
1 Introduction
High depth circuits are believed to be strictly more powerful than low depth circuits, in the sense that having
deeper circuits allows one to solve a larger set of problems. Indeed, this is a well established fact for both
classical and quantum circuits of depth sub-logarithmic in the size of the input [FSS84;Has86;BGK18;
WKST19]. However, for circuits of (poly)logarithmic depth and general polynomial depth, proving any sort
of unconditional separation is challenging [RR94]. In fact, there is not even an unconditional proof that the
set of problems that can be solved by polylog-depth classical circuits, NC, is a strict subset of the set of
problems solvable by poly-depth classical circuits, P(or BPP when allowing for randomness). The same is
believed to be the case for the quantum analogues of these classes, QNC and BQP, respectively. Nevertheless,
the strict containments NC ⊊Pand QNC ⊊BQP are known to hold in the oracle setting and, in particular,
relative to a random oracle [Mil92].1This is a strong indication that there are problems in P(BQP) which
cannot be parallelized so as to be solvable in NC (QNC). Under the random oracle heuristic, by replacing
the random oracle with a cryptographic hash function, one can even provide concrete instantiations of such
problems. A further indication of the separation between low and high depth computations is provided
by certain inherently sequential cryptographic constructions such as time-lock puzzles and verifiable delay
functions [RSW96;BBBF18].
The study of circuit depth can also yield insights into the subtle relationship between quantum and
classical computation by considering hybrid circuit models that combine quantum and classical computa-
tion [CCL20;CM20;AGS22;HG22]. In this setting, one can ask the question: how powerful are poly-depth
classical circuits, when augmented with polylog-depth quantum circuits? Could it be the case that interspers-
ing BPP with QNC computations captures the full power of BQP computations? Jozsa famously conjectured
that the answer is yes [Joz05]. Indeed, there is some evidence to support this conjecture, as the quantum
Fourier transform, a central building block for many quantum algorithms, was shown to be implement-
able with log-depth quantum circuits [CW00]. This also implies that Shor’s algorithm can be performed
by a BPPQNC machine, a polynomial-time classical computer having the ability to invoke a (poly)log depth
quantum computer.2Moreover, in the oracle setting, a number of problems yielding exponential separations
between quantum and classical computation require only constant quantum-depth to solve, providing further
support for Jozsa’s conjecture [Sim97;Aar10;AA15].
Despite the evidence in support of Jozsa’s conjecture, it was recently shown that, in the oracle setting,
the conjecture is false [CCL20;CM20]. Specifically, the results of [CCL20] (hereafter referred to as CCL)
and [CM20] (hereafter referred to as CM) considered two ways of interspersing poly-depth classical computa-
tion with 𝑑-depth quantum computation. The first is BPPQNCd, denoting problems solvable by a BPP machine
that can invoke 𝑑-depth quantum circuits (whose outputs are measured in the computational basis). The
second, QNCdBPP, denotes problems solvable by a 𝑑-depth quantum circuit that can invoke a BPP machine
at each layer in the computation.3Later, borrowing terminology from [CCL20;AGS22], we will refer to the
former circuit model as CQdand the latter as QCd. However, for the purposes of this introduction, we will
stick to the more familiar notation using complexity classes. Intuitively, BPPQNCdcaptures the setting of a
classical computer that can invoke a 𝑑-depth quantum computater several times. Examples of this include
quantum machine learning algorithms such as VQE or QAOA [PMS+14;FGG14], though as mentioned,
Shor’s algorithm is also of this type. On the other hand, QNCdBPP captures a 𝑑-depth measurement-based
quantum computation [RB01;BBD+09], where intermediate measurements are performed after each layer
in the quantum computation. The outcomes of those measurements are processed by a poly-depth classical
computation and the results are “fed” into the next quantum layer. CCL and CM showed that there exists
an oracle relative to which BPPQNCd∪QNCdBPP ⊊BQP, for any 𝑑=polylog(𝑛), with 𝑛denoting the size of
the input. Notably, each work considered a different oracle for showing the separation. For CM, the oracle
is the same one as for Childs’ glued trees problem [CCD+03]. For CCL, the oracle is a modified version
of the oracle used for Simon’s problem [Sim97], where the modification involves performing a sequence of
permutations, allowing them to enforce high quantum depth.
CCL and CM were the first results to provide a convincing counterpoint to Jozsa’s conjecture. However,
the main drawback of the CCL and CM results is that they are relative to oracles that are highly structured
and it is unclear if they can be explicitly instantiated based on some cryptographic assumption. Indeed,
1Technically [Mil92] only shows the strict containment NC ⊊P, relative to a random oracle. However, the quantum version
QNC ⊊BQP can also be shown as a straightforward extension of that result.
2Note that here and throughout the paper, the QNC oracle can output a string, unlike a decision oracle which outputs a bit.
3Note that the BPP oracle is not invoked coherently. Instead, it is invoked on outcomes resulting from intermediate meas-
urements performed in the layers of the QNCdcircuit.
5