July 02, 2026
Encoding classical data into quantum systems is the first step in virtually every quantum computing and quantum communication protocol. In quantum machine learning [1], raw data must be mapped to quantum states before being fed into parameterized quantum circuits. In quantum key distribution [2], bits are encoded in non-orthogonal quantum states to guarantee information-theoretic security. In quantum communication [3], code-words must be chosen to maximize fidelity at the receiver. In all these settings the choice of encoding is consequential. Not all encodings are equal.
A systematic theory of optimal quantum encoding has remained elusive, partly because “optimal” depends heavily on the figure of merit. Prior work has studied optimal encoding for fidelity [3], for retrieval [4], for communication over specific channel families [5], for security under gentle measurements [6], and for incompatibility-based key sharing [7]. However, a universal, task-independent figure of merit for quantum encoders, i.e., an encoding that simultaneously bounds performance across a wide class of inference problems, has not previously been identified.
In this paper, we adopt maximal quantum leakage [8] as that figure of merit, and pursue it to a complete characterization of the optimal encoder. Maximal quantum leakage was introduced in [8] as the largest multiplicative increase in an adversary’s guessing probability that can result from any measurement on the quantum encoding of a classical random variable. This notion relates to measured Sibson mutual information of order infinity. It satisfies all the axiomatic requirements of a rigorous information-leakage measure, i.e., positivity, independence, and the post-processing inequality, and is independent of both the distribution of \(X\) and the specific inference task.
To justify the choice of maximal quantum leakage as a figure of merit for quantum encoding, we prove that the accuracy of any statistical inference problem of any quantum inference procedure is bounded above by the maximal quantum leakage. This bound is in fact tight in the sense that there exists at least one inference problem that saturates the presented upper bound. Maximal quantum leakage depends only on the encoding and not on the inference task, which renders its maximizer the universal optimal encoder for quantum inference algorithms. We subsequently prove that maximal quantum leakage is equal to the optimal success probability in minimum-error quantum state discrimination with equal priors. Maximizing leakage is therefore equivalent to designing codewords that are maximally distinguishable. We prove that pure states are optimal for encoding under the developed figure merit and characterize the optimal encoding for a range of parameters. An important observation is that tight frames are optimal when the dimension of the quantum system is small enough. Among all tight frames equiangular tight frames (ETFs) have the smallest overlap with each other and saturate the Welch bound on all pairwise overlaps. ETFs are the most symmetric and most robust optimal encodings. We provide closed-form expressions for a range of parameters.
The connection between tight frames and quantum state discrimination has appeared in the frame-theory literature [9], [10], but its application to the design of quantum codewords for a universal inference criterion is new to this paper.
The rest of the paper is organized as follows. Section 2 establishes notation and definitions. Section 3 presents the statistical inference model, the universal accuracy bound, and the relationship with state discrimination. Section 4 presents the optimal encoding. Section 5 establishes the relationship with tight frames and presents explicit constructions for a range of parameters. Section 6 reports numerical examples. Section 7 concludes the paper.
All logarithms are in binary basis, motivated by the notion of bits in information theory. Random variables are denoted by capital Roman letters, e.g., \(X\). A discrete random variable \(X\) with finite alphabet \(\mathcal{X}\) is characterized by its probability mass function \(\mathbb{P}\{X=x\}>0\) for \(x\in\mathcal{X}\). The restriction to \(\mathbb{P}\{X=x\}>0\), \(\forall x\in\mathcal{X}\), is without loss of generality as any realization with zero probability can be removed with no impact. We write \(|\mathcal{X}|\) to denote the number of distinct alphabets or the cardinality of the set \(\mathcal{X}\).
Let \(\mathcal{H}\) denote a finite-dimensional complex Hilbert space of dimension \(d:=\dim\mathcal{H}\). The set of linear operators on \(\mathcal{H}\) is \(\mathcal{L}(\mathcal{H})\). A density operator is a positive semi-definite operator \(\rho\in\mathcal{L}(\mathcal{H})\) with \(\trace(\rho)=1\); the set of all density operators is \(\mathcal{S}(\mathcal{H})\). A density operator \(\rho\) is pure if \(\rank(\rho)=1\), equivalently if \(\rho= \ket{\psi} \bra{\psi}\) for some unit vector \(\ket{\psi}\in\mathcal{H}\). A positive operator-valued measure (POVM) is a finite collection \(\{F_y \}_{y\in\mathcal{Y}} \subset\mathcal{L}(\mathcal{H})\) satisfying \(F_y\geq 0\), \(\forall y\in\mathcal{Y}\), and \(\sum_{y\in\mathcal{Y}}F_y=I\). By Born’s rule, the probability of outcome \(y\) when measuring state \(\rho\) is \(\mathbb{P}\{Y=y\} =\trace(F_y\rho)\). A quantum channel \(\mathcal{N}:\mathcal{S}(\mathcal{H})\to\mathcal{S}(\mathcal{H}')\) is a completely positive and trace-preserving linear map [11].
Consider encoding classical data \(X\in\mathcal{X}\) into a quantum system \(A\) by preparing the system in state \(\rho^x\in \mathcal{S}(\mathcal{H})\) when \(X=x\), \(\forall x\in\mathcal{X}\). The collection \(\mathcal{R}=\{\rho^x\}_{x\in\mathcal{X}}\) is called the quantum encoding of \(X\).
Definition 1 (Maximal Quantum Leakage [8]). The maximal quantum leakage from \(X\) through quantum system \(A\) is \[\begin{align} \label{eqn:def95qml} \mathcal{Q}(X\to A)_\rho :=\sup_{\{F_y\}_{y\in\mathcal{Y}}} \log\left(\sum_{y\in\mathcal{Y}} \max_{x\in\mathcal{X}}\trace(\rho^x F_y)\right), \end{align}\qquad{(1)}\] where the supremum is over all POVMs with arbitrary finite outcome set \(\mathcal{Y}\).
Maximal quantum leakage captures the largest multiplicative increase in the probability of correctly guessing an arbitrary function of \(X\) that any measurement on the quantum encoding can produce [8]. It satisfies the post-processing inequality, i.e., \(\mathcal{Q}(X\to A)_{\mathcal{N}(\rho)}\leq \mathcal{Q}(X \to A)_\rho\) for any quantum channel \(\mathcal{N}\) [8]. Furthermore, maximal quantum leakage is known to be upper bounded as \(\mathcal{Q}(X \to A)_\rho\leq\min\{\log (N),2\log (d)\}\) [8].
Consider a quantum system prepared in state \(\rho_i\) with prior probability \(q_i\), \(i=1,\dots,N\). A POVM \(\{M_i\}_{i=1}^N\) is applied to identify the state with the probability of success given by \(\sum_i q_i\trace(M_i\rho_i)\). The optimal success probability is \[\begin{align} \label{eqn:pguess} P_{\rm guess}\left( \{q_i,\rho_i\}_{i=1}^N\right) \;:=\; \max_{\{M_i\}}\sum_{i=1}^N q_i\trace(M_i\rho_i) \quad\text{s.t.}\quad M_i\geq 0,\;\;\sum_{i=1}^N M_i=I. \end{align}\tag{1}\] This semi-definite program is efficiently solvable and admits strong duality [12], [13].
A collection of vectors \(\{\ket{\psi_x}\}_{x\in\mathcal{X}}\) in \(\mathcal{H}\) is a frame if it spans \(\mathcal{H}\), i.e., if the frame operator \(S := \sum_{x\in\mathcal{X}} \ket{\psi_x}\bra{\psi_x}\) is invertible. The frame is tight with frame bound \(A\) if \(S=AI\), and unit-norm tight if additionally each \(\ket{\psi_x}\) is a unit vector and \(A = N/d\). Throughout this paper, “tight frame” means unit-norm tight frame unless stated otherwise.
Consider jointly distributed discrete random variables \(X\in\mathcal{X}\) (input) and \(Z\in\mathcal{Z}\) (output), with the inference goal of predicting \(Z\) from \(X\). This is a general framework capturing, as an example, quantum machine learning (for classification) and quantum sensing (in discretized form). The information pipeline is depicted in Figure 1 with its building elements discussed below. A quantum inference procedure \((\mathcal{R},\mathcal{N},\mathcal{F},\gamma)\) comprises:
Encoding: For each realization \(X=x\), prepare system \(A\) in state \(\rho^x\in\mathcal{S}(\mathcal{H})\) with \(\dim(\mathcal{H})=d\), giving encoding \(\mathcal{R}=\{\rho^x\}_{x\in\mathcal{X}}\);
Processing: Apply quantum channel \(\mathcal{N}:\mathcal{S}(\mathcal{H})\to\mathcal{S}(\mathcal{H}')\), which can be a quantum machine learning policy with parameters to be optimized or a specific algorithm, such as quantum Fourier transform;
Measurement: Apply POVM \(\mathcal{F}=\{F_y\}_{y\in\mathcal{Y}}\) on system \(A\), yielding outcome \(Y\in\mathcal{Y}\) with probability \(\mathbb{P}\{Y=y|X=x\}=\trace(F_y\mathcal{N}(\rho^x))\);
Classical post-processing: Form estimate \(\widehat{Z}\in\mathcal{Z}\) from \(Y\) via any stochastic kernel \(\gamma_{zy}=\mathbb{P}\{\widehat{Z}=z|Y=y\}\), such as classical machine learning or signal processing algorithms.
