\section{Introduction}
Entanglement's benefit for quantum information processing has been revealed by pioneer works in communication~\cite{bennett2002entanglement}, sensing~\cite{pirandola2018advances,giovannetti2004quantum,giovannetti2011advances}, and computation~\cite{shor1999polynomial}. Notably, the advantage enabled by the initial entanglement even survives loss and noise in certain entanglement-breaking scenarios, as predicted~\cite{Lloyd2008,tan2008quantum,zhuang2017,barzanjeh2015microwave} and experimentally demonstrated~\cite{zhang2013,zhang2015,barzanjeh2019experimental} in the entanglement-enhanced sensing protocol called quantum illumination.

It is also known, in theory, that pre-shared entanglement increases the classical communication capacity, i.e., the maximum rate of reliable communication of classical bits (cbits), over a quantum channel $\Phi$ (a completely-positive trace-preserving map). In an ideal case, the superdense-coding~\cite{bennett1992} protocol allows for sending two cbits on a single qubit, with the assistance of one entanglement bit (ebit). Formally, one characterizes the rate limit of such entanglement-assisted (EA) communication by the classical capacity with unlimited entanglement-assistance~\cite{bennett2002entanglement,bennett1999entanglement,holevo02,hsieh2008entanglement}, $C_E\left(\Phi\right)$~\footnote{The initial proof is for finite-dimensional systems, and Refs.~\cite{holevo2003entanglement,holevo2013classical} proved the EA capacity formula for infinite dimensional channel with more rigor.}. Compared with the classical capacity without entanglement-assistance, i.e., the Holevo-Schumacher-Westmoreland capacity, $C\left(\Phi\right)$~\cite{hausladen1996classical,schumacher1997sending,holevo1998capacity}, the improvement enabled by entanglement can be drastic even over a noisy channel $\Phi$. In particular, it is known~\cite{bennett2002entanglement} that the ratio of $C_E\left(\Phi\right)/C\left(\Phi\right)$ can diverge logarithmically with the inverse of signal power over a noisy and lossy bosonic channel~\footnote{Similar large improvement can also happen in large-dimension depolarizing channels~\cite{holevo02,holevo2013information}}. Such an EA scenario is widely applicable to radio-frequency (RF) communication, deep-space communication~\cite{banaszek2019approaching}, and covert communication~\cite{bash2015quantum,bullock2019fundamental}.

Despite the large advantage of EA capacity, a practical EA encoding and decoding scheme that achieves \emph{any} advantage over the classical capacity is unknown in the high noise regime. Previous experiments~\cite{prevedel_2011,chiuri_2013} focused on ideal scenarios with qubits; Although the EA capacity formula for bosonic Gaussian channel is well established~\cite{holevo01,de2017gaussian}, the achievability proof in Ref.~\cite{bennett2002entanglement} relies on approximating an infinite-dimensional channel as a channel with finite but large dimension; thus a structured encoding scheme is not given for bosonic channels. In fact, simple schemes like continuous-variable (CV) superdense coding~\cite{ban1999quantum,braunstein2000,ban2000quantum} do not beat the classical capacity in the noisy and weak signal regime~\cite{sohma2003}, making experimental demonstrations of the EA capacity advantage elusive~\cite{mizuno2005experimental,barzanjeh2013,li2002quantum}.
More recent encoding protocols in Refs.~\cite{wilde2012information,anshu2019building,qi2018applications,khabbazi2019union} use mode permutations or mode selections to encode classical information. Despite being convenient for theoretical analysis, these protocols require large quantum memories to store all quantum states and are thus difficult to implement with available technology.

The main contributions of this paper are 1) discovery of the optimum encoding scheme, 2) showing EA communication advantage in presence of lossy entanglement distribution, and 3) construction of practical quantum receivers for EA classical communication over lossy and noisy bosonic channels. We first prove that phase encoding on two-mode squeezed vacuum (TMSV) is asymptotically optimal as channel noise increases (Section~\ref{sec:encoding_capacity}). With phase encoding, we also show that the EA advantage can still be appreciable when entanglement distribution is lossy, thereby further reinforcing the robustness of EA communication (Section~\ref{sec:noisy_preshare}). Next, we show that such an EA communication protocol is in fact secure and allows one to break the square-root law of covert communication~\cite{bullock2019fundamental} by a logarithmic factor (Section~\ref{sec:encoding_covertness}). Then, we propose practical quantum receivers, based on prior results of Refs.~\cite{zhuang2017,Guha2009}, to offer a constant advantage over the classical capacity $C\left(\Phi\right)$ in the weak signal power regime (Section~\ref{sec:BPSK}). As a by-product, we show that our design in the context of continuous encoding also enables optimal phase estimation and asymptotically saturates the quantum Fisher information (QFI) upper bound~\cite{gagatsos2017bounding} (Section~\ref{sec:phase_estimation}), as the noise increases. Finally, we project the performance of a proof-of-concept experiment, based on the parameters reported in Ref.~\cite{zhang2015} (Section~\ref{sec:exp}).

We begin our paper by a brief overview.

\section{Overview}

In most of our discussions, we assume that an entangled signal-idler pair is pre-shared before the communication, potentially through a ground-satellite and/or fiber-based quantum network. The focus of this paper is on EA communication protocols assuming pre-shared entanglement is available, with the understanding that building a full-up quantum network is a challenging task. In a less ideal situation, we show that an EA advantage remains (see Section~\ref{sec:noisy_preshare}) in the absence of a full-scale quantum network that completely overcomes entanglement distribution loss.

Figure~\ref{concept} shows a general picture of EA communication: Bob encodes classical information on the signal mode of the pre-shared entanglement retrieved from a quantum memory. A quantum transducer is then employed to convert the wavelength of the signal mode to that of the information carrier, e.g., an RF field. The wavelength-converted signal is then sent to Alice through a lossy and noisy channel. After transducing the received signal from Bob, Alice jointly measures the signal mode and the entangled idler mode retrieved from a quantum memory to decode the classical information. We show that the EA communication scheme outperforms even the best classical scheme without entanglement assistance, with a significant advantage especially over a lossy and noisy communication channel in a weak-signal regime. Notably, such an EA communication advantage can be achieved with practical sources and receivers.

\begin{figure}
\centering
\includegraphics[width=0.4\textwidth]{EACOMM}
\caption{Concept of entanglement-assisted communication. The entanglement is pre-shared through quantum internet based on satellites and/or ground-links.
\label{concept}
}
\end{figure}

Before going into technical details, we elucidate the applicable scenarios for EA communication. Noisy communication channels are commonly used in the RF domain due to blackbody radiation. In optical communications, although the ambient noise is not naturally present, the classical communication traffic in, e.g., optical fibers of the Internet, may still be regarded as the effective noise. In addition, the communication channel can also be noisy in adversarial scenarios with active jamming. There also exist multiple communication settings limited to weak signal power. For example, in deep space communication, devices deployed on satellites or deep-space stations are likely to be power constrained. Besides, in a scenario where Alice and Bob wish to stay undetected, known as covert communication, the signal power is minimized and embedded in a bright noise background (see Section~\ref{sec:encoding_covertness} for details).

