\section{Introduction}
\label{sec:introduction}
While much of the information-theoretic security literature focuses on ensuring secrecy and privacy, in the sense of preventing or minimizing  the information content leaked by signals, there have been recent efforts geared at understanding the information-theoretic limits of covertness, defined as the ability to avoid detection by hiding the mere presence of signals themselves. In particular, such information-theoretic limits have been successfully characterized in the context of covert communication and covert sensing. Covert communications describe situations in which two legitimate parties attempt to communicate reliably over a noisy channel while avoiding detection by a third party. Covert communications are governed by a square-root law~\cite{Bash2013}, which limits the number of bits that can be reliably and covertly transmitted to the square root of the block length, and the channel-dependent pre-constant that governs the scaling is known for classical discrete-memoryless channels~\cite{Bloch2015b,Wang2016b,Tahmasbi2017}, Gaussian channels~\cite{Wang2016b}, classical-quantum channels~\cite{Sheikholeslami2016,Wang2016c}, and lossy bosonic channels~\cite{Gagatsos2020}. Covert sensing, in contrast, refers to scenarios in which the estimation of parameters of interest requires the use of probing signals that emit energy and are therefore detectable; if estimation could be achieved through purely passive sensing, covertness would automatically be guaranteed. Covert sensing is also governed by a form of square-root law. Specifically,~\cite{Bash2017,Gagatsos2019} have considered the problem of estimating an unknown phase over a bosonic channel while keeping the sensing undetectable by a passive quantum adversary. This operation is made possible by the presence of thermal noise, which allows one to hide the useful sensing signal in the background thermal noise and results in a mean-square phase estimation error scaling as $\bigO{\frac{1}{\sqrt{n}}}$ if $n$ is the number of modes.~\cite{Goeckel2017} has investigated a slightly different model in which the objective is to covertly estimate the impulse response of a linear system. One of the main results obtained is that the bandwidth of sensing signals must scale linearly with the time duration of these signals. Potential applications of covert sensing include covert radar and covert pilot estimation in wireless communications.

The present work studies covert sensing by drawing on connections with \emph{active hypothesis testing}~\cite{Naghshvar2013a,Naghshvar2013}, also known as \emph{controlled sensing}~\cite{Nitinawarat2013}. Active hypothesis testing differs from traditional hypothesis testing~\cite{Blahut1973}, by considering the possibility of changing the kernel through which unknown parameters are observed, which leads to estimation strategies that are potentially faster or more accurate. Recent studies of active hypothesis testing have built upon the pioneering work of Chernoff~\cite{Chernoff1959} on sequential design of experiments to provide new insights into the problem, including the benefits of sequentiality and adaptivity~\cite{Naghshvar2013a,Nitinawarat2013,Hayashi2009a}, the role of extrinsic Jensen-Shannon Divergence as an information utility metric~\cite{Naghshvar2012}, the unavoidable trade-off between reliability and resolution of estimation~\cite{Naghshvar2013}, and the identification of situations when pure (non-randomized) policies are optimal~\cite{Nitinawarat2013}. Examples of recent applications of active hypothesis testing~ include radar~\cite{Franceschetti2017} and millimeter-wave beam alignment~\cite{Chiu2019}. Active hypothesis testing offers a natural framework for studying covert sensing since covertness effectively requires one to use different observation kernels to hide the presence of probing signals.

The problem of quantum state or channel discrimination without covertness constraint has been intensively studied, see, e.g.,~\cite[Chapter 3]{Watrous_2018},~\cite{Pirandola2019}. The optimal error exponent of discrimination of finitely many quantum states has been characterized~\cite{Nussbaum_Szkola_2009, Li_2016} and resembles the optimal error exponent of \emph{classical} states discrimination; this exponent is known as the multiple quantum Chernoff distance. For \emph{quantum channel} discrimination, as the probing signal can be any quantum state and could be arbitrarily entangled with the environment and previously received signals, several intriguing phenomena, specific to the quantum world, could happen. For example, the legitimate user can substantially decrease the probability of estimation error by keeping its environment entangled with the probing signals~\cite[Example 3.36]{Watrous_2018} or quantum channels that cannot be perfectly distinguished with a single probing can be distinguished with multiple probing with zero probability of error~\cite{Acin_2001}.

In a previous conference paper~\cite{Tahmasbi2020b}, we revisited the idea of covert sensing put forward in~\cite{Bash2017,Gagatsos2019} from the perspective of active hypothesis testing in a classical setting, which we called \emph{active covert sensing}. Therein, we have characterized the exponent of the probability of detection error subject to covertness constraints for non-adaptive non-sequential strategies and illustrated the benefits of adaptive non-sequential strategies. In the present work, we expand upon these results in the quantum setting, in which the legitimate parties attempt to discriminate quantum channels subject to a covertness constraint. Some of the results developed hereafter supersede those in~\cite{Tahmasbi2020b} but, unlike~\cite{Tahmasbi2020b}, we do not consider the adaptation of the probing signals with respect to the previous outputs of the quantum channel; instead, we explore the potential benefits of using entanglement for covert sensing. Specifically, we offer the following two contributions: \begin{inparaenum}[i)]
\item when the legitimate user's probing signals are classical, but the received state by both the legitimate user and the warden are quantum, we characterize the exact detection error exponent of non-adaptive non-sequential strategies subject to a covertness constraint;
\item when the legitimate user's channel is a unitary depending on the unknown parameter, we show that the legitimate user can estimate the unknown parameter \emph{with zero error} while satisfying a stronger notion of covertness compared to what we could achieve over classical-quantum (cq)-channels. We also prove a converse result showing that the asymptotic scaling of the covertness in our achievability result is optimal.
\end{inparaenum}

The remainder of the paper is organized as follows. We introduce our notation in Section~\ref{sec:notation} and formalize the problem in Section~\ref{sec:problem-formulation}. We provide our main results for cq-channels and unitary channels in Section~\ref{sec:main-res} and prove them in Section~\ref{sec:proofs}. We defer the most technical parts of the proofs to the appendices to streamline the presentation.

\section{Notation}
\label{sec:notation}
We denote a vector of length $n$ (e.g., $(x_1, \cdots, x_n)$ in ${\mathcal{X}}^n$)  by a boldface letter (e.g. $\mathbf{x}$).  We let $T_{\mathbf{x}}$ denote the type of the vector $\mathbf{x}$, which is a \ac{PMF} over ${\mathcal{X}}$ defined by
\begin{align}
T_{\mathbf{x}}(a) \eqdef \frac{\card{\set{i\in\intseq{1}{n}: x_i = a  }}}{n},
\end{align}
where $\intseq{m}{n} \eqdef \set{i\in \mathbb{Z}: m\leq i\leq n}$. We define ${\mathcal{P}}_n({\mathcal{X}}) \eqdef \set{T_{\mathbf{x}}: \mathbf{x}\in {\mathcal{X}}^n}$ and ${\mathcal{T}}_Q \eqdef \set{\mathbf{x}: T_{\mathbf{x}}  = Q}$ for $Q\in {\mathcal{P}}_n({\mathcal{X}})$. $P_X$ denotes a probability distribution over the set ${\mathcal{X}}$ and $P_X \otimes P_Y$ is the product distribution over ${\mathcal{X}} \times {\mathcal{Y}}$ induced by two marginals $P_X$ and $P_Y$. $P_X^{\proddist n}$ also denotes the $n$-fold product distribution of $P_X$ over ${\mathcal{X}}^n$.  We define $\Hb{x} \eqdef -x\log x - (1-x)\log(1-x)$ for $x\in[0, 1]$. Let $\indic{\cdot}$ denote the indicator function. We use standard asymptotic notation $\bigO{\cdot}$, $o(\cdot)$, $\omega(\cdot)$, and $\Theta(\cdot)$. To emphasize that the constant hidden in $\bigO{\cdot}$ could only depend on a parameter $\theta$, we write $\bigO[\theta]{\cdot}$.

A quantum system $A$ is described by a finite-dimensional Hilbert space, which we also denote by $A$ with a slight abuse of notation. Let $\dim A$ be the dimension of $A$ and $\mathbf{1}_A$ be the identity map on $A$. We denote the tensor product of $A$ and $B$ by $A\otimes B$ or $AB$. ${\mathcal{L}}(A)$ denotes the set of all  linear operators from $A$ to $A$ and ${\mathcal{D}}(A)$ denotes the set of all density operators acting on $A$, which are the possible states of the quantum system $A$. Given two density operators $\rho_A \in {\mathcal{D}}(A)$ and $\rho_B\in {\mathcal{D}}(B)$, we denote the product state on $AB$ by $\rho_A \otimes \rho_B$. We also define $\rho_A^{\proddist n}$ is also $n$-times tensor product of $\rho_A$. A pure state is of the form $\kb{\phi}_A$ for a unit vector $\ket{\phi}_A\in A$. We use $\phi_A$ to denote $\kb{\phi}_A$ when there is no confusion. For $X\in {\mathcal{L}}(A)$, the trace norm of $X$ is ${\norm{X}}_1 \eqdef \tr{\smash{\sqrt{X^\dagger X}}}$, and $\nu(X)$ denotes the number of \emph{distinct} eigenvalues of $X$. We also define the support of $X\in {\mathcal{L}}({\mathcal{H}}_A)$ as the subspace orthogonal to $\ker X$, which we denote by $\text{supp}(X)$. We denote the adjoint of $X$ by $X^\dagger$. When $X$ is Hermitian, i.e., $X = X^\dagger$, $\lambda_{\min}(X)$ denotes the minimum eigenvalue of $X$. The fidelity between two density operators $\rho$ and $\sigma$ is defined as $F(\rho, \sigma) \eqdef {\norm{\smash{\sqrt{\rho} \sqrt{\sigma}}}}_1^2$. A quantum channel ${\mathcal{N}}_{A\to B}$ is a linear trace-preserving completely positive map from ${\mathcal{L}}(A)$ to ${\mathcal{L}}(B)$. Given two quantum channels ${\mathcal{N}}$ and ${\mathcal{M}}$, we denote their tensor product by ${\mathcal{N}} \otimes {\mathcal{M}}$. Let ${\mathrm{id}}_A$ be the identity channel on ${\mathcal{L}}(A)$. For two states $\rho$ and $\sigma$ with $\text{supp}(\rho) \subset \text{supp}(\sigma) $, we define
\begin{align}
 \chi_2\pr{\rho\|\sigma} &\eqdef \tr{\rho^2\sigma^{-1}}-1, \\
 \D{\rho}{\sigma} &\eqdef \tr{\rho \pr{\log \rho - \log \sigma}}.
\end{align}
Additionally, given the spectral decomposition of a state $\sigma = \sum_i \lambda_i P_i$, we define
\begin{align}
    \eta(\rho\|\sigma) = \sum_{i\neq j} \frac{\log \lambda_i - \log \lambda_j}{\lambda_i - \lambda_j} \tr{(\rho - \sigma) P_i (\rho-\sigma) P_j} + \sum_i \frac{1}{\lambda_i} \tr{(\rho - \sigma) P_i (\rho-\sigma) P_i}.
\end{align}
Finally, we  use  standard notions from differential geometry such as tangent space and derivative of a smooth functions.
\section{Problem formulation}
\label{sec:problem-formulation}

\begin{figure}[b]
  \centering
  \scalebox{0.6}{\input{quantum-system-model.tex}}
  \caption{Model for quantum covert sensing.}
  \label{fig:system-model}
\end{figure}

Let $A$, $B$, and $W$ be quantum systems and $\Theta$ be a finite set of parameters. As illustrated in Fig.~\ref{fig:system-model}, let $\set{{\mathcal{N}}_\theta : {\mathcal{L}}(A) \to {\mathcal{L}}(B) }_{\theta\in \Theta}$ and $\set{{\mathcal{E}}_\theta : {\mathcal{L}}(A) \to {\mathcal{L}}(W) }_{\theta\in \Theta}$  be two families of quantum channels. Alice's estimation strategy consists of the following. Alice prepares a possibly entangled state $\ket{\phi}_{RA^n}$, where $R$ is a reference system with $\dim R = \dim A^n$, and transmits the subsystem $A^n$ in the quantum state $\phi_{A^n}$. Alice then receives $\psi_{\theta, RA^n} \eqdef ({\mathrm{id}}_R \otimes {\mathcal{N}}_\theta^{\proddist n}) \pr{\kb{\phi}_{RA^n}}$, on which Alice performs a POVM $\set{\Gamma_\theta}_{\theta \in \Theta}$ to estimate the unknown parameter $\theta$. We measure the estimation error through
\begin{align}
\label{eq:def-est-err}
    \max_{\theta\in \Theta} \pr{1 - \tr{\psi_{\theta, RA^n} \Gamma_\theta}}.
\end{align}
Let ${\mathcal{S}}(n, \epsilon)$ denote the set of all states $\ket{\phi}_{RA^n}$ such that the estimation error is not greater than $\epsilon$ for \emph{some} POVM. The strategy is called non-sequential because the parameter $n$ is fixed, and non-adaptive because the probing signals are not adapted to past observations.

Willie observes what Alice transmits through the memory-less channel ${\mathcal{E}}_\theta$ when the parameter is $\theta$, i.e., Willie receives ${\mathcal{E}}^{{\proddist n}}_\theta(\phi_{A^n})$. One of the input vectors is denoted by $\ket{0} \in A$ and corresponds to Alice being ``inactive,'' i.e., Willie expects Alice to transmit $\ket{0}^{\proddist n}$ when no estimation strategy is run. This allows us  measure the inability of Willie to detect probing signals through the covertness metric
\begin{align}
\label{eq:def-cov}
    \max_{\theta\in \Theta}\D{{\mathcal{E}}_\theta^{{\proddist n}}(\phi_{A^n})}{{\mathcal{E}}_\theta^{\proddist n}\pr{\kb{0}^{\proddist n}}}.
\end{align}
We refer the reader to~\cite{Bloch2015b,Tahmasbi2017} for a discussion on how upper-bounding \eqref{eq:def-cov} yields a bound on the probability of error of any strategy employed by Willie to detect the presence of an estimation strategy.