The accuracy of the procedure is \(\mathbb{P}\{\widehat{Z}=Z\}\). This is the probability of correct inference of output \(Z\) based on input \(X\). In what follows, we use the notation \(N:=|\mathcal{X}|\) and \(d:=\dim(\mathcal{H})\) for notational brevity when needed.
Theorem 1 (Universal Accuracy Bound). The accuracy of any quantum inference procedure \((\mathcal{R},\mathcal{N},\mathcal{F},\gamma)\) satisfies \[\begin{align} \label{eqn:inequality} \mathbb{P}\{\widehat{Z}=Z\} \leq 2^{\mathcal{Q}(X\!\to\!A)_\rho} \max_{z\in\mathcal{Z}}\mathbb{P}\{Z=z\}. \end{align}\qquad{(2)}\] This bound is tight in the sense that there exists inference output \(Z\), quantum processing circuit \(\mathcal{N}\), POVM \(\mathcal{F}\), and classical post-processing algorithm \(\gamma\) for which the equality holds.
Proof. By the definition of quantum maximal leakage and [8], we get \[\begin{align} \frac{\mathbb{P}\{\widehat{Z}=Z\}}{\max_{z}\mathbb{P}\{Z=z\}} &\leq \sup_{\{F_y\}_{y\in\mathcal{Y}}}\sup_{Z,\widehat{Z}} \frac{\mathbb{P}\{\widehat{Z}=Z\}}{\max_z\mathbb{P}\{Z=z\}} = 2^{\mathcal{Q}(X\!\to\!A)_{\mathcal{N}(\rho)}}. \end{align}\] The post-processing inequality gives \(\mathcal{Q}(X\!\to\!A)_{\mathcal{N}(\rho)}\leq\mathcal{Q}(X\!\to\!A)_\rho\), establishing ?? . The tightness of the bound stems from that the bound is attained with \(\mathcal{N}=\mathrm{id}\) (identity map), the optimal POVM in [8], and post-processing and choice of \(Z\) from [14]. ◻
Remark 1. The factor \(2^{\mathcal{Q}(X\!\to\!A)_\rho}\) quantifies the multiplicative improvement in accuracy over the best constant estimator \(\widehat{Z}=z^*:= \mathop{\mathrm{arg\,max}}_z\mathbb{P}\{Z=z\}\). The best constant estimator is the best policy that guesses \(Z\) without any side information, i.e., without access to measurements of \(X\) via quantum or classical measurements. This is referred to as the maximum a priori* estimator. This term is an indicator of the ‘difficulty’ of inference problem in general. Importantly, \(\mathcal{Q}(X\!\to\!A)_\rho\) depends on the encoding \(\mathcal{R}\) but not on the inference objective \(Z\) nor on the joint distribution \(\mathbb{P}_{X,Z}\). This universality motivates maximizing \(\mathcal{Q}(X\!\to\!A)_\rho\) over \(\mathcal{R}\) to find the ‘best’ quantum encoding policy.*
The following theorem recasts the performance bound in Theorem 1 in terms of quantum state discrimination. A version of this result, for general prior distributions, is established in [15]. Here, we give an independent self-contained proof for the uniform-prior case relevant here.
Theorem 2 (Maximal Leakage As State Discrimination). Let \(q_x=1/N\) for all \(x\in\mathcal{X}\) (uniform prior). Then \[\begin{align} \label{eqn:disc95equiv} \mathcal{Q}(X\!\to\!A)_\rho \;=\; \log \bigl(N\cdot P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}})\bigr), \end{align}\qquad{(3)}\] where \(P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}})\), defined in 1 , is the optimal success probability in minimum-error state discrimination with states \(\{\rho^x\}_{x\in\mathcal{X}}\) and equal priors.
Proof. Step 1: LHS \(\leq\) RHS in ?? . From Definition 1, \[2^{\mathcal{Q}(X\!\to\!A)_\rho}= \sup_{\{F_y\}} \sum_{y} \max_{x} \trace(\rho^x F_y).\] Let \(\{F_y\}\) be an arbitrary POVM. For each outcome \(y\), define the decision rule \(\delta(y)\in\mathop{\mathrm{arg\,max}}_x\trace(\rho^x F_y)\). Group the POVM elements by decision: \(M_x:=\sum_{y:\delta(y)=x}F_y\). Then \(\{M_x\}_{x\in\mathcal{X}}\) is a valid POVM, and \[\begin{align} \sum_y\max_x\trace(\rho^x F_y) &= \sum_y\trace(\rho^{\delta(y)}F_y) = \sum_x\trace\!\Bigl(\rho^x\sum_{y:\delta(y)=x}F_y\Bigr) = \sum_x\trace(\rho^x M_x). \end{align}\] Hence \(\sum_y\max_x\trace(\rho^x F_y)=N\cdot(1/N)\sum_x\trace(\rho^x M_x)\leq N\cdot P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}})\).
Step 2: RHS \(\leq\) LHS in ?? . Let \(\{M_x\}_{x\in\mathcal{X}}\) be any POVM feasible for 1 . Treat each \(M_x\) as a single-outcome POVM element indexed by \(y=x\). Then \[\begin{align} \sum_y\max_{\tilde{x}} \trace(\rho^{\tilde{x}}F_y) \;\geq\; \sum_x\trace(\rho^x M_x), \end{align}\] so \(2^{\mathcal{Q}(X\!\to\!A)_\rho}\geq N\cdot P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}})\).
Combining both steps yields the equivalence in ?? . ◻
Lemma 1 (Improved Leakage Bound). For any pure-state encoding \(\{\rho^x\}_{x\in\mathcal{X}}\) with \(N>d\): \[\begin{align} \label{eqn:fund95bound} \mathcal{Q}(X\!\to\!A)_\rho \;\leq\; \log (d). \end{align}\qquad{(4)}\]
Proof. By Theorem 2, it suffices to show \(P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}})\leq d/N\). For any POVM \(\{M_x\}_{x\in\mathcal{X}}\) and any pure state \(\rho^x=\ket{\psi_x}\bra{\psi_x}\) with unit vector \(\ket{\psi_x}\), \(\trace(\rho^x M_x)\leq \trace(\rho^x)\trace(M_x)=\bra{\psi_x}\ket{\psi_x}\trace(M_x)=\trace(M_x)\), where the inequality follows from the trace relationship \(\trace(AB)\leq \trace(A)\trace(B)\) for positive semi-definite operators [16]. Summing over \(x\) and using \(\sum_x\trace(M_x)=\trace(I)=d\), we get \[\begin{align} P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}}) = \frac{1}{N}\sum_x \trace(\rho^x M_x) \leq \frac{1}{N}\sum_x\trace(M_x) = \frac{d}{N}. \end{align}\] Hence \(\mathcal{Q}(X\!\to\!A)_\rho =\log(NP_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}}))\leq\log (d)\). ◻
Remark 2. Lemma 1 sharpens the existing bound \(\mathcal{Q}\leq\min\{\log (N),2\log (d)\}\) [8] to \(\mathcal{Q}\leq\min\{\log (N),\log (d)\}\) for pure states.
Corollary 1 (Number of Needed Qubits). For any quantum inference procedure with pure-state encoding, \[\begin{align} \mathbb{P}\{\widehat{Z}=Z\} \leq \min \{N,d\}\max_{z}\mathbb{P}\{Z=z\}. \end{align}\] This bound is tight in the same sense as in Theorem 1.
Proof. The proof follows from substituting the bound \(\mathcal{Q}(X\!\to\!A)_\rho\leq\min\{\log( N),\log (d)\}\) in Remark 2 into Theorem 1. The tightness stems from tightness of Theorem 1 and the saturation of the bound in Remark 2 for pure state encoding with orthogonal states. ◻
Note that, in Corollary 1, \(\dim(\mathcal{H})=d\) captures the dimension of the quantum system used for statistical inference. The number of utilized qubits, if a qubit arrangement is used to create this space, is \(\lceil \log_2(d)\rceil\). If \(d<N\), the upper bound in Corollary 1 is unnecessarily reduced by the dimension of the quantum system. The tightness of Corollary 1 implies that there exists, at least, one inference problem for which the performance can be improved by increasing the dimension of the underlying quantum system. This points to that the minimum number of qubits required for accurately solving a generic inference problem must be above \(\log_2(N)\). We are not asserting that \(\log_2(N)\) is the optimal number of required qubits, but that this is a lower bound for how many qubits are needed to solve the most ‘complicated’ inference problems effectively (in the sense that the inference quality cannot be improved by increasing the dimension of the underlying Hilbert space). Interestingly, the only thing that matters, in this observation, is the size of the support set of the input \(X\) (not its distribution, not the output \(Z\), not the quantum computing method used, and not the classical post-processing procedure implemented). Therefore, this observation is rather universal.
