---
title: Clifford-Cyclotomic Circuits & Exact Synthesis
url: https://www.emergentmind.com/topics/clifford-cyclotomic-circuits
type: topic
---

# Clifford-Cyclotomic Circuits & Exact Synthesis

Clifford-cyclotomic circuits are quantum circuits generated by the Clifford group together with a cyclotomic phase gate, typically a finite-order \(z\)-rotation in the qubit setting or its odd-prime analogue in the qutrit setting. The subject is organized around exact synthesis: given a unitary that is exactly representable by such a gate set, one seeks a decomposition that is both constructive and resource-optimal, with resources measured either by the number of non-Clifford cyclotomic rotations or by ancilla count. The literature develops this program at several levels: canonical forms and optimal ancilla-free synthesis for single-qubit families, ancilla-assisted ring-theoretic characterizations for multiqubit families, and a qutrit analogue over \(\mathbb{Z}[1/3,\omega_k]\) [1501.04944] [2311.07741] [2405.08136] [2508.14674].

## 1. Definitions and gate-set families

For each positive even integer \(n\), the single-qubit Clifford-cyclotomic gate set is
\[
\mathcal{G}_n=\langle \mathcal{C}, U_z(\pi/n)\rangle, \qquad U_z(\theta)= \begin{pmatrix} 1 & 0\\ 0 & e^{i\theta} \end{pmatrix},
\]
where \(\mathcal{C}\) is the single-qubit Clifford group. Since \(n\) is even, one has \(S=U_z(\pi/2)=(U_z(\pi/n))^{n/2}\), so \(\mathcal{G}_n=\langle H_0, U_z(\pi/n)\rangle\). The special case \(n=4\) is exactly Clifford+\(T\), because \(U_z(\pi/4)=T\) [1501.04944].

In the multiqubit setting, the same terminology refers to extending Clifford generators by the phase gate
\[
T_n=\operatorname{diag}(1,\zeta_n), \qquad \zeta_n=e^{2\pi i/n}.
\]
One formulation writes the gate set as \(\mathcal{G}_n=\{H,S,CX,T_n\}\), with \(\mathcal{R}_n\) the smallest subring of \(\mathbb{C}\) containing \(1/2\) and \(\zeta_n\). For \(n\) divisible by \(8\), the entries of the generators lie in \(\mathcal{R}_n\); more generally, the multiqubit program asks when every unitary with entries in the relevant ring has an exact \(\mathcal{G}_n\)-circuit [2311.07741] [2508.14674].

A qutrit analogue is defined for degree \(3^k\) by
\[
G_k = \{X, CX, CCX, H, T_k\}, \qquad T_k=\mathrm{diag}(1,\omega_k,\omega_k^2),
\]
where \(\omega_k=e^{2\pi i/3^k}\). The hierarchy satisfies \(T_{k+1}^3=T_k\). The paper states that \(G_1\) is equivalent to the qutrit Toffoli+Hadamard gate set, while for \(k>1\), \(G_k\) is equivalent, up to one borrowed ancilla, to qutrit Clifford+\(T_k\) [2405.08136].

Across these variants, the cyclotomic gate is the ingredient that introduces roots of unity into the synthesis problem and links circuit representability to arithmetic structure in localization rings such as \(\mathbb{Z}[1/2,\zeta_n]\) and \(\mathbb{Z}[1/3,\omega_k]\).

## 2. Single-qubit exact synthesis and canonical form

The single-qubit theory generalizes the optimal exact synthesis program known for Clifford+\(T\). A decomposition of a unitary \(U\) is written as
\[
e^{i\phi}U = C_1 U_z(s_1\pi/n) C_2 U_z(s_2\pi/n)\cdots C_\ell U_z(s_\ell\pi/n) C_{\ell+1},
\]
with \(C_i\in\mathcal{C}\), and its cost is the total number of non-Clifford rotations \(\sum_i s_i\). The quantity \(\mathcal{T}_n(U)\) is the minimum such cost, allowing an arbitrary global phase. The exact synthesis algorithm is optimal in the strong sense that it returns a decomposition achieving \(\mathcal{T}_n(U)\) [1501.04944].

The structural basis of the algorithm is a canonical form. Every \(U\in\mathcal{G}_n\) can be written as
\[
U=\left(\prod_{i=1}^{m}U_{p_i}(a_i\pi/n)\right)D,
\]
where \(p_i\in\{x,y,z\}\), adjacent axes satisfy \(p_i\neq p_{i+1}\), each \(a_i\) obeys \(1\le a_i< n/2\), and \(D\) is a Clifford up to global phase. Here
\[
U_{\pm p}(\theta)=e^{i\theta(1\mp P)/2}
\]
for \(P\in\{X,Y,Z\}\). The relations
\[
(U_p(\pi/n))^{n/2}=U_p(\pi/2)\in\mathcal{C}, \qquad
U_p(a\pi/n)U_{-p}(a\pi/n)=\zeta_{2n}^{a}
\]
allow sign normalization and rotation-count reduction. From this canonical form,
\[
\sum_{i=1}^m \min(a_i,n/2-a_i)=\mathcal{T}_n(U),
\]
so the canonical form directly encodes the minimum number of \(\pi/n\) rotations needed [1501.04944].