We finally define quantities
\begin{align}
C(n, \epsilon) &\eqdef \min_{\ket{\phi}_{RA^n} \in {\mathcal{S}}(n, \epsilon) } \max_{\theta\in \Theta}\D{{\mathcal{E}}_\theta^{{\proddist n}}(\phi_{A^n})}{{\mathcal{E}}_\theta^{\proddist n}\pr{\kb{0}^{\proddist n}}},\\
E(n, \delta) &\eqdef \inf\set{\epsilon \in ]0, 1[: C(n, \epsilon) \leq \delta},
\end{align}
which will be useful to express the fundamental limits of Alice's performance.
\begin{remark}
To ensure that our model is physically realizable, ${\mathcal{N}}_\theta$ and ${\mathcal{E}}_\theta$ should be consistent for all $\theta$. That is, there should exist  quantum systems $B'_\theta$, $W'_\theta$, and $C_\theta$, isomorphic isometries $V_{\theta, B}: B'_\theta C_\theta \to B$ and $V_{\theta,W}: W'_{\theta}C_{\theta} \to W$ (i.e., $B'_\theta C_\theta \cong B$ and $W'_\theta C_\theta \cong W$) and  a quantum channel ${\mathcal{M}}_\theta: {\mathcal{L}}(A) \to {\mathcal{L}}(B'W'C)$ such that
\begin{align}
    {\mathcal{N}}_\theta(X) &= V_{\theta, B} \ptr{W'_\theta}{{\mathcal{M}}_\theta(X)} V_{\theta, B}^\dagger~\quad \forall X\in {\mathcal{L}}(A)\\
    {\mathcal{E}}_\theta(X) &= V_{\theta, W} \ptr{B'_\theta}{{\mathcal{M}}_{\theta}(X)} V_{\theta, W}^\dagger\quad \forall X \in {\mathcal{L}}(A).
\end{align}
Because some parts of Alice's and Willie's output systems  could be in common, the order in which Alice and Willie observe their outputs matter. We assume that Willie first observes his outputs and, should he decides to disturb the systems, Alice is notified through another means of communication.
\end{remark}
\section{Main results}
\label{sec:main-res}
\subsection{Cq-channels}
\label{sec:main-res-cq}
We first provide the full asymptotic characterization of Alice's optimal performance for covert sensing over cq-channels. Although the cq channels we consider here have finite dimension, cq channels are good models for those channels that arise in quantum optics, such as bosonic channels in which the input is a classical parameter of the transmitted states, see, e.g.,~\cite{Bash2017}. In particular, we assume that both ${\mathcal{N}}_\theta$ and ${\mathcal{E}}_\theta$ are cq for all $\theta$. That is, there exist an  orthonormal basis  $\set{\ket{a_u}_A: u \in {\mathcal{U}}}$  for $A$ and two sets of quantum states $\set{\rho_{B|\theta}^u}_{u \in {\mathcal{U}}, \theta\in \Theta}$ and $\set{\rho_{W|\theta}^u}_{u \in{\mathcal{U}}, \theta\in \Theta}$   such that
\begin{align}
    {\mathcal{N}}_\theta\pr{\ketbra{a_{u}}{a_{u'}}} &= \indic{u = u'}\rho_{B|\theta}^u \quad \forall u, u' \in {\mathcal{U}}\\
    {\mathcal{E}}_\theta\pr{\ketbra{a_{u}}{a_{u'}}} &= \indic{u = u'}\rho_{W|\theta}^u \quad \forall u, u' \in {\mathcal{U}}.
\end{align}
Note that ${\mathcal{E}}_\theta$ and ${\mathcal{N}}_\theta$ are uniquely characterized by the linearity of quantum channels.  We also assume that $0\in {\mathcal{U}}$ and that $\ket{a_0}$ is the innocent state $\ket{0}$.
We also impose some mild restrictions on the cq-channels that are required to make the problem meaningful.
\begin{enumerate}
    \item $\widetilde{\Theta} \eqdef \set{\theta \in \Theta: \exists \theta' \in \Theta\setminus\set{\theta}: \rho_{B|\theta}^0 = \rho_{B|\theta'}^0  } \neq \emptyset$. This ensures that Alice cannot distinguish all parameters by sending only $0$, which would result in perfect covertness.
    \item There exists $\theta \in \Theta$ such that   no distribution $P$ over ${\mathcal{U}}\setminus \set{0}$ is such that $\sum_u P(u) \rho_{W|\theta}^u  = \rho_{W|\theta}^0$.
    This ensures that Alice cannot simulate sending $0$ by a random selection of other inputs.
    \item For all $\theta\in \Theta$ and for all $u \in {\mathcal{U}}$ $\textnormal{supp}\pr{\rho_{W|\theta}^u} \subset \textnormal{supp}\pr{\rho_{W|\theta}^0}$. This ensures that Willie cannot detect the estimation with non-vanishing probability when a state with support not included in $\textnormal{supp}\pr{\rho_{W|\theta}^0}$ is transmitted.
    \end{enumerate}
We introduce the notion of conditional Chernoff information to state our main result.
\begin{definition}
Let $\theta$ and $\theta'$ be two parameters in $\Theta$ and $P$ be a distribution over ${\mathcal{U}}$. The conditional Chernoff information  is
\begin{align}
\label{eq:chernoff-inf-def}
\Dcc{\theta}{\theta'}{P} \eqdef \sup_{s\in [0, 1]} - \sum_u P(u) \log\pr{\tr{\pr{\rho_{B|\theta}^u}^s \pr{\rho_{B|\theta'}^{u}}^{1-s}}}.
\end{align}
\end{definition}
\begin{theorem}
\label{th:n-adap-disc}
Under the assumption on the cq-channel discussed above, we have $-\log E(n, \delta_n) = \Theta(\sqrt{n\delta_n})$ for any sequence $\set{\delta_n}_{n\geq 1} = \bigO{1} \cap \omega\pr{\frac{\log n}{n}}$, and in particular,
\begin{align}
\label{eq:non-adaptive}
    \lim_{n\to \infty} -\frac{\log E(n, \delta_n)}{\sqrt{n\delta_n}}  = \sup_{P} \frac{\sqrt{2}\min_{\theta\neq \theta': \rho_{B|\theta}^u = \rho_{B|\theta}^0}\Dcc{\theta}{\theta'}{P}}{\sqrt{ \max_{\theta } \eta(\sum_u P(u)\rho_{W|\theta}^u\| \rho_{W|\theta}^0)}},
\end{align}
where the supremum is taken over all probability distributions $P$ over ${\mathcal{U}} \setminus \set{0}$.
\end{theorem}
\begin{remark}
\cite[Th.~1]{Tahmasbi2020b} can be obtained as a special case of Theorem~\ref{th:n-adap-disc}, corresponding to the situation in which all operators in $\set{\qy{u}}_{u\in {\mathcal{U}}, \theta \in \Theta}$ and all operators in $\set{\qz{u}}_{u\in {\mathcal{U}}, \theta \in \Theta}$ mutually commute.
\end{remark}
\subsection{Unitary channels: the power of entanglement}
We now consider a situation in which $\set{U_\theta}_{\theta\in \Theta}$ is a family of unitaries acting on $A$ such that ${\mathcal{N}}_\theta(\rho) = U_\theta \rho U_\theta^\dagger$ for all $\theta \in \Theta$. This corresponds to an ideal situation in which Alice is able to receive all transmitted signals without any loss. We also assume that ${\mathcal{E}}_\theta$ is independent of $\theta$, i.e., there exists a quantum channel ${\mathcal{E}}:{\mathcal{L}}(A)\to {\mathcal{L}}(W)$ such that ${\mathcal{E}}_\theta = {\mathcal{E}}$ for all $\theta\in \Theta$. The latter assumption helps us  simplify the expression of our results but our proof does not exploit this assumption. Also note that this assumption does not trivialize the problem since we still require the sensing to be covert.

\subsubsection{Achievability}
We require again mild assumptions in our achievability result to make the problem meaningful.
\begin{enumerate}
    \item $U_\theta \neq U_{\theta'}$ for all $\theta\neq \theta'$. Without this assumption Alice would be unable to distinguish at least two parameters.
    \item $\supp{{\mathcal{E}}(\rho)} \subset \supp{{\mathcal{E}}(\kb{0})}$ for all $\rho \in {\mathcal{D}}(A)$. Without this assumption, the transmission of such $\rho$ would allow Willie to systematically detect Alice.
\end{enumerate}
\begin{theorem}
\label{th:entang-cov-est-part1}
Under the above assumptions, there exists a positive integer $N$ depending on $\set{U_\theta}_{\theta\in \Theta}$ such that for all $n \geq N$
\begin{align}
    C(n, 0) \leq \bigO[\set{U_\theta}, {\mathcal{E}}]{\frac{1}{n}}.
\end{align}
\end{theorem}
Note that there is a significant difference between the optimal performance of  unitary channels and cq-channels. Indeed, according to Theorem~\ref{th:n-adap-disc}, we have $C(n, \exp(-\bigO{\sqrt{n} \delta}) \geq \delta $ for all $\delta>0$ and for all cq-channels, while $C(n, 0) \leq \bigO{1/n}$ when Alice's channel is a unitary for all parameters $\theta$. As we show next, the rate of decay of the covertness metric with $n$ is optimal under mild assumptions.
\subsubsection{Converse}
Our converse result holds under the following mildly restrictive assumptions.
\begin{enumerate}
    \item $U_\theta \ket{0} = U_{\theta'} \ket{0}$ for some $\theta \neq \theta'$, i.e., Alice cannot distinguish all parameters by always sending  $\ket{0}$ and trivially ensuring covertness.
    \item ${\mathcal{E}}(\rho) \neq {\mathcal{E}}(\kb{0})$ for all $\rho \in {\mathcal{D}}(A) \setminus \set{\kb{0}}$, i.e., Alice cannot simulate sending $\ket{0}$ using other quantum states.
    \item  There exists no sequence $\set{\rho_n}_{n\geq 1} \subset {\mathcal{D}}(A) \setminus{\kb{0}}$ such that
\begin{align}
    \lim_{n\to \infty} \frac{\norm[1]{\rho_n - \kb{0}}}{\norm[1]{{\mathcal{E}}(\rho_n) - {\mathcal{E}}(\kb{0})}} = \infty.
\end{align}
This last assumption prevents Alice to send states whose image under ${\mathcal{E}}$ is close to ${\mathcal{E}}(\kb{0})$. We show that testing this assumption is possible by providing a \emph{computable} equivalent form in Lemma~\ref{lm:cont-q-ch}.
\end{enumerate}

\begin{theorem}
\label{th:entang-cov-est-part2}
    Under the above assumptions, for all $\epsilon \in [0, 1]$, we have
    \begin{align}
        C(n, \epsilon) \geq \bigO[{\mathcal{E}} ]{\frac{ \pr{1-\epsilon}^4}{n}}.
    \end{align}
\end{theorem}
\begin{remark}
 Note that Theorem~\ref{th:entang-cov-est-part1} and Theorem~\ref{th:entang-cov-est-part2} require different assumptions because we need to restrict Willie's power for achievability and Alice's power for converse.
\end{remark}

We now provide a computable equivalent form of our last assumption in the converse result. We first need the following definition, which introduces a map from ${\mathcal{L}}(A)$ to a Euclidean space.
\begin{definition}
\label{def:f}
Let $d\eqdef \dim A $ and $\set{\ket{a_1}, \cdots, \ket{a_d}}$ be an orthonormal basis for $A$ such that $\ket{a_1} = \ket{0}$. We define a function $f:{\mathcal{L}}(A) \to \mathbb{R}^{2d^2}$ which maps $X\in {\mathcal{L}}(A)$ to the vector $(\textnormal{Re}(\bra{a_i} X \ket{a_j}), \textnormal{Im}(\bra{a_i} X \ket{a_j}))_{i,j\in \intseq{1}{d}}$.

