Fast-forwarding of Hamiltonians and exponentially precise measurements

The time-energy uncertainty relation (TEUR) ΔtΔE≥12\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\Delta {\it{t}}\Delta {\it{E}}\,{\bf{ \ge }}\,{\textstyle{{\bf{1}} \over {\bf{2}}}}$$\end{document} holds if the Hamiltonian is completely unknown, but can be violated otherwise; here we initiate a rigorous study describing when and to what extent such violations can occur. To this end, we propose a computational version of the TEUR (cTEUR), in which Δt is replaced by the computational complexity of simulating the measurement. cTEUR violations are proved to occur if and only if the Hamiltonian can be fast forwarded (FF), namely, simulated for time t with complexity significantly smaller than t. Shor’s algorithm provides an example of exponential cTEUR violations; we show that so do commuting local Hamiltonians and quadratic fermion Hamiltonians. A general FF method is ruled out, but finding further examples, as well as experimental demonstrations, are left for future work. We discuss possible connections to sensing and quantum gravity. This work initiates a rigorous theory of efficiency versus accuracy in energy measurements using computational complexity language. A complete theory of when and to what extent time-energy uncertainty relation violations can occur is lacking. Here, the authors set the ground for a rigorous theory to investigate this possibility.

I n quantum mechanics, the position-momentum uncertainty principle Δx Á Δp ! 1 2 can be proven from the properties of the Fourier transform for conjugate variables 1 . In the early years of quantum mechanics, energy and time were believed to be related similarly, by a so-called time-energy uncertainty relation (TEUR), though a similar proof does not apply since time is not an operator. Several alternative formulations of the TEUR were studied [2][3][4][5] . Here we consider the TEUR misconception 6,7 stating that the duration Δt of an energy measurement of an eigenstate ψ E j i of a Hamiltonian H (referred to as the "input" Hamiltonian), is related to the standard deviation of that measurement ΔE, by Aharonov et al. 8 , proved that the TEUR (with a slightly different error quantification, see methods section) holds whenever the Hamiltonian H is completely unknown, namely, the experimentalist can only turn H on and off as if it resides in some blackbox. Though not stated this way, the proof of 8 holds also when only the eigenvalues of H are unknown. To the best of our understanding, the many recent experiments (e.g., refs. [9][10][11][12][13][14][15][16][17][18] demonstrating improved trade-offs between measurement resources and accuracy, all fall within this model, and as expected none exhibit a TEUR violation. However, the TEUR is not a principle of Nature. Already in 1961, Aharonov and Bohm 19 gave an example in which Eq. (1) can be violated to an arbitrary extent. They described a nonrelativistic scattering experiment to measure the energy of a free particle, where the measurement's accuracy depends on the time integral of the interaction H meas. between the system and the measurement device (importantly, H meas. is not equal to the input Hamiltonian H). By increasing the interaction strength by a factor c > 1 and applying H ′ meas: ¼ cH meas: , the measurement duration becomes Δt′ = Δt/c, providing an arbitrarily large TEUR violation. A similar violation 8 occurs when measuring the energy of a spin-1/2 particle in a known magnetic field by arbitrarily increasing the gradient of the magnetic field in a Stern-Gerlach experiment.
A complete theory of when and to what extent such TEUR violations can occur is missing. By 8 , such violations can only occur in the non-black-box setting, when there exists partial knowledge about the Hamiltonian. In this more general situation, various manipulations on the Hamiltonian can be conducted during the measurement and time duration of measurement can be traded with various other resources. As we discuss below, in such cases the TEUR no longer seems to correctly capture the question of resource-accuracy trade-off.
Our main contribution is in setting the grounds for a rigorous theory of TEUR violations in the general (not necessarily blackbox) regime. To this end, we make use of the language of quantum computational complexity. We formulate below a modified, modern version of the TEUR, called the computational TEUR (cTEUR), in which Δt is replaced by the computational complexity of the measurement process. This allows us to handle the full range of possible manipulations that can be applied during the energy measurement, ranging from simple manipulations as in ref. 19 to, ultimately, a full-fledged quantum computer aiding the measurement process. We argue that the computational complexity of the measurement correctly quantifies in all possible cases the total physical resources required to conduct the measurement. Here, by computational complexity of the measurement process, we mean the computational complexity of simulating the measurement process on a quantum computer.
Armed with the cTEUR, we turn to filling in some details in what seems to be an intricate emerging picture of possible cTEUR violations. First, we show that while completely unknown Hamiltonians obey the cTEUR, completely known Hamiltonians can lead to arbitrary violations of the cTEUR. Shor's algorithm provides an intriguing example in which exponential violations are possible. Our main technical result is proving an equivalence between the ability to exponentially FF a Hamiltonian and measuring the energy of its eigenstates to within exponential accuracy. We show that two well studied classes of physical Hamiltonians can be FF: commuting local Hamiltonians and quadratic fermion Hamiltonians. We then show that not all physically realizable Hamiltonians can be FF (unless a strongly believed computational complexity conjecture is false). Finally, we discuss the relation of our work to metrology and sensing, as well as to recent ideas in the research of quantum gravity.