\section{Lossy and noisy bosonic channels: A compendium}
\label{sec:bosonic_capacity}

Communications typically involve transmitting electromagnetic waves carrying classical information through optical fibers or free space, both of which can be modeled as a bosonic thermal lossy channel $\mathcal{L}^{\kappa,N_B}$ with the following input-output mode relation in the Heisenberg picture:
\begin{equation}
\hat{a}_R=\sqrt{\kappa}\hat{a}_S+\sqrt{1-\kappa}\hat{a}_B,
\label{IO_relation}
\end{equation}
as illustrated in Fig.~\ref{Schematic}. Here, the input mode is subject to an average energy constraint $\expval{\hat{a}_S^\dagger \hat{a}_S}=N_S$, and the noise mode $\hat{a}_B$ is in a thermal state with mean photon number $N_B/(1-\kappa)$, where $\kappa$ is the transmissivity of the bosonic channel.

Without EA, the classical capacity is known as~\cite{GiovannettiV2014}
\begin{equation}
C(\mathcal{L}^{\kappa,N_B})=g(\kappa N_S+N_B)-g(N_B),
\label{C_formula}
\end{equation}
obtained by maximizing the Holevo information~\cite{holevo1973bounds,holevo1998capacity,schumacher1997sending} over the ensemble of states. Here, $g(n)=(n+1)\log_2(n+1)-n \log_2 n$ is the entropy of a thermal state with mean photon number $n$. The capacity is achieved by an ensemble of Gaussian-modulated coherent states in conjunction with a joint-detection receiver, which are in general difficult to build. In some special situations, however, practical receivers are known to achieve the classical capacity~\cite{Shapiro2009ieee,banaszek2019approaching}. For example, in the limit of $\kappa N_S \gg 1$ and $N_B \ll 1$, the optical heterodyne receiver approaches the classical capacity. Moreover, in the large noise case of $N_B \gg 1$, the classical capacity $C(\mathcal{L}^{\kappa,N_B})=\kappa N_S/\ln(2)N_B+O(1/N_B^2)$ and is always saturated by a heterodyne or a homodyne receiver (see Appendix~\ref{App:classical} for details).

Classical communication can be enhanced by pre-shared entanglement. The bosonic EA classical communication operates in the following way (see Fig.~\ref{Schematic} for an example). One starts with entangled signal-idler pairs $\hat{a}_{S^\prime}, \hat{a}_{I^\prime}$, which are delivered to the sender Bob and the receiver Alice through channels $\Phi_S$ and $\Phi_I$. In this Section, both channels $\Phi_S$ and $\Phi_I$ are assumed lossless and noiseless, i.e., perfect unlimited pre-shared entanglement can be shared by Alice and Bob. Entanglement pre-shared through a common lossy channel will be considered in Section~\ref{sec:noisy_preshare}. The encoded signal $\hat{a}_S$, with mean photon number $N_S$, is sent through the noisy channel. A joint measurement on the received signal-idler pairs $\hat{a}_R, \hat{a}_I$ is performed to decode information. The EA classical capacity is~\cite{bennett2002entanglement}
\begin{equation}
C_E(\mathcal{L}^{\kappa,N_B})=g(N_S)+g(N_S^\prime)-g(A_+)-g(A_-),
\label{CE_formula}
\end{equation}
where
$A_\pm=(D-1\pm(N_S^\prime-N_S))/2$, $N_S^\prime=\kappa N_S+N_B$ and $D=\sqrt{(N_S+N_S^\prime+1)^2-4\kappa N_S(N_S+1)}$.
Various aspects of EA communication have been explored, including extensions to limited pure entanglement~\cite{shor2004classical}, noisy entanglement~\cite{zhuang2017additive}, trade-off capacities~\cite{wilde2012quantum,wilde2012information}, and superaddivity issues~\cite{zhu2017,zhu2018superadditivity}.

\begin{figure}
\centering
\includegraphics[width=0.4\textwidth]{Schematic_two_way.pdf}
\caption{Schematic of the entanglement-assisted classical communication protocol. The pre-shared entanglement is distributed through two channels $\Phi_S$ and $\Phi_I$. Classical information $\theta$ is encoded on the signal $\hat{a}_S$, which is sent over a noisy channel, represented by the beam splitter with transmissivity $\kappa$ and noise $N_B$, and then jointly measured with the entangled idler $\hat{a}_I$ to decode the classical information $\tilde{\theta}$.
\label{Schematic}
}
\end{figure}

Comparing the capacity formulas with and without EA, one has
\begin{equation}
\lim_{N_B\to\infty}C_E/C=(1+N_S)\ln\left(1+1/N_S\right),
\end{equation}
which diverges as $\ln(1/N_S)$ (see Fig.~\ref{Ce_over_C}). Thus, in the weak signal and strong noise regime, EA can offer a large capacity advantage over unassisted classical communications. Moreover, it is known that encoding on the
TMSV,
\begin{equation}
\ket{\psi^{N_S}}_{S^\prime I^\prime}=\sum_{n=0}^\infty \sqrt{N_S^n/(N_S+1)^{n+1}}\ket{n}_{S^\prime}\ket{n}_{I^\prime},
\label{wf_TMSV}
\end{equation}
achieves the EA classical capacity over a bosonic thermal lossy channel~\cite{wilde2012information,anshu2019building,qi2018applications}, but previously proposed encoding either needs large quantum memories or non-Gaussian operations without structured realizations, both of which are beyond the reach of current technology. Also, there is no known structured receiver that achieves the EA classical capacity.

It is worth mentioning that both the coherent states for classical communication and the TMSV for EA classical communication belong to the class of Gaussian states~\cite{Weedbrook_2012}, whose Wigner functions have a Gaussian shape. Gaussian states are important for quantum information processing, because they enable nonclassical resources such as squeezing and entanglement, and moreover they often allow analytical solution in various problems. An $n$-mode Gaussian state $\hat{\rho}$ comprising modes $\hat{a}_k, 1\le k \le n$, is fully characterized by the mean and the covariances of real quadrature field operators $\hat{q}_k=\hat{a}_k+\hat{a}_k^\dagger, \hat{p}_k=i\left(\hat{a}_k^\dagger-\hat{a}_k\right)$. Formally, we can define a real $2n$-dim vector of operators
${\hat{\bm x}}=\left(\hat{q}_1,\hat{p}_1,\cdots, \hat{q}_n,\hat{p}_n\right)$, then the mean $\bar{\bm x}=\expval{\hat{\bm x}}_{\hat{\rho}}$ and the elements of the $2n$-by-$2n$ covariance matrix are given by
\begin{equation}
{\bm \Lambda}_{ij}=\frac{1}{2} \expval{\{\hat{x}_i-\bar{x}_i,\hat{x}_j-\bar{x}_j\}}_{\hat{\rho}},
\end{equation}
where $\{,\}$ is the anticommutator and $\expval{\hat{A}}_{\hat{\rho}}={\rm Tr} \left(\hat{A}\hat{\rho}\right)$. As an example, from the wavefunction in Eq.~\ref{wf_TMSV} we can obtain the covariance matrix of a TMSV as
\begin{align}
&
{\mathbf{{\mathbf{\Lambda}}}}_{\rm TMSV} =
\left(
\begin{array}{cccc}
(2N_S+1) {\mathbf I}&2C_0{\mathbf Z}\\
2C_0 {\mathbf Z}&(2N_S+1){\mathbf I}
\end{array}
\right),
&
\label{cov_TMSV}
\end{align}
where ${\mathbf I}$, ${\mathbf Z}$ are two-by-two Pauli matrices, and $C_0=\sqrt{N_S\left(N_S+1\right)}$ is the amplitude of the phase-sensitive cross correlation.

