The Quantum Cook-Levin Theorem
The classical Cook-Levin theorem (1971) launched complexity theory by naming a single natural problem — Boolean satisfiability — that is complete for NP: every problem with an efficiently checkable proof reduces to it. The quantum descendant asks the same question one level up. QMA, Quantum Merlin-Arthur, is the class of decision problems whose YES instances carry a quantum witness state that a polynomial-time quantum verifier can check. Is there a natural problem complete for QMA, the way SAT is complete for NP? Kitaev's answer, worked out in the late 1990s and published in Kitaev-Shen-Vyalyi (2002), is yes: the local Hamiltonian problem, deciding whether the smallest eigenvalue of a sum of few-body Hermitian terms falls below a threshold or stays above , under the promise that one of these holds. This article is the flagship of the complexity head. The construction is a quantum tableau. Where Cook-Levin freezes the time-ordered configurations of a Turing machine into SAT clauses, Kitaev freezes the time-ordered states of a quantum circuit into a Hamiltonian, and the accepting computation becomes the ground state — the history state, a uniform superposition over every intermediate step tagged by a clock register. The Hamiltonian is four stacks of energy penalties: wrong input, illegal clock, incorrect gate propagation, and non-acceptance. Only a genuine accepting computation can near-annihilate all four at once. We build the map, prove membership and hardness, extract the inverse-cubic promise gap , and show why this one reduction founds the entire subject of quantum Hamiltonian complexity — the reason estimating ground-state energies is believed hard even for quantum computers.
- The Quantum Cook-Levin theorem (Kitaev): the -local Hamiltonian problem is QMA-complete — the quantum analogue of Cook-Levin's SAT is NP-complete.
- The proof maps a verifier circuit into a frustration-free Hamiltonian whose ground energy is small exactly when some witness makes accept with high probability.
- The engine is the history state , a uniform superposition over the whole computation, encoded in a clock register.
- Kitaev's original construction is -local; Kempe-Kitaev-Regev (2006) tightened it to -local, and Aharonov-Gottesman-Irani-Kempe (2007) to a 1D chain.
- The promise gap scales as : the clock-Laplacian spectral gap times the output weight , inverse-polynomial but enough for QMA membership.
- Key idea: encode an entire quantum computation as the ground state of a local Hamiltonian — penalize wrong inputs, illegal clock states, incorrect gate propagation, and non-acceptance — so the minimum energy is low exactly when an accepting witness exists.
Encode an entire quantum computation as the ground state of a local Hamiltonian: penalize wrong inputs, illegal clock states, incorrect gate propagation, and non-acceptance, so that the minimum eigenvalue is low exactly when an accepting witness exists — making the local Hamiltonian problem QMA-complete.
Where this lives today
The theorem is the load-bearing wall of quantum Hamiltonian complexity, where much of quantum computing meets physics. Its message — that computing a generic local Hamiltonian's ground energy is QMA-hard — is why quantum chemistry and condensed-matter simulation have no known efficient general algorithm even quantumly, funnelling practical effort into structured instances, variational methods, and heuristics such as VQE and phase estimation on near-term hardware. The classification programme of Cubitt and Montanaro, extended by Bausch, Piddock and others, now sorts physical interaction families — Heisenberg, Ising-with-fields, Bose-Hubbard — into "QMA-complete" versus "efficiently solvable," a quantum echo of Schaefer's dichotomy for classical CSPs. The gadget technology that pushed Kitaev's -local terms to -local and onto lattices is reused wholesale in adiabatic quantum computation and quantum-annealer embedding. And the frontier keeps climbing the proof hierarchy the theorem began, from QMA to QMA(2) to the resolution of , each leaning on the same intuition: a computation can be pinned down as a constraint on states.
The physical picture
Picture a quantum computation as a movie reel. Classical Cook-Levin checks it with Boolean clauses — one for the first frame, one for every transition, one for the final frame — so the formula is satisfiable exactly when a legal accepting film exists. Kitaev does identical bookkeeping with energy instead of logic: a penalty for a wrong first frame, for every bad transition, for a rejecting last frame. But quantum mechanics forbids pointing at a single "current frame" to copy — no-cloning rules it out — so he stores the whole reel in superposition at once: the history state, a uniform sum over all steps, each snapshot paired with a clock label . The first figure lays out this tableau and its four penalty stacks.
The locality is the whole trick. A unary clock writes time as , so a propagation penalty reads off "we are at step " by inspecting just three neighbouring clock qubits — the domain wall between ones and zeros — and checks gate by touching the at-most-two qubits it acts on. Five qubits: the term is -local, exactly the resource a physical Hamiltonian is allowed. The second figure is the spectral heart of soundness: unfolded onto the valid subspace, the propagation Hamiltonian is half the graph Laplacian of a path of clock sites, whose eigenvalues form a cosine band whose tiny bottom gap sets the promise.