Results
The exact statement of the computational TEUR. Before defining the cTEUR, let us first clarify why the TEUR seems less suitable in a non-black-box setup such as in the Aharonov-Bohm example 19 . Note that the interaction strength (or the norm of the Hamiltonian) is not taken into account in the TEUR. In ref. 19 , this "free" resource can thus replace time duration to achieve arbitrary violations of the TEUR. Time duration can also be traded with another resource. The spectral decomposition of the unitary evolution induced by the measurement Hamiltonian gives e ÀiHmeas:Δt ¼ where ε j are eigenstates of H meas. . Evolving according to H ′′ meas: ¼ P j ε j Δt mod 2π À Á ε j ε j for one time unit achieves the same unitary transformation as applying H meas. for time Δt. Both the norm of the new Hamiltonian H ′′ meas: and the measurement's duration (1 time unit) are now bounded, and yet arbitrarily good accuracy is achieved; the resource that is now being "freely" used is computational complexity. In order to apply H ′′ meas: , one needs to diagonalize the original Hamiltonian and compute its eigenvalues to extremely high precision. What is revealed by the above discussion is that when manipulations can be done while performing the energy measurement, such as increasing the norm, using different measurement Hamiltonians, etc., this can lead to strong violations of the TEUR. Nevertheless the resources invested in the measurement have not decreased but were just interchanged with others! Extending the intuition of resource counting in high-precision measurements (e.g. ref. 20,21 ), we argue that the "correct" notion that we would like to capture in the TEUR is not the time duration but the totality of physical resources one is required to invest in a measurement. The underpinnings of the area of quantum computation (see ref. 22 ) tell us exactly what is the right quantity to look at when counting resources: the computational complexity of the measurement, namely, the size of the quantum circuit simulating the process of the measurement, where size is measured by the number of two-qubit quantum gates 23 .
In order to state the computational TEUR (cTEUR), we need to clarify how we model an energy measurement. We use unitary implementations of energy measurements (called here "unitary energy measurements"), which entangle the input eigenstate ψ E to a measurement device consisting of display and work registers, as follows: Measuring the second register in the computational basis gives the measurement outcome E′′. This unitary is in fact a quantum algorithm (comprised of local quantum gates 23 ). Following ref. 8 , we allow the circuit comprising U meas. also to apply the input Hamiltonian as a black-box for time t, namely to apply the operator e −iHt on any choice of a subsystem (this can be applied many times, where in between the applications we can have quantum gates). The complexity of this measurement process, denoted T ðnÞ, is the sum of two components: the first is the number of quantum gates utilized, the second is the total time the Hamiltonian was applied, divided by some canonical time unit τ 0 , where τ 0 is the application time of a single quantum gate. We stress that classical pre-and post-processing should also be incorporated into the unitary energy measurement. The motivation for this definition is the assumption (by the quantumcomplexity Church-Turing thesis 24,25 ), that any quantum measurement process using the input Hamiltonian as a blackbox, can be simulated by such a unitary energy measurement with at most polynomial overhead. Hypothesis 1 (computational TEUR (cTEUR)): A unitary energy measurement of an eigenstate of an n-qubit Hamiltonian H, with accuracy error δE satisfies δE (which replaces the standard deviation in Eq. (1)) is the accuracy error, namely the difference between the correct eigenvalue E and the measurement outcome E′′. Of course, accuracy is only guaranteed with some probability η, which we call confidence. We assume here η > 2/3. The notation Ω(1/poly (n)) means that δE Á T ðnÞ is asymptotically larger than some function that is inverse polynomial in n. Ω(1/poly(n)) replaces the constant in the RHS of Eq. (1), to make the definition independent of the computational model, since T ðnÞ may gain polynomial factors when translating from one model to another.
The Ω notation implies that units of E are not important. Partial or full information about the Hamiltonian can be encoded into the unitary energy measurement; see Methods section for further details on the definition of the cTEUR. We thus arrive at a proposition which is rigorously defined and can be systematically studied.
As to the connection to TEUR, violating the cTEUR is strictly harder. First, violating the cTEUR implies violating the TEUR since the duration of time (measured in units of applying a single quantum gate) is always smaller than the total computational complexity. The other way around does not hold. An example is the case of the Aharonov-Bohm experiment 19 , which violates the TEUR but not necessarily the cTEUR because a straight-forward simulation of the measurement Hamiltonian H meas. of 19 would result in computational complexity, which grows with the interaction strength (Supplementary Note 1).