The upper bound in Theorem 1, which is a function of the maximal quantum leakage \(\mathcal{Q}(X\rightarrow A)_{\rho}\), only depends on the quantum encoding of the classical data denoted by \(\mathcal{R}\). This bound is also tight in the sense that it is saturated for at least one inference task. Therefore, maximizing \(\mathcal{Q}(X\rightarrow A)_{\rho}\) provides a good universal encoding policy. This encoder can unlock the barrier in achieving a high accuracy in quantum-assisted statistical inference by increasing the upper bound in Theorem 1. Maximizing the upper bound in ?? , via maximizing \(\mathcal{Q}(X\rightarrow A)_{\rho}\), does not make the bound looser as this bound is always attained for at least one inference problem. The universal optimal encoder is given by \[\begin{align} \label{eqn:max95encoding} \mathop{\mathrm{arg\,max}}_{\rho^x\in \mathcal{S}(\mathcal{H}),\forall x\in\mathcal{X}} \mathcal{Q}(X\!\to\!A)_\rho. \end{align}\tag{2}\] In the next proposition, we prove that this optimization problem attains its maximum over pure states. This is an important revelation as most quantum computing platforms and procedures rely on pure states.
Proposition 3 (Pure States Are Optimal). The maximum of 2 is attained by a pure-state encoding.
Proof. Because \(\log(\cdot)\) is strictly increasing, 2 is equivalent to maximizing \(g(\{\rho^x\}_{x\in\mathcal{X}}):=\sup_{\{F_y\}}\sum_y\max_x\trace(\rho^x F_y)\). It is easy to see that \(g:\mathcal{S}(\mathcal{H})^{N}\rightarrow \mathbb{R}\) is convex because \[\begin{align} g(\{\alpha \rho^x+(1-\alpha)\sigma^x\}_{x\in\mathcal{X}}) &= \sup_{\{F_y\}_{y\in\mathcal{Y}}}\sum_{y\in\mathcal{Y}} \max_{ x\in\mathcal{X}} \trace((\alpha\rho^x+(1-\alpha)\sigma^x) F_y) \\&\leq \alpha\sup_{\{F_y\}_{y\in\mathcal{Y}}}\sum_{y\in\mathcal{Y}} \max_{ x\in\mathcal{X}} \trace(\rho^x F_y)+\!(1\!-\!\alpha)\!\!\sup_{\{F_y\}_{y\in\mathcal{Y}}}\sum_{y\in\mathcal{Y}} \max_{ x\in\mathcal{X}} \trace(\sigma^x F_y) \\&\leq \alpha g(\{\rho^x\}_{x\in\mathcal{X}}) +(1-\alpha)g(\{\sigma^x\}_{x\in\mathcal{X}}). \end{align}\] By the Bauer’s maximum principle [17], originally proved in [18], \(g\) attains its maximum at an extreme point of \(\mathcal{S}(\mathcal{H})^{N}\). The extreme points of \(\mathcal{S}(\mathcal{H})\) are the pure states [19]. ◻
Note that Proposition 3 does not claim that the solution is unique. The problem 2 might admit several solutions but at least one of those solutions involves pure states for encoding classical data. All the optimal solutions have the same maximal quantum leakage.
Corollary 2 (Optimal Encoding Reformulation). Maximizing \(\mathcal{Q}(X\!\to\!A)_\rho\) over the encoding \(\{\rho^x\}_{x\in\mathcal{X}}\), formulated in 2 , is equivalent to designing pure-state encodings \(\{\rho^x\}_{x\in\mathcal{X}}\) that maximize the minimum-error discrimination success probability with equal priors.
When considering pure state encodings \(\mathcal{R}=\{\rho^x\}_{x\in\mathcal{X}}\) with \(\rho^x=\ket{\psi_x}\bra{\psi_x}\), \(\forall x\in\mathcal{X}\), with slight abuse of notation, we refer to \(\{\ket{\psi_x}\}_{x\in\mathcal{X}}\) as the state encoding. We consider several examples achieving the optimal encoding.
Proposition 4 (Optimality of Basis Encoding). If \(d\geq N\), the maximum of 2 is \(\log (N)\), attained by the basis encoding* \(\{\ket{\tau(x)}\}_{x\in\mathcal{X}}\), where \(\{\ket{i}\}_{i=0,\dots,d-1}\) is any orthonormal basis for \(\mathcal{H}\) and \(\tau:\mathcal{X}\to\{0,\dots,N-1\}\) is any injective map.*
Proof. Note that \(\mathcal{Q}(X\rightarrow A)_\rho\leq \log_2(N)\) irrespective of \(\{\rho^x\}_{x\in\mathcal{X}}\) [8]. Let \(\rho^x=\ket{\tau(x)} \bra{\tau(x)}\) for all \(x\in\mathcal{X}\). Fix \(\mathcal{Y}=\mathcal{X}\) and \(F_y=\rho^y\) for all \(y\in\mathcal{Y}\). We get \(\sum_{y\in\mathcal{Y}} \max_{{ x\in\mathcal{X}: \mathbb{P}\{X=x\}>0} } \trace(\rho^x F_y)=N\), which attains \(\mathcal{Q}(X\rightarrow A)_\rho= \log_2(N)\). ◻
Basis encoding, also called index encoding [20], is thus not merely a practical convenience but the provably optimal universal encoder whenever the Hilbert space is large enough to accommodate orthogonal codewords. The interesting and more subtle case is \(N>d\), to which we now turn. The following lemma transforms the problem of finding an optimal encoding to an algebraic condition.
Lemma 2 (Optimality of Tight Frames). Assume \(N>d\). Let \(\{\ket{\psi_x}\}_{x\in\mathcal{X}}\) in \(\mathcal{H}\) be a unit-norm tight frame, i.e., \(S := \sum_{x\in\mathcal{X}} \ket{\psi_x}\bra{\psi_x}=NI_{d}/d\). Consider state encoding \(\rho^x=\ket{\psi_x}\bra{\psi_x}\) for all \(x\in\mathcal{X}\). Then, \(P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}})=d/N\) and \(\mathcal{Q}(X\!\to\!A)_\rho=\log (d)\).
Proof. For the tight frame with \(S=(N/d)I_{d}\), \(\{M_x^*\}_{x\in\mathcal{X}}\) with \(M_x^*=(d/N)\ket{\psi_x}\bra{\psi_x}\) forms a POVM because \[\begin{align} \sum_x M_x^* = \frac{d}{N}\sum_x|\psi_x\rangle\langle\psi_x|=\frac{d}{N}\cdot\frac{N}{d}I_{d}=I_{d},\quad M_x^*\geq0. \end{align}\] The success probability is \((1/N)\sum_x\langle\psi_x|M_x^*|\psi_x\rangle=(1/N)(d/N)\sum_x(\bra{\psi_x}\ket{\psi_x})^2=d/N.\) Since this equals the upper bound in Lemma 1, it must be the optimal probability. The rest follows from Theorem 2. ◻
Remark 3 (Average State Is Maximally Mixed). A tight frame satisfies \((1/N)\sum_{x\in\mathcal{X}}\rho^x=(1/N)\sum_x\ket{\psi_x}\bra{\psi_x}=I/d\), meaning the ensemble-averaged state, under uniform prior, is the maximally mixed state. From a third party perspective, without knowing which codeword was sent, the average quantum state carries no information about \(x\).
Proposition 5 (Optimality of Phase Encoding). If \(N\geq d\), the maximum of 2 is \(\log (d)\), attained by the phase encoding* \(\{\ket{\psi_x}\}_{x\in\mathcal{X}}\), where \(\ket{\psi_x} = \frac{1}{\sqrt{d}}\sum_{j=0}^{d-1} e^{2\pi i \tau(x)j/N}\,\ket{j}\) and \(\tau:\mathcal{X}\to\{0,\dots,N-1\}\) is any injective map.*
Proof. Without loss of generality assume that \(\mathcal{X}:=\{0,\dots,N-1\}\) (by utilizing the injective map \(\tau\)). The \((j,k)\)-th entry of \(S\) is \[S_{jk} = \sum_{x=0}^{N-1} \frac{e^{2\pi ixj/N}\,e^{-2\pi ixk/N}}{d} = \frac{1}{d}\sum_{x=0}^{N-1} e^{2\pi ix(j-k)/N} = \begin{cases} N/d, & j=k,\\ 0, & j\neq k, \end{cases} \label{eqn:phase95Sjk}\tag{3}\] where the last equality follows from discrete orthogonality of complex exponentials. This shows that \(\{\ket{\psi_x}\}_{x\in\mathcal{X}}\) is a tight frame with \(S := \sum_{x\in\mathcal{X}}\ket{\psi_x}\bra{\psi_x} = (N/d)\,I_d.\) The frame is unit-norm since \(\bra{\psi_x}\ket{\psi_x} = \frac{1}{d}\sum_{j=0}^{d-1}|e^{2\pi ixj/N}|^2 = \frac{1}{d}\cdot d = 1\). Hence \(\{\ket{\psi_x}\}\) is a unit-norm tight frame with bound \(N/d\). Lemma 2 gives \(\mathcal{Q}(X\!\to\!A)_\rho = \log (d)\). ◻
Remark 4 (Phase Encoding and the Quantum Fourier Transform). The codewords \(\ket{\psi_x}\) in Proposition 5 are the columns of the \(d\times N\) submatrix of the \(N\times N\) Discrete Fourier Transform (DFT) matrix (the first \(d\) rows). When \(N=d\), the full \(d\times d\) DFT matrix is unitary and phase encoding reduces to an orthonormal basis. In quantum computing, this is precisely the computational basis after applying the quantum Fourier transform. For \(N>d\), the \(d\times N\) DFT submatrix has orthogonal rows, and its columns (the codewords) form the tight frame shown above. The tight frame property of DFT submatrices is a foundational result in compressed sensing [21] and explains why DFT-based measurements are near-universally useful for sparse recovery.