\section{Optimal encoding---phase modulation}
\label{sec:encoding}
\subsection{Channel capacity with perfect pre-shared entanglement}
\label{sec:encoding_capacity}
In this section, we show that a set of states produced by phase modulation on an ideal TMSV is the asymptotic optimal encoding scheme, in that it achieves $C_E\left(\mathcal{L}^{\kappa,N_B}\right)$ for $N_B\gg1$.
Mathematically, phase modulation is described by the unitary $\hat{U}_\theta=\exp\left(i\theta \hat{a}^\dagger\hat{a}\right)$~\cite{Weedbrook_2012} that maps $\hat{a}\to e^{i\theta}\hat{a}$, where $\hat{a}$ is the annihilation operator of the incoming field. Under phase encoding (see Fig.~\ref{Schematic}), the joint state of the returned signal $\hat{a}_R$ and retained idler $\hat{a}_I$ at the receiver is
\begin{equation}
\hat{\rho}^\theta_{RI}\equiv \mathcal{L}^{\kappa,N_B}\left[(\hat{U}_\theta \otimes \hat{I}) \hat{\psi}^{N_S}_{S^\prime I^\prime} (\hat{U}_\theta^\dagger \otimes \hat{I})\right],
\end{equation}
where $\hat{\psi}^{N_S}_{S^\prime I^\prime}$ is the density operator of the TMSV. From the input-output relation in Eq.~\ref{IO_relation} and the covariance matrix of TMSV in Eq.~\ref{cov_TMSV}, we can obtain the covariance matrix of the zero-mean Gaussian state $\hat{\rho}^\theta_{RI}$ as
\begin{eqnarray}
&
{\mathbf{\Lambda}}_\theta =
\left(
\begin{array}{cccc}
(2\left(N_B+\kappa N_S\right)+1) {\mathbf I}&2C_p{\mathbf R}_\theta\\
2C_p{\mathbf R}_\theta&(2N_S+1){\mathbf I}
\end{array}
\right),
\label{hk}
&
\end{eqnarray}
where ${\mathbf R}_\theta={\rm Re}\left[ \exp\left(i\theta\right) \left({\mathbf Z}-i{\mathbf X}\right)\right]$. The amplitude of the cross correlation in each mode pair is $C_p= \sqrt{\kappa}C_0$.

\begin{figure}
\centering
\includegraphics[width=0.3\textwidth]{Ce_over_C_font}
\caption{The information (info.) rate divided by the unassisted classical capacity $C(\mathcal{L}^{\kappa,N_B})$ vs. the transmitted power $N_S$. Channel transmissivity $\kappa=0.1$ and noise $N_B=10$. The entanglement-assisted classical capacity $C_E(\mathcal{L}^{\kappa,N_B})$ (black solid line) has a large advantage when power is low, and the mode-wise phase encoding $\Sigma_{\theta}^1$ (red crosses) and $\Sigma_{BPSK}^1$ (blue circles) have Holevo information $\chi\left(\Sigma_{\theta}^1\right)$ and $\chi\left(\Sigma_{BPSK}^1\right)$ achieving the entanglement-assisted classical capacity (black solid). For phase modulation in $M$-mode blocks, the sum-frequency generation (SFG) process gives an estimation of the Holevo information per mode $\chi(\Sigma^M_{\rm SFG})/M$ for various repetition encoding block sizes $M$ (dashed lines).
\label{Ce_over_C}
}
\end{figure}

Thus, the set of states at the receiver is given by
$
\Sigma_{\theta}^1\equiv \Big\{ \hat{\rho}^\theta_{RI}, \theta\sim U[0,2\pi)\Big\},
$
where the phase $\theta$ is uniformly distributed. Under optimal decoding, the accessible information after the channel can be obtained by $\chi\left(\Sigma_{\theta}^1\right)$, where
\begin{equation}
\chi\left(\{\hat{\rho}_x,p(x)\}\right)=S\left(\int_x p(x) \hat{\rho}_x\right)-\int_x p(x)S\left( \hat{\rho}_x\right)
\label{eq:Hol_info}
\end{equation}
is the Holevo information and $S(\cdot)$ is the von Neumann entropy.

The conditional entropy $S(\hat{\rho}^\theta_{RI})$ can be straightforwardly calculated because the state is Gaussian~\cite{Weedbrook_2012}. The calculation for the unconditional entropy is nevertheless more involved, as detailed in Appendix~\ref{sec:uncond_entropy} and shown in Fig.~\ref{Ce_over_C} the numerical results in red crosses. By asymptotic expansion in the $N_B\gg1$ limit, we can show (details in Appendix~\ref{sec:uncond_entropy}) that
\begin{eqnarray}
&&\chi\left(\Sigma_{\theta}^1\right)=C_E(\mathcal{L}^{\kappa,N_B})+O(1/N_B^2)
\nonumber
\\
&&=\frac{1}{N_B}{\kappa N_S (1+N_S)\log_2 (1+\frac{1}{N_S})}+O(1/N_B^2).
\label{holevo_phase}
\end{eqnarray}
Because phase encoding achieves the EA capacity $C_E(\mathcal{L}^{\kappa,N_B})$, it is the optimal encoding over a lossy and noisy bosonic channel in the asymptotic limit of $N_B\gg1$.

While continuous phase encoding is asymptotically optimal, encoding with a set of discrete phases are more practical in real-world operations.
As an example, Section \ref{sec:BPSK} demonstrates the binary phase-shift keying (BPSK) as a handy implementation that overcomes the classical capacity. In BPSK, the ensemble of the quantum states at the receiver is $\Sigma_{BPSK}^1=\{\hat{\rho}^\theta_{RI},\theta\sim U\{0,\pi\}$. Similarly, the Holevo information for $\Sigma_{BPSK}^1$ is calculated and depicted in Fig.~\ref{Ce_over_C}, showing the asymptotically optimalality for BPSK encoding in the large noise limit.

In many protocols such as quantum illumination and floodlight quantum key distribution~\cite{zhuang2016floodlight}, repetition coding of the same $\theta$ on $M$ signal-idler mode pairs, i.e., $\Sigma_{\theta}^M\equiv \{\otimes_{k=1}^M \hat{\rho}_{R_kI_k}^\theta, \theta\sim U[0,2\pi)\}$, is used to obtain sufficiently large mutual information per encoding so that efficient error correction codes can be employed. Let $M$ mode pairs be a phase modulation block, the derivation of the Holevo information per mode $\chi(\Sigma_{\theta}^M)/M$ is computationally challenging when $M\gg1$. However, we obtain a precise estimation of the information per mode $\chi(\Sigma^M_{\rm SFG})/M$ based on the results in Section~\ref{sec:SFG_est}, where a SFG process~\cite{zhuang2017} on the modes within each phase modulation block is devised. Figure~\ref{Ce_over_C} shows a good agreement between the estimation $\chi(\Sigma^M_{\rm SFG})/M$ (blue dashed) and the exact result $\chi(\Sigma_{\theta}^1)$ (red crosses) for $M=1$.

