This content was uploaded by our users and we assume good faith they have the permission to share this book. If you own the copyright to this book and it is wrongfully on our website, we offer a simple DMCA procedure to remove your content from our site. Start by pressing the button below!
2, p,re, and we let nb nz, n3, ... be the quadratic non-residues. Denote by Vb Vz, ... the solutions to
n
+ py == nz,...
(mode).
If y == Vi (mod e), then py + n is a quadratic non-residue mod e, and is therefore not a square. We may therefore discard those y == Vi (mode). We may further discard more values of y by choosing different values of e until the number of trials is small enough not to be troublesome. X Z == 73 (mod 127). We try to solve x 2 = 127y + 73 where 1 ::;;; y ::;;; 31. We take e = 3, ni = 2. From 73 + 127y == 2 (mod 3), that is y == 1 (mod 3), we see that the remaining values for y are:
Example. Solve
2,3,5,6,8,9,11,12,14,15, 17, 18,20,21,23,24,26,27,29,30. We next take e = 5, ni = 2, n2 = 3. From 127y + 73 == 2,3 (mod5), we have VI == 2, V2 == 0 (mod 5) and so the remaining values for yare now 3,6,8,9,11,14,18,21,23,24,26,29. We next take e = 7, ni = 3, n2 = 5, n3 = 6. From the congruences 127y + 73 == 3,5,6 (mod 7), or y + 3 == 3, 5, 6 (mod 7) we have y == 0,2, 3 (mod 7), so that we are left with only the six values 6,8,11,18,26,29 for the trials. In fact 73 the solutions.
+8 x
127 = 1089 = 33 2 so that x == ± 33 (mod 127) are
Note. In this method, having taken e and e', there is no need to take ee'. Again, having taken an odd e, there is no need to take 2e.
All we discuss here is related to the work of Gauss. We see therefore that this "Prince of mathematics" is not only a theoretician, but also an expert problem solver.
44
3. Quadratic Residues
3.5 The Number of Roots of a Quadratic Congruence Theorem 5.1. Let I> 0, p,tn. If p > 2, then the congruence X2 = n (mod pI) has 1 + (~) solutions. If p = 2, then we have the following three cases. 1) 1= 1. There is one root. 2) I = 2. There are two or no roots depending on whether n = 1 or 3 (mod 4). 3) I > 2. There are four or no roots depending on whether n = 1 or n =1= 1 (mod 8). Proof We first discuss the three cases associated with p = 2. 1) This is trivial. 2) The congruence X2 = 1 (mod 4) has the solutions ± 1 (mod 4) and the congruence X2 = 3 (mod 4) has no solution. 3) If X2 = n (mod 2') is soluble, then x must be odd, say 2k + 1. Since . k(k + 1) (2k+l)2=4k(k+l)+1=8' 2 +1=1
(mod 8),
it follows that the congruence is not soluble if n =1= 1 (mod 8). Suppose now that n = 1 (mod 8). When I = 3, there are clearly the four roots 1,3,5,7. We now proceed by induction on I. Let a satisfy a 2 = n (mod 2' - 1 ). Then
We take b = (n - a 2)j2'-l. Then a + 2' - 2b is a solution with respect to mod2'. Therefore a solution to X2 = n (mod 2') certainly exists. Let Xl be a solution, and let X2 be any solution. Then x~ = (Xl - X2)(Xl + X2) = 0 (mod2'), and since Xl - X2, Xl + X2 are both even it follows that t(Xl - X2) . t(Xl + X2) = 0 (mod 2' - 2 ). But t(Xl - X2) and t(Xl + X2) must be of opposite parity, since otherwise their sum Xl cannot be odd. Therefore we have either Xl = X2 (mod2 ' - l ) or Xl = - X2 (mod2 ' - l ), and this means that X2 = ± Xl + k2 ' - l (k = 0 or 1). Hence there are at most four solutions to X2 = n (mod 2'). Since ± Xl> ± Xl + 2' - 1 are actually incongruent solutions we see that the congruence has exactly four solutions. When p > 2 and I = I, the result is trivial, and the remaining part of the theorem follows from Theorem 2.9.3. D
xi -
From the results of Chapter 2 we can determine the number of solutions to a quadratic congruence to any integer modulus m.
3.6 Jacobi's Symbol Throughout this section m denotes a positive odd integer. Definition. Let the standard factorization of m be PI ... Pt, where the Pr may be repeated. If (n,m) = 1 then we define the Jacobi's symbol by
45
3.6 Jacobi's Symbol
(-mn) =0 G) t
r=1
Examples.
r
(~) = 1. If (a,m) = 1, then (~) = 1.
Note: If (:) = 1, it does not follow that x 2
=n (modm) is soluble.
Theorem 6.1. Let m and m' be positive odd integers. (i) If n
= n'
(modm) and
(n, m) = 1, then (:) = (:). (ii) If(n, m) = (n, m') = 1, then (:) (;,) = (m:'). (iii) If(n,m) = (n',m) = 1, then (:)(:) = (:'). Theorem 6.2. (
-:n 1)
D
= ( - l)t(m-l).
