pith. machine review for the scientific record. sign in

arxiv: 2605.03629 · v1 · submitted 2026-05-05 · 🪐 quant-ph · cs.LG

Recognition: unknown

Adversarial Effects on Expressibility and Trainability in Distributed Variational Quantum Algorithms

Authors on Pith no claims yet

Pith reviewed 2026-05-07 17:01 UTC · model grok-4.3

classification 🪐 quant-ph cs.LG
keywords distributed quantum computingvariational quantum algorithmsadversarial attacksKraus operatorsexpressibilitytrainabilitybarren plateausquantum noise
0
0 comments X

The pith

An adversary can perturb shared entanglement to keep gradients large in distributed variational quantum algorithms while biasing results to incorrect solutions.

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

Distributed variational quantum algorithms assume a trusted layer for sharing entanglement across separate quantum processors to enable larger computations. The paper demonstrates that this assumption creates an opening for adversaries to inject perturbations into the shared entanglement. These perturbations translate into structured noise at the level of quantum gates through an explicit mapping. The authors introduce Kraus expressibility as a way to measure the impact on the circuit's ability to represent quantum states and analyze how it relates to the size of cost gradients during training. Their key finding is that an adversary can tune this metric to preserve usable gradients and thereby avoid barren plateaus, yet still steer the optimization process toward wrong answers.

Core claim

By constructing an explicit Kraus representation that converts entanglement-level perturbations into equivalent gate-level noise, the paper shows that an adversary can adjust Kraus expressibility so that the variance of the cost-function gradients remains large enough to avoid barren plateaus while the same perturbations systematically shift the landscape toward incorrect solutions that the variational optimizer will converge to.

What carries the argument

Kraus expressibility, a metric that extends the notion of unitary expressibility to noisy channels and is used to relate entanglement perturbations to the trainability of the variational circuit through gradient-variance calculations.

If this is right

  • Adversarial perturbations of shared entanglement can preserve sufficiently large cost gradients to avoid barren plateaus during training of distributed variational circuits.
  • The same perturbations can introduce a directional bias that causes the optimizer to converge to incorrect rather than optimal solutions.
  • The trade-off between Kraus expressibility and gradient variance allows an adversary to maintain trainability while degrading solution quality.
  • Distributed variational algorithms therefore depend on the security of the entanglement-sharing layer to reach correct answers.

Where Pith is reading between the lines

These are editorial extensions of the paper, not claims the author makes directly.

  • Quantum networks that distribute entanglement for computation may need authentication or verification steps at the entanglement source to prevent these attacks.
  • The vulnerability could appear in other distributed quantum tasks that rely on shared entanglement, such as sensing or simulation protocols.
  • Mitigation approaches might include local verification of entanglement quality or redesign of the variational ansatz to reduce sensitivity to this class of noise.

Load-bearing premise

The explicit Kraus representation accurately maps arbitrary entanglement-level perturbations to gate-level noise without unaccounted-for effects from the physical entanglement distribution channel.

What would settle it

Numerical simulations in which controlled perturbations are applied to the shared entanglement and the optimization trajectory is observed to converge to a demonstrably incorrect solution while the measured gradient norms stay above the scale expected for barren plateaus.

Figures

Figures reproduced from arXiv: 2605.03629 by Abhishek Sadhu, Sharu Theresa Jose.

Figure 1
Figure 1. Figure 1: (a) Distributed VQAs under adversarial influence: A strong adversary corrupts shared en￾tanglement among the network nodes, while a weak adversary injects local noise at QPUs, disrupting optimization. (b) Kraus expressiblity and solution coverage: Let SA and SB denote solution sets within the unitary group for problems A and B. Adversarially-induced noisy non-local gates restrict the accessible transformat… view at source ↗
Figure 2
Figure 2. Figure 2: Impact of adversarial perturbations on VQE view at source ↗
Figure 3
Figure 3. Figure 3: Adversarial impact on trainability for n = 6 qubit systems. (a) For fixed trainable parameters, Kraus expressibility norm decays with PQCh-ansatz depth and adversarial noise. (b) Adversarial noise in non-local CNOTs (via reduced concurrence) renders even shallow circuits untrainable. (c) At fixed depth, stronger adversarial noise (low concurrence) reduces gradient variance thereby impeding optimization. Th… view at source ↗
Figure 4
Figure 4. Figure 4: Scaling of the cost-function gradient variance with the number of qubits view at source ↗
read the original abstract

Distributed quantum algorithms offer a promising pathway to scale variational quantum algorithms beyond the constraints of noisy intermediate-scale quantum hardware. However, existing approaches implicitly assume a trusted entanglement-sharing layer across quantum processors. We show that this assumption introduces a fundamental vulnerability: adversarial perturbations of shared entanglement induce structured gate-level noise that directly impacts quantum learning. We develop a framework that maps entanglement-level perturbations to gate-level noise via an explicit Kraus representation. To quantify their impact, we introduce Kraus expressibility, a metric that generalizes unitary expressibility to noisy quantum channels. We then establish a trade-off between Kraus expressibility and trainability of noisy quantum circuits through gradient variance analysis. Our analysis reveals that an adversary can manipulate Kraus expressibility to maintain sufficiently large cost gradients (avoiding barren plateaus) while systematically biasing optimization toward incorrect solutions. We validate these findings through numerical simulations, demonstrating adversarial degradation of expressibility and trainability.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, simulated authors' rebuttal, and a circularity audit. Tearing a paper down is the easy half of reading it; the pith above is the substance, this is the friction.