We also define $2d - 2$ vectors  $a_1, \cdots, a_{2d-2} \in \mathbb{R}^{2d^2}$ such that the $j$th component of $a_i$ is $\indic{i = j} + \indic{j = \lceil i / 2 \rceil d + 1}$.
\end{definition}
We show in Appendix~\ref{sec:cont-q-ch} that the vectors $a_1, \cdots, a_{2d-2} \in \mathbb{R}^{2d^2}$ form a basis for the tangent space of
\begin{align}
    f(\set{\kb{\phi}: \phi \in A, \nrm{\phi} = 1} \setminus \kb{0})
\end{align}
at the origin.

\begin{lemma}
\label{lm:cont-q-ch}
Let ${\mathcal{E}}: {\mathcal{L}}(A) \to {\mathcal{L}}(B)$ be a quantum channel and $\ket{0} \in A$ be a unit vector. Suppose that ${\mathcal{E}}(\rho) \neq {\mathcal{E}}(\kb{0})$ for all $\rho \in {\mathcal{D}}(A) \setminus \set{\kb{0}}$.
We then have
\begin{align}
\sup_{\rho  \in {\mathcal{D}}(A) \setminus \set{\kb{0}}} \frac{\nrm{\rho - \kb{0}}_1}{\nrm{{\mathcal{E}}(\rho) - {\mathcal{E}}(\kb{0})}_1} < \infty
\end{align}
if and only if $f(\ker {\mathcal{E}}) \cap \textnormal{span}(a_1, \cdots, a_{2d - 2}) = \set{0} $ where the function $f$ and the vectors $a_1, \cdots, a_{2d - 2}$ are defined in Definition~\ref{def:f}.
\end{lemma}

\begin{proof}
See Appendix~\ref{sec:cont-q-ch}.
\end{proof}

\begin{remark}
If ${\mathcal{E}}:{\mathcal{L}}(A) \to {\mathcal{L}}(E)$ is an invertible map (as a linear map), there exists no sequence satisfying the above conditions, which is consistent with our result as $\ker {\mathcal{E}} = \set{0}$. However, there might be some quantum channels ${\mathcal{E}}$ that  are not invertible, but for which we still have $f(\ker {\mathcal{E}}) \cap \textnormal{span}\set{a_1, \cdots, a_{2d-2}} = \set{0}$.
\end{remark}
\section{Proofs}
\label{sec:proofs}
\subsection{Achievability proof of Theorem~\ref{th:n-adap-disc}}
We first derive a general bound on the reliability of a strategy when the input is generated according to $P_{\mathbf{U}}$.
\begin{lemma}
\label{lm:one-shot-achv}
Let $P_{\mathbf{U}}$ be any distribution over ${\mathcal{U}}^n$. There exists an $(n, \epsilon, \delta)$ non-adaptive strategy with
\begin{align}
\label{eq:one-shot-est}
    \log \epsilon &= \max_{\theta\neq \theta'}\log \pr{\sum_{Q \in {\mathcal{P}}_{n}({\mathcal{U}})}P_{\mathbf{U}}({\mathcal{T}}_{Q}) \exp\pr{-n\Dcc{\theta}{\theta'}{Q}}} +  \bigO[\dim B, \card{{\mathcal{U}}}, \card{\Theta}]{\log n}\\
    \delta &= \max_{\theta\in \Theta} \D{\sum_{\mathbf{u}} P_{\mathbf{U}}(\mathbf{u}) \qpz{\mathbf{u}}}{\qpz{\mathbf{0}}}.
    \label{eq:one-shot-cov}
\end{align}
\end{lemma}

\begin{proof}
See Appendix~\ref{sec:one-shot-achv}.
\end{proof}

Deterministic strategies, for which $P_{\mathbf{U}}$ is positive only on one input sequence,  cannot achieve any positive exponent as shown next. Let $\widetilde{\Theta}$ be as defined in Section~\ref{sec:main-res-cq} and $\theta\in \widetilde{\Theta}$ be such that   no distribution $P$ over ${\mathcal{U}}\setminus \set{0}$ is such that $\sum_u P(u) \qz{u}= \qz{0}$. If Alice transmits a fixed sequence $\mathbf{u}$, we have
\begin{align}
\delta
&\geq \D{\qpz{\mathbf{u}}}{\qpz{\mathbf{0}} } \\
& \geq \card{\set{i\in \intseq{1}{n}: u_i \neq  0 }} \min_{u \in {\mathcal{U}} \setminus \set{0}} \D{\qz{u}}{\qz{0}}.
\end{align}
By our assumption on $\theta$,  $\min_{u \in {\mathcal{U}} \setminus \set{0}} \D{\qz{u}}{\qz{0}}$ is positive. Therefore, the number of non-zero elements of $\mathbf{u}$ is uniformly bounded. By  definition of $\widetilde{\Theta}$, there also exists $\theta' \in \Theta \setminus \set{\theta}$ such that $\qy{0} = \qyp{0}$. Thus, even when restricting the parameter set to $\set{\theta, \theta'}$, the estimation error cannot vanish. Hence, no positive exponent is achievable.

Furthermore, \ac{iid} actions cannot achieve the optimal exponent since, with exponentially small probability, the type of the input sequence largely deviates from the typical  input type and affects the achievable exponent.

We now introduce an input probability distribution $P_{\mathbf{U}}$ that circumvents the challenges discussed above. Intuitively, $P_{\mathbf{U}}$ should be such that 1) we can control the type of the sequences in its support and 2) we can ensure covertness.  Let $P$ be any distribution over ${\mathcal{U}}$ and define $\alpha \eqdef 1 - P(0)$. We  set for $\zeta > 0$,
\begin{align}
\label{eq:pun-def1}
    {\mathcal{Q}} &\eqdef \set{Q \in {\mathcal{P}}_n({\mathcal{U}}): |Q(u) - P(u)| \leq \alpha \zeta~\forall u \in {\mathcal{U}}\setminus\set{0}},\\
    {\mathcal{A}} &\eqdef \cup_{Q \in {\mathcal{Q}}} {\mathcal{T}}_Q,\\
    P_{\mathbf{U}}(\mathbf{u}) &\eqdef \begin{cases}\frac{P^{\proddist n}(\mathbf{u})}{P^{\proddist n}( {\mathcal{A}})}\quad& \mathbf{u} \in {\mathcal{A}}, \\ 0 \quad & \mathbf{u} \notin {\mathcal{A}}.  \end{cases}\label{eq:pun-def}
\end{align}
Intuitively, the parameter $\alpha$ allows us to finely control the type of sequences in ${\mathcal{A}}$ with $\alpha$ possibly depending on $n$.
In the following lemma, we provide bounds on \eqref{eq:one-shot-est} and \eqref{eq:one-shot-cov} for this specific choice of $P_{\mathbf{U}}$.
\begin{lemma}
\label{lm:spec-pu-prop}
Let $\theta$ and $\theta'$ be two distinct elements of $\Theta$. We have
\begin{multline}
    \log\pr{ \sum_{Q \in {\mathcal{P}}_{n}({\mathcal{U}})}P_{\mathbf{U}}({\mathcal{T}}_{Q}) \exp\pr{-n\Dcc{\theta}{\theta'}{Q}}} \leq \min\left(-n \Dcc{\theta}{\theta'}{P} - \bigO[\set{\qy{u}}]{n\alpha\zeta \card{{\mathcal{U}}}}, \right.\\
    \left.n(1- \alpha(1 + \zeta \card{{\mathcal{U}}})) \inf_{s\in [0, 1]} \log \pr{ \tr{ \pr{\qy{0}}^s \pr{\qyp{0}}^{1-s}}}\right).\label{eq:est-err-1}
\end{multline}
In addition, we have
\begin{multline}
\label{eq:covertness-pu}
    \D{\sum_{\mathbf{u}} P_{\mathbf{U}}(\mathbf{u}) \qpz{\mathbf{u}}}{\qpz{\mathbf{0}}}
    \leq n \D{\sum_u P(u) \qz{u}}{\qz{0}} \\
    + 2 \card{{\mathcal{U}}}\exp\pr{-\frac{\alpha n \zeta^2}{3}} \log \pr{\frac{\dim W}{\lambda_{\min}\pr{\qz{0}}}} n + \Hb{2 \card{{\mathcal{U}}}\exp\pr{-\frac{\alpha n \zeta^2}{3}}}.
\end{multline}
\end{lemma}
\begin{proof}
See Appendix~\ref{sec:spec-pu-prop}.
\end{proof}
We are now ready to prove the achievability of the exponent in \eqref{eq:non-adaptive}. Let $\overline{P}$ be any distribution over ${\mathcal{U}}\setminus \set{0}$ (not depending on $n$) and $\set{\lambda_n}_{n\geq 0}$ be a vanishing sequence specified later. We define
\begin{align}
   \label{eq:alpha-def} \alpha_n & \eqdef \sqrt{\frac{2\delta_n(1-\lambda_n) }{n\max_{\theta} \eta(\sum_u \overline{P}(u) \qz{u}\| \qz{0})}},\\
    P(u) &\eqdef \begin{cases}1 - \alpha_n \quad &u = 0,\\ \alpha_n \overline{P}(u)\quad &u \neq 0.\end{cases}
\end{align}
We then choose $P_{\mathbf{U}}$ according to \eqref{eq:pun-def}, for which we have
\begin{align}
   & \D{\sum_{\mathbf{u}} P_{\mathbf{U}}(\mathbf{u}) \qpz{{\mathbf{u}}}}{\qpz{\mathbf{0}}} \\
   & \stackrel{(a)}{\leq} n \D{\sum_u P(u) \qz{u}}{\qz{0}} + 2 \card{{\mathcal{U}}}\exp\pr{-\frac{\alpha_n n \zeta^2}{3}} \log \frac{ \dim W}{\lambda_{\min}\pr{\qz{0}}} n + \Hb{2 \card{{\mathcal{U}}}\exp\pr{-\frac{\alpha_n n \zeta^2}{3}}}\\
    &\stackrel{(b)}{=} n \D{\sum_u P(u) \qz{u}}{\qz{0}}+ \exp\pr{-\omega\pr{\log n}}\\
    &\stackrel{(c)}{=} n\pr{\frac{\alpha_n^2}{2}\eta(\sum_u \overline{P}(u)\qz{u}\| \qz{0} ) + \bigO{\alpha_n^3} } +  \exp\pr{-\omega\pr{\log n}} \\
    &\stackrel{(d)}{\leq} (1-\lambda_n)\delta_n + \bigO{\alpha_n^3 n}  +  \exp\pr{-\omega\pr{\log n}}\\
    &= (1-\lambda_n)\delta_n + \bigO{\frac{\delta_n^{\frac{3}{2}}}{\sqrt{n}}}  +  \exp\pr{-\omega\pr{\log n}}
\end{align}
where $(a)$ follows from \eqref{eq:covertness-pu}, $(b)$ follows since we are choosing $\delta_n = \omega\pr{\frac{\log n}{n}}$, $(c)$ follows from Lemma~\ref{lm:approx-rel-entropy} in Appendix~\ref{sec:approx-rel-entropy} and $(d)$ follows from \eqref{eq:alpha-def}. We set
\begin{align}
    \lambda_n = \bigO{\frac{\delta_n^{\frac{1}{2}}}{\sqrt{n}}}  + \frac{1}{\delta_n} \exp\pr{-\omega\pr{\log n}},
\end{align}
which is vanishing and ensures that $\D{\sum_{\mathbf{u}} P_{\mathbf{U}}(\mathbf{u}) \qpz{{\mathbf{u}}}}{\qpz{\mathbf{0}}} \leq \delta_n$. Therefore, by Lemma~\ref{lm:one-shot-achv}, there exists an $(n, \epsilon_n, \delta_n)$ with
\begin{align}
    \log \epsilon_n = \max_{\theta\neq \theta'} \log\pr{ \sum_{Q \in {\mathcal{P}}_{n}({\mathcal{U}})}P_{\mathbf{U}}({\mathcal{T}}_{Q}) \exp\pr{-n\Dcc{\theta}{\theta'}{Q}}} + \bigO[\dim B, \card{{\mathcal{U}}}, \card{\Theta}]{\log n} \label{eq:est-error}.
\end{align}
To  upper-bound $\epsilon_n$, we consider two cases for $\theta$ and $\theta'$. If $\qy{0} = \qyp{0}$, then \eqref{eq:est-err-1} yields that
\begin{align}
-\log \pr{\sum_{Q\in {\mathcal{P}}_n({\mathcal{U}})}P_{\mathbf{U}}({\mathcal{T}}_{Q}) \exp\pr{-n \Dcc{\theta}{\theta'}{Q}}}
&\geq n\Dcc{\theta}{\theta'}{P} +\bigO[\set{\qz{u}}]{n\alpha_n\zeta \card{{\mathcal{U}}}} \\
&\stackrel{(a)}{\geq} n\alpha_n(1 + \zeta \card{{\mathcal{U}}} \bigO[\set{\qz{u}}]{1})) \Dcc{\theta}{\theta'}{\overline{P}}, \label{eq:bound-zero-eq-epsilon}
\end{align}
where $(a)$ follows from the definition of $\overline{P}$ and since all terms in the definition of $\Dcc{\theta}{\theta'}{P}$ are non-negative. If $\qy{0} \neq \qyp{0}$,  we have
\begin{multline}
-\log \pr{P_{\mathbf{U}}({\mathcal{T}}_{Q}) \exp\pr{-n\Dcc{\theta}{\theta'}{P}}}\\  \geq  -(1- \alpha_n(1 + \zeta \card{{\mathcal{U}}})) n \inf_{s\in [0, 1]} \log \pr{\tr{ \pr{\qy{0}}^s \pr{\qyp{0}}^{1-s}}} \stackrel{(a)}{=} \Theta(n),
\end{multline}
where $(a)$ follows since $\inf_{s\in [0, 1]} \log \pr{\tr{ \pr{\qy{0}}^s \pr{\qyp{0}}^{1-s}}} < 0$ when $\qy{0} \neq \qyp{0}$.
Therefore, we can exclude all pairs $(\theta, \theta')$ with $\qy{0} \neq \qyp{0}$ from the maximization in \eqref{eq:est-error} for large enough $n$. Thus, using Lemma~\ref{lm:one-shot-achv} and \eqref{eq:bound-zero-eq-epsilon}, we have
\begin{align}
-\log \epsilon_n \geq n\alpha_n  (1 + \zeta \card{{\mathcal{U}}}\bigO[\set{\qz{u}}]{1}) \min_{\theta, \theta': \qy{0} = \qyp{0}}  \Dcc{\theta}{\theta'}{\overline{P}}  + \bigO[\dim B, \card{{\mathcal{U}}}, \card{\Theta}]{\log n}.
\end{align}
Using the definition of $\alpha_n$ in \eqref{eq:alpha-def}, we obtain
\begin{align}
\liminf_{n\to \infty} - \frac{\log \epsilon_n}{\sqrt{\delta_n n}} \geq \frac{\sqrt{2}\min_{\theta\neq \theta': \qy{0} = \qyp{0}}\Dcc{\theta}{\theta'}{\overline{P}}}{\sqrt{ \max_{\theta} \eta(\sum_u \overline{P}(u)\qz{u}\| \qz{0})}}.
\end{align}