Phase encoding is not the only tight frame. Therefore, the optimal encoding is not unique. Among all tight frames achieving \(\mathcal{Q}(X\to A)_{\rho}=\log (d)\), some are more symmetric than others. In what follows, we consider pairwise similarity between codewords and present symmetric constructions when possible.
The natural measure of pairwise similarity between codewords \(\ket{\psi_x}\) and \(\ket{\psi_{x'}}\), \(x\neq x'\), is the squared overlap \(|\bra{\psi_x}\ket{\psi_{x'}}|^2\), which is known as the pure state fidelity in quantum information theory [11]. The following theorem gives a fundamental lower bound on the worst-case overlap. The proof is based on the seminal work of Welch in information theory in [22] and is presented here for the sake of completeness.
Theorem 6 (Welch Bound For Tight Frames). Assume \(N>d\). If \(\{\ket{\psi_x}\}_{x\in\mathcal{X}}\) is a unit-norm tight frame in \(\mathcal{H}\cong\mathbb{C}^d\), then \[\begin{align} \label{eqn:welch} \max_{x\neq x'}|\bra{\psi_x}\ket{\psi_{x'}}|^2 \;\geq\; \frac{N-d}{d(N-1)}. \end{align}\qquad{(5)}\]
Proof. Noting \(S=\sum_x \ket{\psi_x}\bra{\psi_x}=(N/d)I\), we get \[\begin{align} \frac{N^2}{d}=\trace(S^2)&= \sum_{x,x'}|\bra{\psi_x}\ket{\psi_{x'}}|^2 = N + \sum_{x\neq x'}|\bra{\psi_x}\ket{\psi_{x'}}|^2. \end{align}\] Hence \(\sum_{x\neq x'} |\bra{\psi_x}\ket{\psi_{x'}}|^2=N(N-d)/d\). Since there are \(N(N-1)\) ordered pairs \((x,x')\) with \(x\neq x'\): \[\begin{align} \max_{x\neq x'}|\bra{\psi_x}\ket{\psi_{x'}}|^2 \;\geq\; \frac{N(N-d)/d}{N(N-1)} = \frac{N-d}{d(N-1)}. \end{align}\] ◻
Remark 5. The proof of Theorem 6 shows that the average squared overlap for tight frames is always equal to \[\begin{align} \frac{1}{N(N-1)}\sum_{x\neq x'} |\bra{\psi_x}\ket{\psi_{x'}}|^2=\frac{N-d}{d(N-1)}. \end{align}\] The average squared overlap tends to \((N-d)/[d(N-1)] \to 1/d\) as \(N \to \infty\).
Equality in Theorem 6 holds if and only if all pairwise squared overlaps are equal: \(|\langle\psi_x|\psi_{x'}\rangle|^2=c^2:=(N-d)/[d(N-1)]\) for all \(x\neq x'\). This motivates the following definition.
Definition 2 (Equiangular Tight Frame (ETF)). A unit-norm tight frame \(\{\ket{\psi_x} \}_{x\in\mathcal{X}}\), for \(N>d\), is an equiangular tight frame* (ETF) with parameters \((N,d)\) if it saturates the Welch bound ?? , i.e., \[\begin{align} \label{eqn:etf95coh} |\bra{\psi_x}\ket{\psi_{x'}}| = c_{N,d}:=\sqrt{\frac{N-d}{d(N-1)}} \quad \forall\; x\neq x'. \end{align}\tag{4}\] The quantity \(c_{N,d}\) is referred to as the coherence of the ETF.*
ETFs are optimal quantum encodings in two complementary senses. They achieve the maximum leakage \(\mathcal{Q}(X\to A)_\rho=\log (d)\) (tight unit-norm frame condition), and they simultaneously minimize the maximum pairwise overlap among all tight frames (Welch bound saturation). A small coherence \(c_{N,d}\) means the codewords are as “spread out” as possible in the Hilbert space \(\mathcal{H}\cong\mathbb{C}^d\), which in turn means they are maximally distinguishable in a minimax sense.
Table 1 summarises the key special cases of ETF encodings. When \(N=d\) the ETF degenerates to an orthonormal basis (the complete regime of Proposition 4). As \(N\) increases past \(d\), the coherence \(c_{N,d}\) increases from \(0\) (orthogonal codewords). We now provide explicit codeword sets for these parameter regimes. Existence of an ETF\((N,d)\) is not guaranteed for all \((N,d)\); the problem is connected to deep questions in combinatorics and algebraic number theory [23], [24].
| Parameters | Structure | Coherence \(c_{N,d}\) | \(P_{\rm guess}\) |
|---|---|---|---|
| \(N=d\) | Orthonormal basis | \(0\) | \(1\) |
| \(N=d+1\) | Regular simplex | \(1/d\) | \(d/(d+1)\) |
| \(N=d^2\) | SIC-POVM | \(1/\sqrt{d+1}\) | \(1/d\) |
The regular simplex ETF exists for every \(d\geq1\) and corresponds to \(d+1\) equidistant points on the unit sphere in \(\mathbb{C}^d\), i.e., the vertices of a regular simplex inscribed in the sphere.
Proposition 7 (Regular Simplex — ETF\((d{+}1,\,d)\)). For every \(d \geq 1\), there exists an equiangular tight frame of \(N=d+1\) unit vectors in \(\mathbb{C}^d\) with coherence \(c_{d+1,d} = 1/d\), achieving \(\mathcal{Q}(X\to A)_\rho = \log (d)\) and \(P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}}) = d/(d+1)\). Algorithm [alg:simplex] provides this construction.
Proof. We verify the three defining properties of unit norm, equiangularity at \(c_{d+1,d}=1/d\), and the tight frame condition \(\sum_k|\psi_k\rangle\langle\psi_k|=(N/d)I_d\).
Step 1 (Unit norm). Since \(|\tilde{\psi}_k\rangle\in u^{\perp} = \operatorname{col}(Q)\), the map \(Q^{\dagger}\) acts as an isometry on \(u^{\perp}\), so \(\bra{\psi_k}\ket{\psi_k} = \langle Q^{\dagger}\tilde{\psi}_k | Q^{\dagger}\tilde{\psi}_k\rangle = \langle\tilde{\psi}_k|\tilde{\psi}_k\rangle\). Note that \[\begin{align} \ket{u}\bra{u} \ket{e_k} =\ket{u} \left(\frac{1}{\sqrt{d+1}}\sum_{\ell=0}^{d}\bra{e_\ell}\ket{e_k}\right) =\frac{1}{\sqrt{d+1}}\ket{u}, \end{align}\] and, as a result, \[\begin{align} \langle\tilde{\psi}_k |\tilde{\psi}_k\rangle &= \frac{d+1}{d}\, \bra{e_k}\,\bigl(I_{d+1}-|u\rangle\langle u|\bigr)^2\,\ket{e_k}\\ &= \frac{d+1}{d}\left(\bra{e_k} -\frac{1}{\sqrt{d+1}}\bra{u} \right)\left(\ket{e_k} -\frac{1}{\sqrt{d+1}}\ket{u} \right)\\ &=\frac{d+1}{d} \left( 1+\frac{1}{d+1}\right) -\frac{\sqrt{d+1}}{d}\left( \bra{e_k}\ket{u} + \bra{u}\ket{e_k} \right)\\ &=\frac{d+2}{d}-\frac{2}{d}\\ &=1. \end{align}\]
Step 2 (Equiangularity). For any \(k,k'\), since both \(|\tilde{\psi}_k\rangle\) and \(|\tilde{\psi}_{k'}\rangle\) lie in \(\operatorname{col}(Q)\). Hence, the operator \(QQ^{\dagger} = I_{d+1}-|u\rangle\langle u|\) acts as the identity on them, giving \(\langle\psi_k| \psi_{k'}\rangle = \langle Q^{\dagger}\tilde{\psi}_k\, |Q^{\dagger}\tilde{\psi}_{k'}\rangle= \langle\tilde{\psi}_k| \tilde{\psi}_{k'}\rangle.\) For \(k\neq k'\), \[\begin{align} \langle\tilde{\psi}_k| \tilde{\psi}_{k'}\rangle &= \frac{d+1}{d}\left(\bra{e_k} -\frac{1}{\sqrt{d+1}}\bra{u} \right)\left(\ket{e_{k'}} -\frac{1}{\sqrt{d+1}}\ket{u} \right)\\ &=\frac{1}{d}-\frac{\sqrt{d+1}}{d}\left( \bra{e_k}\ket{u} + \bra{u}\ket{e_{k'}} \right)\\ &=-\frac{1}{d}. \end{align}\] This means \(c_{d+1,d}=1/d\), confirming equiangularity at the Welch bound.