Proof. It suffices to prove that t
t
L
Pi - 1 2
i=1
=
OPi- 1 (mod 2),
i=1
2
which certainly holds when t = I. Given any two odd integers u, v we always have
u - 1 v-I -2- + -2-
=-uv2- -1
(mod 2)
(or (u - 1)(v - I)
=0 (mod4)).
It follows by induction that t
Pi -
1
t-l Pi -
1
Pt -
1
L=i= L - +2i= 1 2 1 2 t-l
o
_
Theorem 6.3.
i=1
Pi -
1
1
0 Pi -
= 222 +~
1
i=1
(mod 2).
(~) = (_ 1)~mL1).
Proof. This is similar to the above, except that we replace (I) by U2 V 2 -
8
1
u2 - 1 v2 - 1 = - 8 - + - 8 - (mod 2).
D
Theorem 6.4. Let m, n be coprime positive odd integers. Then ( -m)(n) n m
~.'!!..::..! 2.
= ( - 1) 2
D
(1)
46
3. Quadratic Residues
Proof Let m = TIp, n =
=
TI q. Then n-lm-l
p-lq-l
TITI (- 1)-2--2- = (- 1)-2--2p
where we have used (1).
q
0
In using the Legendre's symbol we must always ensure that the denominator is a prime. In using Jacobi's symbol however, we can avoid the factorization process. For example:
383) (443) ( 60 ) ( 22 ) ( 15 ) ( 15 ) ( 443 = - 383 = - 383 = - 383 383 = - 383 8 8 = C1 :) = ( 5) = (25) = 1. If we delete the condition that m, m' are positive in Theorem 6.4, then we have:
Theorem 6.5. Let m, n be coprime odd integers.
(Imln)(m) jnf = - ( -
Otherwise, the required value is ( -
If m, n are both negative, then m-ln-l
1)-2--2-.
l)t<m-l).!
Example. Determine the solubility of x 2
=-
0
286 (mod 4272943).
Here p = 4272943 is a prime, and we have 10 evaluate (-:86). Since
(~1) = _ 1, (~) = 1, we have (-:86) = We now determine
C;3)
(~1 )(~)C;3) = _ C;3).
as follows: We have
4272943 = 29880 x 143 + 103*, 143 = 2 x 103 - 63, 103 = 2 x 63 - 23, 63 = 2 x 23 + 17*, 23 = 2 x 17 17 = 2 x
11,
11 - 5*,
11=2x5+1
47
3.7 Two Terms Congruences
where each step with a * denotes a change of sign. Therefore
p
( 143) = (-I? =-1. Thus ( as
;86) = I,
and the congruence is soluble. Gauss determined the solutions
± 1493445.
3.7 Two Terms Congruences Let p be prime. We now discuss the congruence
Xk
== n (modp).
Theorem 7.1. The congruence Xk
== I (modp)
(I)
has (k,p - I) roots. Proof I) Let d = (k,p - I) and let s, t be integers such that sk + t(p - I) then have :x;
=
== I (modp),
d. We
(2)
and conversely. 2) It suffices to prove that (2) has d roots. From Theorem 2.9.1 the number of roots for (2) certainly cannot exceed d. Also, there are p - I roots to xP- 1 == I (modp). Again, by Theorem 2.9.1 the number of roots for
xp -
1 -
I
p-l
- . , - - - = (Xd)-d-- 1
:x;
+ ... + x d + I == 0
(modp)
does not exceed p - I - d, so that the number of roots for (2) must be at least d. The theorem is proved. 0 Theorem 7.2. Either the congruence (k,p - I) solutions.
Xk
== n (modp), p,rn has no solution or it has
Proof If Xo is a solution, then (X;;-l X)k == follows from Theorem 7.1. 0
XkX;;-k
== I (modp). The required result
Theorem 7.3. If x runs over a reduced set of residues mod p, then (p - I)/(k,p - I) different values.
Xk
take
Proof From Theorem 7.2 we see that there are (k,p - I) distinct residues whose k-th power have the same residue modp. The p - I residues are now partitioned into (p - I)/(k,p - I) classes, and there is a one-to-one correspondence. 0
48
3. Quadratic Residues
Definition. Let h be an integer, and (h, n) = 1. The least positive integer I such that h' == I (modn) is called the order of h (modn). Theorem 7.4.
If hm == I (modn), then 11m.
Proof Suppose the contrary. Then there are integers q, r such that m = ql + r, 0< r < I. Now hr == hm(h,)-q == I (modn) contradicts with the definition of I. 0 Theorem 7.5. Let lip - I, and denote by ({)(/) the number ofincongruent integers with order I. Then ({)(I) is the Euler's function.