Violations of the cTEUR. We start by studying the two extreme cases of cTEUR violations. We first extend the proof of ref. 8 to show (Supplementary Note 3) that if H is completely unknown, or at least its eigenvalues are completely unknown, the cTEUR holds, just like the TEUR.
On the other hand, just like the TEUR, the cTEUR can be arbitrarily violated (though as discussed, not by the example of ref. 19 ). Such infinite violations follow immediately if we know everything there is to know about the Hamiltonian. We capture this by the notion of QC-solvable Hamiltonian. We say that an nqubit Hamiltonian H ¼ P i λ i ψ i j i ψ i h j is QC-solvable if it is diagonalized efficiently by a quantum computer (the transformation i j i7 ! ψ i j i can be applied in poly(n) quantum complexity), and in addition, its eigenvalues can be efficiently found (the function i 7 ! λ i can be computed efficiently).
For a simple example, consider the following (clearly QCsolvable) Hamiltonian on n 1 2 -spins: A measurement of the spins in the computational basis, followed by counting how many of the spins are in the state 1 j i, would reveal the eigenvalue to infinite precision, namely, with δE = 0, and with confidence 1. This measurement can be implemented with linear computational complexity. It is straight forward to see that QC-solvable Hamiltonians allow for arbitrary violations of the cTEUR in much the same way (Supplementary Note 2 for definitions and proofs).
A very intriguing example which in fact triggered this work stems from Shor's factoring algorithm 26 , which can be translated into an exponential violation of the cTEUR for a related class of Hamiltonians. In fact, this follows from the above since these Hamiltonians are QC-solvable (this is a rather simple exercise in quantum computation, using Shor's algorithm). Nevertheless, the proof that these Hamiltonians violate the cTEUR contains the essential ingredients towards our main result in the next section, which provides an if-and-only-if condition for cTEUR even if the Hamiltonian is not QC-solvable.
Recall that Shor's algorithm factorizes an n-bit number N by finding the order r of a randomly chosen y co-prime to N, namely the period of the sequence y 0 , y 1 , y 2 … modulo N. The algorithm uses the following unitary U N,y acting on n-bit strings: Theorem 1: Let N be an n-bit integer and consider H N;y ¼ U N;y þ U y N;y such that gcd(y, N) = 1. There exists a unitary energy measurement, which given any eigenstate of H N,y has accuracy δE with confidence 2/3 such that: Though H N,y is not a local Hamiltonian, it is physically realizable (at least theoretically) as it can be simulated efficiently by a quantum computer (by refs. 27,28 ). See Fig. 1 for more on this Hamiltonian.
The proof is straight forward from Shor's algorithm, in which eigenvalues of U N,y are measured to exponential precision using the quantum phase estimation circuit 23   The above proof applies U t N;y for exponentially large t, utilizing modular exponentiation, a poly(n) time classical algorithm to calculate exponential powers of y modulo N. Another way to view this is that the circuit efficiently simulates the Hamiltonian generating U N,y for exponentially long times; this is an example of the notion of fast-forwarding to be defined in the next section, and already hints at its importance in precision measurements in general. Figure 3 describes an alternative proof of Theorem 1 based solely on fast forwarding and single qubit interference (Kitaev et al. phase-estimation algorithm 29 ). Both proofs can be extended to prove our main Theorem in the next section.
Fast forwarding and precision measurements. In our main technical result (Theorem 2), we provide an if-and-only-if condition for cTEUR violations. The result is stated using the notion of fast forwarding of Hamiltonians. A Hamiltonian H can be fast forwarded (FF) if the evolution with respect to H, to within time t (namely the unitary e −iHt ), can be simulated by a quantum computer in computational complexity (number of local gates) much smaller than t (similar notions were discussed elsewhere 30,31 ). The definition is refined to allow some error α in the Hamiltonian simulation, as well as additional ancilla qubits that should be cleaned by the end of the simulation: Definition 1 (Fast forwarding a Hamiltonian (FF)). A normalized Hamiltonian H H k k ¼ 1 ð Þacting on n qubits can be (T(n),α (n))-fast forwarded if for any t ≤ T, there exists a quantum circuit U with poly(n) quantum gates, which acts on the n qubits and additional c = poly(n) ancilla qubits initialized to 0, s.t. for all ψ, We also need a more detailed version of the definition of unitary energy measurement. Here we allow usage of ancilla qubits (which we do not demand to be cleaned) and define a demolition parameter β, which quantifies imperfection in the measurement, and also limits how the input state changes.
Þacting on n qubits is (η, δE, β) − SEEM (super-efficient energy measurable) if there exist two unitaries U SEEM ;Ũ SEEM , acting on the n qubits and on additional output/work qubits s.t.
