I am trying to understand the following theorem: Every element $U\in C_n$ of the Clifford group can be constructed using $H, S, CNOT$ gates.
In Nielsen and Chuang's book this is left as an exercise (10.40, page 462), so I tried reading Gottesman's 1997 paper "A Theory of Fault-Tolerant Quantum Computation" where it is explicitly described starting from page 13. I am failing to understand a specific technical point.
Gottesman takes a gate $U$ for which we have $UZ_1U^\dagger=M$ with $M=X\otimes M^\prime$.
Now, he applies $U$ it to an arbitrary quantum state $\left|0\right\rangle \left|\psi\right\rangle +\left|1\right\rangle \left|\phi\right\rangle$, writing the result as
$$U\left(\left|0\right\rangle \left|\psi\right\rangle +\left|1\right\rangle \left|\phi\right\rangle \right)=\left(\left|0\right\rangle \left|\psi_{1}\right\rangle +\left|1\right\rangle \left|\psi_{2}\right\rangle \right)+\left(\left|0\right\rangle \left|\phi_{1}\right\rangle +\left|1\right\rangle \left|\phi_{2}\right\rangle \right)$$
Where in particular $U\left(\left|0\right\rangle \left|\psi\right\rangle \right)=\left|0\right\rangle \left|\psi_{1}\right\rangle +\left|1\right\rangle \left|\psi_{2}\right\rangle $.
Now comes the part I don't understand. Somehow he reaches the conclusion $$U\left(\left|0\right\rangle \left|\psi\right\rangle \right)=\left(I+M\right)\left(\left|0\right\rangle \left|\psi_{1}\right\rangle \right)$$
Which basically boils down to $M^\prime\left(\left|\psi_{1}\right\rangle \right)=\left|\psi_{2}\right\rangle $. Here is the reasoning:
- Apply $U$ to $\left|0\right\rangle \left|\psi_{1}\right\rangle $ (so we have the state $\left|0\right\rangle \left|\psi_{1}\right\rangle +\left|1\right\rangle \left|\psi_{2}\right\rangle $)
- Measure the first qubit in the $Z$-basis, getting either the state $\left|0\right\rangle \left|\psi_{1}\right\rangle $ or the state $\left|1\right\rangle \left|\psi_{2}\right\rangle $.
- "The above analysis of measurements shows that $\left|\psi_{1}\right\rangle$ and $\left|\psi_{2}\right\rangle$ are therefore related by the application of $M^\prime$".
I do not understand 3.
I tried explaining it to myself like this:
$\left(I+M\right)\left(\left|0\right\rangle \left|\psi_{1}\right\rangle \right)$ is basically (up to scalar multiplication) the projection to the eigenspace of the eigenvalue +1 when measuring the state $\left|0\right\rangle \left|\psi_{1}\right\rangle $ according to the projective measurement derived from $M$.
Since $UZ_{1}U^{\dagger}=M$ we should arrive at the same result by first applying $U^\prime$ to the state, then projecting to the eigenspace of +1 for the operator $Z_1$ and then applying $U$ to the result. However, I am stuck in the first step: I don't know how to compute $U^{\dagger}\left(\left|0\right\rangle \left|\psi\right\rangle \right)$. That's the point where I'm stuck, although maybe this direction is not helpful in the first place. I'm open to any suggestions.