Referee Report

2 major / 2 minor

Summary. The manuscript presents a framework for analyzing adversarial effects in distributed variational quantum algorithms (VQAs). It maps entanglement-level perturbations to gate-level noise using an explicit Kraus representation, introduces a new metric called 'Kraus expressibility' that generalizes unitary expressibility to noisy channels, establishes a trade-off between this expressibility and trainability via gradient variance analysis, and shows that an adversary can maintain large cost gradients while biasing the optimization toward incorrect solutions. These findings are supported by numerical simulations demonstrating degradation in expressibility and trainability.

Significance. If the central claims hold, this work is significant for highlighting a critical vulnerability in the trusted entanglement-sharing assumption in distributed quantum computing. The introduction of Kraus expressibility offers a novel tool for assessing noisy quantum channels in variational learning settings. The gradient variance analysis provides insights into avoiding barren plateaus while introducing bias, which could guide the development of more robust distributed VQAs. The numerical validation adds practical relevance, though additional details on statistical robustness would enhance its impact.

major comments (2)
  1. [Framework and Kraus mapping] The explicit Kraus representation (abstract and framework section) is the sole bridge between entanglement perturbations and the claimed structured gate noise that preserves gradient variance while enabling bias. However, it may omit non-unitary physical effects from the entanglement distribution channel (e.g., photon loss, timing jitter, mode mismatch), so the effective noise seen by the variational circuit could differ from the modeled Kraus channel, weakening the central trade-off claim.
  2. [Numerical simulations] Numerical validation (validation section) is cited to support the adversarial degradation of expressibility and trainability, but lacks visible error bars, full derivation steps for the gradient variance analysis, or data exclusion details. Since the claim of controlled bias while preserving gradients rests on these unverified steps, the evidence is insufficient to confirm the trade-off.
minor comments (2)
  1. [Abstract] The abstract is concise but could briefly note the circuit sizes or depths used in the numerical examples to provide immediate context for the validation results.
  2. [Metric definition] Ensure the definition of Kraus expressibility is explicitly cross-referenced upon first use and compared directly to standard unitary expressibility to clarify the generalization.

Simulated Author's Rebuttal

2 responses · 0 unresolved

We thank the referee for their constructive feedback on our manuscript. We address each of the major comments below and outline the revisions we will make to improve the clarity and robustness of our results.

read point-by-point responses
  1. Referee: The explicit Kraus representation (abstract and framework section) is the sole bridge between entanglement perturbations and the claimed structured gate noise that preserves gradient variance while enabling bias. However, it may omit non-unitary physical effects from the entanglement distribution channel (e.g., photon loss, timing jitter, mode mismatch), so the effective noise seen by the variational circuit could differ from the modeled Kraus channel, weakening the central trade-off claim.

    Authors: We acknowledge that our Kraus representation focuses on modeling the adversarial perturbations to the shared entanglement and does not encompass all possible non-unitary effects that may occur in physical entanglement distribution channels. Our central claim is that within this modeled framework, an adversary can exploit the structure to maintain gradient variance while introducing bias. To strengthen the manuscript, we will add a paragraph in the framework section discussing the assumptions of the model and noting that additional physical effects could be incorporated as further noise channels in extensions of this work. This clarification will help contextualize the applicability of our results. revision: partial

  2. Referee: Numerical validation (validation section) is cited to support the adversarial degradation of expressibility and trainability, but lacks visible error bars, full derivation steps for the gradient variance analysis, or data exclusion details. Since the claim of controlled bias while preserving gradients rests on these unverified steps, the evidence is insufficient to confirm the trade-off.

    Authors: We agree that providing more details on the numerical simulations will enhance the credibility of our findings. In the revised version, we will include error bars in the figures of the validation section, calculated from repeated simulations with different random seeds. We will also append the complete derivation of the gradient variance analysis to the supplementary material and explicitly describe the criteria for any data exclusion or averaging procedures used. These changes will allow readers to fully verify the reported trade-off. revision: yes

Circularity Check

0 steps flagged

No significant circularity; new metrics and mappings are independently defined

full rationale

The paper's core chain introduces an explicit Kraus representation to map entanglement perturbations to gate noise, defines Kraus expressibility as a generalization of unitary expressibility, and derives the expressibility-trainability trade-off via gradient variance analysis. None of these steps reduce by construction to prior fitted values, self-citations, or renamed inputs; the adversarial bias claim follows from the new definitions and numerical validation rather than tautological equivalence. The derivation remains self-contained against external quantum channel and variational algorithm benchmarks.