1. U SEEM is a measurement with accuracy δE and confidence η, where ψ E is an eigenstate, E′ is the measurement device's output, and θ(E′) is the state of the ancilla qubits used in the measurement. 2. The complexity of implementingŨ SEEM is polynomial in n and U SEEM ÀŨ SEEM β: By default, we will require that the demolition β is polynomially small in n; under this condition and assuming η > 2/3 (in fact, any constant η > 1/2 would do) the confidence parameter can be amplified, which means that with only polynomial overhead, the measurement can be improved to one with confidence exponentially close to 1 (See Lemma 1 in the SI).
The first direction, (FF implies SEEM), can be done by using phase estimation (Fig. 4) or Kitaev's interference trick as in Fig. 3. For the other direction (SEEM to FF) see Fig. 5. Though the tools are quite standard, the error analysis is somewhat cumbersome since all parameters needed to be matched (Supplementary Note 5).
The attentive reader would notice that the proof described in Fig. 5 assumes a reversible measurement procedure. However, as mentioned, by the quantum-complexity Church-Turing thesis 24,25 , any physical process, including non-reversible processes, can be simulated by a quantum computer with a The familiar quantum circuit of Shor's algorithm. If the input state is replaced by an eigenvector of U N,y , ψ φ with eigenvalue φ, then the output is an exponentially accurate estimation of φ, implying an equally good estimation of the corresponding eigenvalue of H N,y . This reasoning holds with any unitary e −iHt instead of U N,y , hence efficient simulation of e −iHt for exponential t implies exponential cTEUR violation of H. This gives the seed of the proof of one direction of Theorem 2 Proof of Theorem 1 by Kitaev's phase estimation 29 . The circuit C k is essentially a Mach-Zehnder interferometer, and U N; Similarly, the estimation of every p k yields one bit of 2φ/π. The algorithm estimates each p k by repeating the corresponding measurement poly(n) times, thus 1/exp(n) accuracy of φ is reached with total complexity poly(n): C k is efficiently implemented even for k = poly(n) using modular exponentiation to implement exponential powers of U N,y (Supplementary Note 4) Had.
Had. Fig. 4 A circuit proving H 2 FF exp ) H 2 SEEM exp . In this '-qubit phase estimation circuit, the gateŨ t is the α-approximation of e −iHt ; it is implemented efficiently for polynomial ' (or exponential t) if H ∈ FF exp . In that case, the circuit represents a SEEM. The FF error α accumulates additively, reducing confidence (η) and adding demolition to the energy measurement (β) (Supplementary Note 5) polynomial overhead. Hence under this thesis, our results apply to all energy measurements and not only to reversible ones.
Fast-forwarding physical Hamiltonians. Using the equivalence provided by Theorem 2, we provide two new interesting classes of physical Hamiltonians, which are not known to be QC-solvable, yet can be exponentially FF (consequently, by Theorem 2, their energy eigenvalues can be efficiently measured to exponential precision): these are commuting local Hamiltonians, and quadratic fermion Hamiltonians (including Anderson localization 32 ).
A commuting k-local Hamiltonian takes the form where every term H j acts non-trivially on at most on k qubits, and [H i , H j ] = 0 for all i, j. When k is a constant (or even up to logarithmic), such Hamiltonians can be FF: Theorem 3. If H is an n-qubit normalized commuting k-local Hamiltonian, with k = O(log(n)), then it can be (T,α)-fast forwarded for T = 2 O(n) and arbitrary exponentially small α.
Since the terms H j commute, the problem reduces to FFing each term independently. This follows since the eigenvalues and eigenvectors of each local term can be efficiently calculated (even classically) with exponential accuracy 33,34 (Supplementary Note 6).
Note that despite their simplicity, commuting local Hamiltonians generate highly non-trivial dynamics; they can efficiently generate distributions which are classically hard to sample from (under widely believed computational assumptions) 35,36 .
Similarly, quadratic fermion Hamiltonians can also be exponentially FF: where a y i ; a i are fermions creation and annihilation operators. Note that n indistinguishable fermions distributed over m = poly (n) modes are described by the Fock space of dimension m n .
Assuming that we can physically implement any quadratic Hamiltonian, s.t. the error in each coefficient is at most inverse polynomial, we can thus prove: Theorem 4. Let H be a quadratic Hamiltonian of n fermions with poly(n) modes. H can be (T,α)-fast forwarded with T = 2 O(n) and arbitrary inverse polynomial α.
The proof standardly uses the Bogoliubov transformation 37,38 to "diagonalize" the traceless part of H and arrive at a freefermion Hamiltonian (Supplementary Note 7). Extending to Bosons is left for future work.
No generic fast forwarding. Perhaps any physically realistic Hamiltonian (one which is efficiently simulable by a quantum circuit) can be FF? A result of ref. 39 together with our Theorem 2 proves that this is impossible (assuming the common computational complexity assumption that BQP ≠ PSPACE (Supplementary Note 8 for definitions). Here we provide a simpler proof of this statement, which highlights the role of FF and SEEM (See Theorem 1 in SI).
