How statement and proof provenance work
The first chip identifies the source of the statement or construction; the second identifies the source of its local proof or verification.
- Literature-sourced: the exact statement appears in a cited source; only wording and notation differ.
- AI-adapted: a semantically identical restatement of literature-sourced material, modulo indexing, notation, and boundary cases adopted by the library.
- AI-generated: a genuinely novel statement formulated by AI, with no source for the claim itself.
These labels describe origin, not correctness: citations and verification chips remain separate evidence.
The abort-aware ideal output and conditional marginals are states
Statement
For a protocol output and fixed adversarial strategy as in Abort-aware real and ideal QKD outputs and security errors, the real full output is a density operator. If , the normalized accepted state and the block-defined marginals are density operators; so are , , and the ideal full output . If , the ideal full output equals the real abort-only state.
Facts & Assumptions
Given: The finite protocol output blocks, their nonnegativity and total trace one, and as in the Definition.
Finite authenticated key-distribution protocol: the output is block diagonal in with nonnegative adversary blocks, the abort block is shared by both parties, and the sum of all block traces is one.
Abort-aware real and ideal QKD outputs and security errors: is the trace sum of accepted blocks, and the conditional marginals and ideal state are the displayed finite block sums.
Density operator: a density operator is nonnegative with trace one on a nonzero finite-dimensional space.
Finite registers and their ordered computational bases and Ordered tensor registers, their inner product, and wire permutations: the stated key/transcript product vectors are orthonormal and retain their displayed factor order.
The basis-independent trace of an endomorphism of a finite-dimensional vector space: in an ordered basis the trace is the finite sum of diagonal entries, so traces add over the displayed classical blocks.
A non-negative operator is equivalently self-adjoint with nonnegative eigenvalues, a positive semidefinite matrix in an orthonormal basis, or an operator of the form S^*S: a nonnegative finite-dimensional operator has an orthonormal eigenbasis with nonnegative real eigenvalues.
Proof
The real state is nonnegative because its orthogonal classical blocks are nonnegative by [F1]. Its trace is the sum of their traces by [F5], which is one by [F1], so it is a density operator by [F3]. If , dividing each accepted block by preserves nonnegativity and makes the trace sum equal to one; hence is a density operator.
In the explicit sums of [F2], each block is and each block is . These are nonnegative finite sums. By [F5], their traces sum to , so both marginals are density operators by [F3]. The states and are diagonal with entries equal to and all other entries zero, so each is nonnegative with trace one. In the product register, has one block per key, hence is nonnegative and has trace .
The ideal accepted blocks occur only at key pairs and equal for each ; they are nonnegative and their total trace is by [F5]. Its abort blocks are the original nonnegative blocks with total trace by [F1]–[F2]. These lie in mutually orthogonal classical slots, so the full ideal state is nonnegative and has trace , hence is a density operator by [F3]. If , nonnegativity makes each accepted block's trace nonnegative; their sum is zero, so each trace is zero. By [F6], each such block has only nonnegative eigenvalues summing to zero and is therefore zero. The accepted ideal block is also zero, so the ideal output equals the real abort-only state.
Depends on
- Finite authenticated key-distribution protocol
- Abort-aware real and ideal QKD outputs and security errors
- Density operator
- The basis-independent trace of an endomorphism of a finite-dimensional vector space
- Finite registers and their ordered computational bases
- Ordered tensor registers, their inner product, and wire permutations
- A non-negative operator is equivalently self-adjoint with nonnegative eigenvalues, a positive semidefinite matrix in an orthonormal basis, or an operator of the form S^*S
Used by
Cited to discharge well-definedness by Abort-aware real and ideal QKD outputs and security errors.
Dependency tree · two levels
35 results within two dependency steps of this one, each drawn at its shortest distance from it. An arrow runs from a result to what uses it, so the chart reads left to right and ends at this result, which carries a heavier outline. Every node is a link to that result. Click elsewhere on the chart to enlarge it.
Sources
- Christopher Portmann and Renato Renner, Cryptographic Security of Quantum Key Distribution (2014), §4.2 (standard reference, not scraped)
- Joseph M. Renes, Quantum Information Theory, ETH Zürich lecture notes (HS2014; revised 4 February 2015), §8.3 (standard reference, not scraped)