Axiom & Free-Parameter Ledger

0 free parameters · 2 axioms · 1 invented entities

The central claims rest on standard quantum channel formalism plus the newly introduced Kraus expressibility metric; no explicit free parameters are stated in the abstract, and the mapping from entanglement perturbations is presented as direct.

axioms (2)
  • standard math Standard quantum channel theory and Kraus operator formalism apply to noise induced by entanglement perturbations.
    Invoked to develop the explicit mapping from entanglement-level perturbations to gate-level noise.
  • domain assumption Gradient variance analysis extends directly to noisy quantum channels for assessing trainability.
    Basis for establishing the expressibility-trainability trade-off under adversarial control.
invented entities (1)
  • Kraus expressibility no independent evidence
    purpose: Metric that generalizes unitary expressibility to quantify the effect of noisy channels on the range of representable operations.
    Newly defined in the paper to analyze adversarial impact on expressibility.

pith-pipeline@v0.9.0 · 5451 in / 1363 out tokens · 72508 ms · 2026-05-07T17:01:34.311733+00:00 · methodology

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.

Reference graph

Works this paper leans on

78 extracted references · 11 canonical work pages · 1 internal anchor

  1. [1]

    A quantum associative memory based on grover’s algorithm

    Dan Ventura and Tony Martinez. A quantum associative memory based on grover’s algorithm. InArtificial Neural Nets and Genetic Algorithms: Proceedings of the International Conference in Portorož, Slovenia, 1999, pages 22–27. Springer, 1999

  2. [2]

    Quantum machine learning.Nature, 549(7671):195–202, 2017

    Jacob Biamonte, Peter Wittek, Nicola Pancotti, Patrick Rebentrost, Nathan Wiebe, and Seth Lloyd. Quantum machine learning.Nature, 549(7671):195–202, 2017

  3. [3]

    Quantum computer datasheet: Weber

    Google Quantum AI. Quantum computer datasheet: Weber. Technical report, May 2021

  4. [4]

    Compute resources | ibm quantum platform

    IBM Quantum. Compute resources | ibm quantum platform. https://quantum.cloud.ibm. com/computers, 2026. Accessed: 2026-04-30

  5. [5]

    Demonstration of high-fidelity entangled logical qubits using transmons.Nature Communications, 2026

    Arian Vezvaee, Vinay Tripathi, Mario Morford-Oberst, Friederike Butt, Victor Kasatkin, and Daniel A Lidar. Demonstration of high-fidelity entangled logical qubits using transmons.Nature Communications, 2026

  6. [6]

    Entangling four logical qubits beyond break-even in a nonlocal code.Physical Review Letters, 133(18):180601, 2024

    Yifan Hong, Elijah Durso-Sabina, David Hayes, and Andrew Lucas. Entangling four logical qubits beyond break-even in a nonlocal code.Physical Review Letters, 133(18):180601, 2024

  7. [7]

    Reichardt, Adam Paetznick, David Aasen, Ivan Basov, Juan M

    Ben W Reichardt, Adam Paetznick, David Aasen, Ivan Basov, Juan M Bello-Rivas, Parsa Bonderson, Rui Chao, Wim van Dam, Matthew B Hastings, Ryan V Mishmash, et al. Fault- tolerant quantum computation with a neutral atom processor.arXiv preprint arXiv:2411.11822, 2024

  8. [8]

    Extending the lifetime of a quantum bit with error correction in superconducting circuits.Nature, 536(7617):441–445, 2016

    Nissim Ofek, Andrei Petrenko, Reinier Heeres, Philip Reinhold, Zaki Leghtas, Brian Vlastakis, Yehan Liu, Luigi Frunzio, Steven M Girvin, Liang Jiang, et al. Extending the lifetime of a quantum bit with error correction in superconducting circuits.Nature, 536(7617):441–445, 2016

  9. [9]

    Towards practical quantum computers: Transmon qubit with a lifetime approaching 0.5 milliseconds.npj Quantum Information, 8(1):3, 2022

    Chenlu Wang, Xuegang Li, Huikai Xu, Zhiyuan Li, Junhua Wang, Zhen Yang, Zhenyu Mi, Xuehui Liang, Tang Su, Chuhong Yang, et al. Towards practical quantum computers: Transmon qubit with a lifetime approaching 0.5 milliseconds.npj Quantum Information, 8(1):3, 2022

  10. [10]

    Superconducting architecture demonstrating fast, tunable high-fidelity cz gates with parametric control of zz coupling.Physical Review Applied, 24(6):064026, 2025