The gate U M encapsulates m unitary energy measurements, the median of which is written on the topmost register (the median amplifies the confidence of the measurement). The state is then multiplied by a phase which equals the product of the median with t, after which U M is undone to ensure a clean computation. Effectively, the circuit simulates e −iHt in polynomial complexity. Careful treatment is required for a measurement that perturbs ψ E , i.e., β > 0 (Supplementary Note 5) Eigenstates are symmetric around the middle of the line, thus v 1 is often found past the middle (a "successful iteration"). We iterate with h j to prevent recession (see a for the illustration of H 1 ). We prove by standard argument from probability theory n of 100n iterations are successful with high probability, leaving the remaining path small enough for brute-force search to work. Here we assumed SEEM with demolition β = 0, but it's not difficult to correct for small β (Supplementary Note 8) The proof assumes by contradiction that any such Hamiltonian can be FF, and uses this to design a quantum polynomial time algorithm for the other end of this line (OEOTL) problem, which is known 40 to be as hard as any problem in PSPACE. Such an algorithm contradicts the widely held assumption PSPACE 6 BQP.
Definition 3 (OEOTL). Let G = (V, E) be a directed graph with 2 n vertices (indexed by n bits strings). G contains only directed paths, directed cycles, or isolated vertices. G is given by two polynomial size classical circuits: S (which computes the successor S(u) = v of a node u in G), and P (which computes the predecessor, P(v) = u)). We are promised that 0 n has no predecessor; the problem is to find the end of the line that starts with 0 n .
A sketch for the algorithm is given in Fig. 6.

Discussion
A fundamental question remains: What is the true physical reason that a system admits FF (or equivalently, SEEM), which systems allow it and to what extent? The straight-forward way to measure the energy of a given Hamiltonian is to apply it as a black-box; hence, one would expect the TEUR (and thus also the cTEUR) to hold in most physical experiments. However, should we expect a typical Hamiltonian to exponentially violate the cTEUR if we do allow non-black access? We suspect that most Hamiltonians do not allow such violations. Proving this would clarify the picture of possible cTEUR violations. One way toward a proof is to try to mimic our no-general-FF theorem 1 for a randomly chosen local Hamiltonian; perhaps this can be done by showing that a randomly chosen Hamiltonian is computationally universal (as in ref. 41 ); In fact, a stronger notion is needed, where the error when simulating polynomial quantum circuit is exponentially small. An intriguing question is whether many-body localized systems 42 , cousins of commuting local Hamiltonians, belong to this "fortunate" class of Hamiltonians allowing FF. Two notions of "fully understanding" a Hamiltonian should not be confused. Having full information about the Hamiltonian means that we know all the parameters describing H (as in Theorems 1,3,4,1). This can be mathematically described as having an efficient quantum circuit simulating the Hamiltonian for unit time-which certainly does not imply FF (Theorem 1). On the other hand, we've shown that the Hamiltonian being QCsolvable (which is a much stronger notion of fully understanding the Hamiltonian) does imply FF. One may ask: is full information about the Hamiltonian needed to achieve FF? All our FF examples do make use of the exact Hamiltonian description (Theorems 3 and 4), but ref. 8 and theorem 7 do not rule out FF for partially known Hamiltonians. It is conceivable that in certain cases, one can use partial knowledge about the Hamiltonian in conjunction with quantum computational techniques to go beyond current super-sensitivity results 43,44 bounded by the Heisenberg limit (see ref. 45 ). Additional connections of this work to metrology and sensing are discussed in Supplementary Note 9.
We believe that this work poses an important first step towards a rigorous theory of the possibilities of TEUR violations, and opens the exciting possibility that for certain Hamiltonians, efficient and extremely accurate energy measurements can be achieved using quantum computing techniques; these may be realizable even before full-fledged quantum computers exist.

Methods
Further details about the definition of cTEUR. We provide some missing details in the definition of the cTEUR. First, the confidence η is defined as follows.
Definition 4 (η-accuracy): A unitary energy measurement as in Eq. (3) is said to have accuracy δE with confidence η (we say it is a measurement of η-accuracy δE) if given an eigenstate with energy E, the measurement outcome E′ satisfies We usually set η = 2/3. We note that any constant η > 1/2 can be amplified to become close to 1, assuming that the demolition parameter β is polynomially small. To see how this amplification is done, recall from definition 2 that polynomially small β implies that the perturbation of an eigenstate of H by the measurement is polynomially small. A small perturbation allows us to repeat the measurement m = poly(n) times, and calculate the median of the measurements outcome. The median would be within δE from E with probability, which approaches 1 exponentially fast in m, the number of repetitions (see the Confidence Amplification lemma, Lemma 1 below). The resulting unitary energy measurement would have the same δE, the confidence would be exponentially close to 1 and the demolition parameter would deteriorate by a factor of m.