\subsection{Converse proof of Theorem~\ref{th:n-adap-disc}}
Let us consider a sequence of $(n, \epsilon_n, \delta_n)$ non-adaptive strategies, for which the input is generated according to a \ac{PMF} $P_{{\mathbf{U}}}$ over ${\mathcal{U}}^n$ in the $n^{th}$ strategy. We define
\begin{align}
    \overline{P} &\eqdef \frac{1}{n} \sum_{i=1}^n P_{U_i},\\
    \alpha_n &\eqdef 1- \overline{P}(0),\\
    \widetilde{P}(u) &\eqdef \begin{cases}\frac{\overline{P}(u)}{\alpha_n}\quad& u \neq 0,\\ 0 \quad & u = 0.\end{cases}
\end{align}

\begin{lemma}
\label{lm:one-shot-converse}
We have
\begin{align}
    \label{eq:one-shot-converse1}
    -\log \epsilon_n \leq   \min_{\theta\neq \theta':\qy{0} = \qyp{0}}  n \alpha_n \Dcc{\theta}{\theta'}{\widetilde{P}} - \bigO[\dim B, \card{{\mathcal{U}}}, \card{\Theta}]{\frac{\log n}{n}}.
\end{align}
As $n$ goes to infinity, $\alpha_n$ tends to zero and we have
\begin{align}
    \label{eq:one-shot-converse2}
    \frac{\delta_n}{n} \geq \frac{\alpha_n^2}{2} \max_{\theta}\eta(\sum_u \widetilde{P}(u) \qz{u}\| \qz{0}) + \bigO[\set{\qz{0}}]{\alpha_n^3}.
\end{align}
\end{lemma}
\begin{proof}
See Appendix~\ref{sec:one-shot-converse}.
\end{proof}
We therefore have
\begin{align}
    -\frac{\log \epsilon_n}{\sqrt{\delta_n n}}
    &\stackrel{(a)}{\leq} \frac{  n\alpha_n \min_{\theta\neq \theta': \qy{0} = \qyp{0}}\Dcc{\theta}{\theta'}{\widetilde{P}}- \bigO[\dim B, \card{{\mathcal{U}}}, \card{\Theta}]{\frac{\log n}{n}}}{\sqrt{\delta_n n}}\\
    &\stackrel{(b)}{\leq} \frac{ \sqrt{\frac{2n\delta_n(1+o(1))}{\max_{\theta}\eta(\sum_u \widetilde{P}(u) \qz{u}\| \qz{0})}} \min_{\theta\neq \theta': \qy{0} = \qyp{0}}\Dcc{\theta}{\theta'}{\widetilde{P}}}{\sqrt{\delta_n n}}\\
    &= \sqrt{\frac{2(1+o(1))}{\max_{\theta}\eta(\sum_u \widetilde{P}(u) \qz{u}\| \qz{0})}} \min_{\theta\neq \theta': \qy{0} = \qyp{0}}\Dcc{\theta}{\theta'}{\widetilde{P}}
\end{align}
where $(a)$ follows from \eqref{eq:one-shot-converse1}, and $(b)$ follows from \eqref{eq:one-shot-converse2} and the constraint $\delta_n = \omega(\log n/n)$. Taking the limit  as $n$ goes to infinity, we obtain the desired converse bound.

 \subsection{Proof of Theorem~\ref{th:entang-cov-est-part1}}
We first recall from~\cite{Acin_2001} that given a unitary $U\neq \mathbf{1}_A$ acting on $A$, one can find a positive integer $m$ and a pure state $\ket{\nu}_{A^m}$ such that $\bra{\nu} U^{\proddist m} \ket{\nu} = 0$. Applying this result to the unitary $U_\theta^\dagger U_{\theta'} \neq \mathbf{1}_A$, there exist a  positive integer $m_{\theta, \theta'}$ and pure state $\ket{\nu_{\theta, \theta'}}_{A^{m_{\theta, \theta'}}}$ in $A^{m_{\theta, \theta'}}$ such that $\bra{\nu_{\theta, \theta'}} (U_\theta^\dagger U_{\theta'})^{\proddist m_{\theta, \theta'}} \ket{\nu_{\theta, \theta'}} = 0$. Let $m \eqdef \sum_{\theta\neq \theta'} m_{\theta, \theta'}$ and $\ket{\nu}_{A^m}$ be a pure state in $A^m$ defined as the tensor product of all $\ket{\nu_{\theta, \theta'}}_{A^{m_{\theta, \theta'}}}$ in an arbitrary order. Let $\ell \eqdef \lfloor n / m \rfloor$. Alice decomposes the first $m\ell$ channel uses into $\ell$ sub-blocks of length $m$, selects one sub-block at random, transmits $\ket{\nu}_{A^m}$ on that sub-block, and transmits $\ket{0}$ for any other channel use. By transmitting $\ket{\nu}_{A^m}$, Alice can estimate $\theta$ without error.

We now analyze the covertness. Let us denote the state transmitted through the channels by
\begin{align}
    \phi_{A^n} \eqdef \frac{1}{\ell} \sum_{i=1}^\ell (\kb{0})^{\proddist(i-1)m} \otimes \kb{\nu}_{A^m}\otimes (\kb{0})^{n - im}.
\end{align}
Note that
\begin{align}
    \D{{\mathcal{E}}^{\proddist n}(\phi_{A^n})}{{\mathcal{E}}^{\proddist n}(\kb{0}^{\proddist n})}
    &\stackrel{(a)}{\leq} \frac{\chi_2({\mathcal{E}}^{\proddist m}(\kb{\nu}_{A^m}) \| {\mathcal{E}}^{\proddist m}(\kb{0}^{\proddist m}))}{\ell}\\
    & \leq \frac{1}{\ell \lambda_{\min}({\mathcal{E}}(\kb{0}))^m}\\
    &\stackrel{(b)}{\leq} \frac{m}{(n-m) \lambda_{\min}({\mathcal{E}}(\kb{0}))^m},
\end{align}
where $(a)$ follows from~\cite[Eq. (B144)]{tahmasbi2018framework}, and $(b)$ follows since $\ell>(n-m)/m$. Since $m$ is a constant independent of $n$, we obtain the desired bound on the covertness.

\subsection{Proof of Theorem~\ref{th:entang-cov-est-part2}}
We consider a general strategy, in which Alice initially prepares $\ket{\phi}_{RA^n}$ and, after receiving $\ket{\psi_\theta}_{RA^n} \eqdef \pr{\mathbf{1}_R \otimes U_\theta^{\proddist n}} $ for an unknown parameter $\theta$, performs a POVM to estimate $\theta$. We assume that the the estimation error as defined in \eqref{eq:def-est-err} is $\epsilon$ and the covertness as defined in \eqref{eq:def-cov} is $\delta$. We desire to prove that $\delta \geq \bigO[{\mathcal{E}}]{(1-\epsilon)^4/n}$. We show this result in three steps sketched as follows.
\begin{enumerate}
    \item We first use the assumption that $U_\theta \ket{0} = U_{\theta'}\ket{0}$ for some $\theta \neq \theta'$ to show that $\epsilon \geq 1 - 2\nrm{\phi_{A^n} - \pr{\kb{0}}^{\proddist n}}_1$.
    \item We upper-bound $\nrm{\phi_{A^n} - \pr{\kb{0}}^{\proddist n}}_1$ by $\bigO[{\mathcal{E}}]{\pr{n\sum_{i=1}^n \D{{\mathcal{E}}(\phi_{A_i})}{{\mathcal{E}}(\kb{0})}}^{\frac{1}{4}}}$. The proof of this step relies on both  our assumptions on ${\mathcal{E}}$, i.e., ${\mathcal{E}}(\rho) \neq {\mathcal{E}}(\kb{0})$ for all $\rho \in {\mathcal{D}}(A) \setminus \set{\kb{0}}$ and
    \begin{align}
    \sup_{\rho  \in {\mathcal{D}}(A) \setminus \set{\kb{0}}} \frac{\nrm{\rho - \kb{0}}_1}{\nrm{{\mathcal{E}}(\rho) - {\mathcal{E}}(\kb{0})}_1} < \infty.
    \end{align}
    \item We use standard converse argument for covert communication to show that
    \begin{align}
    \sum_{i=1}^n \D{{\mathcal{E}}(\phi_{A_i})}{{\mathcal{E}}(\kb{0})} \allowbreak \leq \delta.
    \end{align}
\end{enumerate}
Combining these three steps yields that $\epsilon \geq 1 - \bigO[{\mathcal{E}}]{(n\delta)^{\frac{1}{4}}}$, which is equivalent to $\delta \geq \bigO[{\mathcal{E}}]{(1-\epsilon)^{4}/n}$ as desired. We now prove each step.

\paragraph{Proof of step 1}  The estimation error, $\epsilon$, is lower-bounded by
\begin{align}
    \max_{\theta \neq \theta'}\abs{\braket{\psi_\theta}{\psi_{\theta'}}}^2
    &= \max_{\theta \neq \theta'} \abs{\bra{\phi} \pr{\mathbf{1}_R \otimes (U_\theta^\dagger U_{\theta'})^{\proddist n}}\ket{\phi}}^2\\
    &= \max_{\theta \neq \theta'} \abs{\tr{\phi_{A^n} (U_\theta^\dagger U_{\theta'})^{\proddist n}}}^2\\
    &= \max_{\theta \neq \theta'} \abs{\tr{\pr{ \pr{\kb{0}}^{\proddist n} - \phi_{A^n} } (U_\theta^\dagger U_{\theta'})^{\proddist n}} - \tr{\pr{\kb{0}}^{\proddist n} (U_\theta^\dagger U_{\theta'})^{\proddist n}}}^2\\
    &\stackrel{(a)}{\geq}  \min_{\theta \neq \theta'} \abs{\tr{\pr{\phi_{A^n} - \pr{\kb{0}}^{\proddist n}} (U_\theta^\dagger U_{\theta'})^{\proddist n}} - 1}^2\\
    &\stackrel{(b)}{\geq}  \min_{\theta \neq \theta'} 1 - 2\abs{\tr{\pr{\phi_{A^n} - \pr{\kb{0}}^{\proddist n}} (U_\theta^\dagger U_{\theta'})^{\proddist n}}}\\
    &\stackrel{(c)}{\geq} 1- 2\nrm{\phi_{A^n} - \pr{\kb{0}}^{\proddist n}}_1\\
\end{align}
where $(a)$ follows because $U_\theta \ket{0} = U_{\theta'} \ket{0} $ for some $\theta \neq \theta'$, $(b)$ follows from $|1-z|^2 = 1-2\text{Re}(z) + |z|^2 \geq 1- 2|z|$ for any complex number $z$, and $(c)$ follows from $\abs{\tr{XY}}\leq \nrm{X}\nrm{Y}_1$ for all $X, Y\in {\mathcal{L}}(A^n)$ and $\nrm{(U_\theta^\dagger U_{\theta'})^{\proddist n}} = 1$.

\paragraph{Proof of step 2} We have
\begin{align}
    \nrm{\phi_{A^n} - \pr{\kb{0}}^{\proddist n}}_1
    &\stackrel{(a)}{\leq} \sqrt{1 - F(\phi_{A^n}, \pr{\kb{0}}^{\proddist n})}\\
    &=\sqrt{1 - \bra{0}^{\proddist n} \phi_{A^n} \ket{0}^{\proddist n}}\\
    &\stackrel{(b)}{\leq} \sqrt{\sum_{i=1}^n\pr{1- \bra{0} \phi_{A_i} \ket{0}} } \\
    &\stackrel{(c)}{\leq }\sqrt{\sum_{i=1}^n\nrm{ \kb{0}  - \phi_{A_i} }_1 },
\end{align}
where $(a)$ follows from~\cite[Theorem 1]{Fuchs_1999}, $(b)$ follows from (classical) union bound, and $(c)$ follows since $1-F(\rho, \sigma) \leq \nrm{\rho-\sigma}_1$ when $\rho$ is pure. We now state a lemma that allows us to bound $\nrm{\rho - \kb{0}}_1$ using $\nrm{{\mathcal{E}}(\rho - \kb{0})}_1$
By our assumption on ${\mathcal{E}}$ there exists $B>0$ such that  for all $i\in \intseq{1}{n}$,
\begin{align}
    \nrm{ \kb{0}  - \phi_{A_i} }_1
    &\leq B \nrm{{\mathcal{E}}(\kb{0}) - {\mathcal{E}}(\phi_{A_i})}_1\\
    &\leq B \sqrt{\D{{\mathcal{E}}(\phi_{A_i})}{{\mathcal{E}}(\kb{0})}}.
\end{align}
This implies that
\begin{align}
\nrm{\phi_{A^n} - \pr{\kb{0}}^{\proddist n}}_1
&\leq \sqrt{B} \sqrt{\sum_{i=1}^n \sqrt{\D{{\mathcal{E}}(\phi_{A_i})}{{\mathcal{E}}(\kb{0})}}}\\
&\leq \sqrt{B}  \sqrt{\sqrt{n} \sqrt{\sum_{i=1}^n \D{{\mathcal{E}}(\phi_{A_i})}{{\mathcal{E}}(\kb{0})}}}
\end{align}
\paragraph{Proof of step 3} We have
\begin{align}
    \D{{\mathcal{E}}^{{\proddist n}}(\phi_{A^n})}{{\mathcal{E}}^{\proddist n}\pr{\kb{0}^{\proddist n}}}
    &= -H({\mathcal{E}}^{{\proddist n}}(\phi_{A^n})) + \tr{{\mathcal{E}}^{\proddist n}\pr{\phi_{A^n}} \log \pr{\pr{{\mathcal{E}}(\kb{0})}^{\proddist n}} }\\
    &=  -H({\mathcal{E}}^{{\proddist n}}(\phi_{A^n})) +  \sum_{i=1}^n \tr{{\mathcal{E}}(\phi_{A_i}) \log\pr{{\mathcal{E}}(\kb{0})} }\\
    &\geq -\sum_{i=1}^n H({\mathcal{E}}(\phi_{A_i})) +  \sum_{i=1}^n \tr{{\mathcal{E}}(\phi_{A_i}) \log\pr{{\mathcal{E}}(\kb{0})} }\\
    &= \sum_{i=1}^n \D{{\mathcal{E}}(\phi_{A_i})}{{\mathcal{E}}(\kb{0})}.
\end{align}