    XY Jin, Z Parrott, K Cicak, S Kotler, F Lecocq, J Teufel, J Aumentado, E Kapit, and RW Sim- monds. Superconducting architecture demonstrating fast, tunable high-fidelity cz gates with parametric control of zz coupling.Physical Review Applied, 24(6):064026, 2025

  11. [11]

    Marxer, et al

    Fabian Marxer, Jakub Mro˙zek, Joona Andersson, Leonid Abdurakhimov, Janos Adam, Ville Bergholm, Rohit Beriwal, Chun Fai Chan, Saga Dahl, Soumya Ranjan Das, et al. Above 99.9% fidelity single-qubit gates, two-qubit gates, and readout in a single superconducting quantum device.arXiv preprint arXiv:2508.16437, 2025

  12. [12]

    The theory of variational hybrid quantum-classical algorithms.New Journal of Physics, 18(2):023023, 2016

    Jarrod R McClean, Jonathan Romero, Ryan Babbush, and Alán Aspuru-Guzik. The theory of variational hybrid quantum-classical algorithms.New Journal of Physics, 18(2):023023, 2016. 10

  13. [13]

    Variational quantum algorithms.Nature Reviews Physics, 3(9):625–644, 2021

    Marco Cerezo, Andrew Arrasmith, Ryan Babbush, Simon C Benjamin, Suguru Endo, Keisuke Fujii, Jarrod R McClean, Kosuke Mitarai, Xiao Yuan, Lukasz Cincio, et al. Variational quantum algorithms.Nature Reviews Physics, 3(9):625–644, 2021

  14. [14]

    Noisy intermediate-scale quantum algorithms.Reviews of Modern Physics, 94(1):015004, 2022

    Kishor Bharti, Alba Cervera-Lierta, Thi Ha Kyaw, Tobias Haug, Sumner Alperin-Lea, Abhinav Anand, Matthias Degroote, Hermanni Heimonen, Jakob S Kottmann, Tim Menke, et al. Noisy intermediate-scale quantum algorithms.Reviews of Modern Physics, 94(1):015004, 2022

  15. [15]

    Kanqas: Kolmogorov-arnold network for quantum architecture search.EPJ Quantum Technology, 11(1):76, 2024

    Akash Kundu, Aritra Sarkar, and Abhishek Sadhu. Kanqas: Kolmogorov-arnold network for quantum architecture search.EPJ Quantum Technology, 11(1):76, 2024

  16. [16]

    A quantum information theoretic analysis of reinforcement learning-assisted quantum architecture search.Quantum Machine Intelligence, 6(2):49, 2024

    Abhishek Sadhu, Aritra Sarkar, and Akash Kundu. A quantum information theoretic analysis of reinforcement learning-assisted quantum architecture search.Quantum Machine Intelligence, 6(2):49, 2024

  17. [17]

    Reinforcement learning with learned gadgets to tackle hard quantum problems on real hardware.Communications Physics, 2026

    Akash Kundu and Leopoldo Sarra. Reinforcement learning with learned gadgets to tackle hard quantum problems on real hardware.Communications Physics, 2026

  18. [18]

    Universal expressiveness of variational quantum classifiers and quantum kernels for support vector machines.Nature Communications, 14(1):576, 2023

    Jonas Jäger and Roman V Krems. Universal expressiveness of variational quantum classifiers and quantum kernels for support vector machines.Nature Communications, 14(1):576, 2023

  19. [19]

    Unsupervised machine learning on a hybrid quantum computer.arXiv preprint arXiv:1712.05771, 2017

    Johannes S Otterbach, Riccardo Manenti, Nasser Alidoust, A Bestwick, M Block, B Bloom, S Caldwell, N Didier, E Schuyler Fried, S Hong, et al. Unsupervised machine learning on a hybrid quantum computer.arXiv preprint arXiv:1712.05771, 2017

  20. [20]

    A framework for demonstrating practical quantum advantage: comparing quantum against classical generative models.Communications Physics, 7(1):68, 2024

    Mohamed Hibat-Allah, Marta Mauri, Juan Carrasquilla, and Alejandro Perdomo-Ortiz. A framework for demonstrating practical quantum advantage: comparing quantum against classical generative models.Communications Physics, 7(1):68, 2024

  21. [21]

    Huang, M

    Hsin-Yuan Huang, Michael Broughton, Norhan Eassa, Hartmut Neven, Ryan Babbush, and Jarrod R McClean. Generative quantum advantage for classical and quantum problems.arXiv preprint arXiv:2509.09033, 2025

  22. [22]

    Quantum computing in the nisq era and beyond.Quantum, 2:79, 2018

    John Preskill. Quantum computing in the nisq era and beyond.Quantum, 2:79, 2018

  23. [23]

    Distributed quantum computation over noisy channels.Physical Review A, 59(6):4249, 1999

    J Ignacio Cirac, AK Ekert, Susana F Huelga, and Chiara Macchiavello. Distributed quantum computation over noisy channels.Physical Review A, 59(6):4249, 1999