\subsection{Channel capacity with imperfect pre-shared entanglement distributed via a lossy channel}
\label{sec:noisy_preshare}
Previous analysis has assumed perfect pre-shared entanglement distributed through lossless and noiseless channels $\Phi_S$ and $\Phi_I$. It shows that phase encoding on perfect pre-shared TMSV states leads to a $\ln(1/N_S)$ capacity advantage in the weak signal and high noise regime. Although perfect pre-shared entanglement can be built up in a full-up quantum network in the future, current technology only allows for non-ideal distribution of entanglement. As such, imperfections in $\Phi_S$ and $\Phi_I$ need to be accounted for in a practical scenario.

Suppose the entangled TMSV signal-idler pairs are generated by Alice, so the idler distribution channel remains perfect, i.e., $\Phi_I = I$, while the signal is distributed to Bob through noiseless lossy channel $\Phi_S$, i.e., a pure-loss bosonic channel $\mathcal{L}^{\kappa_0,0}$. Since phase encoding $\hat{U}_\theta$ commutes with $\mathcal{L}^{\kappa_0,0}$, as verified by the input-output relation in Eq.~\ref{IO_relation} of a general thermal loss channel $\mathcal{L}^{\kappa,N_B}$ and by using the fact that thermal state is invariant under phase rotation, we may consider an equivalent protocol in which the initial signal modes $\hat{a}_{S^\prime}$'s are first phase encoded, subsequently go through the channels $\Phi_S=\mathcal{L}^{\kappa_0,0}$ and $\mathcal{L}^{\kappa,N_B}$ consecutively, and are finally received by Alice. In the equivalent protocol, the overall noisy channel
\begin{equation}
\Phi_{\rm All}=\mathcal{L}^{\kappa,N_B}\circ \mathcal{L}^{\kappa_0,0}=\mathcal{L}^{\kappa_0\kappa,N_B}.
\end{equation}
To match the mean photon number going through the channel $\mathcal{L}^{\kappa,N_B}$ with the classical case, the mean photon number $N_{S^\prime}$ of $\hat{a}_{S^\prime}$ is constrained by $\kappa_0 N_{S^\prime}=N_S$.
Because the overall channel is again a lossy thermal channel, in the $\kappa\ll1, N_B\gg1$ limit, the accessible information at Alice's receiver reads
\begin{eqnarray}
&&\chi\left(\Sigma_{\theta,\kappa_0}^1\right)=C_E(\mathcal{L}^{\kappa_0\kappa, N_B}, N_S/\kappa_0)+O(1/N_B^2)
\nonumber
\\
&&=\frac{1}{N_B}\kappa N_S \left(1+\frac{N_S}{\kappa_0}\right)\log_2 \left(1+\frac{\kappa_0}{N_S}\right)+O(1/N_B^2),\nonumber\\
\end{eqnarray}
where the input power $N_S/\kappa_0$ is made explicit.
Under $N_S/\kappa_0\ll1$, the accessible information $\chi\left(\Sigma_{\theta, \kappa_0}^1\right)$ remains a factor of $\ln(\kappa_0/N_S)$ larger than the unassisted capacity $C(\mathcal{L}^{\kappa,N_B}, N_S)$.

Note that prior to EA communication, pre-shared entanglement always needs to be built up via an entanglement-distribution channel. It thus behooves us to consider using the pure-loss entanglement distribution channel for classical communication without entanglement assistance, which is anticipated to outperform EA communication over a lossy and noisy channel. However, various scenarios preclude direct utilization of the entanglement-distribution channel for classical communication, as we enumerate two examples in the following. First, the performance of RF communications can be improved with pre-shared entanglement distributed via optical links. In this case, the RF-communication link is well modeled by a lossy thermal channel, while the optical entanglement distribution link is a pure-loss channel. Second, a pure-loss channel for entanglement establishment may not always be available. With long-lived quantum memories, entanglement can be distributed in the presence of an entanglement-distribution channel and is subsequently stored with high fidelity until retrieved on-demand for EA communication.

\subsection{Entanglement-assisted covert communication}
\label{sec:encoding_covertness}

\begin{figure}
\centering
\includegraphics[width=0.3\textwidth]{Info_covert_font}
\caption{Ultimate total covert information in bits transferred in $N$ modes by the entanglement-assisted (EA) covert communication and classical covert communication without EA. Channel transmissivity $\kappa=0.1$ and noise $N_B=10$, covertness $\delta=0.01$.
\label{Ce_over_C_covert}
}
\end{figure}

An additional benefit of the EA communication protocol is its covertness and security~\cite{bash2015quantum,bullock2019fundamental}.
Covert communication refers to the scenario that two parties are able to communicate, while the presence of the communication signals cannot be easily detected by any passive adversaries. It is possible when unavoidable environmental noise hides the weak signals. In the EA communication protocol, suppose that a passive adversary endeavors to detect Alice and Bob's communication attempt by monitoring the mode lost to the environment, but does not have access to the idler $\hat{a}_I$ since entanglement is pre-shared prior to communication. In the presence of EA communication with $N$ mode-pairs, the reduced state of the modes lost to the environment is a product of $N$ thermal states $\hat{\rho}_1$, each with mean photon number $n_1=\kappa N_B/(1-\kappa)+(1-\kappa)N_S\simeq \kappa N_B+N_S$, irrespective of the message being transmitted. In the absence of communication, the state $\hat{\rho}_0$ remains thermal with mean photon number $n_0=\kappa N_B/(1-\kappa)\simeq \kappa N_B$. With $\kappa N_B\gg1$, the difference between $\hat{\rho}_0$ and $\hat{\rho}_1$ is so small that communication covertness is warranted. The Helstrom bound of the error probability in distinguishing $\hat{\rho}_0^{\otimes N}$ from $\hat{\rho}_1^{\otimes N}$ can be numerically calculated as both states are diagonal in the number basis. Here, we use the quantum Chernoff bound~\cite{Pirandola2008,audenaert2007discriminating} to estimate the error probability of the adversary
\begin{equation}
P_E\sim \exp\left[-NN_S^2/(8\kappa^2N_B^2)\right].
\end{equation}
Under the requirement of $P_E\sim 1/2$, we can still communicate with $N\sim \kappa^2 N_B^2/N_S^2$ modes, which is large when $\kappa N_B\gg1$.