The reduction runs both ways, and the second is hard. Completeness is nearly free: an accepting witness gives a history state of tiny energy, because the input, clock, and propagation stacks are frustration-free — the history state sits in all three kernels — so only the output stack contributes. Soundness is subtle: any low-energy state, computation-like or not, must be close to a genuine history state of some input, where its rejecting weight cannot hide. The device converting "low energy" into "almost a real computation" is the Projection Lemma, and the resulting gap is exactly the cosine-band gap diluted by the output weight.
The core equations
The problem itself is a promise problem about a Hermitian operator built from few-body pieces. We are handed a sum of local terms and asked which side of a gap its ground energy lies on; the gap is only guaranteed inverse-polynomial, which is precisely what makes the question non-trivial.
where: — a Hermitian term acting nontrivially on at most qubits, with ; — the number of terms, polynomial in ; — the smallest eigenvalue, i.e. the ground-state energy; — the YES and NO thresholds, separated by an inverse-polynomial promise gap . Reading it: decide whether the ground energy is low (, a YES instance) or high (, a NO instance), promised it is never in between. The witness that makes a YES instance's energy low is the history state — the uniform superposition over every step of the verifier, each snapshot paired with its clock label. It is the quantum stand-in for Cook-Levin's satisfying tableau.
where: — the input register, the quantum witness qubits together with ancillas fixed to ; — the -th one- or two-qubit gate of the verifier; — the clock register encoding step , for ; — the number of gates, polynomial in . Reading it: the state carries the entire computation at once, weighted equally across time, so measuring the clock and finding collapses the register to exactly the -th intermediate state. Each propagation term forces frame to be the correct gate image of frame . It is a projector onto the anti-symmetric combination of two adjacent frames, so the correctly propagated (symmetric) combination costs zero energy.
where: — the gate applied at step , acting on the computational register; — the clock transition operator advancing ; — identity on the computational register. Reading it: on the two-dimensional block spanned by this acts as , a rank-one projector with eigenvalues — energy for correct propagation, for a broken link. The full Kitaev Hamiltonian stacks four families of penalties. Three of them (input, clock, propagation) are simultaneously satisfiable by any history state; only the fourth, the output check, resists.
where: — penalizes any ancilla not in at clock time ; — penalizes illegal unary-clock patterns such as ; — the sum of propagation terms enforcing gate-by-gate evolution; — penalizes the designated output qubit reading (reject) at clock time . Reading it: the ground state must fix the input, respect the clock, obey the gates, and accept — only a real accepting computation escapes every penalty. The output term is the one that carries the energy scale. Evaluated on a history state it picks out only the final frame, weighted by that frame's share of the uniform superposition, and reports the circuit's rejection probability.
where: — projector onto the rejecting value of the output qubit; — the witness's acceptance probability; — the weight of the final clock step. Reading it: a perfectly accepting witness () gives exactly zero energy; every unit of rejection probability costs of energy, spread thin across the long computation. The two thresholds follow. YES instances (accepting witness) sit at energy ; NO instances (no witness accepts well) are pushed up to , and the separation is the cosine-band gap diluted by the output weight.
where: — the verifier completeness error, so on YES instances; — a universal constant from the Projection-Lemma analysis; — the inverse-cubic gap, from the clock-Laplacian gap times the output weight . Reading it: the gap shrinks polynomially with circuit length, but stays , which is all QMA membership needs.
The goal is to prove the frustration-free backbone of the whole construction: that the input, clock, and propagation terms all annihilate the history state simultaneously, so that on a YES instance the only surviving energy comes from the single output term. This is what turns a messy sum of non-commuting projectors into a clean instrument whose ground energy tracks one quantity — the circuit's rejection probability — and it is the reason completeness costs almost nothing while all the difficulty is pushed into soundness.
Step 1. Expand a single propagation term on the history state. Because already pairs with and with , the four pieces of act inside the two-frame block where . Why: the term only sees clock labels and , so its action on the full superposition reduces to a computation.
Step 2. On that block , whose kernel is the symmetric vector . The two adjacent frames of the history state enter with equal amplitude , i.e. in exactly the symmetric combination, so . Why: the uniform weighting of the history state is not decorative — it is what places in every propagation kernel; any other weighting would cost energy.