\appendices
\section{Approximation of quantum relative entropy}
We characterize  in the next lemma the expansion of $\D{\alpha \rho_1  + (1-\alpha)\rho_0}{\rho_0}$ in $\alpha$ around zero.
\label{sec:approx-rel-entropy}
\begin{lemma}
\label{lm:approx-rel-entropy}
Let $\rho_1$ and $\rho_0$ be two density operators on $A$ such that $\rho_0$ is invertible. We have for small $\alpha > 0$
\begin{align}
    \D{\alpha \rho_1  + (1-\alpha)\rho_0}{\rho_0} = \frac{1}{2} \alpha^2 \eta(\rho_1\|\rho_0) + \bigO[\rho_0]{\alpha^3}.
\end{align}
\end{lemma}
\begin{remark}
 This result is similar to~\cite[Lemma~1]{Wang2016c}, but the expression for $\eta(\rho_1\|\rho_0)$ in~\cite{Wang2016c} is
\begin{align}
    \tr{\int_0^\infty \rho_1(\rho_0 + s )^{-1} \rho_1(\rho_0 + s)^{-1}ds} - 1,
\end{align}
which involves an integration. In addition, in Lemma~\ref{lm:approx-rel-entropy}, the constant behind the higher order term is independent of $\rho_1$, which is not shown in~\cite[Lemma~1]{Wang2016c} and which  is crucial in our converse argument.
\end{remark}
We first recall two results from functional calculus before proving Lemma~\ref{lm:approx-rel-entropy}.
\begin{lemma}
\label{lm:log-appx}
Let $X$ be a positive operator in ${\mathcal{L}}({\mathcal{H}})$ with eigen-decomposition $X = \sum_{i=1}^q \lambda_i P_i$, where $\lambda_1, \cdots, \lambda_q$ are distinct eigenvalue of $X$ and $P_i$ is the projection onto the eigen-subspace corresponding to $\lambda_i$. There exists $\epsilon > 0$ such that for all $Y$ with $\norm{X-Y}\leq \epsilon$, $X+Y$ is positive and
\begin{align}
    \log(X+Y) = \log(X) + \sum_{i,j} D_{i,j} P_iYP_j + \bigO[X]{\norm{Y}^2},
\end{align}
where
\begin{align}
    D_{i,j} = \begin{cases}
    \frac{\log \lambda_i - \log \lambda_j}{\lambda_i - \lambda_j}&\quad i\neq j\\
    \frac{1}{\lambda_i}&\quad i=j
    \end{cases}
\end{align}
\end{lemma}
 \begin{proof}

 It follows from applying ~\cite[Th.~4.2]{shapiro2002differentiability} to the function $\log(\cdot)$.
 \end{proof}
\begin{lemma}
\label{lm:diff-tr}
Let $I\subset \mathbb{R}$ be an open interval in $\mathbb{R}$ and  $f:I\to \mathbb{R}$ be a smooth function. Let $A$ and $B$ be two self-adjoint operator in ${\mathcal{L}}({\mathcal{H}})$. We define $g(t) \eqdef \tr{f(A+tB)}$ for all $t$ such that all eigenvalues of $A+tB$ are in $I$. Then, the domain of $g$ is open and for each $t$ in the domain of $g$,
\begin{align}
    g'(t) = \tr{f'(A+tB) B}.
\end{align}
\end{lemma}
\begin{proof}
See~\cite[Eq.~(11.176)]{Wilde_2017}.
\end{proof}
We now prove Lemma~\ref{lm:approx-rel-entropy}. Let $\rho_0$ has eigen-decomposition $\sum_i \lambda_i P_i$ and define
\begin{align}
    D_{i,j} = \begin{cases}
    \frac{\log \lambda_i - \log \lambda_j}{\lambda_i - \lambda_j}&\quad i\neq j\\
    \frac{1}{\lambda_i}&\quad i=j.
    \end{cases}
\end{align}
We also define $\Delta \eqdef \rho_1 - \rho_0$ and
\begin{align}
    g(\alpha)
    &\eqdef \D{\alpha \rho_1 + (1-\alpha) \rho_0}{\rho_0}\\
    &= \D{\rho_0 + \alpha \Delta}{\rho_0} \\
    &=\tr{\pr{\rho_0 + \alpha \Delta}\log\pr{\rho_0 + \alpha \Delta}} -\tr{\pr{\rho_0 + \alpha \Delta}\log\pr{\rho_0}}.
\end{align}
Note that
\begin{align}
    g'(\alpha)
    &\stackrel{(a)}{=} \tr{\Delta(\log(\rho_0+\alpha \Delta) + \mathbf{1} )} - \tr{\Delta \log \rho_0}\\
    &= \tr{\Delta\pr{\log(\rho_0+\alpha \Delta) - \log(\rho_0)}}\\
    &\stackrel{(b)}{=} \tr{\Delta\pr{ \sum_{i,j}D_{i,j}P_i(\alpha\Delta)P_j  + \bigO[\rho_0]{\norm{\alpha \Delta}^2} } }\\
    &= \tr{\Delta\pr{ \sum_{i,j}D_{i,j}P_i(\alpha\Delta)P_j  + \bigO[\rho_0]{\norm{\alpha \Delta}^2} }} \\
    &= \alpha \sum_{i,j} D_{i,j}\tr{\Delta P_i \Delta P_j}  + \tr{\Delta\bigO[\rho_0]{\norm{\alpha\Delta}^2}}\\
    &\stackrel{(c)}{=} \alpha \sum_{i,j} D_{i,j}\tr{\Delta P_i \Delta P_j}  + \bigO[\rho_0]{\alpha^2}\\
    &= \alpha \eta(\rho_1\|\rho_0) + \bigO[\rho_0]{\alpha^2}\label{eq:f-prime-rel}
\end{align}
where $(a)$ follows from Lemma~\ref{lm:diff-tr}, $(b)$ follows from Lemma~\ref{lm:log-appx}, and $(c)$ follows since the norm of $\Delta = \rho_1-\rho_0$ is bounded for all density operators $\rho_0$ and $\rho_1$.
We then have
\begin{align}
    \abs{g(\alpha) - \frac{1}{2}\alpha^2 \eta(\rho_1\|\rho_0) }
    &\stackrel{(a)}{=} \abs{\int_0^\alpha \pr{g'(\beta) - \beta \eta(\rho_1\|\rho_0) }d\beta}\\
    &\leq \int_0^\alpha \abs{g'(\beta) - \beta \eta(\rho_1\|\rho_0)} d\beta \\
    &\stackrel{(b)}{=} \int_0^\alpha \bigO[\rho_0]{\beta^2} d\beta\\
    &= \bigO[\rho_0]{\alpha^3}
\end{align}
where $(a)$ follows from the fundamental theorem of calculus and $(b)$ follows from Eq.~\eqref{eq:f-prime-rel}.

\section{Proof of Lemma~\ref{lm:one-shot-achv}}
\label{sec:one-shot-achv}
We first recall a result from~\cite{Li_2016} on the optimal performance of discriminating multiple quantum states.
\begin{lemma}
\label{lm:mult-hyp-q}
Let $\set{\rho_\theta}_{\theta\in \Theta}$ be a finite family of density operators acting on a finite dimensional space. There exists a \ac{POVM} $\set{\Gamma_\theta}_{\theta\in \Theta}$ such that
\begin{align}
    \max_{\theta\in \Theta} \tr{\rho_\theta \pr{\mathbf{1} - \Gamma_\theta}} \leq 10 (\card{\Theta}-1)^2 \max_{\theta\in \Theta} \nu\pr{\rho_\theta} \sum_{\theta\neq \theta'} \inf_{s\in  [0, 1]}\tr{\rho_\theta^s \rho_{\theta'}^{1-s}}
\end{align}
\end{lemma}
\begin{proof}
It follows from combining~\cite[Th.~2]{Li_2016} and~\cite[Eq.~(35)]{Li_2016}.
\end{proof}
Alice samples the input sequence $\mathbf{u}$ according to $P_{\mathbf{U}}$ and receives $\rho_{\mathbf{B}|\theta}^{\mathbf{u}} \eqdef \rho_{B|\theta}^{u_1} \otimes \cdots \otimes \rho_{B|\theta}^{u_n}$. Alice then performs the POVM $\set{\Gamma^{\mathbf{u}}_{\theta}: \theta \in \Theta}$ given by Lemma~\ref{lm:mult-hyp-q} for the states $\set{\qpy{\mathbf{u}}}_{\theta\in \Theta}$, resulting in estimation error
\begin{align}
    10 (\card{\Theta}-1)^2 \max_{\theta\in \Theta} \nu\pr{\qpy{\mathbf{u}}}  \sum_{\theta\neq \theta'} \inf_{s\in  [0, 1]}\tr{\pr{\qpy{\mathbf{u}}}^s \pr{\qpyp{\mathbf{u}}}^{1-s}}.
\end{align}
Note that
\begin{align}
    \max_{\theta\in \Theta} \nu\pr{\qpy{\mathbf{u}}} \leq (n+1)^{\dim B \card{{\mathcal{U}}}},
\end{align}
and
\begin{align}
    \inf_{s\in  [0, 1]}\tr{\pr{\qpy{\mathbf{u}}}^s \pr{\qpyp{\mathbf{u}}}^{1-s}}
    &=  \inf_{s\in  [0, 1]}\prod_{i=1}^n \tr{\pr{\qy{{u_i}}}^s \pr{\qyp{{u_i}}}^{1-s}}\\
    &= \exp\pr{-\sup_{s\in [0, 1]} - \sum_{i=1}^n \log\pr{ \tr{\pr{\qy{{u_i}}}^s \pr{\qyp{{u_i}}}^{1-s}}} }\\
    &= \exp\pr{-n \sup_{s\in [0, 1]} - \sum_{u\in {\mathcal{U}}}T_{\mathbf{u}}(u) \log \pr{\tr{\pr{\qy{{u}}}^s \pr{\qyp{{u}}}^{1-s}} }}\\
    &= \exp\pr{-n \Dcc{\theta}{\theta'}{T_{\mathbf{u}}}}.
\end{align}
This concludes the proof.

\section{Proof of Lemma~\ref{lm:spec-pu-prop}}
\label{sec:spec-pu-prop}
We introduce a notation that simplifies our expressions. Let us define for $u\in {\mathcal{U}}$ and $s\in[0, 1]$,
\begin{align}
f(s;u) \eqdef \log\pr{\tr{\pr{\qz{u}}^s \pr{\qz{u}}^{1-s}}},
\end{align}
which is always non-positive and
\begin{align}
    L_f \eqdef \min_{u'\in{\mathcal{U}} \setminus \set{0}} \min_{s'\in[0, 1]} f(s';u') > -\infty.
\end{align}
We then have
\begin{align}
    \log\pr{\sum_{Q \in {\mathcal{P}}_{n}({\mathcal{U}})}P_{\mathbf{U}}({\mathcal{T}}_{Q}) \exp\pr{-n\Dcc{\theta}{\theta'}{Q}}}\label{eq:up-b-log-beg}
    &\leq \max_{Q\in{\mathcal{P}}_{n}({\mathcal{U}}): P_{\mathbf{U}}({\mathcal{T}}_Q) > 0  }\left[ -n\Dcc{\theta}{\theta'}{Q}\right]\\
    &= \max_{Q\in{\mathcal{P}}_{n}({\mathcal{U}}): P_{\mathbf{U}}({\mathcal{T}}_Q) > 0  }\left[ -n\sup_{s\in [0, 1]}-\sum_{u\in {\mathcal{U}}}Q(u)f(s;u) \right]\\
    &\stackrel{(a)}{\leq}  \max_{Q\in{\mathcal{P}}_{n}({\mathcal{U}}): P_{\mathbf{U}}({\mathcal{T}}_Q) > 0  }\left[ -n\sup_{s\in [0, 1]}-\sum_{u\in {\mathcal{U}} \setminus \set{0}}Q(u)f(s;u) \right]\\
    &\stackrel{(b)}{\leq}  -n\sup_{s\in [0, 1]}-\sum_{u\in {\mathcal{U}} \setminus \set{0}}\pr{P(u) - \zeta \alpha}f(s;u)\\
    &\leq \Dcc{\theta}{\theta'}{P} - n\alpha\zeta \card{{\mathcal{U}}} L_f,\label{eq:up-b-log-end}
\end{align}
where $(a)$ follows since $f(s;0) \leq 0$, and $(b)$ follows since $P_{\mathbf{U}}({\mathcal{T}}_Q) > 0$ if and only if $|P(u) - Q(u)| \leq \alpha\zeta $ for all $u\in {\mathcal{U}}\setminus\set{0}$ (see Eq.~\eqref{eq:pun-def1}-\eqref{eq:pun-def}).
Note also that $Q(0) = 1 - \sum_{u\in {\mathcal{U}}\setminus\set{0}} Q(u) \geq 1 - \sum_{u\in {\mathcal{U}}\setminus\set{0}} (P(u) + \alpha \zeta  ) \geq P(0) - \alpha \zeta \card{{\mathcal{U}}} = 1 - \alpha(1+\zeta\card{{\mathcal{U}}})$ for all $Q \in {\mathcal{Q}}$. The same line of reasoning as in Eq.~\eqref{eq:up-b-log-beg}-\eqref{eq:up-b-log-end} then provides that
\begin{align}
   \log\pr{\sum_{Q \in {\mathcal{P}}_{n}({\mathcal{U}})}P_{\mathbf{U}}({\mathcal{T}}_{Q}) \exp\pr{-n\Dcc{\theta}{\theta'}{Q}}}
    &\leq -n(1 - \alpha(1+\zeta\card{{\mathcal{U}}})) \inf_{s\in[0, 1]} f(s, 0),
\end{align}
which yields Eq.~\eqref{eq:est-err-1} together with Eq.~\eqref{eq:up-b-log-end}.