A more invovled calculation, similar to that in Ref.~\cite{bullock2019fundamental}, shows that under the requirement of $P_E\ge 1/2-\delta$, the relative entropy $D(\hat{\rho}_0^{\otimes N}\|\hat{\rho}_1^{\otimes N})\le 2\delta^2/\ln(2)$. Using the additivity of relative entropy and thermal state properties (or one can use Theorem 7 in Ref.~\cite{pirandola2017fundamental}),
\begin{align}
&D(\hat{\rho}_0^{\otimes N}\|\hat{\rho}_1^{\otimes N})=N D(\hat{\rho}_0\|\hat{\rho}_1) \nonumber
\\
&=N \left\{\log_2 \left[\frac{n_1+1}{n_0+1}\right]+n_0\log_2 \left[\frac{n_0(n_1+1)}{n_1(n_0+1)}\right]\right\}.
\end{align}
Therefore, one has $N\le N_\delta\equiv 4\delta^2 \kappa N_B(\kappa N_B+1)/N_S^2+O(N_S^3)$. With a large $\kappa N_B$ and based on the capacity formula in Eq.~\ref{C_formula} and Eq.~\ref{CE_formula}, we expect the information transmitted in classical communication without EA to be $N_\delta C(\mathcal{L}^{\kappa,N_B})\simeq 4\kappa^3\delta^2 N_B/( N_S\ln(2))\sim \sqrt{N_\delta}\delta/\kappa^2$, which is often regarded as the square-root law for covert communication~\cite{bullock2019fundamental}. The EA communication, however, allows for transmitting a factor of $\ln(1/N_S)\sim \ln (N_\delta)$ more bits of information while maintaining the same level of covertness. The $\sqrt{N_\delta}\ln(N_\delta)$ scaling for EA covert communication thus breaks the square-root law for classical covert communication by a logarithmic factor, as illustrated by the example in Fig.~\ref{Ce_over_C_covert}.

Moreover, because the quantum states accessible to the adversary is identical for any encoded message, the adversary is unable to learn any information about the message. As such, the protocol is secure, as long as the pre-shared entanglement is perfect and the idler is retained securely in the Alice's laboratory. Note that the security is only conditioned on the entanglement being perfect, it does not rely on specific noise model for the communication channel. Pre-sharing perfect entanglement, however, is challenging in practice. Nonetheless, quantum internet is a technology under actively developed, and the challenges associated with entanglement distribution can be in principle overcome by quantum repeaters.

\section{Practical receiver structures}
\begin{figure}
\centering\includegraphics[width=0.34\textwidth]{6curves}
\caption{Entanglement-assisted communication in comparison with classical communication. Information rates per mode normalized by the unassisted classical capacity $C(\mathcal{L}^{\kappa,N_B})$. The unassisted information rate $C(\mathcal{L}^{\kappa,N_B})$ is plotted in black dashed line as a benchmark. The plots are marked blue for sum-frequency generation (SFG) based receivers, cyan for phase conjugate receiver (PCR) and red for optical parametric amplifier (OPA) receiver. $\star$: The blue cross markers are the numerical result of Monte Carlo simulation of FF-SFG receiver with 50 adaptive measurement cycles and $8\times 10^5$ samples.
Parameter: $N_s=10^{-3},N_B=10^4,\kappa=10^{-3}$.
}
\label{fig:6curves}
\end{figure}

\subsection{Quantum receivers for discrete modulation and optimum hypothesis testing}
\label{sec:BPSK}
Section~\ref{sec:encoding_capacity} demonstrates the optimality of phase encoding in EA communication without specifying a structured receiver that approaches the channel capacity. In this section, we focus on practical receiver designs. To allow efficient error correction codes, we consider the repetition coding with the BPSK modulated state ensemble $\Sigma_{\rm BPSK}^M=\{\otimes_{k=1}^M \hat{\rho}_{R_kI_k}^\theta,\theta=0,\pi\}$.
Formally, the decoding of BPSK may be viewed as a binary hypothesis testing task that discriminates two modulated phases $\theta=0,\pi$. Such a hypothesis testing task is similar to that of quantum illumination. It is known that quantum illumination's optical parametric amplifier (OPA) receiver and phase conjugate receiver (PCR)~\cite{Guha2009} both offer a 3-dB advantage in the error-probability exponent over that of the classical illumination, while the optimum quantum receiver offers a 6-dB error-probability exponent advantage. The advantage enabled by the OPA receiver has been demonstrated in a quantum-illumination experiment~\cite{Zheshen_15}. A more recent work discovered the optimum receiver~\cite{zhuang2017}, based on sum-frequency generation (SFG) and feed-forward (FF), to unleash quantum illumination's full advantage over the optimum classical scheme. Let the error probability of the symmetric hypothesis testing be $P_E$, the per-mode communication rate is given by
\begin{equation}
R_{P_E}=\frac{1}{M}\left(1+P_E\log_2 P_E+\left(1-P_E\right)\log_2\left(1-P_E\right)\right).
\label{I2}
\end{equation}

The per-mode communication rates for the OPA receiver, the PCR, and the FF-SFG receiver in EA communication are evaluated and plotted in Fig.~\ref{fig:6curves}.

\subsubsection{OPA receiver}
\label{sec:OPA}
\begin{figure}
\centering
\includegraphics[width=0.45\textwidth]{OPAsketch.pdf}
\caption{The setup of optical parametric amplifier (OPA) receiver. PD: photo-detector. The returned signal $\hat a_R$ and idler $\hat a_I$ travel through the OPA ejecting amplified beams at two output ports, with the amplifier gain $G\simeq 1$. We collect photons at the port where the idler is amplified.
}
\label{fig:OPAsetup}
\end{figure}

We first elaborate the OPA receiver (Fig.~\ref{fig:OPAsetup}). The OPA receiver applies parametric amplification across all returned-signal and retained-idler mode pairs $\{\hat a_{R}^{(m)},\hat a_{I}^{(m)}\}$ to transform the cross correlations between the input modes to photon-number differences. The two-mode squeezing in amplification produces the modes $\hat c^{(m)}=\sqrt{G} \hat a_{I}^{(m)}+\sqrt{G-1}\hat a_{R}^{\dagger(m)}$, with mean photon number
\begin{equation}
\begin{aligned}
&\overline N(\theta)\equiv \expval{\hat c^{\dagger(m)} \hat c^{(m)}}\\
&\!=\!G N_S\!+\!(G\!-\!1)(\kappa N_S\!+\!N_B\!+\!1)\!+\!2\sqrt{G(G-1)}\cos\theta C_p
\label{eq:OPAmean}
\,,\end{aligned}\end{equation}
for encoded phase $\theta$. The distribution of the total photon number across the $M$ modes can be obtained as
\begin{equation}
P_{\rm OPA}(n|\theta; M)=\binom {n\!\!+\!\!M\!\!-\!\!1}{n}\!\left(\frac{\overline N(\theta)}{1+\overline N(\theta)}\right)^{\!n}\!\!\left(\frac{1}{1+\overline N(\theta)}\right)^{\!M}.
\label{Pn_OPA}
\end{equation}

Given the conditional probability distribution, we evaluate the performance of maximum-likelihood decision in Appendix.~\ref{sec:OPAappendix}, with the error probability shown in Fig.~\ref{fig:DolinarPe} and the communication rate plotted in Fig.~\ref{fig:6curves}. An ideal OPA receiver applied on BPSK-encoded TMSV source (red line) beats the classical capacity by $\sim 18.6\%$ at $M=10^8$ and $\sim 10.0\%$ at $M=10^9$. As the number of modes $M$ in the repetition block increases, the rate per-mode decreases as expected. Note that the normalization $C(\mathcal{L}^{\kappa,N_B})$ does not change with $M$.