  24. [24]

    Distributed quantum computing and network control for accelerated vqe.IEEE Transactions on Quantum Engineering, 2:1–21, 2021

    Stephen DiAdamo, Marco Ghibaudi, and James Cruise. Distributed quantum computing and network control for accelerated vqe.IEEE Transactions on Quantum Engineering, 2:1–21, 2021

  25. [25]

    Quantum entanglement.Reviews of modern physics, 81(2):865–942, 2009

    Ryszard Horodecki, Paweł Horodecki, Michał Horodecki, and Karol Horodecki. Quantum entanglement.Reviews of modern physics, 81(2):865–942, 2009

  26. [26]

    Bell nonlocality.Reviews of modern physics, 86(2):419–478, 2014

    Nicolas Brunner, Daniel Cavalcanti, Stefano Pironio, Valerio Scarani, and Stephanie Wehner. Bell nonlocality.Reviews of modern physics, 86(2):419–478, 2014

  27. [27]

    Testing of quantum nonlocal correlations under con- strained free will and imperfect detectors.Physical Review A, 107(1):012212, 2023

    Abhishek Sadhu and Siddhartha Das. Testing of quantum nonlocal correlations under con- strained free will and imperfect detectors.Physical Review A, 107(1):012212, 2023

  28. [28]

    Quantum repeaters: the role of imperfect local operations in quantum communication.Physical Review Letters, 81(26):5932, 1998

    H-J Briegel, Wolfgang Dür, Juan I Cirac, and Peter Zoller. Quantum repeaters: the role of imperfect local operations in quantum communication.Physical Review Letters, 81(26):5932, 1998

  29. [29]

    Quantum repeaters: From quantum networks to the quantum internet.Reviews of Modern Physics, 95(4):045006, 2023

    Koji Azuma, Sophia E Economou, David Elkouss, Paul Hilaire, Liang Jiang, Hoi-Kwong Lo, and Ilan Tzitrin. Quantum repeaters: From quantum networks to the quantum internet.Reviews of Modern Physics, 95(4):045006, 2023

  30. [30]

    Practical limitations on robustness and scalability of quantum internet.arXiv preprint arXiv:2308.12739, 2023

    Abhishek Sadhu, Meghana Ayyala Somayajula, Karol Horodecki, and Siddhartha Das. Practical limitations on robustness and scalability of quantum internet.arXiv preprint arXiv:2308.12739, 2023. 11

  31. [31]

    Resilience analysis of quantum network against targeted attacks: Recovery via rerouting and purification.Optical Switching and Networking, 57:100810, 2025

    Hilal Sultan Duranoglu Tunc, Abebu Ademe Bayleyegn, Joachim Notcker, Riccardo Bassoli, and Frank HP Fitzek. Resilience analysis of quantum network against targeted attacks: Recovery via rerouting and purification.Optical Switching and Networking, 57:100810, 2025

  32. [32]

    Security of partially corrupted quantum repeater networks.Quantum Science and Technology, 10(1):015005, 2025

    Adrian Harkness, Walter O Krawec, and Bing Wang. Security of partially corrupted quantum repeater networks.Quantum Science and Technology, 10(1):015005, 2025

  33. [33]

    On-chip high-dimensional entangled photon sources.Journal of Optics, 27(2):023001, 2025

    Tavshabad Kaur, Daniel Peace, and Jacquiline Romero. On-chip high-dimensional entangled photon sources.Journal of Optics, 27(2):023001, 2025

  34. [34]

    Quantum entanglement on photonic chips: a review.Advanced Photonics, 3(6):064002–064002, 2021

    Xiaojiong Chen, Zhaorong Fu, Qihuang Gong, and Jianwei Wang. Quantum entanglement on photonic chips: a review.Advanced Photonics, 3(6):064002–064002, 2021

  35. [35]

    A solid-state source of strongly entangled photon pairs with high brightness and indistinguishability.Nature nanotechnology, 14(6):586–593, 2019

    Jin Liu, Rongbin Su, Yuming Wei, Beimeng Yao, Saimon Filipe Covre da Silva, Ying Yu, Jake Iles-Smith, Kartik Srinivasan, Armando Rastelli, Juntao Li, et al. A solid-state source of strongly entangled photon pairs with high brightness and indistinguishability.Nature nanotechnology, 14(6):586–593, 2019

  36. [36]

    Spontaneous parametric down-conversion.Contemporary Physics, 59(3):291–304, 2018

    Christophe Couteau. Spontaneous parametric down-conversion.Contemporary Physics, 59(3):291–304, 2018

  37. [37]

    Generalized ghz states and distributed quantum computing.arXiv preprint quant-ph/0402148, 2004

    Anocha Yimsiriwattana and Samuel J Lomonaco Jr. Generalized ghz states and distributed quantum computing.arXiv preprint quant-ph/0402148, 2004

  38. [38]