The reconstruction algorithm proceeds through the Bloch-sphere image \(\widehat U\in SO(3)\), where the generators become rotations \(R_x,R_y,R_z\) by \(\pi/n\) around coordinate axes. The product structure mirrors the canonical form:
\[
\widehat U=\left(\prod_{i=1}^{m}R_{p_i}^{a_i}\right)\widehat D,
\]
with \(\widehat D\) a signed permutation matrix. The denominator-exponent theorem then identifies the first factor from the arithmetic of matrix entries. Writing \(n=2^k s\) with \(s\) odd, the paper defines
\[
\beta= \begin{cases} 2, & k=1,\\[2mm] 2\cos\!\left(\frac{\pi}{2^k}\right), & k\ge 2, \end{cases}
\]
and proves that each nonzero entry of \(\widehat U\) can be written as \(w/\beta^r\) with \(w\) an algebraic integer not divisible by \(\beta\). If the canonical form has parameters \(a_i\), the maximum denominator exponent is
\[
N=\sum_i q_{a_i},
\]
exactly two rows attain exponent \(N\), and the remaining row has maximal exponent \(N-q_{a_1}\), which reveals the first axis \(p_1\). The algorithm repeatedly searches over \(q\in\{x,y,z\}\) and \(1\le b<n/2\), chooses the pair minimizing the relevant denominator-exponent statistic after left-multiplying by \(R_q^{-b}\), and peels off one factor at a time. Divisibility by \(\beta\) is testable in polynomial time using basis representations of algebraic integers, so the procedure is efficient in bit complexity [1501.04944].

## 3. Ring characterizations and arithmetic obstructions

The ring-theoretic formulation asks whether exact circuit representability coincides with entrywise membership in a cyclotomic localization ring. In the single-qubit qubit setting, the relevant ring is
\[
R_n=\mathbb{Z}\!\left[\zeta_{2n},\frac12\right],
\qquad
U_2(R_n)=\{V\in U(2):V_{ij}\in R_n\}.
\]
For \(n=4\), the known Clifford+\(T\) characterization is \(\mathcal{G}_4=U_2(R_4)\). The same equality is proved for \(n=2,4,6,8,12\), with \(n=2\) and \(n=12\) identified as new cases. More generally, however, the equality fails for almost all even \(n\): the fraction of even integers \(n\le N\) for which \(\mathcal{G}_n=U_2(R_n)\) tends to zero as \(N\to\infty\) [1501.04944].

A particularly sharp intermediate result concerns the \(z\)-axis subgroup. The subgroup of \(z\)-rotations inside \(\mathcal{G}_n\) is exactly
\[
D_n=\{U_z(\pi j/n):0\le j\le 2n-1\}.
\]
If
\[
\Delta_n=\{U_z(\theta):U_z(\theta)\in U_2(R_n)\},
\]
then \(\Delta_n=D_n\) if and only if, writing \(n=2^k s\) with \(s\) odd, there exists a positive integer \(t\) such that
\[
2^t\equiv -1 \pmod s.
\]
Equivalently, the only unit-modulus elements of \(R_n\) are the roots of unity in \(\mathbb{Q}(\zeta_{2n})\),
\[
S=\{e^{i\pi j/n}:j=0,\ldots,2n-1\},
\]
exactly when that congruence holds; otherwise \(S\) contains an element of infinite order. This is the arithmetic obstruction behind the generic failure of \(\mathcal{G}_n=U_2(R_n)\) [1501.04944].

A common misconception is that the familiar Clifford+\(T\) ring characterization extends uniformly across the entire single-qubit cyclotomic family. The single-qubit theory shows the opposite: the ring characterization is exceptional rather than generic. By contrast, in the multiqubit setting the limitations that apply to single-qubit unitaries, for which the correspondence between Clifford-cyclotomic operators and matrices over \(\mathbb{Z}[1/2,\zeta_n]\) fails for all but finitely many values of \(n\), can be overcome through the use of ancillas [2311.07741].