\subsubsection{Phase-conjugate receiver}
\begin{figure}
\centering
\includegraphics[width=0.51\textwidth]{PCRsketch.pdf}
\caption{The setup of a phase conjugate receiver (PCR). The returned signal $\hat a_R$ travels through an OPA with the amplifier gain $G=2$. The phase-conjugated field appears at the empty port, interfering with the idler $\hat a_I$ through a 50:50 beam splitter. The photon counts of the two arms of the interferometer are collected to derive the differential photon counts, based on which the message is decoded.}
\label{fig:PCRsetup}
\end{figure}

The PCR (Fig.~\ref{fig:PCRsetup}), a variant of the OPA receiver, reaches the same asymptotic error exponent with $N_S\ll1, N_B\gg 1$ but yields a slight advantage with nonzero $N_S$'s (see Fig.~\ref{fig:6curves}). The PCR conjugates the $M$ input modes $\hat a_R^{(m)}$ while amplifying the vacuum $\hat a_v^{(m)}$ at the empty port, i.e.,
\begin{equation}
\hat a_C^{(m)}=\sqrt 2 \hat a_v^{(m)}+\hat a_R^{\dagger (m)}
\,.\end{equation}
Then, the conjugated signal along with the idler is detected by a balanced difference detector with the photon count $\hat N^{(m)}=\hat N_X^{(m)}-\hat N_Y^{(m)}$, where $\hat N_X^{(m)}, \hat N_Y^{(m)}$ are the photon count of the two outputs of a 50-50 beam splitter: $\hat c_X^{(m)}=(\hat a_C^{(m)}+\hat a_I^{(m)})/\sqrt 2$, $\hat c_Y^{(m)}=(\hat a_C^{(m)}-\hat a_I^{(m)})/\sqrt 2$. In analogy to the OPA receiver, the decision is made according to the total photon count across the $M$ modes.

A detailed analysis on the communication performance in Appendix~\ref{sec:PCRappendix} shows that PCR has a slight edge on the OPA receiver for that its signal-to-noise ratio is better in higher order terms. Illustrated by the cyan line in Fig.~\ref{fig:6curves}, an ideal PCR with BPSK encoded TMSV source overcomes the classical capacity by $\sim 26.0\%$ at $M=10^8$ and $\sim 16.3\%$ at $M=10^9$.

\subsubsection{FF-SFG receiver}
\label{sec:FFSFG}

The FF-SFG receiver (Fig.~\ref{fig:FFSFGsetup}) improves the performance of the OPA receiver and is the optimum for quantum illumination in the strong noise and weak signal limit. Through an SFG process,
the FF-SFG receiver converts the cross correlations between the signal-idler pairs and produces quantum states with the photon number statistics approximating a coherent state. Thus, by analogy with the Dolinar receiver, the optimum receiver for binary coherent-state discrimination, the FF-SFG receiver asymptotically achieves the quantum Chernoff bound for quantum illumination. The principle of the FF-SFG receiver is briefly introduced below (more details in supplemental materials of Ref.~\cite{zhuang2017}).

The FF-SFG receiver consists of a sequence of multiple cycles of adaptive detection. The measurement results of all previous cycles are combined through a Bayesian strategy that produces a posterior distribution of different hypotheses. In the $k$-th cycle, the prior probabilities $P^{(k)}_0,P^{(k)}_1$ for the hypotheses $\theta_0=0,\theta_1=\pi$ are used to design the measurements, whose results are used to obtain the posteriors (also the priors of $k+1$-th cycle) $P^{(k+1)}_0,P^{(k+1)}_1$ through a Bayesian formula. Denote the maximum-likelihood decision before the cycle as $\tilde{h}=\arg\max_\ell P^{(k)}_\ell$, while the true hypothesis is $h$. As shown in Fig.~\ref{fig:FFSFGsetup}, the FF-SFG slices a $\eta\ll1$ portion of the strong returned-signal modes $\hat{c}_{S,k}^{(m)}$'s to interact with the weak idler modes $\hat{c}_{I,k}^{(m)}$'s through a SFG process to produce a sum mode $\hat{b}_k$ for detection. Denote the cross correlation between $\hat{c}_{S,k}^{(m)}$ and $\hat{c}_{I,k}^{(m)}$ as $C_{si,k}^{\rm in}$. The interaction consists of: (1) two adaptively tuned two-mode squeezing modules $\hat{S}(r_k)$ and $\hat{S}(-r_k)$ that change the cross correlation, adopting the same feed-forward strategy as in the Dolinar receiver; (2) an SFG process that converts the cross correlation into a sum-frequency mode $\hat{b}_k$. The sum-frequency mode is approximately in a coherent state $\ket{e^{i\theta_h}\sqrt{M}r}$ with $r=\sqrt\eta C_{si,k}^{\rm in}-r_k$ plus thermal noise $\eta N_SN_B$, which is to be measured by photon counting. This presents an analogy to the Dolinar receiver~\cite{dolinar_processing_1973}, which, based on the maximum-likelihood decision $\tilde{h}$, chooses a $r_k$ to displace the coherent state to a near-vacuum state, i.e., $r \sim 0$, for optimum state discrimination at the Helstrom limit (more details in Appendix.~\ref{sec:SFGappendix}).

\begin{figure}
\centering\includegraphics[width=0.49\textwidth]{FFSFGsketch.pdf}
\caption{The setup of a single cycle of the feed-forward (FF) sum-frequency generation (SFG) receiver. The signal in $k$th cycle $\hat c_{S,k}$ is first divided into a bright mainstream $\hat c_{S,2k}$ and a weak slice $\hat c_{S,1k}$ by a highly transmissive beam splitter with reflectivity $\sqrt\eta\ll 1$. The weak slice goes through a FF-SFG module containing three processes in sequence: $S(r_k), {\rm SFG}, S(-r_k)$, with the phase of squeeze parameter $r_k$ adaptively tuned. Eventually the processed weak slice $\hat c'_{S,1k}$ is merged back to the mainstream by a second highly transmissive beam splitter. We collect the photon counts at the sum frequency port of SFG and the thermal port of the second beam splitter.
}
\label{fig:FFSFGsetup}
\end{figure}

Subsequently, the sliced signal modes are recombined with the other part of the signal modes, forming an interferometer structure. An $M$-mode thermal state of $\hat{c}_{E,k}^{(m)}$'s is generated with the same mean photon number $M|r|^2$ at the dim port, which is thereby denoted as the \emph{thermal port}. The total number of photons at the thermal port is measured as well.

Finally, the bright output goes through an additional two-mode squeezing $\hat{S}(\epsilon_k)$ that wipes out the $r_k$ dependence in the evolution of the cross correlation. The evolution is terminated when the cross correlation has been almost used up, i.e., when the residual cross-correlation is only a $\epsilon\ll1$ portion of the initial cross correlation.