Step 3. Sum over : , so the history state lies in the common kernel of all propagation terms. Add the input and clock terms: at the ancillas are by construction of , so ; every clock label is a legal unary pattern, so . Why: three of the four stacks vanish, isolating the physics into the fourth.
Step 4. Only remains. Projecting onto leaves , so . Why: this is the entire YES-case energy — proportional to how badly the witness fails to accept, and to nothing else. *To summarise the four steps: the block of has eigenvalues ; the history state lies in the common kernel of ; and , which for gives .*
Go deeper · Derivation B · 2 minThe local Hamiltonian problem belongs to QMA
The goal is to show that a low-energy state is an efficiently checkable quantum witness, so the problem lies in QMA and the reduction has an upper bound to match its hardness. The idea is that a quantum verifier need not diagonalize ; it can estimate the energy of a single randomly chosen local term, and by linearity the average of these local energies equals the total energy divided by the number of terms. This converts a global eigenvalue question into a local measurement, which is exactly what a poly-time quantum machine can perform.
Step 1. Merlin sends a state on qubits, claimed to be a ground state of . Arthur first shifts each term so that with , which only translates the spectrum and rescales the thresholds. Why: a measurement outcome must be a probability in , so each local term has to be normalized into a valid POVM before it can be sampled.
Step 2. Arthur picks uniformly, measures the observable on the relevant qubits, and rejects with probability equal to that outcome. The chance of rejecting on term is . Why: sampling a random term and reading its normalized energy makes the expected penalty a faithful, unbiased probe of the local energy.
Step 3. Average over the uniform choice: . Why: linearity of expectation collapses local measurements into one statement about the global energy — the verifier learns the total without ever holding the whole operator.
Step 4. Split the promise. A YES instance () admits a witness accepted with probability ; a NO instance () forces acceptance for every state. The gap is , inverse-polynomial. Why: an inverse-polynomial separation is enough for QMA, because it is the amplifiable regime — a negligible gap would not be.
Step 5. Amplify by parallel repetition: independent copies with a majority vote drive the two-sided error below any , all in polynomial time. Hence a poly-time quantum verifier with a quantum witness decides the promise, so the local Hamiltonian problem is in QMA. Why: robustness of the threshold is what lets a gap stand in for a constant one, completing membership. *To summarise: after shifting each term so that , the inverse-polynomial gap survives amplification. As a concrete check, give an acceptance gap .*
Go deeper · Derivation C · 2 minSoundness and the inverse-cubic promise gap
The goal is the hard direction: if no witness makes the verifier accept well, then every state has energy at least , with . The danger is a state that is not a genuine history — one that satisfies propagation only partway and dodges the output penalty. The Projection Lemma rules this out by confining any low-energy state to the neighbourhood of the valid history subspace, where the clock-Laplacian spectrum forces a definite energy cost proportional to the circuit's best rejection probability. This is what makes the reduction QMA-hard rather than merely a membership statement.
Step 1. Scale the constraint terms: replace by for a large . Their common ground space is exactly the set of history states of arbitrary inputs . Why: making the constraints stiff means any cheap state must nearly satisfy them, so the only affordable states look like real computations.
Step 2. Apply the Projection Lemma (Kempe-Kitaev-Regev): any state of energy is -close to , and the true ground energy of equals the ground energy of restricted to , up to corrections. Why: this is the geometric engine — it certifies that "low energy" implies "almost a valid history", so a non-history evasion of is impossible.
Step 3. Restrict to . On the history state of input its expectation is , minimized over inputs at the best acceptance : the reduced operator is times a spectral factor. Why: within the valid subspace, minimizing energy is minimizing rejection over all inputs, so no witness escapes its own acceptance bound.
Step 4. Diagonalize on the valid subspace: it is unitarily equivalent to half the path Laplacian, with eigenvalues . The smallest nonzero mode, gap , controls how a low-energy trial state can spread over the clock and dilute the output penalty. Why: this cosine band is where the enters; the output weight multiplies it, producing the scaling.
Step 5. Combine: if then with . Since Cook-Levin-style verifiers can be error-reduced so is bounded away from on NO instances, the promise gap is genuine and the reduction is complete: local Hamiltonian is QMA-hard, hence QMA-complete. Why: a bona-fide gap on both sides is exactly the QMA-completeness certificate. *To summarise: the promise gap decomposes as (clock-Laplacian gap ) × (output weight ), with the propagation eigenvalues given by . For the smallest nonzero gap is .*
Limiting cases
Pushing the construction's parameters to their extremes exposes what each piece is doing — and where later work moved the frontier.