Proof We first establish certain properties of (()(I). I) If (110 12) = I, then ({)(l1/2) = ({)(lr)({)(l2). Let hI and h2 be integers with orders 11 and 12 respectively, and let Ibe the order of h 1h 2. From I == (h1h2)"2 == h';2 (modp), and Theorem 7.4 we see that / 11112. Since (110 12) = I, we have 111/, and similarly /211. Therefore I = 1112, that is· the order of h1h2 is 11/2. Thus, given any hI, h2 with orders 11,/2, we can construct h1h2 whose order is 11/2. We now prove that if we do not have hI == h~,h2 == h~ (modp), then h1h2 i= h~h~ (modp). For if h1h2 == h'lh~ (modp), then h 1h'1-1 == h~h21 (modp). But the order of h1h~-1 divides 11 and the order of h~h21 divides 12, so that h1h~-1 ==h~h21 == I (modp) which contradicts our assumption. Conversely, if h is an integer with order 11/2 where (/r,/2) = I, then hI = h'2, h2 = h" are integers with orders 110 12. Therefore ({)(lr)({)(/2) = (()(l1/2). 2) If q is prime, then ({)(qt) = qt - qt-1. The number of roots of xqt - 1 == 0 (mod p) is qt. If x satisfies this congruence and its order is not qt, then it must satisfy ~t-' _ I == 0 (modp). But the number of roots of this congruence is qt-1. Therefore ({)(qt) = qt _ qt-1. That (()(I) is Euler's function follows from the two properties in I) and 2). 0
3.8 Primitive Roots and Indices From Theorem 7.5 we see that there are ({)(p - I) incongruent numbers with order p - I (modp). Definition 1. A positive integer whose order is p - I is called a primitive root of p. Let g be a primitive root of p. Then gO, gl, . .. , gP- 2 are incongruent (modp). Definition 2. Corresponding to each integer n not divisible by p, there exists a such that
n == ga
(modp),
O~a
We call athe index ofn (modp) and we denote it by indg n or simply ind n. If b is such that n == gb (modp), then b == indn (modp - I).
49
3.9 The Structure of a Reduced Residue System
The function ind is similar to the logarithm function in that there are following properties: I) indnm == indm + indn (modp - l),p,rmn; 2) indn' == lindn (modp - 1),p,rn. Note: We do not define indn when pin; this is similar to not defining log O. Definition 3. Let p,rn. If the congruence
Y!' == n (modp)
(1)
is soluble, then we call n a k-th power residue mod p; otherwise we call n a k-th power non-residue. Theorem 8.1. A necessary and sufficient condition for n to be a k-th power residue modp is that (k,p - I) divides indn.
Proof Let a = indn and y = indx. Then (I) is equivalent to ky == a (modp - 1), and a necessary and sufficient condition for this to be soluble is that (k,p - 1) divides a. D "Base interchange formula". It is clear that the index depends on the primitive root chosen. Let gi be another primitive root and gi == gb (modp). Then n == g~ == (gb)a (modp) or
This is similar to the base interchange formula for the logarithm function. We list the least primitive roots for all the primes up to 5000 at the end of this chapter.
3.9 The Structure of a Reduced Residue System Let m be a natural number. We ask whether there exists
g
such that
gO, gi, g2, ... , g,,(m)-i (modm) form a reduced residue system. If g exists, then we
call it a primitive root of m. Theorem 9.1. A necessary and sufficient condition for m to have a primitive root is that m = 2,4,p' or 2p', where p is an odd prime.
Proof 1) Let the standard factorization of m be
Pi
From Euler's theorem, any integer a not divisible by Pi must satisfy
50
3. Quadratic Residues
Let I be the least common mUltiple of cp(it'), ... , cp(p!s) so that a l = I (modm). Therefore there can be no primitive root if 1< cp(m). If p > 2, then cp(pl) is even, so that m cannot have two distinct odd prime divisors. If m has a primitive root, then m must be of the form 21, i or 2cpl. If c ~ 2, then cp(2C) = 2C- 1 is also even, and so 2ci cannot have primitive roots. Therefore m must be of the form 21,pl or 2pl. 2) m = 21. If I = I, then I is a primitive root. If 1= 2, then 3 is a primitive root. Let I ~ 3. We prove by induction that for all odd a, we have a 2' - 2
=
I
(mod 21).
This is easy, since if then
Therefore there is no primitive root for m = 21 (/ > 2). 3) m = i. The case I = I has already been settled in §8. Let g be a primitive root of p. If gP-l - I =1= 0 (modp2), then we take r = g; if gP-l - I = 0 (modp2), then we take r = g + p. We then have
Therefore such an r is a primitive root of p2. Let rP -
1 -
I
=
kp, p,tk.
Since s~O,
we can prove as before that
Hence rpl - 2 (p-l)
= I + kp l-l
(mod pi) ,
I
~
2.
(1)
If the order of r is e, then el(p - I)pl-l = cp(i). Since r is a primitive root of p, we see that(p - 1)le. We deduce from (I) that e = cp(Pl); that is r is a primitive root ofi· 4) m = 2pl. We take g to be a primitive roqt of pl. If g is odd, then g is also a primitive root of 2pl; if g is even, then g + pi is a primitive root of 2pl. D Theorem 9.2. Let I > 2. Then the order of 5 with respect to the modulus 21 is 21- 2.
Proof We first prove that, for a
52a - 3
~
3,
= I + 2a -
1
(mod2 a ).