Step 3 (Tight frame). We have \[\begin{align} \sum_{k=0}^{d} |\tilde{\psi}_k\rangle \langle\tilde{\psi}_k| &= \frac{d+1}{d}\, (I_{d+1}-\ket{u}\bra{u}) \!\left(\sum_{k=0}^{d} \ket{e_k}\bra{e_k}\right)\! (I_{d+1}-\ket{u}\bra{u}) \notag\\ &= \frac{d+1}{d}\, (I_{d+1}-\ket{u}\bra{u}) \,I_{d+1}\, (I_{d+1}-\ket{u}\bra{u}) \notag\\ &= \frac{d+1}{d}\,(I_{d+1}-\ket{u}\bra{u})\\ &= \frac{d+1}{d}\,QQ^{\dagger}, \label{eqn:simplex95frame95op95ambient} \end{align}\tag{5}\] where in the last step we used that the projector \((I_{d+1}-\ket{u}\bra{u})\) squares to itself and \(QQ^{\dagger} = I_{d+1}-\ket{u}\bra{u}\). Applying \(Q^{\dagger}\) from the left and \(Q\) from the right: \[\sum_{k=0}^{d} \ket{\psi_k} \bra{\psi_k} = Q^{\dagger}\!\left(\sum_{k=0}^{d}|\tilde{\psi}_k\rangle\langle\tilde{\psi}_k|\right)\!Q = \frac{d+1}{d}\,Q^{\dagger}QQ^{\dagger}Q = \frac{d+1}{d}\,I_d = \frac{N}{d}\,I_d, \label{eqn:simplex95tight}\tag{6}\] confirming the tight frame condition.
Together, Steps 1–3 establish that \(\{|\psi_k\rangle\}_{k=0}^{d}\) is an ETF\((d+1,d)\). Lemma 2 then shows that the optimal POVM is the self-referential one, \(M_k^* = (d/N) \ket{\psi_k}\bra{\psi_k}\), achieving \(P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}}) = d/(d+1)\) and \(\mathcal{Q}(X\to A)_\rho = \log (d)\). ◻
Remark 6 (Qubit Trine as Regular Simplex for \(d=2\)). We verify the general construction of Proposition 7 step by step for \(d=2\), \(N=3\). The centroid vector is \[|u\rangle = \tfrac{1}{\sqrt{3}}\bigl(|e_0\rangle+|e_1\rangle+|e_2\rangle\bigr) = \tfrac{1}{\sqrt{3}} \begin{bmatrix} 1 & 1 & 1 \end{bmatrix} ^\top , \label{eqn:trine95u}\qquad{(6)}\] which results in \[\begin{align} |\tilde{\psi}_0\rangle &= \sqrt{\tfrac{1}{6}}\begin{bmatrix} 2 & -1 & -1 \end{bmatrix}^\top , \label{eqn:trine95psi0}\\ |\tilde{\psi}_1\rangle &= \sqrt{\tfrac{1}{6}}\begin{bmatrix} -1 & 2 & -1 \end{bmatrix}^\top , \label{eqn:trine95psi1}\\ |\tilde{\psi}_2\rangle &= \sqrt{\tfrac{1}{6}}\begin{bmatrix} -1 & -1 & 2 \end{bmatrix}^\top . \label{eqn:trine95psi2} \end{align}\] {#eq: sublabel=eq:eqn:trine95psi0,eq:eqn:trine95psi1,eq:eqn:trine95psi2} We need \(Q\in\mathbb{R}^{3\times 2}\) satisfying \(Q^\dagger Q=I_2\) and \(\operatorname{col}(Q)=u^{\perp}\). A natural orthonormal basis for \(u^{\perp}\) is obtained by Gram–Schmidt orthogonalization of the two difference vectors \(\ket{e_0}-\ket{e_1}\) and \(\ket{e_1}-\ket{e_2}\): \[\begin{align} q_1 & = \sqrt{\tfrac{1}{2}}\, \begin{bmatrix} 1 & -1 & 0 \end{bmatrix}^\top \label{eqn:q1}\\ q_2 &= \sqrt{\tfrac{1}{6}} \, \begin{bmatrix} 1 & 1 & -2 \end{bmatrix}^\top . \label{eqn:q2} \end{align}\] {#eq: sublabel=eq:eqn:q1,eq:eqn:q2} The isometry is therefore \(Q = \bigl[q_1\;\big|\;q_2\bigr]\). One can verify directly that \(Q^\dagger Q=I_2\) (columns are orthonormal) and \(QQ^\dagger = I_3 - \ket{u}\bra{u}\) (the orthogonal projector onto \(u^{\perp}\)). This results in \[\begin{align} \ket{\psi_0} &= Q^\dagger|\tilde{\psi}_0\rangle = \tfrac{1}{2}\begin{bmatrix} \sqrt{3} & 1 \end{bmatrix}^\top = \cos(\tfrac{\pi}{6})\ket{0} + \sin(\tfrac{\pi}{6})\ket{1}, \label{eqn:trine95Cd950}\\ \ket{\psi_1} &= Q^\dagger|\tilde{\psi}_1\rangle = \tfrac{1}{2}\begin{bmatrix} -\sqrt{3} & 1 \end{bmatrix}^\top = \cos(\tfrac{5\pi}{6})\ket{0} + \sin(\tfrac{5\pi}{6})\ket{1}, \label{eqn:trine95Cd951}\\ \ket{\psi_2} &= Q^\dagger|\tilde{\psi}_2\rangle = \begin{bmatrix} 0 & -1 \end{bmatrix}^\top = \cos(\tfrac{3\pi}{2})\ket{0} + \sin(\tfrac{3\pi}{2})\ket{1}. \label{eqn:trine95Cd952} \end{align}\] {#eq: sublabel=eq:eqn:trine95Cd950,eq:eqn:trine95Cd951,eq:eqn:trine95Cd952} These three vectors have Bloch-circle angles \(30^{\circ}\), \(150^{\circ}\), \(270^{\circ}\), which forms an equilateral triangle with \(120^{\circ}\) separation, confirming the trine geometry. More compactly, \[\begin{align} \ket{\psi_k} = \cos(\tfrac{2k\pi}{3}+\tfrac{\pi}{6})\ket{0}+ \sin(\tfrac{2k\pi}{3}+\tfrac{\pi}{6})\ket{1}, \forall k=0,1,2. \end{align}\] These states are depicted in Figure 3 in a Bloch sphere. Finally, note that the term trine* comes from the Latin trinus (threefold) and the astrological trine aspect of \(120^{\circ}\). The ensemble was studied in [25] for optimal quantum state detection, and later in quantum cryptography [26]. It is optimal for both statistical inference (this paper) and quantum state tomography (where it achieves the minimum number of states needed to uniquely identify a qubit density matrix).*
SIC-POVMs are ETFs\((d^2,d)\) with coherence \(1/\sqrt{d+1}\). A constructive approach in arbitrary dimension uses the discrete Heisenberg–Weyl group.
Definition 3 (Heisenberg–Weyl SIC-POVM [27], [28]). Let \(\omega=e^{2\pi i/d}\) and \(\tau=e^{i\pi(d+1)/d}\). Define the generalized Pauli (clock and shift) operators on \(\mathbb{C}^d\) by \[\begin{align} Z|j\rangle = \omega^j|j\rangle,\quad X|j\rangle = |j\oplus 1\rangle,\quad j\in\mathbb{Z}_d:=\{0,\dots,d-1\}, \end{align}\] where \(\oplus\) denotes addition modulo \(d\). The displacement operators are \(D_{p,q}:=\tau^{pq}X^pZ^q\) for \(p,q\in\mathbb{Z}_d\). A unit vector \(|f\rangle\in\mathbb{C}^d\) is a fiducial state* for a SIC-POVM if \[\begin{align} \label{eqn:fiducial} |\langle f|D_{p,q}|f\rangle|^2 = \frac{1}{d+1}\quad\forall\;(p,q)\neq(0,0). \end{align}\tag{7}\] When a fiducial state \(|f\rangle\) exists, the \(d^2\) states \(|\psi_{p,q}\rangle=D_{p,q}|f\rangle\) constitute a SIC-POVM.*
Proposition 8 (HW SIC-POVMs are ETFs). Suppose a fiducial state \(|f\rangle\in\mathbb{C}^d\) satisfying 7 exists. Then the \(N=d^2\) states \(|\psi_{p,q}\rangle = D_{p,q}|f\rangle\), \((p,q)\in\mathbb{Z}_d\times\mathbb{Z}_d\), form an ETF\((d^2,d)\)* with coherence \(c_{d^2,d} = 1/{\sqrt{d+1}}\) achieving \(P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}})=1/d\) and \(\mathcal{Q}(X\!\to\!A)_\rho=\log (d)\).*
Proof. We verify the three properties of unit norm, tight frame condition, and equiangularity.
(i) Unit norm. Since every displacement operator \(D_{p,q}=\tau^{pq}X^p Z^q\) is unitary (both \(X\) and \(Z\) are unitary, and the phase \(\tau^{pq}\) has modulus one), hence \(\bra{\psi_{p,q}}\ket{\psi_{p,q}}=\bra{f}D_{p,q}^\dagger D_{p,q}\ket{f}=\bra{f}\ket{f}=1\).