| Case | Result | Meaning |
|---|---|---|
| Perfect acceptance | , | if some witness makes accept with probability , the history state sits in every kernel including ; the YES threshold can be taken to be exactly zero (frustration-free) |
| Long circuits | the promise gap shrinks polynomially with circuit length , but verification stays poly-time, so QMA membership is preserved | |
| Locality reduction | Kempe-Kitaev-Regev perturbative gadgets cut down to at the cost of larger norms and a smaller effective gap; QMA-completeness survives | |
| Geometry | line / 2D lattice | Aharonov-Gottesman-Irani-Kempe (1D, larger qudits) and Oliveira-Terhal (2D qubit grid) show hardness persists for nearest-neighbour terms |
| Stoquastic / sign-free | class | removing the sign problem (all off-diagonal terms ) drops the problem to a class believed weaker than QMA — the hardness needs genuine quantum phase |
Worked examples
1 · Locality and ground energy of a concrete Kitaev Hamiltonian (fully worked)
A verifier circuit has gates acting on qubits with a unary clock. A claimed witness makes it accept with probability . Count the locality of a propagation term, compute the history-state energy (the YES threshold), and compare it to the NO-side gap.
Step 1. Count the locality. A single propagation term reads the clock only through , which in the unary (domain-wall) encoding inspects the three clock qubits at positions to locate the wall, and acts on the computational register only through , which touches at most qubits. Total: qubits — the term is -local, matching Kitaev's original construction.
Step 2. Compute the YES energy. By the frustration-free result, , , all annihilate the history state, so . This is the threshold : the ground energy of a YES instance is at most this.
Step 3. Estimate the NO-side gap. The clock-Laplacian gap is . The promise gap is this factor diluted by the output weight , giving up to the universal constant.
Step 4. Read the moral. The energies are tiny and the YES/NO separation is even tinier, but all are , so a QMA verifier estimating a random local term still resolves the promise after polynomially many repetitions. Result: the term is 5-local, the YES ground energy is , and the promise gap is , set by the clock gap .
2 · From local Hamiltonian energy to a QMA acceptance probability (fully worked)
A -local Hamiltonian has terms, each shifted to with . The promise is (YES) versus (NO). Find the verifier's acceptance probabilities and the number of repetitions to reach error .
Step 1. Acceptance formula. Arthur measures a random normalized term, so . The ground-state witness makes .
Step 2. Evaluate both cases. YES (): . NO (): . The raw gap is .
Step 3. Amplify. A gap of around a shifted midpoint is inverse-polynomial; by the Chernoff bound the majority of runs errs with probability . To beat needs runs — polynomial in the problem size, as required.
Step 4. Interpret. The verifier never diagonalizes ; it samples one -qubit measurement per run and votes. That a mere acceptance gap certifies membership is the entire content of "inverse-polynomial gap suffices for QMA". Result: YES accepts with , NO with , gap , amplified to error in poly-time runs.
Physics of the portrait
The local Hamiltonian problem is where computational complexity and condensed-matter physics turned out to be the same subject. The person who welded them together also built the toolkit — the surface code, anyons, phase estimation — that most of quantum computing now runs on.
Origins · 1 minAlexei Kitaev and how this was discovered
Alexei Kitaev, trained at the Landau Institute and now at Caltech, has a habit of reframing quantum computing so completely that the old questions dissolve. In the late 1990s, after Bernstein and Vazirani had defined BQP and others were circling QMA, he asked: is there a natural QMA-complete problem, a quantum SAT? His answer, the local Hamiltonian problem, came bundled with the construction that proves it — the history-state Hamiltonian, first circulated in lectures and written up fully in the 2002 book with Shen and Vyalyi. The move is audacious: he takes a dynamical object, a circuit unfolding in time, and freezes it into a static ground-state problem, so "does this computation accept?" becomes "is this energy low?". The same period produced his other landmarks — the toric code and topological quantum computation (1997), quantum phase estimation, the Solovay-Kitaev theorem — and the local Hamiltonian result quietly seeded a whole field, quantum Hamiltonian complexity, that Kempe, Regev, Aharonov, Oliveira, Terhal, Cubitt, Gharibian and others have mapped ever since. Where Cook and Levin gave classical complexity its first complete problem, Kitaev gave the quantum theory of ground states its foundation stone.