Let $\mathbf{U}$ be distributed according to $P^{\proddist n}$ and $T_{\mathbf{U}}$ denote its type, which is a random element of ${\mathcal{P}}_n({\mathcal{U}})$. We have
\begin{align}
1- P^{\proddist n}({\mathcal{A}})
&\stackrel{(a)}{\leq} \sum_{u\in {\mathcal{U}} \setminus \set{0}} \P{ |T_{\mathbf{U}}(u) - P(u)| \geq \zeta \alpha }\\
&\stackrel{(b)}{=} \sum_{u\in {\mathcal{U}} \setminus \set{0}: P(u) > 0} \P{ |T_{\mathbf{U}}(u) - P(u)| \geq \zeta \alpha }\\
&\stackrel{(c)}{\leq} \sum_{u\in {\mathcal{U}} \setminus \set{0}: P(u) > 0}  2\exp\pr{-\frac{\alpha^2 n \zeta^2}{3P(u)}}\\
&\stackrel{(d)}{\leq}  2 \card{{\mathcal{U}}}\exp\pr{-\frac{\alpha n \zeta^2}{3}},
\end{align}
where $(a)$ follows from the union bound, $(b)$ follows since $T_{\mathbf{U}}(u) = 0$ with probability one when $P(u) = 0$, $(c)$ follows from a Chernoff bound, and $(d)$ follows since $P(u) \leq 1 - P(0) = \alpha$ for all $u\in {\mathcal{U}}\setminus \set{0}$. Note that $\frac{1}{2}{\norm{P_{\mathbf{U}} - P^{\proddist n}}}_1 = 1- P^{\proddist n}({\mathcal{A}}) \leq  2 \card{{\mathcal{U}}}\exp\pr{-\frac{\alpha n \zeta^2}{3}}$ by the definition of $P_{\mathbf{U}}$. Hence, the data processing inequality implies that

\begin{align}
\frac{1}{2}{\norm{\sum_{\mathbf{u}}P_{\mathbf{U}}(\mathbf{u})\qpz{\mathbf{u}} - \sum_{\mathbf{u}}P^{\proddist n}(\mathbf{u})\qpz{\mathbf{u}}}}_1 \leq  2 \card{{\mathcal{U}}}\exp\pr{-\frac{\alpha n \zeta^2}{3}}.
\end{align}

Finally, the following  continuity result  for the relative entropy completes the proof of \eqref{eq:covertness-pu}.
\begin{lemma}
\label{lm:rel-cont}
Let $\rho_{\mathbf{B}}$ and $\sigma_{{\mathbf{B}}}$ be two density operators over $B^n$ such that $\frac{1}{2}\nrm{\rho_{{\mathbf{B}}} - \sigma_{{\mathbf{B}}}}_1 \leq \epsilon$.  We then have
\begin{align}
\abs{\D{\rho_{{\mathbf{B}}}}{\qpz{\mathbf{0}}} - \D{\sigma_{{\mathbf{B}}}}{\qpz{\mathbf{0}}}} \leq  \epsilon \log\pr{\frac{\dim B}{\pr{\lambda_{\min}(\qz{0})}^2}}n  + \Hb{\epsilon}.
\end{align}
\end{lemma}
\begin{proof}
Note that
\begin{align}
\displaybreak[0]\abs{\D{\rho_{\mathbf{B}}}{\qpz{\mathbf{0}}} - \D{\sigma_{\mathbf{B}}}{\qpz{\mathbf{0}}}}
&= \abs{H(\rho_{\mathbf{B}}) - H(\sigma_{\mathbf{B}}) + \tr{\pr{\rho_{{\mathbf{B}}} - \sigma_{{\mathbf{B}}}}\log\pr{\qpz{\mathbf{0}}} }}\\
\displaybreak[0]&\leq \abs{H(\rho_{\mathbf{B}}) - H(\sigma_{\mathbf{B}}) } +  \abs{\tr{\pr{\rho_{{\mathbf{B}}} - \sigma_{{\mathbf{B}}}}\log\pr{\qpz{\mathbf{0}}} }}\\
\displaybreak[0]&\stackrel{(a)}{\leq} \epsilon \log(\dim B ) n + \Hb{\epsilon}+\abs{\tr{\pr{\rho_{{\mathbf{B}}} - \sigma_{{\mathbf{B}}}}\log\pr{\qpz{\mathbf{0}}} }}\\
\displaybreak[0]&\leq \epsilon \log( \dim B) n + \Hb{\epsilon}+ \nrm{\rho_{{\mathbf{B}}} - \sigma_{{\mathbf{B}}}}_1 \nrm{\log \pr{\qpz{\mathbf{0}}}} \\
&\leq \epsilon \log( \dim B) n + \Hb{\epsilon}+ 2\epsilon  \log \pr{\frac{1}{\lambda_{\min}(\qz{0})}} n
\end{align}
where $(a)$ follows from  Fannes' inequality.
\end{proof}
\section{Proof of Lemma~\ref{lm:one-shot-converse}}
\label{sec:one-shot-converse}
Eq.~\eqref{eq:one-shot-converse2} follows from the same argument used to obtain~\cite[Eq.~(39)]{Wang2016c}, except using Lemma~\ref{lm:approx-rel-entropy} instead of~\cite[Lemma~1]{Wang2016c}.
We prove Eq.~\eqref{eq:one-shot-converse1} in four steps as summarized below.
\begin{itemize}
    \item \textbf{Step 1:} We lower-bound the estimation error of this strategy by
    \begin{align}
    \max_{\theta \in \Theta} \sum_{{\mathbf{u}}} P_{{\mathbf{U}}}({\mathbf{u}}) \tr{\Gamma^{{\mathbf{u}}}_\theta\qpy{{\mathbf{u}}}} \geq \frac{1}{\card{\Theta}}\max_{\theta \neq \theta'} \sum_{{\mathbf{u}}}P_{{\mathbf{U}}}({\mathbf{u}}) \pr{1 - \frac{1}{2}\nrm{\qpy{{\mathbf{u}}} - \qpyp{{\mathbf{u}}}}_1}.
    \end{align}
    \item \textbf{Step 2:} Let us now consider the spectral decomposition of $\qy{u} = \sum_{y\in {\mathcal{Y}}} p_{\theta}^u(y) \kb{e_{\theta}^u(y)}$, where ${\mathcal{Y}}$ is a set of size $\dim B$, $p_{\theta}^u$ is a \ac{PMF} over ${\mathcal{Y}}$, and $\set{\ket{e_{\theta}^u(y)}: y\in {\mathcal{Y}}}$ forms an orthonormal basis for $B$. We also define $q_{\theta, \theta'}^u(y, y') \eqdef p_{\theta}^u(y)\abs{\braket{e_{\theta}^u(y)}{e_{\theta'}^u(y')}}^2 $, which is a \ac{PMF} over ${\mathcal{Y}} \times {\mathcal{Y}}$, and $q_{\theta}^{{\mathbf{u}}} \eqdef q_{\theta}^{u_1} \otimes \cdots \otimes q_{\theta}^{u_n}$, which is a \ac{PMF} over $({\mathcal{Y}} \times {\mathcal{Y}})^n$. We shall show that
    \begin{align}
    1 - \frac{1}{2}\nrm{\qpy{{\mathbf{u}}} - \qpyp{{\mathbf{u}}}}_1 \geq \frac{1}{2}\pr{ 1 - \frac{1}{2}\nrm{q_{\theta, \theta'}^{{\mathbf{u}}} - q_{\theta', \theta}^{{\mathbf{u}}}}_1}.
\end{align}
\item \textbf{Step 3:} Let $P_{V|U}$ and $P_{\widetilde{V}|U }$ be two conditional distributions, ${\mathbf{u}} \in {\mathcal{U}}^n$ be a sequence with type $T_U$, and ${\mathbf{V}}$ and $\widetilde{{\mathbf{V}}}$ be distributed according to $P_{{\mathbf{V}}} = P_{V|U = u_1} \otimes \cdots \otimes P_{V|U=u_n}$ and $P_{\widetilde{{\mathbf{V}}}} = P_{\widetilde{V}|U = u_1} \otimes \cdots \otimes P_{\widetilde{V}|U=u_n}$, respectively. We shall show that
\begin{multline}
    \sum_{{\mathbf{v}} } \min\pr{P_{{\mathbf{V}}}({\mathbf{v}}), P_{\widetilde{{\mathbf{V}}}}({\mathbf{v}})} \\\geq \exp\pr{-n\sup_{s\in [0, 1]} \log\pr{\sum_u T_U(u) \sum_v P_{V|U}(v|u)^s P_{\widetilde{V}|U}(v|u)^{1-s}} + \bigO{\frac{\log n}{n}}}.
\end{multline}
\item \textbf{Step 4:} We show that
    \begin{align}
        1 - \frac{1}{2}\nrm{\qpy{{\mathbf{u}}} - \qpyp{{\mathbf{u}}}}_1
        &= \exp\pr{-n\Dcc{\theta}{\theta}{T_U} + \bigO{\frac{\log n}{n}}},
    \end{align}
    which concludes the proof together with Jensen's inequality and the convexity of the exponential function.
\end{itemize}
We now provide the detailed proof of each step.
\paragraph{Proof of step 1}
Note that
\begin{align}
    \max_{\theta \in \Theta} \sum_{{\mathbf{u}}} P_{{\mathbf{U}}}({\mathbf{u}}) \tr{\Gamma^{{\mathbf{u}}}_\theta\qpy{{\mathbf{u}}}}
    &\geq  \frac{1}{\card{\Theta}} \sum_{{\mathbf{u}}}P_{{\mathbf{U}}}({\mathbf{u}}) \sum_{\theta}  \tr{\Gamma^{{\mathbf{u}}}_\theta\qpy{{\mathbf{u}}}}\\
    &\stackrel{(a)}{\geq}  \frac{1}{\card{\Theta}} \sum_{{\mathbf{u}}}P_{{\mathbf{U}}}({\mathbf{u}}) \max_{\theta \neq \theta'}\pr{1 - \frac{1}{2}\nrm{\qpy{{\mathbf{u}}} - \qpyp{{\mathbf{u}}}}_1} \\
    &\geq \frac{1}{\card{\Theta}}\max_{\theta \neq \theta'} \sum_{{\mathbf{u}}}P_{{\mathbf{U}}}({\mathbf{u}}) \pr{1 - \frac{1}{2}\nrm{\qpy{{\mathbf{u}}} - \qpyp{{\mathbf{u}}}}_1},
\end{align}
where $(a)$ follows from the varitional characterization of the trace norm $\frac{1}{2} \norm[1]{\rho - \sigma} = \max_{0 \prec \Gamma \prec \mathbf{1}} \tr{\Gamma (\rho - \sigma)}$.

\paragraph{Proof of step 2}
The proof is in~\cite{Nussbaum_Szkola_2009}, but we provide the proof for completeness. We first define $p_\theta^{{\mathbf{u}}} \eqdef p_\theta^{u_1}\otimes \cdots \otimes p_{\theta}^{u_n}$ and $\ket{e_\theta^{{\mathbf{u}}}({\mathbf{y}})} \eqdef \ket{e_\theta^{u_1}(y_1)} \otimes \cdots \otimes \ket{e_\theta^{u_n}(y_n)}$. We have
\begin{align}
    1 - \frac{1}{2}\nrm{\qpy{{\mathbf{u}}} - \qpyp{{\mathbf{u}}}}_1
    &= \inf_{0 \prec \Gamma \prec \mathbf{1}} \left[\tr{\Gamma\qpy{{\mathbf{u}}}} + \tr{(\mathbf{1} - \Gamma) \qpyp{{\mathbf{u}}}}\right]\\
    &=  \inf_{0 \prec \Gamma \prec \mathbf{1}} \left[ \sum_{{\mathbf{y}}} p_{\theta}^{{\mathbf{u}}}({\mathbf{y}}) \bra{e_{\theta}^{{\mathbf{u}}}({\mathbf{y}})} \Gamma \ket{e_{\theta}^{{\mathbf{u}}}({\mathbf{y}})} +\sum_{{\mathbf{y}}} p_{\theta'}^{{\mathbf{u}}}({\mathbf{y}}) \bra{e_{\theta'}^{{\mathbf{u}}}({\mathbf{y}})} (\mathbf{1} - \Gamma) \ket{e_{\theta'}^{{\mathbf{u}}}({\mathbf{y}})}  \right]\\
    &\stackrel{(a)}{\geq}  \inf_{0 \prec \Gamma \prec \mathbf{1}} \left[ \sum_{{\mathbf{y}}} p_{\theta}^{{\mathbf{u}}}({\mathbf{y}}) \nrm{\Gamma \ket{e_{\theta}^{{\mathbf{u}}}({\mathbf{y}})}}^2_2 + \sum_{{\mathbf{y}}} p_{\theta'}^{{\mathbf{u}}}({\mathbf{y}}) \nrm{ (\mathbf{1} - \Gamma) \ket{e_{\theta'}^{{\mathbf{u}}}({\mathbf{y}})}}_2^2  \right]\\
    &=  \inf_{0 \prec \Gamma \prec \mathbf{1}} \left[ \sum_{{\mathbf{y}}, {\mathbf{y}}'} p_{\theta}^{{\mathbf{u}}}({\mathbf{y}}) \abs{\bra{e_{\theta'}^{{\mathbf{u}}}({\mathbf{y}}')} \Gamma \ket{e_{\theta}^{{\mathbf{u}}}({\mathbf{y}})}}^2  + \sum_{{\mathbf{y}}, {\mathbf{y}}'} p_{\theta'}^{{\mathbf{u}}}({\mathbf{y}})  \abs{\bra{e_{\theta'}^{{\mathbf{u}}}({\mathbf{y}})} (\mathbf{1} - \Gamma) \ket{e_{\theta}^{{\mathbf{u}}}({\mathbf{y}}')}}^2 \right]\\
    &\geq \inf_{0 \prec \Gamma \prec \mathbf{1}} \sum_{{\mathbf{y}}, {\mathbf{y}}'} \min(p_{\theta}^{{\mathbf{u}}}({\mathbf{y}}), p_{\theta'}^{{\mathbf{u}}}({\mathbf{y}}')) \pr{ \abs{\bra{e_{\theta'}^{{\mathbf{u}}}({\mathbf{y}}')} \Gamma \ket{e_{\theta}^{{\mathbf{u}}}({\mathbf{y}})}}^2  +   \abs{\bra{e_{\theta'}^{{\mathbf{u}}}({\mathbf{y}}')} (\mathbf{1} - \Gamma) \ket{e_{\theta}^{{\mathbf{u}}}({\mathbf{y}})}}^2 }\\
    &\stackrel{(b)}{\geq} \frac{1}{2}  \sum_{{\mathbf{y}}, {\mathbf{y}}'} \min(p_{\theta}^{{\mathbf{u}}}({\mathbf{y}}), p_{\theta'}^{{\mathbf{u}}}({\mathbf{y}}')) \abs{\braket{e_\theta^{{\mathbf{u}}}({\mathbf{y}})}{e_{\theta'}^{{\mathbf{u}}}({\mathbf{y}}')}}^2\displaybreak[0],

\end{align}
where $(a)$ follows since $(1-\Gamma) \succ (1-\Gamma)^2$ for all $0\prec \Gamma \prec \mathbf{1}$, and $(b)$ follows from $|x|^2+|y|^2 \geq |x+y|^2/2$ for any two complex numbers $x$ and $y$.