(ii) Tight frame: \(\sum_{p,q}|\psi_{p,q}\rangle\langle\psi_{p,q}| = d\,I_d\). Define the frame operator \[\label{eqn:sic95frame95op} S := \sum_{p,q\in\mathbb{Z}_d} D_{p,q}|f\rangle\langle f|D_{p,q}^\dagger.\tag{8}\] Step 1 (covariance). The displacement operators satisfy \[\label{eqn:weyl} D_{r,s}\,D_{p,q} \;=\; \tau^{sp-rq}\,D_{r+p,\,s+q},\tag{9}\] a consequence of \(ZX=\omega XZ\) and \(\omega=\tau^2\) [27]. Noting that \(|\tau^{sp-rq}|=1\), we get \[\begin{align} D_{r,s}\,S\,D_{r,s}^\dagger &= \sum_{p,q} \bigl(D_{r,s}D_{p,q}\bigr)|f\rangle\langle f| \bigl(D_{r,s}D_{p,q}\bigr)^\dagger \notag\\ &= \sum_{p,q} D_{p+r,\,q+s}|f\rangle\langle f|D_{p+r,\,q+s}^\dagger\\ &= S, \end{align}\] where the last equality holds because the map \((p,q)\mapsto(p{+}r,\,q{+}s)\), with addition taken modulo \(d\), is a bijection on \(\mathbb{Z}_d\times\mathbb{Z}_d\). As \((p,q)\) ranges over all \(d^2\) pairs, so does \((p{+}r,\,q{+}s)\), merely in a different order. Renaming the dummy summation variable \((p{+}r,\,q{+}s)\to(p,q)\) therefore recovers the original sum \(S\). Hence \(S\) commutes with every \(D_{r,s}\).
Step 2 (Schur’s lemma). The \(d^2\) operators \(\{D_{p,q}\}_{p,q\in\mathbb{Z}_d}\) form an irreducible unitary representation of the discrete Heisenberg–Weyl group on \(\mathbb{C}^d\) [27]. By Schur’s lemma [29], any operator commuting with all elements of an irreducible representation must be proportional to the identity. Therefore, \(S = \lambda\,I_d\) for some \(\lambda\in\mathbb{C}.\)
Step 3 (trace normalisation). Taking the trace of 8 : \[\operatorname{tr}(S) = \sum_{p,q}\operatorname{tr}\!\bigl(D_{p,q}|f\rangle\langle f|D_{p,q}^\dagger\bigr) = {\sum_{p,q}\operatorname{tr}(|f\rangle\langle f|) =d^2}.\] On the other hand, \(\operatorname{tr}(S)=\operatorname{tr}(\lambda I_d)=\lambda d\), we obtain \(\lambda=d\).
(iii) Equiangularity at \(c_{d^2,d}=1/\!\sqrt{d+1}\). For \((p,q)\neq(p',q')\), the Weyl relation 9 gives \[\langle\psi_{p',q'}|\psi_{p,q}\rangle = \langle f|D_{p',q'}^\dagger D_{p,q}|f\rangle = e^{i\phi}\,\langle f|D_{p-p',\,q-q'}|f\rangle,\] for some phase \(e^{i\phi}\). Since \((p{-}p',\,q{-}q')\neq(0,0)\), the fiducial condition 7 of Definition 3 gives \[|\langle\psi_{p',q'}|\psi_{p,q}\rangle|^2 = |\langle f|D_{p-p',\,q-q'}|f\rangle|^2 = \frac{1}{d+1}.\] Taking square roots, \(|\langle\psi_{p',q'}|\psi_{p,q}\rangle|=1/\!\sqrt{d+1}\) for all \((p,q)\neq(p',q')\).
Properties (i)–(iii) together establish that \(\{|\psi_{p,q}\rangle\}\) is an ETF\((d^2,d)\). The rest follows from the application of Lemma 2. ◻
Remark 7 (Existence of Fiducial State). Proposition 8 proves that if* a fiducial state exists then the resulting states form an ETF\((d^2,d)\). It does not establish the existence of fiducial states, which is the content of the Zauner conjecture [28] asserting that fiducial states exist in every dimension \(d\geq 1\). Fiducial states have been found for all \(d\leq 53\) and many larger values through a combination of analytic and numerical methods [30], [31].*
Remark 8 (Qubit SIC-POVM). For \(d = 2\), the displacement operators are \(\{D_{0,0}, D_{1,0}, D_{0,1}, D_{1,1}\} = \{I, X, Z, -Y\}\). The fiducial state \[|f\rangle = \frac{1}{\sqrt{6}}\left[\sqrt{3+\sqrt{3}}\,|0\rangle + e^{i\pi/4}\sqrt{3-\sqrt{3}}\,|1\rangle\right] \label{eq:qubit-fiducial}\qquad{(7)}\] satisfies the fiducial condition 7 , and the Heisenberg–Weyl orbit \(\{|f\rangle, X|f\rangle, Z|f\rangle, -Y|f\rangle\}\) forms an \(\mathrm{ETF}(4, 2)\). There exists a unitary \(U\) on \(\mathbb{C}^2\) that rotates these states so that one sits at \(\ket{0}\) to get \[|\psi_0\rangle = |0\rangle, \qquad |\psi_k\rangle = \frac{1}{\sqrt{3}}|0\rangle + \sqrt{\tfrac{2}{3}}\,e^{i 2\pi(k-1)/3}|1\rangle, \quad k = 1, 2, 3, \label{eq:qubit-sic-states}\qquad{(8)}\] which is depicted in Figure 4. Both forms are SIC-POVMs with coherence \(c_{4,2} = 1/\sqrt{3}\) achieving \(P_{\mathrm{guess}}(\{1/N, \rho_x\}_{x \in \mathcal{X}}) = 1/2\) and \(Q(X \to A)_\rho = \log (2)\).
The significance of SIC-POVMs as optimal encodings is two-fold. First, they saturate the Welch bound with the highest possible coherence \(c_{d^2,d}=1/\sqrt{d+1}\). Second, the self-referential measurement \(M_{p,q}^*=(1/d)\ket{\psi_{p,q}}\bra{\psi_{p,q}}\) is simultaneously optimal for discrimination and has the property that the POVM elements are proportional to the codewords, which is a remarkable self-duality that underpins the role of SIC-POVMs in quantum tomography [27].
Remark 9 (Harmonic ETFs From Difference Sets). Beyond the explicit constructions given above, equiangular tight frames can be built algebraically from combinatorial difference sets [23], [24], [32]. Classical families include the Paley construction and Singer difference sets (arising from projective geometries over finite fields), but the existence of difference sets with prescribed parameters is a deep open problem in combinatorics, and no complete classification is known [23]. Whether the resulting ETFs can be prepared efficiently on a quantum processor is a natural directions for future work.
Remark 10 (Mutually unbiased bases). Two sets of orthonormal bases \(\mathcal{B}^{k}=\{|\psi_{i}^{k}\rangle: i=1, \dots, d\}\) and \(\mathcal{B}^{\ell}=\{|\psi_{j}^{\ell}\rangle: j=1, \dots, d\}\) are called mutually unbiased if and only if [33] \[\label{mub} |\langle\psi_{i}^{k} | \psi_{j}^{\ell}\rangle|^{2}=\left\{\begin{array}{ll} 1 / d & \text{ for } k \neq \ell, \\ \delta_{i, j} & \text{ for } k=\ell. \end{array}\right.\qquad{(9)}\] In particular, one can find a maximum of \(d+1\) sets of mutually unbiased bases in Hilbert spaces of prime-power dimension \(d=p^{k}\), with \(p\) being a prime and \(k\) a positive integer [34]. However, it is still an open problem whether \(d+1\) sets of mutually unbiased bases exist for arbitrary dimensions [35], even for \(d=6\). If there are \(a\) sets of mutually unbiased bases, for these \(N=ad\) states, we can prove that \(P_{\mathrm{guess}}(\{1/N, \rho_x\}_{x \in \mathcal{X}}) = 1/a\) and \(Q(X \to A)_\rho = \log (d)\). Therefore, these states provide an optimal encoding, despite not forming an ETF across different sets. Furthermore, such states have been identified as optimal for quantum detector tomography [36].
Remark 11 (Iterative algorithm for optimal encoding). When no closed-form ETF construction is available for the required parameters \((N,d)\), one can maximize \(\mathcal{Q}(X\to A)_\rho\), or equivalent \(P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}})\) directly by projected subgradient ascent. The leakage for a fixed encoding is \(2^{\mathcal{Q}(X\!\to\!A)_\rho}=\max_{\{F_y\}_{y\in\mathcal{Y}}}\sum_{y\in\mathcal{Y}}\trace(\rho^{x^*(y)}F_y),\) where \(\mathcal{Y}=\{1,\dots,d^2\}\) and \(x^*(y)\in\mathop{\mathrm{arg\,max}}_{x}\trace(\rho^x F_y)\). The subgradient with respect to \(\rho^x\) is \(\partial_{\rho^x}2^{\mathcal{Q}}=\sum_{y:x^*(y)=x}F_y^*\), where \(\{F_y^*\}\) is the optimal POVM can be computed by the iterative algorithm of [8]. The projected subgradient ascent step is \(\rho^x \gets \Pi\bigl[\rho^x+\mu\,\partial_{\rho^x}2^{\mathcal{Q}}\bigr]\), where \(\mu>0\) is the step size and \(\Pi\) projects to the set of rank-one density operators. For any Hermitian operator \(\sigma=\sum_i\lambda_i|i\rangle\langle i|\), the projection is \(\Pi[\sigma]=|i^*\rangle\langle i^*|\) where \(i^*\in\mathop{\mathrm{arg\,max}}_i|\lambda_i|\). At each step, we can move each codeword in the direction of the optimal POVM element and project back to the pure-state manifold. This is related to the frame-potential gradient flow of Benedetto and Fickus [10] and the alternating projection method of Tropp et al. [24], which minimize \(F(\Psi)=\sum_{ij}|\bra{\psi_i}\ket{\psi_j}|^4\) to find tight frames. The quantum-information framing gives the subgradient a natural interpretation as the optimal discriminating measurement rather than a purely geometric update. Convergence guarantees, extensions to noisy quantum channels, and efficient hardware implementation of the resulting encodings are left as directions for future work.
