processor family, used for the 2019 "quantum supremacy" experiment and later for surface-code error-correction experiments whose data trained and tested AlphaQubit.

In the folio: Quantum AI › AI for quantum technologySee also AlphaQubit, Superconducting circuits, Beyond-classical computation

FermiNet

A deep neural-network wavefunction for many-electron systems (Pfau et al. 2020), built to be antisymmetric under electron exchange. Trained by variational Monte Carlo, FermiNet-type models reach high accuracy for molecules, which raises the bar for quantum chemistry on quantum computers.

In the folio: Quantum AI › AI for quantum technologySee also Neural quantum state, Variational Monte Carlo, Machine-learned potential

Melvin

A computer search algorithm (Krenn et al. 2016) that combined optical elements such as beam splitters, holograms and mode shifters to find set-ups producing complex, high-dimensional entangled photon states. It found experiments that people had not found, and it was an early case of automated scientific discovery in quantum physics.

In the folio: Quantum AI › AI for quantum technologySee also Photonic learning advantage

AlphaTensor-Quantum

A Google DeepMind system that recasts T-count minimisation as a tensor-decomposition problem and solves it with deep reinforcement learning. According to the folio, it reduced the costly T gates in 2025.

In the folio: Quantum AI › AI for quantum technologySee also T count, T gate, Reinforcement learning

IBM 127-qubit utility experiment

A 2023 IBM experiment (Kim et al., Nature) on the 127-qubit Eagle processor. It used error mitigation to estimate observables of a kicked Ising model and argued that the hardware had reached "utility" beyond brute-force classical simulation. Tensor-network and other classical methods reproduced its results within weeks.

In the folio: Quantum AI › Classical AI raises the barSee also Beyond-classical computation, Tensor network, Superconducting circuits

Willow

Google Quantum AI's 105-qubit superconducting processor, used in 2024 (published in Nature 638, 920, 2025) to run surface-code memories of distance 3, 5 and 7 below threshold. Its logical qubit, on 101 qubits, had an error of 0.143% per cycle and outlived the best physical qubit on the chip.

In the folio: Building a Quantum Computer › Error correction sets the scaleSee also Error-suppression factor, Surface code, Superconducting circuits

IBM Condor

IBM's 1,121-qubit superconducting processor, unveiled in 2023 and the first above a thousand qubits. The folio cites it for wiring: it used over a mile of high-density flex cabling inside its cryostat.

In the folio: Quantum Hardware Engineering › Wiring and the heat budgetSee also High-density flex cabling, Superconducting circuits