## 4. Multiqubit exact synthesis and ancilla-assisted catalytic embeddings

For multiqubit qubit circuits of degree \(n=2^k\), the central theorem states that a \(2^m\times 2^m\) unitary \(U\) can be exactly represented by an \(m\)-qubit circuit over \(\mathcal{G}_{2^k}\) if and only if all entries of \(U\) lie in the ring \(\mathbb{Z}[1/2,\zeta_{2^k}]\). The same line of work gives explicit ancilla bounds: one ancilla suffices when \(k\le 2\), and \(k-2\) ancillas suffice when \(k>2\) [2311.07741].

The constructive mechanism is a catalytic embedding that lowers the cyclotomic degree. In the later refinement for \(\mathcal{R}_{2^k}\), if \(M=A+B\zeta_{2^k}\) with \(A,B\in M(\mathcal{R}_{2^{k-1}})\), then
\[
\phi_k(M)=A\otimes I_2+B\otimes \Lambda_k,
\]
where
\[
\Lambda_k=
\begin{bmatrix}
0&1\\
\zeta_{2^{k-1}}&0
\end{bmatrix},
\qquad
c_k=\frac1{\sqrt2}\begin{bmatrix}1\\ \zeta_{2^k}\end{bmatrix}.
\]
This \((\phi_k,c_k)\) is a 2-dimensional catalytic embedding: \(\phi_k(U)(u\otimes c_k)=(Uu)\otimes c_k\). A determinant compatibility lemma shows that \(\phi_k\) respects determinants in the number-theoretic sense of relative norms, which is used to reduce synthesis to the determinant-one case [2508.14674].

The ancilla complexity was subsequently improved. For \(n=16\), every \(2^m\times 2^m\) unitary with entries in \(\mathcal{R}_{16}\) can be exactly represented over \(\mathcal{G}_{16}\) using only one ancilla, and this is minimal in the worst case. By induction, for every \(k\ge 4\), every \(2^m\times 2^m\) unitary in \(U_{2^m}(\mathcal{R}_{2^k})\) is exactly representable over \(\mathcal{G}_{2^k}\) using \(k-3\) ancillas, improving the earlier \(k-2\) bound; for \(k=4\) this bound is minimal [2508.14674].

The same paper extends exact synthesis beyond powers of two. For the base case \(n=24\),
\[
U\in U_{2^m}(\mathcal{R}_{24})
\quad\Longleftrightarrow\quad
U\text{ has an exact }\mathcal{G}_{24}\text{-circuit},
\]
with 2 ancillas sufficient. By induction, for all \(k\ge 3\),
\[
U\in U_{2^m}(\mathcal{R}_{3\cdot 2^k})
\quad\Longleftrightarrow\quad
U\text{ has an exact }\mathcal{G}_{3\cdot 2^k}\text{-circuit},
\]
with \(k-1\) ancillas sufficient. The \(24\)-case relies on a constructive decomposition theorem for unitaries over \(\mathcal{R}_{12}\), based on the least denominator exponent, residue analysis modulo \(\delta=1+\zeta_{12}^3=1+i\), and the operator
\[
H'=\zeta_8 H=\frac{\delta}{2}\begin{bmatrix}1&1\\1&-1\end{bmatrix},
\]
followed by a lift from \(\mathcal{R}_{12}\) to \(\mathcal{R}_{24}\) via a catalytic embedding [2508.14674].

## 5. Multiqutrit Clifford-cyclotomic circuits

The qutrit theory establishes an analogous exact-synthesis correspondence for odd prime local dimension. For fixed \(k\), the relevant ring is
\[
\mathbb{Z}[1/3,\omega_k],
\]
denoted \(Z_k\), and the main theorem states that a \(3^n\times 3^n\) unitary matrix \(U\) can be represented by an \(n\)-qutrit circuit over \(G_k\) if and only if \(U\in U_k\), where \(U_k\) is the group of unitary matrices with entries in \(Z_k\). Moreover, \(k+1\) ancillae are always sufficient to construct a circuit for \(U\) [2405.08136].

The proof is constructive and splits into a base case and an induction step. For \(k=1\), exact synthesis for \(G_1\) is obtained by showing that \(U_1\) is generated by a finite set of level matrices
\[
S = \{(-1)_{[x]}, (\omega)_{[x]}, X_{[x,y]}, H_{[x,y,z]} \mid 0\leq x<y<z\leq n-1\}.
\]
The argument uses the least \(\lambda\)-denominator exponent, where \(\lambda=1-\omega\). A vector with least denominator exponent \(0\) must be a basis vector up to a phase, while a positive denominator exponent can be reduced by suitable generators. A crucial “Hadamard reduction” lemma says that for any triple of non-\(\lambda\)-divisible entries, a suitable combination of local phases and \(H\) sends them to entries all divisible by \(\lambda\). The appendix then gives explicit circuit decompositions showing that each generator in \(S\) is realizable over \(G_1\), with at most 2 borrowed ancillae [2405.08136].