Similar to the results for target detection~\cite{zhuang2017}, the FF-SFG receiver also demonstrates its optimality for phase discrimination. Monte-Carlo simulations on the FF-SFG receiver are performed under various parameters for EA communication as shown in Fig.~\ref{fig:DolinarPe}, in which the Helstrom limit under a uniform prior is estimated. From the error probabilities, the communication rate can be evaluated by Eq.~\ref{I2}. As is indicated by the blue stars in Fig.~\ref{fig:6curves}, an FF-SFG receiver with BPSK encoded TMSV source overwhelms the classical capacity by an advantage of $\sim 90\%$ for $M=10^8$ and $\sim 71\%$ for $M=10^9$.
\begin{figure}
\centering
\includegraphics[width=0.31\textwidth]{DolinarPe}
\caption{The error probability of hypothesis testing between two encoded phases for optical parametric amplifier (OPA) receiver (red), phase conjugate receiver (PCR) (cyan), and feed-forward sum-frequency generation (FF-SFG) receiver (dashed line: theoretical bound; dots: numerical simulation with error bars). The dots are from Monte Carlo simulation with $8\times 10^5$ samples, which saturates the Helstrom bound. The inset is a zoom-in around error probability half, with error probability in linear scale, showing the synchronicity better.
Parameter: $N_S=10^{-3}, N_B=10^4, \kappa=10^{-3}, \eta =4\times 10^{-6}$.
\label{fig:DolinarPe}
}
\end{figure}
\subsection{Quantum receivers for continuous encoding and noisy phase estimation}
\label{sec:phase_estimation}

Although the BPSK encoding is handy for practical communications, its capacity is intrinsically bounded by one bit per symbol. This rapidly undermines the EA communication advantage as number of modes $M$ in a repetition block increases, as shown in Fig.~\ref{fig:6curves}. An immediate solution is increasing the alphabet size in the phase modulation. Continuous phase encoding is the limiting case when the alphabet size approaches infinity. With continuous phase encoding, decoding becomes a parameter estimation problem, in which one endeavors to acquire an estimation $\tilde{\theta}$ of the encoded phase $\theta$ based on the received state in the ensemble $\Sigma_{\theta}^M$. The conditional distribution $P(\tilde{\theta}|\theta)$ describes the measurement statistics. Since the encoding $\theta$ is uniformly distributed in $[0,2\pi)$, the per-mode communication rate reads
\begin{align}
&R_{P(\cdot|\cdot)}\!=\!
\nonumber
\\
&\frac{1}{M}\left(\log_2(2\pi)+\int_{0}^{2\pi}\!\!\frac{d\theta}{2\pi}\!\int_{0}^{2\pi}\!d\tilde\theta\! P(\tilde{\theta}|\theta) \log_2 P(\tilde{\theta}|\theta)\right).
\label{para_est_rate}
\end{align}

\begin{figure}[tbp]
\centering
\includegraphics[width=0.31\textwidth]{totalinfo_cont}
\caption{The performance of continuous phase encoding with adaptive optical parametric amplifier (OPA) receiver. Purple crosses: $M$-mode information rate $MR_\theta^{\rm OPA}$ of OPA; black line: M-mode unassisted phase-encoding information rate $\chi^{(M)}$, repetition-coded with phase encoding. The 1 bit information upper bound of BPSK codes is plotted in dashed line as a benchmark. $\star$: Based on Monte Carlo simulation with 50 adaptive measurement cycles and $8\times 10^5$ samples. Parameter: $N_s=10^{-3},N_B=10^4,\kappa=10^{-3}$.}
\label{fig:2curves}
\end{figure}

The decoding of continuous phase requires a design of phase estimation in presence of large noise $N_B\gg1$. To this end, we first show that the TMSV is the asymptotic optimal input state for noisy phase estimation in the limit of strong noise and weak signal, as it maximizes the QFI among all states (see details in Appendix~\ref{App:adaptive_QFI}). Moreover, we derive an adaptive version of the OPA receiver which is the asymptotic optimal receiver for phase estimation with the TMSV state, as it saturates the QFI in the limit of strong noise and weak signal. Combining these results, a noisy phase-estimation protocol that is asymptotically optimal at the large number of copies limit is devised.

Unfortunately, noisy phase estimation operating in the large number of copies limit ($M\to\infty$) cannot be used as a decoding strategy, because it leads to a zero per-mode rate. Therefore, it is crucial to optimize the phase-estimation performance with finite or even a small number of modes. In Appendix~\ref{App:adaptive_Rx}, two adaptive receiver designs are presented. The basic idea is to introduce a sequence of measurements, each performed on a subset of $M_l$ modes. The setting for each measurement is determined by a prior probability distribution updated based on previous measurement results through the maximum Fisher information or maximum Van Trees information approach~\cite{van2004detection,martinez2017VanTrees,paris2009VanTrees}. We find the Van Trees approach gives much better performance.

Using the Van Trees approach, the total information rate is calculated using Eq.~\ref{para_est_rate}, and the results are depicted in Fig.~\ref{fig:2curves}.
In the context of repetition coding, we take the $M$-mode unassisted phase-encoded Holevo information $\chi^{(M)}$ as a benchmark, assuming repetition coding of identical phase-encoded coherent states in $M$-mode blocks and no entanglement assistance (see Appendix~\ref{sec:stat} for details). Overall, in the region where BPSK saturates the one-bit bound, an extended practical EA advantage enabled by continuous encoding is observed over the repetition-phase-encoded classical communication performance $\chi^{(M)}$. Although the current numerical-simulation result for the adaptive OPA receiver shows no EA advantage over the unassisted classical capacity without repetition coding, a systematic optimization on the finite-copy phase-estimation protocol may further improve the EA performance.

\section{Experimental design}
\label{sec:exp}

A proof-of-concept experiment using the adaptive OPA receiver to beat the Holevo classical capacity can be readily built with off-the-shelf components, as conceptually illustrated in Fig.~\ref{fig:experiment}. Similar to the quantum illumination experiment~\cite{zhang2015}, broadband entanglement from spontaneous parametric down conversion (SPDC) can be generated and employed as the signal and the idler. A loosely focused pump is needed to achieve a > $99\%$ collection efficiency for the entanglement source. The idler photons can be stored in a spool of optical fibers with an efficiency in excess of $95\%$. Other experimental imperfections include free-space-to-fiber coupling loss (< $5\%$), detector loss ($1-\eta_D<2\%$), and filter losses (< $10\%$), which contributes to an overall exess loss on the signal $1-\kappa_S\sim 15\%$ and idler $1-\kappa_I\sim 15\%$ (combining the storage loss and filter loss). The noisy and lossy channel is usually induced by an adversary in a contested environment, which can be emulated by a beam splitter and a power-tunable amplified spontaneous emission source, e.g., an erbium-doped fiber amplifier, to deliver a $N_B$ up to $500 \times 10^3$.

The adaptive OPA receiver can be realized by a field-programmable gate array (FPGA) that processes real-time detector output with > $100$-MHz bandwidth, capable of generating a feed-forward signal within $\sim$ $100$ ns. In conjunction with a $20$-GHz electro-optic phase modulator that controls the pump phase, the response time of the adaptive OPA receiver is sufficient to cope with 1 kbit/s communication rate, corresponding to $M = 2\times 10^9$. This experimental platform also allows for the demonstration of the optimal noisy phase estimation protocol described in Appendix~\ref{App:adaptive_Rx}.