51
3.9 The Structure of a Reduced Residue System
This clearly holds when a 5 2a - 2 = (5 2a - 3 f
Therefore 521-3 (mod 21). D
=1=
= 3,
and we now proceed by induction. We have
== (1 + 2a- 1 + k2a)2 == 1 + 2a (mod2 a+ 1 ).
1 (mod 21) and 52' - 2 == 1 (mod 21). That is, the order of 5 is 21- 2
Theorem 9.3. Let I > 2. Then, given any odd a, there exists b such that a-I
a == ( - 1)-2-5 b
(mod 21),
b
~
0.
Proof If a == 1 (mod 4), then by Theorem 9.2, 5b (0::;;; b < 21- 2) gives 21- 2 distinct numbers mod 21; moreover they are all congruent 1 (mod 4). Therefore there must be an integer b such that a == 5b (mod 21). If a == 3 (mod 4), then - a == 1 (mod 4), and the required result follows from the above. D
Theorem 9.4. Let m = 21 . pili . .. p~s (standard factorization) with I ~ 0, 11 > 0, ... , Is > 0. We define (j to be or 1 or 2 according to whether 1= 0, 1 or 1= 2 or I > 2
°
respectively. Then the reduced residue system ofm can be represented by the products of s + (j numbers. Proof 1) Suppose that m = m'm", (m', m") = 1. Let ar, .. . , aq>(m') be a reduced residue system mod m', and that ai == 1 (modm") (this is always possible). Let br, ... , bq>(m") be a reduced residue system mod m" and that bj == 1 (modm'). Then aibj represen t a reduced residue system mod mm', and its num ber is q>( m'm"). Also, if aibj == asb t (modm'm"), then ai == as (modm'), bj == b t (modm"). 2) From Theorems 9.1 and 9.3 we know that the reduced residue system modm, where m = pi (p > 2), is the product of a single number. If m = 21 where I > 1, then the reduced residue system is the product of (j numbers. Combining this with 1), the theorem is proved. D
This theorem points out an important principle. In group theory this result is known as the Fundamental Theorem of Abelian groups. Exercise. Prove that if k < p, n, = kp2
+ 1 and
2n -
1
== 1 (modn),
then n is a prime number. Hints: (i) First prove.that n has a prime divisor congruent 1 (modp). Let dbe the least positive integer such that 2d == 1 (mod n). Deduce that d,tk, din - 1 and pld. Then obtain the conclusion from pldlq>(n). (ii) Deduce from n = kp2 + 1 = (up + 1)(vp + 1) that n cannot be composite. Note: Taking p = 2127 - 1, k = 180, Miller and Wheeler proved, with the aid of a computer, that 180(2127 - 1)2 + 1 is prime. (Nature 168 (1951),838).
52
3. Quadratic Residues
The least primitive roots for primes less than 5000. An asterisk indicates that lOis a primitive root. p
p-1
g
p
p-1
g
p
p-1
g
3 5 7* 11 13 17* 19* 23* 29* 31 37 41 43 47* 53 59* 61* 67 71 73 79 83 89 97* 101 103 107 109* 113* 127 131* 137 139 149* 151 157 163 167* 173 179* 181* 191 193* 197 199 211 223* 227 229* 233* 239
2 22 2·3 2·5 22.3 24 2.3 2 2·11 22.7 2·3·5 22.3 2 23 .5 2·3·7 2·23 22.13 2·29 22.3.5 2·3·11 2·5·7 23 .3 2 2·3·13 2·41 23 .11 25 .3 22.5 2 2·3·17 2·53 22.3 3 24 .7 2.3 2.7 2·5·13 23 ·17 2·3·23 22.37 2.3.5 2 22.3.13 2.3 4 2·83 22.43 2·89 22.3 2.5 2·5·19 26 .3 22.7 2 2.3 2·11 2·3·5·7 2·3·37 2·113 22.3.19 23 ·29 2·7·17
2 2 3 2 2 3 2 5 2 3 2 6 3 5 2 2 2 2 7 5 3 2 3 5 2 5 2 6 3 3 2 3 2 2 6 5 2 5 2 2 2 19 5 2 3 2 3 2 6 3 7