We survey seven encoding strategies that span the space from well-known quantum computing encodings to information-theoretically optimal constructions.
Basis encoding: For \(x = 0,\ldots,N-1\), the encoded state is \(\rho^x=\ket{x}\bra{x}\), where \(\{\ket{0},\ldots,\ket{d-1}\}\) is the standard computational basis of \(\mathcal{H}\cong\mathbb{C}^d\). This code is valid only if \(N\leq d\). For \(N>d\), codewords must cycle through the basis modulo \(d\), which result in severe information loss. By Proposition 4, basis encoding is universally optimal in the complete regime of \(N\leq d\). Basis encoding is the standard binary representation used in quantum algorithms appearing in Grover’s algorithm, quantum phase estimation, and the HHL algorithm.
Phase (DFT) encoding: The classical value \(x = 0,\ldots,N-1\) is encoded as a phase twist \(e^{2\pi ixj/N}\) applied to the uniform superposition resulting in state encoding \(\rho^x=\ket{\psi_x}\bra{\psi_x}\) with \(\ket{\psi_x}=\frac{1}{\sqrt{d}}\sum_{j=0}^{d-1} e^{2\pi i xj/N}\,\ket{j}\). Each codeword is a column of a generalized DFT matrix of size \(d\times N\). The frame operator is \(S=\frac{N}{d}\,I_d\) whenever \(d\leq N\). Hence phase encoding is a tight frame for every \(N\geq d\), achieving \(\mathcal{Q}(X\to A)_\rho=\log (d)\) in the over-complete regime. This means phase encoding is the optimal universal encoding for all \(N\geq d\). However, phase encoding is generally not equiangular, that is, the pairwise overlaps \(|\bra{\psi_x}\ket{\psi_{x'}}| = |d^{-1}\sum_j e^{2\pi i(x-x')j/N}|\) depend on \(x-x'\) and grow toward \(1\) as \(N\) increases. Phase encoding is the basis of the quantum phase estimation circuit and the quantum Fourier transform. The codewords \(\ket{\psi_x}\) are eigen-states of the shift operator, making phase encoding the natural representation for periodic signals.
Amplitude encoding: Following the standard quantum machine learning convention [37], amplitude encoding represents a classical vector \(\mathbf{v}\in\mathbb{R}^d\) as \(\ket{\psi_{\mathbf{v}}} = \|\mathbf{v}\|^{-1}\sum_j v_j\ket{j}\). Applied to a class label \(x\in\{0,\ldots,N-1\}\), we extract a binary feature vector with a leading bias bit, \(\mathbf{b}(x) = (1,\;\mathrm{bit}_{n-1}(x),\;\ldots,\;\mathrm{bit}_0(x)) \in\{0,1\}^{n+1}\), \(n = \lceil\log_2 N\rceil\), where \(\mathrm{bit}_k(x)\) is the \(k\)-th bit of \(x\) (most significant bit first) and the leading \(1\) ensures \(\mathbf{b}(x)\neq\mathbf{0}\) for all \(x\). The codeword is then \(\ket{\psi_x}= \|\mathbf{b}(x)\|^{-1}\sum_j b_{j}(x)\ket{j}\). The natural dimension is \(d = n+1 = \lceil\log_2 N\rceil + 1\), giving an exponential compression, i.e., \(N\) labels in \(O(\log N)\) dimensions. The frame operator is generally not proportional to identity and the encoding is not a tight frame. Consequently \(\mathcal{Q}(X\to A)_\rho<\log (d)\) in general. However, unlike basis encoding, it uses only \(d=O(\log N)\) dimensions, exploiting the exponential compression of amplitude encoding. In practice, preparing amplitude-encoded states requires \(O(N)\) gates without QRAM [37], which may offset the dimensional compression for large \(N\).
Equatorial encoding: For \(x = 0,\ldots,N-1\), the encoded state is \(\rho^x=\ket{\psi_x}\bra{\psi_x}\), where \(\ket{\psi_x}= \cos\!(\frac{\pi x}{N})\ket{0} + \sin\!(\frac{\pi x}{N})\ket{1}\). The angle \(\pi x/N\in[0,\pi)\) sweeps a half-circle on the Bloch great circle, placing codewords at equal angular spacing \(\pi/N\). For \(d=2\) (qubit), the \(N\) codewords span \(\mathbb{C}^2\) for all \(N\geq 2\), and the frame operator evaluates to \(S=(N/2)I_2\), confirming a tight frame for every \(N\). This encoding therefore achieves \(\mathcal{Q}(X\to A)_\rho=\log (2)\) for all \(N\geq 2\), \(d=2\). For \(d>2\) the codewords all lie in the two-dimensional subspace \(\operatorname{span}\{\ket{0},\ket{1}\}\) and do not span \(\mathcal{H}\cong\mathbb{C}^d\). The qubit trine (\(N=3\)) is special cases of equatorial encoding.
Dense angle encoding: For \(x = 0,\ldots,N-1\), the encoded state is \(\rho^x=\ket{\psi_x}\bra{\psi_x}\), where \(\ket{\psi_x} = \cos\!(\frac{2\pi x}{N})\ket{0} + \sin\!(\frac{2\pi x}{N})\ket{1}\). The angle \(2\pi x/N\) sweeps a full circle on the Bloch great circle. The doubled angle relative to equatorial encoding means adjacent codewords are \(2\pi/N\) apart (the same angular spacing as DFT columns on the unit circle). For \(N=2\) the codewords are \(\ket{0}\) and \(-\ket{0}\), identical density matrices, so \(P_{\rm guess}(\{1/N,\rho^x\})=1/2\) (random guessing) and \(\mathcal{Q}(X\to A)_\rho=0\). This is the worst possible case. For \(N\geq 3\) the codewords span \(\mathbb{C}^2\) and the frame operator again gives a tight frame for \(d=2\), recovering \(\mathcal{Q}(X\to A)_\rho=\log (2)\). As with equatorial encoding, the subspace restriction to \(\{\ket{0},\ket{1}\}\) makes performance suboptimal for \(d>2\). Dense angle (or “double angle”) encoding appears in quantum kernel methods [38] where the feature map \(\phi(x)=\cos(2x)Z+\sin(2x)Y\) is applied to a qubit initialized in \(\ket{+}\). The doubled angle is motivated by the desire to use the full Bloch sphere range, but the inference analysis shows this does not improve \(\mathcal{Q}(X\to A)_\rho\) over equatorial encoding on a qubit and therefore can suffer for some inference problem.
Hamiltonian encoding: Let \(H=\operatorname{diag}(h_0,\ldots,h_{d-1})\) with \(h_k = 2k/(d-1)-1\in[-1,1]\) equally spaced eigenvalues, and let \(\ket{+} = d^{-1/2}\mathbf{1}\) be the uniform superposition. The Hamiltonian encoding is \(\rho^x=\ket{\psi_x}\bra{\psi_x}\), where \(\ket{\psi_x}= e^{-iHt_x}|{+}\rangle = \frac{1}{\sqrt{d}}\sum_{k=0}^{d-1} e^{-ih_k \pi x/N}\,|k\rangle\) with \(t_x = \frac{\pi x}{N}\). The classical value \(x\) is encoded as an evolution time under the Hamiltonian \(H\). Since \(e^{-iHt_x}\) is a diagonal unitary, Hamiltonian encoding is a special case of phase encoding with phases \(e^{-ih_k\pi x/N}\) replacing \(e^{2\pi ixk/N}\). For \(d=2\) with \(H=Z=\operatorname{diag}(1,-1)\), the codewords are \(\ket{\psi_x} = \frac{1}{\sqrt{2}}( e^{-i\pi x/N}\ket{0}+ e^{+i\pi x/N}\ket{1}),\) which form a tight frame for every \(N\), giving \(\mathcal{Q}(X\to A)_\rho=\log (2)\). For \(d>2\) the non-uniform phase structure (\(h_k\) are not integer multiples of \(2\pi/N\)) breaks perfect frame tightness in general, so \(\mathcal{Q}(X\to A)_\rho\) is slightly below \(\log (d)\), but the gap decreases as \(N\) grows. Hamiltonian encoding arises naturally in quantum simulation and quantum sensing, where the signal \(x\) may represent a physical parameter (field strength, coupling constant) that drives a Hamiltonian \(H(x)=xH_0\) for some fixed \(H_0\). After a fixed evolution time the probe state \(e^{-iH(x)t}\ket{+}\) encodes \(x\) as a phase. Lloyd et al. [39] propose Hamiltonian simulation as a feature map for quantum-enhanced machine learning, showing that random Hamiltonians can generate kernels that are hard to evaluate classically.