To analyze the communication key rate, we include the extra losses $1-\kappa_I$, $1-\kappa_S$ and detector inefficiency $1-\eta_D$ in the theory analysis. We will focus on BPSK, which is easier to implement. The analysis is in parallel to section~\ref{sec:OPA}; With the imperfections, the mean photon count in Eq.~\ref{eq:OPAmean} changes to
$
\overline N'(\theta)\!\!=\eta_D\ [\ G \kappa_I N_S+(G-1)(\kappa_S \kappa N_S+\kappa_S N_B+1)+2\sqrt{G(G-\!1)}\cos\theta\! \sqrt{\kappa_I\kappa_S} C_p\ ]
$.
As a result the optimum gain shifts to $G'=1+{\sqrt{\kappa_I N_S}}/{\kappa_S N_B}$. The distribution of the total photon number across $M$ modes is still given by Eq.~\ref{Pn_OPA}, with the new mean $\overline N'(\theta)$.
With some algebra, we find that the variable inside the error function in Eq.~\ref{PE_OPA} is a factor of $\sqrt{\kappa_I\eta_D}$ smaller than the ideal case. It is independent of the excess signal loss because the large noise background $N_B$.
As an example, at $M=10^9$ and using the same parameters as Fig.~\ref{fig:6curves}, $P_{E}^{\rm OPA \prime}={\rm erfc}(0.43\sqrt{\kappa_I\eta_D})/2$, where erfc denotes the complementary error function. To beat the classical capacity $C(\mathcal{L}^{\kappa,N_B})$, the efficiencies need to satisfy $\kappa_I\eta_D\gtrsim 90\%$. To reach this threshold, the efficiencies need to be improved upon the ones in the previous experiment~\cite{zhang2015}. In particular, if we replace the filter with a free space filter, the filter loss can be reduced to $<1\%$, thus leading to $1-\kappa_I\sim 5\%$ and $1-\eta_D\sim2\%$. In this case, the communication rate can have an advantage of $3\%$ over the ultimate unassisted classical capacity. When it comes to $M=10^8$, $P_{E}^{\rm OPA \prime}={\rm erfc}(0.14\sqrt{\kappa_I\eta_D})/2$. Under these parameters, the required efficiencies are subject to $\kappa_I\eta_D\gtrsim 84\%$. With the same loss $1-\kappa_I\sim 5\%$, $1-\eta_D\sim2\%$, the remaining advantage rises to $\sim10\%$.

\begin{figure}
\centering
\includegraphics[width=0.46\textwidth]{experiment.pdf}
\caption{The experimental setup of EA communication with an adaptive optical parametric amplifier (OPA) receiver. Broadband entangled signal and idler pairs are generated via spontaneous parametric down conversion (SPDC) and distributed to Bob and Alice. Bob employs phase modulation (PM) to encode on the signal and then sends the encoded photons to Alice. Alice applies an adaptive OPA receiver on the her retained idler and received signal to decode Bob's message. In the adaptive OPA receiver, the phase of the pump is adjusted based on prior measurement outcomes to achieve the optimal performance.}
\label{fig:experiment}
\end{figure}

\section{Blueprints for joint receivers}
\label{sec:SFG_est}
Before concluding, we point out some future directions of joint receiver design, via combining FF-SFG receiver and other receivers, for EA communication.
As shown in Ref.~\cite{zhuang2017}, conditioned on the encoded phase $\theta$ and at the $N_S\to 0$ limit, one effectively deals with a displaced thermal state $\hat{\rho}_{\lambda,n_e}^\theta$ with mean $\lambda=e^{i\theta} \sqrt{\kappa\left(1-\epsilon\right)MN_S(N_S+1)/(N_B+1)}$ and thermal noise $n_e\simeq N_S\ln\left(1/\epsilon\right)/2$ at the two output ports of the FF-SFG receiver. As explained in Section~\ref{sec:encoding}, the overall Holevo information for the repetition encoded ensemble $\Sigma_{\theta}^M$ is difficult to calculate. As an estimation, the Holevo information of the ensemble $\Sigma^M_{\rm SFG}= \{\hat{\rho}_{\lambda,n_e}^\theta, \theta\sim U[0,2\pi) \}$ is calculated. Although this is not the exact Holevo information of $\Sigma_{\theta}^M$, since the equivalence of the quantum states in the ensemble is only effective for SFG receiver's performance evaluation, one can still obtain interesting observations from this estimation.

The Holevo information of $\Sigma^M_{\rm SFG}$ can be efficiently calculated (details in Appendix.~\ref{sec:stat}).
The result for $\epsilon=0.05$ is in Fig.~\ref{Ce_over_C}. At $M=1$, this estimation well agrees with the exact result $\chi(\Sigma_\theta^1)$ and also reaches the EA capacity $C_E(\mathcal{L}^{\kappa,N_B})$. As $M$ increases, the per-mode Holevo information decreases, as expected. Nonetheless, the advantage over the classical capacity survives even at $M>10^5$.

This analogy inspires us to consider a concatenation of the FF-SFG receiver with Holevo-capacity-achieving receivers for classical communication, like the joint-detection receivers designed in Refs.~\cite{guha2011structured,wilde2012explicit}. While the FF-SFG receiver transforms the EA communication detection into a coherent state detection problem, the joint receiver optimally extracts information from the coherent states. A complete design for such a receiver is subject to future work.

\section{Conclusion}

In conclusion, we proposed a structured encoding and decoding devices to achieve EA advantages in communication over noisy bosonic channels. We showed that phase encoding on TMSV is asymptotically optimal as the noise increases. In particular, a simple BPSK encoding approaches the optimum Holevo information. In addition to offering higher-than-classical communication rates, the EA communication protocol is secure when the pre-shared entanglement is perfect and it beats the fundamental limit of covert communication without EA.

We also showed that the practical repetition coding, e.g., on frequency modes, maintains a $\ln(1/N_S)$ rate advantage, even though the per-mode communication rate decreases. Moreover, with only lossy pre-shared entanglement available at the current stage of technology with no feasible quantum network, we showed that a slightly smaller advantage remains. For repetitive BPSK encoding, we analyzed practical receivers that offer a constant advantage over the classical capacity in the low signal power regime.
For continuous phase encoding, we showed that TMSV with the practical receivers is asymptotically optimum for noisy phase estimation, in the high noise and large copies region. To optimize its parameter estimation performance with a finite copies of states, we developed adaptive Bayesian Van Trees phase estimation schemes, with fast convergence to the quantum Cram\'{e}r-Rao bound. However, the finite number of states effect prevents any quantum advantage, of which the optimization is still an open question. Nevertheless, the results on repetition coding provides a straightforward way to implement communications with a practically correctable error rate.

\begin{acknowledgements}
This research was sponsored by the Army Research Office and was accomplished under Grant Number W911NF-19-1-0418. The views and conclusions contained in this document are those of the authors and should not be interpreted as representing the official policies, either expressed or implied, of the Army Research Office or the U.S. Government. The U.S. Government is authorized to reproduce and distribute reprints for Government purposes notwithstanding any copyright notation herein. Z.Z. acknowledges National Science Foundation CCF-1907918. Q.Z. and Z.Z. also acknowledge the University of Arizona for support. Q.Z. acknowledges Boulat Bash, Saikat Guha, Jeffrey Shapiro and Nicolas Cerf for discussions. The authors also thank the comments from the anonymous referee which greatly improved the paper.
\end{acknowledgements}