241 251 257* 263* 269* 271 277 281 283 293 307 311 313* 317 331 337* 347 349 353 359 367* 373 379* 383* 389* 397 401 409 419* 421 431 433* 439 443 449 457 461* 463 467 479 487* 491* 499* 503* 509* 521 523 541* 547 557 563
24 .3.5 2.5 3 23 2·131 22 ·67 2.3 3 .5 22.3.23 23 .5.7 2·3·47 22.73 "2.3 2.17 2·5·31 23 .3.13 22.79 2·3·5·11 24.3.7 2·173 22.3.29 25 ·11 2·179 2·3·61 22.3.31 2.3 3 .7 2·191 22.97 22.3 2·11 24.5 2 23 .3.17 2·11·19 22.3.5.7 2·5·43 24.3 3 2·3·73 2·13·17 26 .7 23 .3.19 22.5.23 2·3·7·11 2·233 2·239 2.3 5 2.5.7 2 2·3·83 2·251 22 ·127 22.5.13 2.3 2.29 22.3 3 .5 2·3·7·13 22 ·139 2·281
7 6 3 5 2 6 5 3 3 2 5 17 10 2 3 10 2 2 3 7 6 2 2 5 2 5 3 21 2 2 7 5 15 2 3 13 2 3 2 13 3 2 7 5 2 3 2 2 2 2 2
569 571* 577* 587 593* 599 601 607 613 617 619* 631 641 643 647* 653 659* 661 673 677 683 691 701* 709* 719 727* 733 739 743* 751 757 761 769 773 787 797 809 811* 821* 823* 827 829 839 853 857* 859 863* 877 881 883 887*
23 .71 2·3·5·19 26 .3 2 2·293 24 .37 2·13 ·23 23 .3.5 2 2·3·101 22.3 2·17 23 .7.11 2·3·103 2.3 2.5.7 27 .5 2·3·107 2·17·19 22 ·163 2·7·47 22.3.5.11 25 .3.7 22.13 2 2·11·31 2·3·5·23 22.5 2·7 22.3.59 2·359 2.3.11 2 22.3.61 2.3 2.41 2·7·53 2.3.5 3 22.3 3 .7 22.5.19 28 .3 22 ·193 2·3·131 22 ·199 23 ·101 2.3 4.5 22.5.41 2·3·137 2·7·59 22.3 2.23 2·419 22.3.71 23 ·107 2·3·11·13 2·431 22.3.73 24.5.11 2.3 2.72 2·443
3 3 5 2 3 7 7 3 2 3 2 -3
:,
11 5 2 2 2 5 2 5 3 2 2 11 5 6 3 5 3 2 6 11 2 2 2 3 3 2 3 2 2 11 2 3 2 5 2 3 2 5
53
3.9 The Structure of a Reduced Residue System
p
p-1
g
p
p-1
g
p
p-1
g
907 911 919 929 937* 941* 947 953* 967 971* 977* 983* 991 997 1009 1013 1019* 1021* 1031 1033* 1039 1049 1051* 1061 1063* 1069* 1087* 1091* 1093 1097* 1103* 1109* 1117 1123 1129 1151 1153* 1163 1171* 1181* 1187 1193* 1201 1213* 1217* 1223* 1229* 1231 1237 1249 1259* 1277 1279
2·3·151 2'5'7·13 2'3 3 '17 25 ·29 23 '3 2'13 22'5.47 2'11·43 23 '7'17 2·3·7·23 2·5'97 24 ,61 2·491 2.3 2-5-11 22'3'83 24 '3 2'7 22 ·11·23 2'509 22. 3· 5 ·17 2'5·103 23 .3.43 2·3·173 23 ·131 2'3'5 2'7 22'5'53 2'3 2'59 22'3'89 2'3·181 2'5·109 22'3'7'13 23 ·137 2'19·29 22 ·277 22'3 2'31 2·3·11·17 23 '3'47 2'5 2'23 27 .3 2 2'7·83 2'3 2'5'13 22'5'59 2·593 22 ·149 24 '3'5 2 22.3'101 26 ·19 2·13·47 22,307 2·3·5·41 22'3'103 25 .3.13 2·17'37 22'11.29 2.3 2'71
2 17 7 3 5 2 2 3 5 6 3 5 6 7 11 3 2 10 14 5 3 3 7 2 3 6 3 2 5 3 5 2 2 2 11 17 5 5 2 7 2 3 11 2 3 5 2 3 2 7 2 2 3
1283 1289 1291* 1297* 1301* 1303* 1307 1319 1321 1327* 1361 1367* 1373 1381* 1399 1409 1423 1427 1429* 1433* 1439 1447* 1451 1453 1459 1471 1481 1483 1487* 1489 1493 1499 1511 1523 1531* 1543* 1549* 1553* 1559 1567* 1571* 1579* 1583* 1597 1601 1607* 1609 1613 1619* 1621* 1627 1637 1657
2·641 23 '7.23 2'3'5'43 24 '3 4 22. 52 ·13 2·3·7·31 2·653 2·659 23 .3.5.11 2'3·13·17 24 '5'17 2·683 22'7 3 22'3'5'23 2·3·233 27'11 2'3 2'79 2·23'31 22. 3· 7 ·17 23 ·179 2'719 2'3'241 2'5 2.29 22. 3.11 2 2'3 6 2.3.5'7 2 23 '5'37 2·3·13·19 2'743 24 .3'31 22'373 2'7·107 2·5·151 2'761 2.3 2. 5 ·17 2·3·257 22'3 2'43 24 '97 2·19·41 2'3 3 '29 2·5·157 2'3'263 2·7·113 22. 3· 7 ·19 26 ,5 2 2 ·11· 73 23 '3'67 22'13'31 2·809 22'3 4 '5 2·3·271 22,409 23 ,3 2 ,23