    Connecting ansatz expressibil- ity to gradient magnitudes and barren plateaus.PRX quantum, 3(1):010313, 2022

    Zoë Holmes, Kunal Sharma, Marco Cerezo, and Patrick J Coles. Connecting ansatz expressibil- ity to gradient magnitudes and barren plateaus.PRX quantum, 3(1):010313, 2022

  39. [39]

    Nonlocal photonic quantum gates over 7.0 km.Nature Communications, 15(1):8529, 2024

    Xiao Liu, Xiao-Min Hu, Tian-Xiang Zhu, Chao Zhang, Yi-Xin Xiao, Jia-Le Miao, Zhong-Wen Ou, Pei-Yun Li, Bi-Heng Liu, Zong-Quan Zhou, et al. Nonlocal photonic quantum gates over 7.0 km.Nature Communications, 15(1):8529, 2024

  40. [40]

    Efficient distributed quantum computing.Proceedings of the Royal Society A: Mathematical, Physical and Engineering Sciences, 469(2153):20120686, 2013

    Robert Beals, Stephen Brierley, Oliver Gray, Aram W Harrow, Samuel Kutin, Noah Linden, Dan Shepherd, and Mark Stather. Efficient distributed quantum computing.Proceedings of the Royal Society A: Mathematical, Physical and Engineering Sciences, 469(2153):20120686, 2013

  41. [41]

    Cutqas: Topology-aware quantum circuit cutting via reinforcement learning.arXiv preprint arXiv:2504.04167, 2025

    Abhishek Sadhu, Aritra Sarkar, and Akash Kundu. Cutqas: Topology-aware quantum circuit cutting via reinforcement learning.arXiv preprint arXiv:2504.04167, 2025

  42. [42]

    Advances in entanglement- based qkd for space applications

    Sebastian Ecker, Johannes Pseiner, Jorge Piris, and Martin Bohmann. Advances in entanglement- based qkd for space applications. InInternational Conference on Space Optics—ICSO 2022, volume 12777, pages 925–945. SPIE, 2023

  43. [43]

    Evidence for the utility of quantum computing before fault tolerance.Nature, 618(7965):500–505, 2023

    Youngseok Kim, Andrew Eddins, Sajant Anand, Ken Xuan Wei, Ewout Van Den Berg, Sami Rosenblatt, Hasan Nayfeh, Yantao Wu, Michael Zaletel, Kristan Temme, et al. Evidence for the utility of quantum computing before fault tolerance.Nature, 618(7965):500–505, 2023

  44. [44]

    High dimensional quantum machine learning with small quantum computers.Quantum, 7:1078, 2023

    Simon C Marshall, Casper Gyurik, and Vedran Dunjko. High dimensional quantum machine learning with small quantum computers.Quantum, 7:1078, 2023

  45. [45]

    Distributed quantum machine learning via classical communication.Quantum Science and Technology, 10(1):015059, 2025

    Kiwmann Hwang, Hyang-Tag Lim, Yong-Su Kim, Daniel K Park, and Yosep Kim. Distributed quantum machine learning via classical communication.Quantum Science and Technology, 10(1):015059, 2025

  46. [46]

    Accelerating variational quantum algorithms with multiple quantum processors.arXiv preprint arXiv:2106.12819, 2021

    Yuxuan Du, Yang Qian, and Dacheng Tao. Accelerating variational quantum algorithms with multiple quantum processors.arXiv preprint arXiv:2106.12819, 2021

  47. [47]

    Federated quantum machine learning.Entropy, 23(4):460, 2021

    Samuel Yen-Chi Chen and Shinjae Yoo. Federated quantum machine learning.Entropy, 23(4):460, 2021

  48. [48]

    Distributed quantum machine learning

    Niels MP Neumann and Robert S Wezeman. Distributed quantum machine learning. In International Conference on Innovations for Community Services, pages 281–293. Springer, 2022. 12

  49. [49]

    Defending against byzantine attacks in quantum federated learning

    Qi Xia, Zeyi Tao, and Qun Li. Defending against byzantine attacks in quantum federated learning. In2021 17th International conference on mobility, sensing and networking (MSN), pages 145–152. IEEE, 2021

  50. [50]

    Characterizing privacy in quantum machine learning.npj Quantum Information, 11(1):80, 2025

    Jamie Heredge, Niraj Kumar, Dylan Herman, Shouvanik Chakrabarti, Romina Yalovetzky, Shree Hari Sureshbabu, Changhao Li, and Marco Pistoia. Characterizing privacy in quantum machine learning.npj Quantum Information, 11(1):80, 2025

  51. [51]

    Quantumleak: Stealing quantum neural networks from cloud-based nisq machines

    Zhenxiao Fu, Min Yang, Cheng Chu, Yilun Xu, Gang Huang, and Fan Chen. Quantumleak: Stealing quantum neural networks from cloud-based nisq machines. In2024 International Joint Conference on Neural Networks (IJCNN), pages 1–8. IEEE, 2024

