Appendix Certified Robustness of Quantum Classifiers against Adversarial Examples through Quantum Noise