2 6 2 10 2 6 2 13 13 3 3 5 2 2 13 3 3 2 6 3 7 3 2 2 5 6 3 2 5 14 2 2 11 2 2 5 2 3 19 3 2 3 5 11 3 5 7 3 2 2 3 2 11
1663* 1667 1669 1693 1697* 1699 1709* 1721 1723 1733 1741* 1747 1753 1759 1777* 1783* 1787 1789* 1801 1811* 1823* 1831 1847* 1861* 1867 1871 1873* 1877 1879 1889 1901 1907 1913* 1931 1933 1949* 1951 1973 1979* 1987 1993* 1997 1999 2003 2011 2017* 2027 2029* 2039 2053 2063* 2069* 2081
2·3·277 2'7 2'17 22'3'139 22'3 2'47 25 '53 2·3·283 22'7'61 23 '5'43 2·3'7·41 22'433 22'3'5'29 2· 32·97 22'3'73 2'3'293 24 '3'37 2.3 4 '11 2·19'47 22'3'149 23 '3 2.5 2 2·5·181 2·911 2'3·5·61 2·13'71 22'3'5'31 2'3'311 2'5·11'17 24 '3 2'13 22'7.67 2·3'313 25 '59 22. 32'19 2'953 23 ·239 2·5·193 22'3'7'23 22 ·487 2'3'5 2'13 22'17'29 2·23·43 2·3·331 22'3'83 22'499 2.3 3 .37 2·7·11·13 2·3·5·67 25 .3 2.7 2 ·1013 22'3'13 2 2·1019 22.3 3 '19 2·1031 22 ·11·47 25 .5'13
3 2 2 2 3 3 3 3 3 2 2 2 7 6 5 10 2 6 11 6 5 3 5 2 2 14 10 2 6 3 2 2 3 2 5 2 3 2 2 2 5 2 3 5 3 5 2 2 7 2 5 2 3
54
3. Quadratic Residues
p
p-I
g
p
p-I
g
p
p-I
g
2083 2087 2089 2099* 211l 21l3* 2129 2131 2137* 2141* 2143* 2153* 2161 2179* 2203 2207* 2213 2221* 2237 2239 2243 2251* 2267 2269* 2273* 2281 2287 2293 2297* 2309* 2311 2333 2339* 2341* 2347 2351 2357 2371* 2377 2381 2383* 2389* 2393 2399 2411* 2417* 2423* 2437* 2441 2447* 2459* 2467 2473*
2·3·347 2·7·149 23 .3 2.29 2·1049 2·5·21l 26 .3 ·Il 24.7.19 2·3·5·71 23 .3.89 22.5.107 2.3 2.7.17 23 ·269 24.3 3 .5 2.3 2.1l 2 2·3·367 2·1l03 22.7.79 22.3.5.37 22.13.43 2·3·373 2·19· 59 2.3 2.5 3 2·11·103 22.34.7 25 ·71 23 .3.5.19 2.3 2.127 22.3.191 23 .7.41 22.577 2·3·5·7·1l 22. II· 53 2·7·167 22.3 2.5.13 2·3·17·23 2.5 2 .47 22 .19.31 2·3·5·79 23 .3 3 ·Il 22.5.7.17 2·3·397 22.3.199 23 .13.23 2· 11·109 2·5·241 24 ·151 2·7·173 22 .3.7.29 23 .5.61 2 ·1223 2 ·1229 2.3 2.137 23 .3.103
2 5 7 2 7 5 3 2 10 2 3 3 23 7 5 5 2 2 2 3 2 7 2 2 3 7 19 2 5 2 3 2 2 7 3 13 2 2 5 3 5 2 3 II 6 3 5 2 6 5 2 2 5
2477 2503 2521 2531 2539* 2543* 2549* 2551 2557 2579* 2591 2593* 2609 2617* 2621* 2633* 2647 2657* 2659 2663* 2671 2677 2683 2687* 2689 2693 2699* 2707 271l 2713* 2719 2729* 2731 2741* 2749 2753* 2767* 2777* 2789* 2791 2797 2801 2803 2819* 2833* 2837 2843 2851* 2857 2861* 2879 2887 2897*
22.619 2.3 2.139 23 .3 2.5.7 2·5·1l·23 2.3 3 .47 2·31·41 4.7 2.13 2.3.5 3 .17 22.3 2.71 2·1289 2·5·7·37 25 .3 4 24.163 23 .3.109 22.5.131 23 .7.47 2.3 3 .7 2 25 .83 2·3·443 2·1l 3 2·3·5·89 22.3.223 2.3 2.149 2·17·79 27 .3.7 22.673 2·19·71 2·3·1l·41 2·5·271 23 .3.113 2.3 2.151 23 .11.31 2·3·5·7·13 22.5.137 22.3.229 26 .43 2·3·461 23 .347 22.17.41 2.3 2.5.31 22.3.233 24.5 2.7 2·3·467 2 ·1409 24.3.59 22 ·709 2.7 2.29 2.3.5 2.19 23 .3.7.17 22.5. II· 13 2 ·1439 2·3·13·37 24.181
2 3 17 2 2 5 2 6 2 2 7 7 3 5 2 3 3 3 2 5 7 2 2 5 19 2 2 2 7 5 .3 3 3 2 6 3 3 3 2 6 2 3 2 2 5 2 2 2 II 2 7 5 3
2903* 2909* 2917 2927* 2939* 2953 2957 2963 2969 2971* 2999 3001 301l* 3019* 3023* 3037 3041 3049 3061 3067 3079 3083 3089 3109 3119 3121 3137* 3163 3167* 3169 3181 3187 3191 3203 3209 3217 3221* 3229 3251* 3253 3257* 3259* 3271 3299*' 3301* 3307 3313* 3319 3323 3329 3331* 3343* 3347