  52. [52]

    Quantum neural network extraction attack via split co-teaching

    Zhenxiao Fu and Fan Chen. Quantum neural network extraction attack via split co-teaching. In 2025 IEEE International Conference on Acoustics, Speech, and Signal Processing Workshops (ICASSPW), pages 1–5. IEEE, 2025

  53. [53]

    Copyqnn: Quantum neural network extraction attack under varying quantum noise

    Zhenxiao Fu, Leyi Zhao, Xuhong Zhang, Yilun Xu, Gang Huang, and Fan Chen. Copyqnn: Quantum neural network extraction attack under varying quantum noise. In2025 International Joint Conference on Neural Networks (IJCNN), pages 1–8. IEEE, 2025

  54. [54]

    Qumos: A framework for preserving security of quantum machine learning model

    Zhepeng Wang, Jinyang Li, Zhirui Hu, Blake Gage, Elizabeth Iwasawa, and Weiwen Jiang. Qumos: A framework for preserving security of quantum machine learning model. In2023 IEEE International Conference on Quantum Computing and Engineering (QCE), volume 1, pages 1089–1097. IEEE, 2023

  55. [55]

    Adversarial data poisoning attack on quantum machine learning in the nisq era

    Satwik Kundu and Swaroop Ghosh. Adversarial data poisoning attack on quantum machine learning in the nisq era. InProceedings of the Great Lakes Symposium on VLSI 2025, pages 976–981, 2025

  56. [56]

    Security attacks abusing pulse-level quantum circuits

    Chuanqi Xu and Jakub Szefer. Security attacks abusing pulse-level quantum circuits. In2025 IEEE Symposium on Security and Privacy (SP), pages 222–239. IEEE, 2025

  57. [57]

    Ai-driven reverse engineering of qml models

    Archisman Ghosh and Swaroop Ghosh. Ai-driven reverse engineering of qml models. In2025 26th International Symposium on Quality Electronic Design (ISQED), pages 1–7. IEEE, 2025

  58. [58]

    Locking the design of building blocks for quantum circuits.ACM Transactions on Embedded Computing Systems (TECS), 18(5s):1–15, 2019

    Samah Mohamed Saeed, Robert Wille, and Ramesh Karri. Locking the design of building blocks for quantum circuits.ACM Transactions on Embedded Computing Systems (TECS), 18(5s):1–15, 2019

  59. [59]

    Opaque: Obfuscating phase in quantum circuit compilation for efficient ip protection

    Anees Rehman, Vincent Langford, Jayden John, and Yuntao Liu. Opaque: Obfuscating phase in quantum circuit compilation for efficient ip protection. In2025 26th International Symposium on Quality Electronic Design (ISQED), pages 1–6. IEEE, 2025

  60. [60]

    Diagnosing quantum circuits: Noise robustness, trainability, and expressibility.arXiv preprint arXiv:2509.11307, 2025

    Yuguo Shao, Zhenyu Chen, Zhaohui Wei, and Zhengwei Liu. Diagnosing quantum circuits: Noise robustness, trainability, and expressibility.arXiv preprint arXiv:2509.11307, 2025

  61. [61]

    Universal limitations on quantum key distribution over a network.Physical Review X, 11(4):041016, 2021

    Siddhartha Das, Stefan Bäuml, Marek Winczewski, and Karol Horodecki. Universal limitations on quantum key distribution over a network.Physical Review X, 11(4):041016, 2021

  62. [62]

    Micius quantum experiments in space.Reviews of Modern Physics, 94(3):035001, 2022

    Chao-Yang Lu, Yuan Cao, Cheng-Zhi Peng, and Jian-Wei Pan. Micius quantum experiments in space.Reviews of Modern Physics, 94(3):035001, 2022

  63. [63]

    Towards real-world quantum networks: a review.Laser & Photonics Reviews, 16(3):2100219, 2022

    Shi-Hai Wei, Bo Jing, Xue-Ying Zhang, Jin-Yu Liao, Chen-Zhi Yuan, Bo-Yu Fan, Chen Lyu, Dian-Li Zhou, You Wang, Guang-Wei Deng, et al. Towards real-world quantum networks: a review.Laser & Photonics Reviews, 16(3):2100219, 2022

  64. [64]

    Entanglement theory with limited computational resources.Nature Physics, pages 1–8, 2025

    Lorenzo Leone, Jacopo Rizzo, Jens Eisert, and Sofiene Jerbi. Entanglement theory with limited computational resources.Nature Physics, pages 1–8, 2025

  65. [65]

    Cryptographic fragility of standard quantum repeater protocols.arXiv preprint arXiv:2602.23048, 2026

    Abhishek Sadhu and Sharu Theresa Jose. Cryptographic fragility of standard quantum repeater protocols.arXiv preprint arXiv:2602.23048, 2026

  66. [66]