Going further
Texts. Kitaev, Shen & Vyalyi, Classical and Quantum Computation (2002), Ch. 14 · Kempe, Kitaev & Regev, "The Complexity of the Local Hamiltonian Problem," SIAM J. Comput. 35 (2006) · Aharonov & Naveh, "Quantum NP — A Survey" (2002) · Watrous, The Theory of Quantum Information (2018) · Gharibian, Huang, Landau & Shin, "Quantum Hamiltonian Complexity," Found. Trends TCS (2015) · Cook, "The Complexity of Theorem-Proving Procedures," STOC 1971. The key numerical anchors of the construction are: (1) each has eigenvalues from its block, and the clock-Laplacian spectrum is ; (2) the residual output energy is , giving at ; (3) the promise gap equals (clock gap , numerically at ) × (output weight ); (4) the membership acceptance probability is , with a gap for .
Prerequisites. Quantum Merlin-Arthur (QMA) · The Local Hamiltonian Problem · The Complexity Class BQP. Leads to. QMA Variants and Related Classes · Quantum Interactive Proofs (QIP) · MIP* = RE.
Ask the tutor: Ask me to walk through why the history state annihilates three of the four penalty stacks, to trace the clock-Laplacian spectrum behind the gap, or to compare Kitaev's construction line-by-line with the classical Cook-Levin tableau.
How is this really the quantum version of Cook-Levin?
Structurally they are the same proof in two languages. Cook-Levin takes an NP verifier and encodes its space-time tableau into SAT: clauses for the initial configuration, for each legal transition, and for an accepting final state, so the formula is satisfiable exactly when a valid accepting run exists. Kitaev takes a QMA verifier and encodes its history into a Hamiltonian: an input term, propagation terms per gate, a clock term, and an output term, so the ground energy is low exactly when an accepting run exists. Both yield a single natural problem — SAT, local Hamiltonian — complete for the relevant verification class. The change from "satisfiable" to "low energy" is the change from classical to quantum witnesses.
Why must the witness be stored in superposition instead of frame by frame?
Because there is no classical "current frame" to copy forward. In Cook-Levin the tableau lists every configuration explicitly as bits, so a clause can compare frame with frame . A quantum computation has no such transcript: no-cloning forbids duplicating an unknown intermediate state, so you cannot lay the frames out as independent registers. Kitaev's fix is to keep the single evolving state, tag it with a clock, and take a uniform superposition over all clock values; the propagation term then compares the two clock-adjacent branches of that one superposition. The history state is the only object that both respects quantum mechanics and lets a local term check a global time-ordering.
What is the clock register and why does it make the terms local?
The clock makes "which time step" a locally readable quantity. In the unary encoding, time is ones followed by zeros, , so the boundary between ones and zeros — the domain wall — sits at position . A propagation term acting "at step " just finds that wall by inspecting three neighbouring clock qubits, then applies gate to its two computational qubits: five qubits total. Without a clock, "apply gate next" is a global statement about the whole computation that no few-body operator can enforce. The clock is precisely the device that localizes time.
Does QMA-completeness mean quantum computers cannot do quantum chemistry?
Not in the defeatist sense. The theorem says that in the worst case, estimating a general local Hamiltonian's ground energy is QMA-hard, so no algorithm — classical or quantum — solves every instance efficiently unless (widely disbelieved). But real molecules are not worst-case: they carry structure, symmetry, locality, and often a spectral gap, and many such families are tractable or well-approximated by heuristics like the variational quantum eigensolver, tensor networks, or phase estimation on a good initial state. The result is a map of where the hard instances live, not a verdict that chemistry is hopeless — it tells practitioners to exploit structure rather than chase a universal fast algorithm that provably cannot exist.
Why is the Projection Lemma needed, and what would break without it?
Completeness is easy — exhibit the history state and read off its energy — but soundness has to rule out impostors. A malicious state might satisfy the propagation constraints only approximately, drifting away from the valid history subspace so it never fully weights the rejecting final frame, faking low energy on a NO instance. The Projection Lemma forbids this: once the constraint terms are scaled up, any state of energy well below that scale is geometrically close (within ) to a genuine history state, so its energy is governed by the output term restricted to real histories. Without it, "low energy" would not imply "close to an accepting computation," and the NO-side bound — the thing that makes the reduction hard — would collapse.
How did the locality get pushed from 5-local to 2-local and onto a line?
Through gadget constructions that trade locality for overhead. Kempe-Kitaev-Regev (2006) introduced perturbative gadgets: an ancilla with a strong local field, coupled weakly, generates an effective -body interaction at second or third order in perturbation theory, simulating a -local term with -local ones at the price of larger norms and a smaller gap. Oliveira and Terhal then embedded such -local terms onto a 2D qubit grid. Aharonov-Gottesman-Irani-Kempe (2007) reached a 1D chain by enlarging the local space to qudits of dimension around , with a clock and propagation rules living entirely on nearest neighbours. Each step keeps QMA-completeness while making the Hamiltonian look more like something a physicist could build.