We further explain the asymptotic notation Ω in the proposition. This notation is defined as follows: A function f(n) is said to be ∈ Ω(g(n)) if asymptotically it is larger than cg(n) for some non-negative constant c, namely, there exists a constant c > 0, and a natural number n 0 s.t. f(n) > cg(n) for any n > n 0 . Hence, if δE Á T ðnÞ 2 1 polyðnÞ , this means that there exists an inverse polynomial function, which starting from some large enough n, bounds the product δE Á T ðnÞ from below.
To be completely rigorous, we note that the cTEUR proposition should consider a family of Hamiltonians fH n g 1 n¼1 and a family of unitary energy measurements fU n g 1 n¼1 , with increasing number of qubits. This is left implicit in this article. As is common in computational complexity, fU n g 1 n¼1 are assumed to be designed by a poly(n) classical algorithm whose input is n, and which may depend on any (possibly partial) information we have about the Hamiltonian.
We use the accuracy error as our error model because it conveniently translates to a unitary error in fast-forwarding (Theorem 2), but how does accuracy error compare to the standard deviation used in the TEUR?
Note that requiring the measurement to have accuracy error δE with confidence η is a slightly weaker requirement than the common requirement that the standard deviation is δE. In particular, when the standard deviation is specified, it is assumed implicitly that the expectation of the outcome is the correct value E. However, the expectation of the outcome E′ of a measurement of accuracy δE and confidence 2/3, might be arbitrarily far from E, namely, δE cannot give an upper bound on ΔE without further assumptions. A weak assumption suffices though. Assuming that H k k is at most exponential, one can prove that ΔE ffiffi ffi η p δE þ 2 ffiffiffiffiffiffiffiffiffiffi ffi 1 À η p H k k À Á , and since η can be amplified to be exponentially close to one, this bound is meaningful (Supplementary Note 5). Conversely, δE cannot be bounded from above by ΔE because the standard deviation of the measurement could be 0 but still its expectation can be far from the correct E.
Proof sketch of Theorem 2 (main). We give here an outline of the main steps in the proof of Theorem 2. The proof builds on two tools. The confidence amplification lemma gives efficient exponential confidence amplification of a low-  Fig. 7 Sketch of the equivalence proof in both directions. The boxes indicate the guaranteed parameters, and the arrows are accompanied by the lemmas used to derive them demolition energy measurement, without increasing the demolition parameter β too much: Lemma 1 (Confidence amplification). Let η> 1 2 , and let H be a Hamiltonian on n qubits, H k k 1, which is (η, δE, β) − SEEM. Then for any integer m ≥ 1, H is also ; δE; mβÞ-SEEM. The following lemma allows increasing the T parameter of FF at the cost of degrading α: Lemma 2 (FF by concatenation). For any integer κ > 0, if a Hamiltonian is (T, α)-FF, it is also (Tκ, ακ)-FF.
These lemmas can be used as follows to derive the proof. To prove the first direction, FF exp ) SEEM exp : we first apply the FF by concatenation lemma (Lemma 2), to improve the FF parameters; using this improved FF ability, we can apply the phase estimation circuit (Fig. 4) to achieve highly accurate energy measurement, and lastly the parameters are improved by confidence amplification (Lemma 1).
To prove the other direction, SEEM exp ) FF exp : The idea is to estimate the energy using the SEEM unitarily, then apply the correct phase (energy multiplied by the desired time) based on the resulting estimated value of the energy, and then run the energy estimation backwards to erase any garbage, in order to derive the unitary corresponding to the application of the Hamiltonian for time t. Once again, the confidence amplification lemma (Lemma 1) is required in order to gain back the parameters which were degraded.
The details are not completely trivial due to the trade-off between the parameters, which all need to match up. The main steps are depicted in Fig. 7. See Supplementary Note 5 for full proofs of Theorem 2 and the Lemmas.
This proof, like the proof of Theorem 1 could be modified to rely on Kitaev's phase estimation without making use of Fourier transform, which would give a more efficient computation from the point of view of making use of quantum computations versus classical ones.
We note that Theorem 2 can be extended to other functions T(n) and δE as a function of n. There seems to be, however, some inherent (constant) loss in parameters when moving between FF for time T, and SEEM with accuracy 1/T, at least in the way the above proof works; which is why Theorem 2 is stated using asymptotic functions.
Relation of Theorem 1 to no-FF in other Hamiltonian models. We have discussed in the above the case of completely unknown Hamiltonians, as in ref. 8 , as well as the general setting, which is the main subject of this article, in which we can have full information about the Hamiltonian (namely, we have a circuit for efficiently simulating the Hamiltonian for unit time) but the resources that are bounded are the computational complexity.