    A Quantum Approximate Optimization Algorithm

    Edward Farhi, Jeffrey Goldstone, and Sam Gutmann. A quantum approximate optimization algorithm.arXiv preprint arXiv:1411.4028, 2014. 13

  67. [67]

    Coupled-cluster theory in quantum chemistry.Reviews of Modern Physics, 79(1):291–352, 2007

    Rodney J Bartlett and Monika Musiał. Coupled-cluster theory in quantum chemistry.Reviews of Modern Physics, 79(1):291–352, 2007

  68. [68]

    Hardware-efficient variational quantum eigensolver for small molecules and quantum magnets.nature, 549(7671):242–246, 2017

    Abhinav Kandala, Antonio Mezzacapo, Kristan Temme, Maika Takita, Markus Brink, Jerry M Chow, and Jay M Gambetta. Hardware-efficient variational quantum eigensolver for small molecules and quantum magnets.nature, 549(7671):242–246, 2017

  69. [69]

    Teleporting an unknown quantum state via dual classical and einstein-podolsky-rosen channels.Physical review letters, 70(13):1895, 1993

    Charles H Bennett, Gilles Brassard, Claude Crépeau, Richard Jozsa, Asher Peres, and William K Wootters. Teleporting an unknown quantum state via dual classical and einstein-podolsky-rosen channels.Physical review letters, 70(13):1895, 1993

  70. [70]

    Optimal local implementation of nonlocal quantum gates.Physical Review A, 62(5):052317, 2000

    Jens Eisert, Kurt Jacobs, Polykarpos Papadopoulos, and Martin B Plenio. Optimal local implementation of nonlocal quantum gates.Physical Review A, 62(5):052317, 2000

  71. [71]

    Entanglement of formation of an arbitrary state of two qubits.Physical Review Letters, 80(10):2245, 1998

    William K Wootters. Entanglement of formation of an arbitrary state of two qubits.Physical Review Letters, 80(10):2245, 1998

  72. [72]

    Expressibility and entangling capability of parameterized quantum circuits for hybrid quantum-classical algorithms.Advanced Quantum Technologies, 2(12):1900070, 2019

    Sukin Sim, Peter D Johnson, and Alán Aspuru-Guzik. Expressibility and entangling capability of parameterized quantum circuits for hybrid quantum-classical algorithms.Advanced Quantum Technologies, 2(12):1900070, 2019

  73. [73]

    Expressibility of the alternating layered ansatz for quantum computation.Quantum, 5:434, 2021

    Kouhei Nakaji and Naoki Yamamoto. Expressibility of the alternating layered ansatz for quantum computation.Quantum, 5:434, 2021

  74. [74]

    Barren plateaus in quantum neural network training landscapes.Nature communications, 9(1):4812, 2018

    Jarrod R McClean, Sergio Boixo, Vadim N Smelyanskiy, Ryan Babbush, and Hartmut Neven. Barren plateaus in quantum neural network training landscapes.Nature communications, 9(1):4812, 2018

  75. [75]

    Noise-induced barren plateaus in variational quantum algorithms.Nature communications, 12(1):6961, 2021

    Samson Wang, Enrico Fontana, Marco Cerezo, Kunal Sharma, Akira Sone, Lukasz Cincio, and Patrick J Coles. Noise-induced barren plateaus in variational quantum algorithms.Nature communications, 12(1):6961, 2021

  76. [76]

    Qulacs: a fast and versatile quantum circuit simulator for research purpose.Quantum, 5:559, 2021

    Yasunari Suzuki, Yoshiaki Kawase, Yuya Masumura, Yuria Hiraga, Masahiro Nakadai, Jiabao Chen, Ken M Nakanishi, Kosuke Mitarai, Ryosuke Imai, Shiro Tamiya, et al. Qulacs: a fast and versatile quantum circuit simulator for research purpose.Quantum, 5:559, 2021

  77. [77]

    Cost function dependent barren plateaus in shallow parametrized quantum circuits.Nature communications, 12(1):1791, 2021

    Marco Cerezo, Akira Sone, Tyler V olkoff, Lukasz Cincio, and Patrick J Coles. Cost function dependent barren plateaus in shallow parametrized quantum circuits.Nature communications, 12(1):1791, 2021. 14 A Noisy cat-entangler/cat-disentangler based CNOT gate Let us consider the CNOT implementation via thecat-entangler/cat-disentanglerprotocol discussed in ...

  78. [77]

    Cost function dependent barren plateaus in shallow parametrized quantum circuits.Nature communications, 12(1):1791, 2021

    Marco Cerezo, Akira Sone, Tyler V olkoff, Lukasz Cincio, and Patrick J Coles. Cost function dependent barren plateaus in shallow parametrized quantum circuits.Nature communications, 12(1):1791, 2021. 14 A Noisy cat-entangler/cat-disentangler based CNOT gate Let us consider the CNOT implementation via thecat-entangler/cat-disentanglerprotocol discussed in ...