\paragraph{Proof of Step 3}
Deploying standard method of type arguments, we have
\begin{align}
  &\sum_{{\mathbf{v}} } \min\pr{P_{{\mathbf{V}}}({\mathbf{v}}), P_{\widetilde{{\mathbf{V}}}}({\mathbf{v}})} \\
  &\geq \max_{T_{V|U}\in {\mathcal{P}}_n({\mathcal{V}}|{\mathbf{u}})} \sum_{{\mathbf{v}} \in {\mathcal{T}}_{T_{V|U}}({\mathbf{u}}) } \min\pr{P_{{\mathbf{V}}}({\mathbf{v}}), P_{\widetilde{{\mathbf{V}}}}({\mathbf{v}})} \\
  &\stackrel{(a)}{\geq} \max_{T_{V|U}\in {\mathcal{P}}_n({\mathcal{V}}|{\mathbf{u}})} \pr{n+1}^{-\card{{\mathcal{V}}}\card{{\mathcal{U}}}}\exp\pr{-n\max\pr{\D{T_{V|U}}{P_{V|U}|T_U}, \D{T_{V|U}}{P_{\widetilde{V}|U}|T_U}}}\\
  &= \pr{n+1}^{-\card{{\mathcal{V}}}\card{{\mathcal{U}}}}\exp\pr{-n \min_{T_{V|U}\in {\mathcal{P}}_n({\mathcal{V}}|{\mathbf{u}})}\max\pr{\D{T_{V|U}}{P_{V|U}|T_U}, \D{T_{V|U}}{P_{\widetilde{V}|U}|T_U}}},
\end{align}
where $(a)$ follows from~\cite[Eq. (2.8)]{Csiszar}. Next note that for an arbitrary conditional distribution $Q_{V|U}$, there exists $T_{V|U}\in {\mathcal{P}}_n({\mathcal{V}}|{\mathbf{u}})$ such that $\Delta_u \eqdef \frac{1}{2}\nrm{T_{V|U = u} - Q_{V|U=u}}_1 \leq \frac{\card{{\mathcal{V}}}}{nT_U(u)}$ for all $u\in \supp{T_U}$. Thus, for such a $T_{V|U}$,
\begin{align}
    &\abs{\D{T_{V|U}}{P_{\widetilde{V}|U}|T_U} - \D{Q_{V|U}}{P_{\widetilde{V}|U}|T_U}}\\
    &\leq   \sum_{u} T_U(u)  \abs{\D{T_{V|U=u}}{P_{\widetilde{V}|U=u}} - \D{Q_{V|U=u}}{P_{\widetilde{V}|U=u}}}\\
    &\leq   \sum_{u} T_U(u)\pr{\abs{H(T_{V|U=u}) - H(Q_{V|U=u})} + \sum_v \abs{T_{V|U}(v|u) - Q_{v|u}(v|u)}\log \frac{1}{P_{V|U}(v|u)}} \\
    &\stackrel{(a)}{\leq} \sum_{u} T_U(u)\pr{\Delta_u \log \card{{\mathcal{V}}} + \Hb{\Delta_u} + \max_{v}\log \frac{1}{P_{V|U}(v|u)} \Delta_u} \\
     &\stackrel{(b)}{\leq} \sum_{u} T_U(u)\pr{\Delta_u \log \card{{\mathcal{V}}} + \Delta_u \log \frac{e}{\Delta_u} + \max_{v}\log \frac{1}{P_{V|U}(v|u)} \Delta_u}\\
    &\stackrel{(c)}{\leq }\sum_{u} T_U(u)\pr{\frac{\card{{\mathcal{V}}}}{nT_U(u)} \log \card{{\mathcal{V}}} + \frac{\card{{\mathcal{V}}}}{nT_U(u)} \log \frac{nT_U(u) e}{\card{{\mathcal{V}}}} + \max_{v}\log \frac{1}{P_{V|U}(v|u)} \frac{\card{{\mathcal{V}}}}{nT_U(u)}}\\
    &\leq \frac{\card{{\mathcal{V}}} \card{{\mathcal{U}}} \log \card{{\mathcal{V}}} }{n}+\frac{\card{{\mathcal{V}}} \card{{\mathcal{U}}} \log n }{n} + \max_{v, n} \log \frac{1}{P_{V|U}} \frac{\card{{\mathcal{V}}}}{n} = \bigO{\frac{\log n}{n}},
    \end{align}
where $(a)$ follows from Fannes' inequality, $(b)$ follows since $\Hb{x} \leq x \log \frac{e}{x}$, and $(c)$ follows since $\Delta_u\leq \frac{\card{{\mathcal{V}}}}{nT_U(u)}$ by our choice of $T_{V|U}$.
Hence,
\begin{multline}
    \min_{T_{V|U}\in {\mathcal{P}}_n({\mathcal{V}}|{\mathbf{u}})}\max\pr{\D{T_{V|U}}{P_{V|U}|T_U}, \D{T_{V|U}}{P_{\widetilde{V}|U}|T_U}}\\ \geq \min_{Q_{V|U}\in {\mathcal{P}}({\mathcal{V}}|{\mathcal{U}})}\max\pr{\D{Q_{V|U}}{P_{V|U}|T_U}, \D{Q_{V|U}}{P_{\widetilde{V}|U}|T_U}} - \bigO{\frac{\log n}{n} }.
\end{multline}
Finally,~\cite[Eq.~(39)]{Nitinawarat2013} implies that
\begin{multline}
    \min_{Q_{V|U}\in {\mathcal{P}}({\mathcal{V}}|{\mathcal{U}})}\max\pr{\D{Q_{V|U}}{P_{V|U}|T_U}, \D{Q_{V|U}}{P_{\widetilde{V}|U}|T_U}} \\= - \sup_{s\in [0, 1]} \log\pr{\sum_u T_U(u) \sum_v P_{V|U}(v|u)^s P_{\widetilde{V}|U}(v|u)^{1-s}}.
\end{multline}

\paragraph{Proof of Step 4} Combining the result of step one and two, we have
\begin{multline}
    1 - \frac{1}{2}\nrm{\qpy{{\mathbf{u}}} - \qpyp{{\mathbf{u}}}}_1 \geq \exp\left(-n\sup_{s\in [0, 1]} \log\left(\sum_u T_U(u)\right.\right. \\
    \left.\left.\times \sum_{y, y'} \left(p_\theta^u(y)\abs{\braket{e_\theta^u(y)}{e_{\theta'}^u(y')}}^2\right)^s \pr{p_{\theta'}^u(y') \abs{\braket{e_\theta^u(y)}{e_{\theta'}^u(y')}}^2}^{1-s}\right) + \bigO{\frac{\log n}{n}}\right).\label{eq:l1-decom}
\end{multline}
Note that
\begin{align}
    &\sum_{y, y'} (p_\theta^u(y) \abs{\braket{e_\theta^u(y)}{e_{\theta'}^u(y')}}^2)^s \pr{p_{\theta'}^u(y') \abs{\braket{e_\theta^u(y)}{e_{\theta'}^u(y')}}^2}^{1-s}\\
    &~~~~~~~~~~~= \sum_{y, y'} p_\theta^u(y)^s p_{\theta}^u(y')^{1-s} \abs{\braket{e_\theta^u(y)}{e_{\theta'}^u(y')}}^2\\
    &~~~~~~~~~~~= \tr{\pr{\sum_y p_\theta^u(y)^s \kb{e_\theta^u(y)}}\pr{\sum_{y'} p_{\theta'}^u(y')^{1-s} \kb{e_{\theta'}^u(y')}}}\\
    &~~~~~~~~~~~= \tr{\pr{\qy{\theta}}^s \pr{\qy{\theta'}}^{1-s}}.\label{eq:tr-cher}
\end{align}
Substituting Eq.~\eqref{eq:tr-cher} into Eq.~\ref{eq:l1-decom}, we have
\begin{align}
    1 - \frac{1}{2}\nrm{\qpy{{\mathbf{u}}} - \qpyp{{\mathbf{u}}}}_1
    &\geq \exp\pr{-n\sup_{s\in [0, 1]} \log\pr{\sum_u T_U(u) \tr{\pr{\qy{\theta}}^s \pr{\qy{\theta'}}^{1-s}}} + \bigO{\frac{\log n}{n}}}\\
    &= \exp\pr{-n\Dcc{\theta}{\theta}{T_U} + \bigO{\frac{\log n}{n}}},
\end{align}
as desired.

\section{Proof of Lemma~\ref{lm:cont-q-ch}}
\label{sec:cont-q-ch}
We divide the proof into four steps.
 \paragraph{Step 1} By the observation $\nrm{X}_2 \leq  \nrm{X}_1  \leq \sqrt{\dim A} \nrm{X}_2$ for all $X\in {\mathcal{L}}(A)$, it holds that
\begin{align}
\sup_{\rho  \in {\mathcal{D}}(A) \setminus \set{\kb{0}}} \frac{\nrm{\rho - \kb{0}}_1}{\nrm{{\mathcal{E}}(\rho) - {\mathcal{E}}(\kb{0})}_1} < \infty
\end{align}
if and only if
\begin{align}
\label{eq:bound-norm-2}
\sup_{\rho  \in {\mathcal{D}}(A) \setminus \set{\kb{0}}} \frac{\nrm{\rho - \kb{0}}_2}{\nrm{{\mathcal{E}}(\rho) - {\mathcal{E}}(\kb{0})}_2} < \infty.
\end{align}
 \paragraph{Step 2} We state a result that relates the norm of the output of a linear operator to the norm of the output of projection onto the kernel of the linear operator. This implies that one only needs to know $\ker {\mathcal{E}}$  to verify \eqref{eq:bound-norm-2}.
 \begin{proposition}
\label{prop:bound-operator}
Let $V$ and $W$ be Hilbert spaces and $A:V\to W$ be a non-zero linear map. Let $P$ be the projection onto $\ker A$. There exist positive constants $B_1$ and $B_2$ such that for all $v\in V$,
\begin{align}
    B_1\nrm{A v} \leq \nrm{(\mathbf{1}_V - P) v} \leq B_2 \nrm{A v}.
\end{align}
\end{proposition}
\begin{proof}
See Appendix~\ref{sec:bound-operator}
\end{proof}

By  Proposition~\ref{prop:bound-operator}, we have
\begin{align}
\sup_{\rho  \in {\mathcal{D}}(A) \setminus \set{\kb{0}}} \frac{\nrm{\rho - \kb{0}}_2}{\nrm{{\mathcal{E}}(\rho) - {\mathcal{E}}(\kb{0})}_2} < \infty
\end{align}
if and only if
\begin{align}
\sup_{\rho  \in {\mathcal{D}}(A) \setminus \set{\kb{0}}} \frac{\nrm{\rho - \kb{0}}_2}{\nrm{({\mathrm{id}}_A -P)(\rho - \kb{0})}_2} < \infty.
\end{align}
where $P$ is the projection onto $\ker {\mathcal{E}}$.

 \paragraph{Step 3} It will be more convenient in the sequel to consider  linear operators acting on $A$ as points in $\mathbb{R}^{2d^2}$. We use the function $f$ defined in Definition~\ref{def:f}, for which we list here some useful  properties.
 \begin{proposition}
\label{prop:f-prob}
The function $f$ defined in Definition~\ref{def:f} satisfies the following properties.
\begin{enumerate}
    \item $f$ is bijective
    \item $f(aX +bY) = af(X) + bf(Y)$ for all $X, Y\in {\mathcal{L}}(A)$ and for all $a, b\in \mathbb{R}$
    \item $\nrm{f(X)}_2 = \nrm{X}_2$ for all $X\in {\mathcal{X}}$
    \item If $Q$ is a projection onto a linear subspace $E\subset {\mathcal{L}}(A)$, then $f(E)$ is also a linear subspace of $\mathbb{R}^{2d^2}$ and $f(Q(X)) = Q'(f(X))$ where $Q'$ denotes the projection onto $f(E)$.
    \item If $X$ is a compact convex subset of ${\mathcal{L}}(A)$, then $f(X)$ is a compact convex subset of $\mathbb{R}^{2d^2}$ and $\partial f(X) = f(\partial X)$ where $\partial f(X)$ and $\partial X$ denote the boundaries of $f(X)$ and $X$, respectively.
\end{enumerate}
\end{proposition}
\begin{proof}
We only prove item 4 and the other items are straightforward consequence of the definition of $f$. We have$f(Q(X)) = f({\textnormal{argmin}}_{Y\in E} \nrm{Y-X}_2)  = f({\textnormal{argmin}}_{Y\in E} \nrm{f(Y)-f(X)}_2) = {\textnormal{argmin}}_{Y' \in f(E)} \nrm{Y' - f(X)}_2 = Q'(f(X))$.
\end{proof}

 Proposition~\ref{prop:f-prob} implies that
\begin{align}
\sup_{\rho  \in {\mathcal{D}}(A) \setminus \set{\kb{0}}} \frac{\nrm{\rho - \kb{0}}_2}{\nrm{({\mathrm{id}}_A -P)(\rho - \kb{0})}_2} < \infty
\end{align}
if and only if
\begin{align}
\sup_{x  \in f({\mathcal{D}}(A) -\kb{0}) \setminus \set{0}} \frac{\nrm{x}_2}{\nrm{(\mathbf{1} - P')(x)}_2} < \infty, \label{eq:frac-norm}
\end{align}
where $P'$ is the projection onto $f(\ker {\mathcal{E}})$.