For \(k\ge 2\), the proof uses catalytic embeddings. Every element of \(Z_k\) can be uniquely written as
\[
u = a+b\omega_k+c\omega_k^2,\qquad a,b,c\in Z_{k-1},
\]
and similarly every matrix over \(Z_k\) decomposes as \(U=A+B\omega_k+C\omega_k^2\). The embedding is
\[
A + B\omega_k + C\omega_k^2
\longmapsto
A\otimes I + B\otimes \Omega_k + C\otimes \Omega_k^2,
\]
where
\[
\Omega_k =
\begin{bmatrix}
\cdot & \cdot & \omega_{k-1}\\
1 & \cdot & \cdot\\
\cdot & 1 & \cdot
\end{bmatrix},
\qquad
\ket{c_k}=\frac{1}{\lambda}
\begin{bmatrix}
1\\
\omega_k^{-1}\\
\omega_k^{-2}
\end{bmatrix},
\]
and \(\Omega_k\ket{c_k}=\omega_k\ket{c_k}\). This yields a 3-dimensional catalytic embedding \((\phi_k,\ket{c_k}):U_k\to U_{k-1}\); composing the embeddings produces a \(3^{k-1}\)-dimensional catalytic embedding into the base-ring case. The synthesis strategy is then to embed a \(Z_k\)-valued unitary into a larger \(Z\)-valued unitary, synthesize the larger unitary using the \(k=1\) algorithm, and uncompute the catalyst registers using explicit preparations based on \(T_\ell^\dagger H\ket{0}\) [2405.08136].

## 6. Structural, rewrite-theoretic, and complexity-theoretic context

Clifford-cyclotomic circuit theory sits on top of structural results for the Clifford group itself. A foundational result gives a complete normal form theory for Clifford circuits on \(n\) qubits: every Clifford operator has a unique normal form, and a finite terminating rewrite system reduces any Clifford circuit to that form. The paper presents the Clifford groupoid by generators \(\omega,H,S,Z_c\) and relations, and shows that no axioms involving 4 or more qubits are needed. This rewrite-theoretic template is directly relevant to later canonical-form and exact-synthesis work for Clifford-cyclotomic extensions [1310.6813].

A different line of work studies the computational power of restricted Clifford-derived models. In conjugated Clifford circuits, every Clifford gate is conjugated by the same one-qubit unitary \(U\). The classification theorem states that \(U\)-CCCs are efficiently weakly simulable if and only if
\[
U \sim \Gamma R_z(\lambda)
\]
for some single-qubit Clifford \(\Gamma\) and some angle \(\lambda\); otherwise, assuming \(PH\) is infinite, the family is \(PH\)-supreme. The paper explicitly notes that many familiar Clifford-plus-\(T\) or Clifford-cyclotomic constructions fit inside this viewpoint because they are generated by Clifford operations plus a special single-qubit phase gate, often a cyclotomic rotation [1709.01805].

There is also a topological classification of loops of Clifford circuits on translation-invariant lattices of prime-\(p\) qudits. A loop is a periodic one-parameter family of Clifford dynamics, formalized as a path of Lagrangian submodules over a polynomial extension. Using Hermitian \(K\)-theory and a generalized Maslov index, the homotopy classes satisfy
\[
\Omega \mathfrak C(0,p)\cong \Omega \mathfrak C(1,p) \cong \Omega \mathfrak C(2,p) \cong \Omega \mathfrak C(3,p) \cong 0,
\]
while
\[
\Omega \mathfrak C(4,p)\cong
\begin{cases}
\mathbb{Z}/2\oplus \mathbb{Z}/2, & p\equiv 1 \pmod 4,\\
\mathbb{Z}/4, & p\equiv 3 \pmod 4.
\end{cases}
\]
Although not focused on cyclotomic compilation, this work is relevant to a broader Clifford-cyclotomic discussion because roots of unity enter through the Pauli commutation relation \(XZ=\omega ZX\), and the classification is controlled by algebraic invariants over Laurent polynomial rings [2306.09903].

Taken together, these results show that Clifford-cyclotomic circuits are not a single theorem but a research program linking exact synthesis, canonical forms, rewrite systems, arithmetic of cyclotomic localization rings, ancilla-assisted embeddings, and, in adjacent directions, complexity classification and algebraic topology. The most persistent theme is the tension between entrywise ring characterizations and circuit realizability: in the single-qubit case the correspondence is exceptional, whereas in multiqubit and multiqutrit settings ancillas and catalytic constructions recover exact representability over broad infinite families [1501.04944] [2311.07741] [2405.08136] [2508.14674].

Source: https://www.emergentmind.com/topics/clifford-cyclotomic-circuits