Random encoding: For \(x = 0,\ldots,N-1\), the encoded state is \(\rho^x=\ket{\psi_x}\bra{\psi_x}\), where \(\ket{\psi_x}= v_x/\|v_x\|\) with \(v_x = u_x^{(1)} + i\,u_x^{(2)}\) such that \(u_x^{(1)},u_x^{(2)}\) are independent real Gaussian vectors with mean zero and unit variance. This produces states distributed according to the Haar measure on the unit sphere \(S^{2d-1}\subset\mathbb{C}^d\). By concentration of measure on the sphere, the frame operator of \(N\) i.i.d.Haar-random unit vectors concentrates around \((N/d)I_d\) for large \(N\). More precisely, for fixed \(d\) and \(N\to\infty\), \(S/N \to I_d/d\) almost surely (law of large numbers on the sphere), so random encodings approach tight frames asymptotically.
Lemma 2 proves that tight frames are optimal encodings as they attain \(\mathcal{Q}(X\to A)=\log (d)\) for \(N\geq d\). Phase, equatorial (qubit), and Hamiltonian encodings are tight frames for \(d=2\) at all \(N\). For \(d>2\) only Phase and the explicit ETF constructions (trine, SIC-POVM, simplex) maintain this property. Amplitude (the variant discussed above), equatorial, and dense-angle encodings for \(d>2\) confine all codewords to the two-dimensional \(\{\ket{0},\ket{1}\}\) subspace. They fail the spanning condition of Lemma 2 and achieve \(\mathcal{Q}(X\to A)_\rho\leq\log (2)<\log (d)\). Among all tight frames achieving \(\mathcal{Q}(X\to A)_\rho=\log (d)\), ETFs uniquely satisfy the Welch bound. Phase encoding achieves \(\mathcal{Q}(X\to A)_\rho=\log (d)\) but with coherence far exceeding the Welch bound while the trine, SIC-POVM, and simplex achieve both in their corresponding feasible parameter regions. Finally, random encoding is a strong practical solution. For large \(N/d\), random states concentrate near tight frames and achieve near-optimal \(\mathcal{Q}(X\to A)_\rho\) without any design effort. Explicit ETFs are preferred only when the Welch-bound coherence constraint (e.g.for quantum key distribution or tomography) matters.
Figure 5 reports the fraction of the theoretical maximum leakage achieved by each encoding \(\mathcal{Q}(X\!\to\!A)_\rho / \log(d)\) across fifteen \((N,d)\) parameter pairs and five encoding common encoding policies with the three optimal ETF constructions shown below the separator for reference. Several patterns are immediately apparent. Phase (DFT) encoding achieves the maximum \(\mathcal{Q}(X\!\to\!A)_\rho / \log(d) = 1.00\) in every cell, confirming that it forms a tight frame for all \(N\geq d\) regardless of dimension. Equatorial encoding matches this performance for \(d=2\) across all \(N\), but degrades as \(d\) increases because all codewords lie in the two-dimensional subspace \(\mathrm{span}\{\ket{0},\ket{1}\}\) and fail to span \(\mathbb{C}^d\) when \(d>2\) violating the spanning condition. Amplitude encoding is applicable only when \(d \geq \lceil\log_2 N\rceil + 1\), and achieves substantially suboptimal leakage but improving as \(N/d\) grows. Random Haar encoding approaches optimality for large \(N/d\), consistent with the concentration-of-measure argument that Haar-random states approximate tight frames asymptotically, yet never exactly attains the ceiling. Basis encoding achieves optimality, however, it is only applicable when \(N\leq d\). The three ETF rows confirm the paper’s main results on their optimality.
We study a \(4\)-class quantum classification task. The input alphabet is \(\mathcal{X}=\{0,\ldots,7\}\) (\(N=8\)), the Hilbert space is \(\mathcal{H}\cong \mathbb{C}^{4}\) (\(d=4\), two qubits). The output label \(Z\in\{0,1,2,3\}\) is drawn from a fixed balanced random partition of \(\mathcal{X}\) (two tokens per class), chosen once and held constant across all encodings and seeds. With a uniform input prior, \(\max_z P\{Z=z\}=\tfrac{1}{4}\).
The variational quantum circuit (VQC) consists of \(L\in\{1,2,4,8,16\}\) layers, each comprising per-qubit \((R_Y\)–\(R_Z)\) rotations followed by a CNOT gate and per-qubit depolarizing noise with rate \(p=0.01\) per qubit per layer, matching a realistic near-term device. The same ansatz is used with every encoding so that differences in classification accuracy are attributable solely to the encoding itself. State preparation is also subject to the same depolarizing channel. Parameters are trained with the Adam optimizer (learning rate \(0.05\)) using exact parameter-shift gradients and the cross-entropy loss, evaluated on all \(N=8\) input-output pairs per step. Results are averaged over 10 independent random initializations. Figure 6 illustrates the variational quantum circuit.
We compare four encodings of phase (DFT), random Haar, amplitude, and equatorial encoding. The exact maximal quantum leakage \(Q(X\to A)_\rho=\log(N \cdot P_{\rm guess}(\{1/N,\rho^x\}_{x\in\mathcal{X}}))\) is computed for each encoding via a semi-definite program, with results reported in Table 2. As expected, phase encoding achieves the theoretical maximum \(Q(X\to A)_\rho=\log (d) = 2\) bits, with random Haar within 5% of this ceiling, consistent with the concentration-of-measure argument.
| Encoding | \(Q(X \to A)_\rho\) | \(P_{\rm guess}(\{1/N,\rho^x\}_{x\in\X})\) |
|---|---|---|
| Phase | \(2.000\) | \(0.5000\) |
| Random Haar | \(1.910\) | \(0.4697\) |
| Amplitude | \(1.678\) | \(0.4000\) |
| Equatorial | \(1.000\) | \(0.2500\) |
Figure 7 plots classification accuracy against circuit depth \(L\). The results stratify into three tiers that map precisely onto the maximal quantum leakage value ranking in Table 2. In Tier 1, phase encoding sits as an exact tight frame attaining maximal quantum leakage, with random Haar as an approximate tight frame attaining near-maximal leakage. Both encodings reach near-perfect or perfect classification by \(L=8\). Phase encoding achieves \(100\%\) accuracy at \(L=16\) while random Haar reaches \(87.5\%\)–\(100\%\). In Tier 2, amplitude encoding sits as an example of a partial frame. Accuracy grows from \(\approx 31\%\) at \(L=1\) to \(\approx 56\%\) at \(L=16\), yet plateaus well below Tier 1. No amount of additional circuit depth bridges this gap. Binary amplitude encoding achieves the exponential dimensional compression promised by amplitude encoding, but it sacrifices leakage relative to tight-frame alternatives. At the bottom, in Tier 3, equatorial sits as an example of encoding that wastes the quantum system’s potential by only confining the encoding to two dimensions. Equatorial encoding degrades toward the random baseline at large depth, as the circuit overfits a fundamentally two-dimensional measurement structure. Figure 8 shows epoch-by-epoch accuracy at fixed depth \(L=4\). Amplitude converges to an intermediate plateau while phase encoding climbs steeply to near-perfect performance and equatorial collapses toward the random baseline.
We have developed and validated a complete information-theoretic theory of optimal universal quantum encoding for statistical inference. This is done by rigorously establishing that quantum maximal leakage is the figure of merit for measuring quality of quantum encoding of classical data. Following this, we can compute the optimal encoding by maximizing maximal quantum leakage. The central result is an exact two-regime characterization of the optimal encoder. In the complete regime (\(N \leq d\)), basis encoding achieves the absolute maximum \(Q(X\to A)_\rho = \log (N)\). However, in the overcomplete regime (\(N > d\)), the maximum leakage \(Q(X\to A)_\rho = \log (d)\) is achieved if the codewords form a tight frame with phase encoding being one such encoding. Given tight frames are not unique, we focus on symmetric choices by investigating equiangular tight frames (ETFs) as the uniquely symmetric optimal encodings. The numerical experiments corroborate the theory across two complementary programmes. The leakage heatmap confirms that phase encoding attains largest maximal quantum leakage for every parameter choice when \(N\geq d\), while random Haar encoding approaches this ceiling asymptotically. We also use a classification experiment to reveal a clean performance hierarchy aligned with the maximal quantum leakage value ranking, with tight-frame encodings (phase exactly, random Haar asymptotically) performing best.
Two directions for future work are particularly natural. First, the present theory assumes ideal state preparation. Extending the optimal characterization to noisy channels would replace the tight-frame condition with a channel-dependent analogue and is directly relevant to the noisy intermediate-scale quantum (NISQ) settings studied experimentally. Second, the optimal encodings identified here, e.g., ETFs, SIC-POVMs, but tight frames more broadly, may require state-preparation circuits of substantial depth or non-Clifford gate count, costs that are prohibitive on near-term hardware. A resource-aware theory of quantum encoding would characterize the best trade-off between maximal quantum leakage and the minimum circuit complexity required to realize the codewords, measured in, for example, two-qubit gate count, \(T\)-gate count in the fault-tolerant setting, or entanglement cost. Such a framework would transform the present information-theoretic optimality conditions into practically actionable design principles, making explicit the price in quantum resources that must be paid for each additional bit of leakage and, conversely, identifying the cheapest encoding that meets a prescribed leakage target.
An earlier version of this paper was presented at 2024 Quantum Techniques in Machine Learning (QTML) at the University of Melbourne.↩︎