Quantum Merlin-Arthur

The quantum analogue of MA: Merlin (an unbounded prover) sends a polynomial-size quantum state as a proof to Arthur (a polynomial-time quantum verifier), who then performs a quantum measurement to decide whether to accept. We require:

  1. If the answer is “yes,” there exists a quantum state Merlin can send such that Arthur accepts with probability at least 2/3.
  2. If the answer is “no,” for every quantum state Merlin might send, Arthur rejects with probability at least 2/3.

QMA is the quantum analogue of NP (with a quantum verifier and quantum witness), just as MA is the probabilistic analogue of NP.

See the complexity zoo entry here.

Notable problems

  • Local Hamiltonian (k-LH): given a -local Hamiltonian on qubits and a threshold , is the ground state energy of at most ? This is QMA-complete — TODO citation (Kitaev 1999). The Local Hamiltonian problem is the quantum analogue of SAT.
  • Consistency of local density matrices: given a collection of local density matrices, do they arise from a global quantum state? QMA-complete — TODO citation.

Known relationships

  • : classical proofs can be checked classically, classically by a quantum machine, or quantumly by a quantum machine.
  • : QMA is contained in PP (Marriott-Watrous — TODO citation), and thus in PSPACE.
  • QMA is closed under complement: . This uses the quantum error reduction technique (applying the swap test), and contrasts with the classical case where it is unknown whether .
  • and are believed incomparable.
  • QMA(2): the class with two unentangled quantum proofs is believed strictly more powerful than QMA. It is not even known whether QMA(2) NEXP.

Variants

Recent work has studied how modifications to the proof model change QMA’s power:

  • QMA+ (proofs with non-negative amplitudes): restricting quantum proofs to have non-negative amplitudes (no relative phase between basis states) dramatically changes the class. With one constant completeness-soundness gap, ; with a different gap, BFM24. This shows that relative phase is at least as important a source of proof power as entanglement (since , removing phase collapses the class further than removing entanglement might).
  • QMA with a non-collapsing measurement: if the verifier may apply a single measurement that does not disturb the quantum state (a “non-collapsing” measurement), then QMA equals NEXP — BM25, resolving an open question of Aaronson.
  • QMA with internally separable proofs: a variant where each proof must be “internally separable” (after tracing out one register, a small number of qubits are separable from the rest) is strictly less powerful than QMA(2), assuming EXP NEXP — BFL+24. This provides a new route toward proving QMA(2) = NEXP.

Relevance to cryptography

QMA is the quantum analogue of NP-hardness. In post-quantum cryptography:

  • Lattice problems such as approximate SVP are believed to be in QMA (quantum witnesses can encode short vectors), though QMA-hardness of lattice problems would give extremely strong hardness guarantees.
  • A quantum reduction from a QMA-hard problem to a cryptographic assumption would mean breaking the scheme is at least as hard as Local Hamiltonian — far stronger than any known assumption.
  • The question of whether lattice problems are QMA-hard (or merely in TFNP) has direct implications for the confidence we can place in post-quantum assumptions.