A different model, was studied in refs. 28,30 and is called the "Hamiltonian query model". In this model, access to the matrix entries of the Hamiltonian is by queries to an oracle, which, given the index of a row, returns all non-zero elements in the row. This model seems less interesting from a physics perspective, however, there are interesting theoretical results which can be derived. In particular 30 proved that there exist Hamiltonians, which require exponentially many queries in this model, in order to simulate their evolution to within exponential time. This can be viewed as a no-generic-FF theorem in this model.
We note that this theorem does not follow from Theorem 7, the cTEUR for unknown Hamiltonians (adapted from 8 , see Supplementary Note 3 for definition), though Theorem 7 together with our equivalence Theorem 2 implies a no-generic-FF for unknown Hamiltonians. The reason is that in the query model the Hamiltonian is not completely unknown, and possibly this additional information about the Hamiltonian can be used in order to achieve FF.
Summarizing the comparison between the three models, a Hamiltonian given as a black-box or one with unknown eigenvalues cannot be FF as this violates the TEUR/cTEUR for unknown Hamiltonians (This follows from the results of Aharonov et al. 8 and our extension of it, Theorem 7 in Supplementary Note 3, together with our main Theorem 2). Adding information on the Hamiltonian when using the query model still won't allow a general FF procedure due to query complexity bounds 30 . Theorem 1 is the corresponding theorem for the case of 2-sparse row computable Hamiltonians; Since we are no longer in the black-box model, nor even in the query model, we must condition the result on computational assumptions i.e., the widely believed assumption that PSPACE ≠ BQP (see Supplementary Note 8 for exact definition of these classes).
Theorem 1 and a recent conjecture in quantum gravity. Theorem 1 is tightly related to a recent result by Aaronson and Susskind 46 , which was derived in the context of a conjecture in quantum gravity. This conjecture, due to Susskind 31 connects the length of non-traversable wormholes to the computational complexity of approximating certain quantum states.
In this context, one is interested in a maximally entangled state, which evolves in time under the transformation: where U is a unitary related to the physical Hamiltonian in question (see ref. 46 ). Susskind 31 proposed that the CFT dual of the length of non-traversable wormholes is equal to the quantum circuit complexity required to approximate ψ t j i. Aaronson and Susskind (manuscript in preperation; see ref. 46 ) do not handle the particular U of the CFT, but prove that there exists a unitary U such that the state in Eq. (14) is hard to approximate (more precisely, for some t < 2 n , ψ t with this U cannot be approximated efficiently) under a commonly believed computational assumption (PSPACE 6 PP=poly). In their terminology, they show that there are no "shortcuts" to generating the state ψ t for such a U. This closely ties with our nogeneric FF Theorem 1, though it seems that their theorem does not directly imply Theorem 1. Note that if the Hamiltonian H S generating the unitary U, s.t. U ¼ e ÀiHS , could be exponentially FF, the state complexity of ψ t would by polynomial for t at most exponential. Thus, impossibility of FF of H follows from impossibility to generate ψ t efficiently. The other way round might not hold-it is conceivable that FF is impossible, but the state ψ t can be generated efficiently by a different way. This is why the computational assumption in Aaronson and Susskind's result is stronger than ours, and involves the class PP and not BQP. The two other differences between the two theorems (Aaronson and Susskind work in the non-uniform setting, namely use PP/poly rather than PP, and consider approximation of the state to within a constant), depend on the setting and are less important.
An interesting question in this context is whether it is it possible to prove specifically that the above mentioned Hamiltonian H S cannot be FF. Perhaps, this can be done using similar ideas to those mentioned in the discussion section.
Quantum algorithms and fast-forwarding Hamiltonians. We have seen that the factoring algorithm can be interpreted as an efficient and exponentially accurate energy measurement utilizing fast forwarding. One can ask a conceptual question: is fast-forwarding Hamiltonians the true underlying source for all quantum algorithmic speed-ups? It turns out that in fact this is far from being the case. Indeed, like in Shor's algorithm, the Abelian hidden subgroup problem (HSP) is solved 47,48 by efficiently utilizing phase estimation to exponential accuracy, thus one can associate a Hamiltonian to the problem, and the quantum algorithm can be translated to a cTEUR violation in measuring the energies with respect to this Hamiltonian. We believe (though we have not worked out the details) that this is also the case for the recent extensions of Shor's algorithm to finding unit groups of number fields 49,50 , which are also based on phase estimation of the eigenvalue of a unitary applied to exponential powers. However, to our current understanding, other than these few direct extensions of Shor's algorithm, none of the other known quantum algorithmic speed-ups can be related to fast forwarding-not even quadratic fast forwarding (!). We note that some of these algorithms can be viewed an an energy measurement of a corresponding Hamiltonian, as we describe below, however, the quantum speed-up does not result from a FF of this Hamiltonian. We describe this in three interesting cases.