\paragraph{Step 4}
We now provide a geometric characterization for Eq.~\eqref{eq:frac-norm} (See Fig~\ref{fig:tangent}).
\begin{figure}[h]
  \centering
  \includegraphics{tangent.pdf}
  \caption{Illustration of Proposition~\ref{prop:bound-tang}: On the left, $\norm[2]{x}$ \emph{cannot} be uniformly bounded by $\norm[2]{(\mathbf{1} - P)x}$ when $x$ is close to the origin, while on the right, $\norm[2]{x}$ \emph{can} be uniformly bounded by $\norm[2]{(\mathbf{1} - P)x}$ when $x$ is close to the origin}
  \label{fig:tangent}
\end{figure}
\begin{proposition}
\label{prop:bound-tang}
Let $C$ be a compact  convex subset of $\mathbb{R}^k$ containing the origin on its boundary and $E$ be a linear subspace of $\mathbb{R}^k$ such that $C \cap E = \set{0}$. We assume that the boundary of $C$, $\partial C $, is a smooth manifold embedded in $\mathbb{R}^k$ and the tangent space of $\partial C$ at the origin is $T$. Then, upon denoting the projection onto $E$ by $P$, \begin{align}
    \sup_{x\in C\setminus\set{0}} \frac{\nrm{x}_2}{\nrm{(\mathbf{1} - P)x}_2} < \infty
\end{align}
if and only if
$T\cap E = \set{0}$.
\end{proposition}
\begin{proof}
See Appendix~\ref{sec:bound-tang}.
\end{proof}

\paragraph{Step 5} We show here that the tangent space at the origin of the boundary of $f({\mathcal{D}}(A) -\kb{0})$ is $\textnormal{span}(a_1, \cdots, a_{2d - 2})$, where $\set{a_i}_{i\in \intseq{1}{2d-2}}$ is defined in Definition~\ref{def:f}. First, note that the boundary of $f({\mathcal{D}}(A) \setminus \kb{0})$ is $f(\set{\kb{\phi}: \norm{\phi} = 1} \setminus \kb{0})$ because the boundary of ${\mathcal{D}}\pr{A}$ are pure states and because of item 5 of Proposition~\ref{prop:f-prob}.  We define two maps
\begin{align}
    g: A&\to {\mathcal{L}}(A)\\
    \ket{\phi}&\mapsto \kb{\phi}
\end{align}
and
\begin{align}
    h:\mathbb{R}^{2d-1}&\to A\\
    (x_1, x_2, y_2, x_3, y_3, \cdots, x_d, y_d) &\mapsto x_1 \ket{e_1} + \sum_{j=2}^d (x_j + i y_j)\ket{e_j}.
\end{align}
Note that the coefficient of $\ket{e_1}$ is always real for all vectors in the range of $h$ as we have  freedom to choose the phase of a quantum state. Following our definition of $f$, $g$, and $h$, the $2((j-1)\times d + k) -1$ and $2((j-1)\times d + k)$ components of $(f\circ g\circ h)(x_1, x_2, y_2, x_3, y_3, \cdots, x_d, y_d)$ are $x_jx_k-y_jy_l$ and $y_jx_k + x_jy_k$, respectively. Thus, $f\circ g\circ h$ is a smooth function. We  also calculate the derivative of  $f\circ g \circ h$ at $(1, 0, \cdots, 0)$, which is represented by the matrix $[a_0|a_1| \cdots|a_{2d-2}]$, where $a_0$ is a vector and $a_1, \cdots, a_{2d-2}$ are as in Definition~\ref{def:f}.

Let ${\mathcal{S}} \eqdef \set{x\in \mathbb{R}^{2d-1}: \norm[2]{x} = 1}$ be the unit sphere in $\mathbb{R}^{2d-1}$. The restriction of $f\circ g\circ h$ is also a smooth function.  The tangent space of ${\mathcal{S}}$ at $(1, 0, \cdots 0)$ is the span of $(b_2, \cdots, b_{2d-1})$, where $b_1, \cdots, b_{2d-1}$ form the standard basis for $\mathbb{R}^{2d-1}$. Therefore, the image of the derivative of $f\circ g \circ h$ restricted to the tangent space of ${\mathcal{S}}$ at $(1, 0, \cdots, 0)$ is the space of $(a_1, \cdots, a_{2d-2})$. Since $a_1, \cdots, a_{2d-2}$ are linearly independent and the dimension of $f(\set{\kb{\phi}: \norm{\phi} = 1} \setminus \kb{0})$ is $2d-2$, the whole tangent space of $f(\set{\kb{\phi}: \norm{\phi} = 1} \setminus \kb{0})$ at the origin should be the span of $a_1, \cdots, a_{2d-2}$.

\subsection{Proof of Proposition~\ref{prop:bound-operator}}
\label{sec:bound-operator}
Let $V/\ker V$ be the quotient space and $\pi: V \to V/\ker A$ be the quotient map. We can define a norm on $V/\ker A$ by $\nrm{\pi(v)} = \inf_{x \in \ker A} \nrm{v - x} = \nrm{v - Pv} = \nrm{(\mathbf{1}_V - P) v}$. By the first isomorphism theorem of linear algebra, there exists a linear isomorphism $\widetilde{A}: V/\ker A \to W$ such that $Av = (\widetilde{A}\circ \pi) v$. Since any linear operator from a finite dimensional space is bounded, we have
\begin{align}
    \nrm{Av} = \nrm{\widetilde{A}(\pi (v))} \leq \nrm{\widetilde{A}} \nrm{\pi(v)} =  \nrm{\widetilde{A}} \nrm{(\mathbf{1}_V - P) v}
\end{align}
and
\begin{align}
   \nrm{(\mathbf{1}_V - P) v} = \nrm{\pi(v)} = \nrm{\widetilde{A}^{-1}(\widetilde{A}(\pi(v)))} \leq \nrm{\widetilde{A}^{-1}} \nrm{\widetilde{A}(\pi(v))} = \nrm{\widetilde{A}^{-1}} \nrm{Av}.
\end{align}
The result therefore holds  for $B_1 = 1/\nrm{\widetilde{A}}$ and $B_2 = \nrm{\widetilde{A}^{-1}}$.

\subsection{Proof of Proposition~\ref{prop:bound-tang}}
\label{sec:bound-tang}
\paragraph{Step 1} We first show that
\begin{align}
        \sup_{x\in C\setminus\set{0}} \frac{\nrm{x}_2}{\nrm{(\mathbf{1} - P)x}_2} < \infty
\end{align}
if and only if
\begin{align}
    \sup_{x\in \partial C\setminus\set{0}} \frac{\nrm{x}_2}{\nrm{(\mathbf{1} - P)x}_2} < \infty,
\end{align}
If $Px = 0$ for $x\in C\setminus\set{0}$, we have $\frac{\nrm{x}_2}{\nrm{(\mathbf{1} - P)x}_2 } = 1$, which is bounded.
Let $x\in C\setminus \set{0}$ such that $Px \neq 0$ and define $\phi: [0, 1] \to \mathbb{R}^k$ by $\phi(t) \eqdef (1-t) x + t Px$. We know that $\phi^{-1}(C)$ is closed and connected, because $C$ is closed and connected (as a convex set) and $\phi$ is continuous. The only closed and connected subsets of $[0, 1]$ are of closed intervals and as $\phi(0) = x \in C$, we have $\phi^{-1}(C) = [0, a]$ for some $a \in [0, 1]$. Since $Px \neq 0$ and $E \cap C = \set{0}$, we have $Px \notin C$ and therefore $a < 1$. $\phi(a)$ is on the boundary of $C$ because $a$ is on the boundary of $\phi^{-1}(C) = [0, a]$ and $\phi$ is continuous. Now note that
\begin{align}
    P \phi(a) = P((1-a) x + a Px) = (1-a) Px + aP^2x = Px.
\end{align}
Hence,
\begin{align}
    \nrm{(1-P)\phi(a)}_2= \nrm{(1-a)x + a Px - Px }_2 = (1-a) \nrm{(1-P)x}_2 \leq \nrm{(1-P)x}_2
\end{align}
Therefore,
\begin{align}
    \frac{\nrm{x}_2}{\nrm{(\mathbf{1} - P)x}_2}
    &= \frac{\sqrt{\nrm{(1-P)x}_2^2 + \nrm{Px}_2^2}}{\nrm{(\mathbf{1} - P)x}_2} \\
    &\stackrel{(a)}{\leq} \frac{\sqrt{\nrm{(1-P)\phi(a)}_2^2 + \nrm{P\phi(a)}_2^2}}{\nrm{(\mathbf{1} - P)\phi(a)}_2}\\
    &= \frac{\nrm{\phi(a)}_2}{\nrm{(\mathbf{1} - P)\phi(a)}_2}.
\end{align}
This completes the proof of the first step.
\paragraph{Step 2} We now show that
\begin{align}
    \label{eq:bounded-boundry}
    \sup_{x\in \partial C\setminus\set{0}} \frac{\nrm{x}_2}{\nrm{(\mathbf{1} - P)x}_2} < \infty,
\end{align}
if and only if $E\cap T =\set{0}$.

First suppose that $v\in E\cap T$ is non-zero. We will find $x\in \partial C \setminus \set{0}$ such that $\nrm{x}/\nrm{(1-P)x} \geq K$ for a given $K>0$. By definition of tangent space, there exists a smooth curve $\gamma: (-1, 1) \to \partial C$ such that $\gamma(0) = 0$ and $\gamma'(0) = v$, i.e., $\lim_{t\to 0} \gamma(t) / t = v$. There exists some $t_0 > 0$ such that $\nrm{\gamma(t)/t - v} \leq \nrm{v}/2$ for all $0 < |t| < t_0$. We therefore have $\nrm{\gamma(t)} \geq t \nrm{v}/2$. Additionally, $\lim_{t\to 0} (\mathbf{1}-P)\gamma t = 0$ because $\mathbf{1} - P$ is continuous and $(\mathbf{1} - P) v =  v - Pv = 0$. Thus, there exists $t_1 > 0$ such that $\nrm{(\mathbf{1} - P)\gamma(t)} \leq 2/(K\nrm{v})$. For any $t$ such that $0 < t < \min(t_0, t_1)$, we have
\begin{align}
    \frac{\nrm{\gamma(t)}}{\nrm{(1-P) \gamma(t)}} \geq \frac{t\nrm{v}/2}{2/(K\nrm{v}) } = K,
\end{align}
as claimed.

We now prove the other direction. Let ${\mathcal{B}}(\epsilon) \eqdef \set{x \in \mathbb{R}^k: \nrm{x} < \epsilon}$ denote the open ball of radius $\epsilon$ at the origin.  To show  \eqref{eq:bounded-boundry}, it is enough to check for arbitrary small $\epsilon > 0$
\begin{align}
    \sup_{x\in (\partial C \cap {\mathcal{B}}(\epsilon)) \setminus\set{0}} \frac{\nrm{x}_2}{\nrm{(\mathbf{1} - P)x}_2} < \infty
\end{align}
because $\partial C \setminus {\mathcal{B}}(\epsilon)$ is a compact set, on which the distance from $E$ is non-zero and varies continuously. Let $Q$ denote the projection onto $T$ the tangent space of $\partial C$ at the origin. We know that for a point $x$ on $\partial C$ close to origin we have $\nrm{x} = \nrm{Q x} + o(\nrm{x})$. We can hence find an $\epsilon >0$ such that for $x \in\partial C \cap {\mathcal{B}}(\epsilon)) \setminus\set{0} $ we have $\nrm{x} \leq 2\nrm{Qx}$. Furthermore, considering the linear map $A: T \to E^\perp$ defined by $x\mapsto (1-P)x $, it is injective. Therefore, for some constant $B > 0$, we have $\nrm{Ax} = \nrm{(1-P) x } \geq B \nrm{x}$ for all $x\in T$. We can also choose $\epsilon > 0$ such that $\nrm{(1-Q)x} \leq B/2\nrm{Qx}$.  Therefore, we have for all $x\in\partial (C \cap {\mathcal{B}}(\epsilon)) \setminus\set{0} $
\begin{align}
    \frac{\nrm{x}}{\nrm{(\mathbf{1}-P) x}}
    &\leq \frac{2\nrm{Qx}}{\nrm{(\mathbf{1} - P)x}}\\
    &\leq   \frac{2\nrm{Qx}}{\nrm{(\mathbf{1} - P)Qx} - \nrm{(\mathbf{1} - P)(\mathbf{1}-Q)x}}\\
    &\leq \frac{2\nrm{Qx}}{\nrm{(\mathbf{1} - P)Qx} - \nrm{(\mathbf{1} - P)(\mathbf{1}-Q)x}}\\
    &\leq \frac{2\nrm{Qx}}{C\nrm{Qx} - C\nrm{Qx}/2}\\
    &\leq 4/C.
\end{align}
\bibliographystyle{IEEEtran}