2·1451 22.727 22.3 6 2·7·1l·19 2·13·1l3 23 .3 3 .41 22.739 2 ·1481 23 .7.53 2.3 3 .5 ·Il 2 ·1499 23 .3.5 3 2·5·7·43 2·3·503 2 ·151l 22·3·1l·23 25 .5.19 23 .3.127 22.3 2.5.17 2·3·7·73 2.3 4.19 2·23·67 24 ·193 22.3.7.37 2·1559 24.3.5.13 26 .7 2 2·3·17·31 2·1583 22·3 2.1l 22.3.5.53 2.3 3 .59 2·5·1l·29 2·1601 23 .401 24.3.67 22.5.7.23 22.3.269 2.5 3 .13 22.3.271 23 .11.37 2·3·181 2·3·5·109 2·17·97 22.3. 52. II 2·3·19·29 24.3 2.23 2·3·7·79 2·1l·151 28 .13 2.3 2 .5.37 2·3·557 2·7·239
5 2 5 5 2 13 2 2 3 10 17 14 2 2 5 2 3 II 6 2 6 2 3 6 7 7 3 3 5 7 7 2 II 2 3 5 10 6 6 2 3 3 3 2 6 2 10 6 2 3 3 5 2
55
3.9 The Structure of a Reduced Residue System
p
p-1
g
P
p-1
g
3359 3361 3371* 3373 3389* 3391 3407* 3413 3433* 3449 3457 3461* 3463* 3467 3469* 3491 3499 3511 3517 3527* 3529 3533 3539* 3541 3547 3557 3559 3571* 3581* 3583 3593* 3607* 3613 3617* 3623* 3631 3637 3643 3659* 3671 3673* 3677 3691 3697 3701* 3709* 3719 3727* 3733 3739 3761 3767 3769
2·23·73 25 '3.5.7 2·5·337 22.3.281 22. 7 .11 2 2·3·5·113 2·13·131 22'853 23 • 3 ·11·13 23 ·431 27 ,3 3 22'5'173 2·3·577 2·1733 22. 3 .17 2 2'5'349 2·3·11·53 2'3 3 '5'13 22'3'293 2·41·43 23 ,3 2,7 2 22 ·883 2·29·61 22'3.5'59 2'3 2.197 22.7.127 2·3'593 2·3·5'7·17 22.5.179 2.3 2.199 23 '449 2·3·601 22'3'7'43 25 '113 2'1811 2.3'5.11 2 22. 32. 101 2·3·607 2·31'59 2·5'367 23 '3 3 '17 22'919 2'3 2'5'41 24 .3'7.11 22'5 2'37 22 • 32·103 2.11.13 2 2· 34 ·23 22'3'311 2·3·7·89 24 '5'47 2'7·269 23 '3'157
11 22 2 5 3 3 5 2 5 3 7 2 3 2 2 2 2 7 "2 5 17 2 2 7 2 2 3 2 2 3 3 5 2 3 5 21 2 2 2 13 5 2 2 5 2 2 7 3 2 7 3 5 7
3779* 3793 3797 3803 3821* 3823 3833* 3847* 3851* 3853 3863* 3877 3881 3889 3907 3911 3917 3919 3923 3929 3931 3943* 3947 3967* 3989* 4001 4003 4007* 4013 4019* 4021 4027 4049 4051* 4057* 4073* 4079 4091* 4093 4099 4111 4127 4129 4133 4139* 4153* 4157 4159 4177* 4201 4211* 4217* 4219*
2 '1889 24 '3'79 22 ·13· 73 2 ·1901 22'5'191 2'3'7 2'13 23 '479 2·3·641 2· 52. 7·11 22. 32·107 2·1931 22'3'17'19 23 '5'97 24 '3 5 2.3 2'7'31 2·5·17·23 22 ·11· 89 2·3·653 2·37'53 23 ·491 2·3·5·131 2'3 3 '73 2 ·1973 2·3·661 22 ·997 25 .5 3 2·3·23·29 2·2003 22'17'59 2'7 2'41 22'3'5'67 2·3·11·61 24 .11.23 2.3 4 '5 2 23 • 3 '13 2 23 '509 2·2039 2'5·409 22.3.11'31 2·3·683 2·3·5·137 2·2063 25 • 3 ·43 22 ·1033 2·2069 23 .3.173 22 ·1039 2.3 3 . 7'11 24 .3 2'29 23 '3'5 2'7 2'5'421 23 '17'31 2·3·19'37
2 5 2 2 3 3 3 5 2 2 5 2 13 11 2 13 2 3 2 3 2 3 2 6 2 3 2 5 2 2 2 3 3 10 5 3 11 2 2 2 17 5 13 2 2 5 2 3 5 11 6 3 2
p
4229* 4231 4241 4243 4253 4259* 4261* 4271 4273 4283 4289 4297 4327* 4337* 4339* 4349* 4357 4363 4373 4391 4397 4409 4421* 4423* 4441 4447* 4451* 4457* 4463* 4481 4483 4493 4507 4513 4517 4519 4523 4547 4549 4561 4567* 4583* 4591 " 4597 4603 4621 4637 4639 4643 4649 4651* 4657 4663
p-1
g
22'7'151 2'3 2'5'47 24 '5'53 2·3· 7 ·101 22 ·1063 2'2129 22'3.5'71 2'5'7·61 24 .3.89 2·2141 26 '67 23 '3'179 2·3'7·103 24 .271 2'3 2.241 22 '1087 22. 32.11 2 2·3·727 22 ·1093 2·5·439 22'7'157 23 ·19·29 22. 5·13 ·17 2· 3 ·11· 67 23 • 3· 5· 37, 2'3 2'13'19 2'5 2'89 23 '557 2·23·97 27 '5'7 2'3 3 '83 22 ·1123 2·3'751 25 .3'47 22 ·1129 2.3 2.251 2·7'17·19 2'2273 22'3'379 24 .3.5'19 2'3'761 2·29'79 2· 33 • 5 ·17 22'3'383 2·3 ·13'59 22 .3.5'7.11 22'19'61 2'3'773 2·11·211 23 '7'83 2'3'5 2'31 24 .3'97 2.3 2'7.37