1. The exponential speed-up of the quantum walk on two glued binary trees 51 : In this algorithm, an exponential quantum speed up is achieved by showing that a quantum algorithm can traverse a graph with exponentially many nodes, in polynomial time. The graph consists of two binary trees glued in their leaves. As shown in ref. 51 , the glued trees problem is highly symmetric, and the search is limited to a subspace of dimension linear in the number of qubits. In addition ref. 51 , show that the spectral gap of the Hamiltonian in that subspace is inverse polynomial. One can in fact view this process as an energy measurement, except not an accurate one. To see how continuous time quantum walks (CTQW) 52 are related to energy measurements, consider the following analogy: In CTQW, a value t is chosen uniformly over [0, T] and the system is evolved by e −iHt and then measured. Almost equivalently, one can add to the state an ancilla register, initiated in the superposition over all values of time 1 ffiffi ffi T p P TÀ1 t¼0 t j i, and then apply the Hamiltonian on the state for a duration t conditioned that the value in the ancilla register is t, and finally discard the t register. This latter procedure is effectively a phase estimation (i.e., energy measurement), with the outcome traced out.
However, the algorithm in ref. 51 only requires polynomial accuracy to perform this energy measurement, and in order to do this it simply applies the Hamiltonian for a polynomial amount of time, and does not utilize any fastforwarding (equivalently, it does not violate the cTEUR). 2. Grover's quadratic algorithmic speed-up 53 : In Grover's algorithm, an initial state s j i, which is a uniform superposition over a search space of size N is rotated slowly to the marked state ω, and reaches its proximity after O(N −1/2 ) applications of the iterator Þ . U may be written as: where s j i ¼ ffiffiffiffiffiffiffiffiffiffiffiffiffiffiffiffiffiffiffiffiffiffi ðN À 1Þ=N p s′ j i þ ffiffiffiffiffiffiffiffi ffi 1=N p ω j i. The subspace spanned by s′, ω is invariant to U; by denoting ω j i ¼ 0 j i and s′ j i ¼ 1 j i, Here we used the following: e iφσ y ¼ 1cos ðφÞ þ iσ y sin ðφÞ ð17Þ Denote H ¼ 2σ y = ffiffiffiffi N p ; then H has eigenstates 1 ffiffi 2 p s′ j i± i ω j i ð Þ , and additionally, Measuring an eigenstate of H in the original standard basis returns ω with probability half. Thus, an algorithm equivalent to Grover's is to apply an energy measurement of the state s with respect to the Hamiltonian H, with sufficient accuracy to arrive at a state close to an eigenstate, and then to measure in the original standard basis. Since the two eigenvalues differ by ≈N -1/2 , it turns out that it suffices to perform a measurement with ηaccuracy N −1/2 /10 for η = 1-10 −3 to achieve probability at least 1/3 to measure ω. The exact argument follows from similar arguments to those in the proof of our no-general-FF Theorem 1, using claims 7 and 8 (see Supplementary Note 8). We omit the details. Thus, the quadratic speed-up is achieved by the mere fact that the accuracy required to separate the two eigenstates is of the order of 1= ffiffiffiffi N p and not 1/N. 3. Exponentially fast solutions of linear equations 54,55 : The algorithm 54 finds the state x j i ¼ P i x i i j i for x that solves the equation Ax = b. The matrix A is an N × N Hermitian s-row computable matrix, namely every row in A has at most s non-zero elements, and there exists an efficient algorithm recieving a row number as input, and outputing the position and values of these non-zero elements. The vector b is given as a state: b j i ¼ P i b i i j i. The time complexity of the algorithm is OðpolyðlogðNÞÞ; κ; 1=ϵÞ, where κ is the condition number of A, i.e., the ratio between the largest and smallest eigenvalues of A, and ϵ is the additive error of |x〉 allowed. The heart of the algorithm is a phase estimation of the unitary matrix e iA applied to the state |b〉. The Hamiltonian simulation procedures used to simulate e −iAt in ref. 54,55 apply for any A, thus both require at least linear computational complexity in t. If it weren't so, one could violate cTEUR for unknown Hamiltonians-but this is, as we know, impossible (See Theorem 7 in SI). Hence no fast forwarding is involved. As for other famous quantum algorithmic speed-ups, these do not seem to have a sensible description in terms of energy measurements of associated Hamiltonians, so they also do not seem to be related to FF. In particular, Kuperberg's subexponential algorithm for finding a hidden subgroup of the Dihedral group 56 and BQP-complete Topological Quantum Field Theory (TQFT) based quantum algorithms 57-59 , do not seem to have a FF origin.
Data availability. The data sharing not applicable to this article as no data sets were generated or analyzed during the current study.