2 3 3 2 2 2 2 7 5 2 3 5 3 3 10 2 2 2 2 14 2 3 3 3 21 3 2 3 5 3 2 2 2 7 2 3 5 2 6 11 3 5 11
5 2 2 2 3 5 3 3 15 3
56
3. Quadratic Residues
p
p-I
g
p
p -I
g
p
p-I
g
4673* 4679 4691* 4703* 4721 4723 4729 4733 4751 4759 4783* 4787 4789
26 .73 2·2339 2·5·7·67 2·2351 24 .5.59 2·3·787 23 .3.197 22 .7.13 2 2.5 3 .19 2·3·13·61 2·3·797 2·2393 22 .3 2 .7.19
3 II 2 5 6 2 17 5 19 3 6 2 2
4793* 4799 4801 4813 4817* 4831 4861 4871 4877 4889 4903 4909 4919
23 .599 2·2399 26 .3.5 2 22 .3.401 24 .7.43 2·3·5·7·23 22 .3 5 .5 2·5·487 22 .23.53 23 .13.47 2·3·19·43 22 .3.409 2·2459
3 7 7 2 3 3 II II 2 3 3 6 13
4931* 4933 4937* 4943* 4951 4957 4967* 4969 4973 4987 4993 4999
2·5·17·29 22 .3 2 ·137 23 .617 2·7·358 2·3 2 ·5 2 ·II 22 .3.7.59 2·13·191 23 .3 3 .23 22 ·II·II3 2.3 2 .277 27 .3.13 2.3.7 2 .17
6 2 3 7 6 2 5 II 2 2 5 3
Chapter 4. Properties of Polynomials
4.1 The Division of Polynomials We consider polynomialsf(x) with rational coefficients and we denote by 13°f the degree of the polynomial.
Definition 1.1. Let./{x) and g(x) be two polynomials with g(x) not identically zero. If there is a polynomial h(x) such that./{x) = g(x)h(x), then we say that g(x) divides j{x), and we write g(x)I'/{x) or glf If g(x) does not divide ./{x), then we write g,tf Clearly we have the following: (i)flf; (ii) ifflg and gil, thenfand g differ only by a constant divisor, and we call them associated polynomials; (iii) if fig and glh, then Jlh; (iv) if fig, then 13°f ~ aOg. Ifflg and g,tI, then we callfa proper divisor of g and it is easy to see that, in this case, 13°f < 13° g. Theorem 1.1. Let./{x) and g(x) be any two polynomials with g(x) not identically zero. Then there are two polynomials q(x) and r(x) such that f = q . g + r, where either r = 0 or aOr < aOg. Proof We prove this by induction on the degree off If 13°f < aOg, then we can take q = 0, r =f If aOf~ aOg, we let f=
IXnXn
+ ... ,
g = Pmxm
+ ... ,
aOf= n, 13° g = m,
so that
From the induction hypothesis, there are two polynomials h(x) and r(x) such that
where either r
so that f
=
0 or aOr < aOg. We now put
= qg + r as required. D
58
4. Properties of Polynomials
Definition 1.2. By an ideal we mean a set I of polynomials satisfying the following conditions: (i) If f, gEl, then f + gEl; (ii) IffE I and h is any polynomial, then fh E I. Example. The multiples of a fixed polynomial fix) forms an ideal.
Theorem 1.2. Given any ideal I, there exists a polynomial f E I such that any polynomial in I is a multiple off; that is I is the ideal of the set of multiples off Proof Let f be a polynomial in I with the least degree. If g is a polynomial in I which is not a multiple off, then, according to Theorem 1.1, there are polynomials q(x) and r(x) (1' 0) such that g
= qf + r,
Since f E I, it follows from (ii) that qfE I, and hence from (i) that g - qfE I, that is rEI. But this contradicts the minimal degree property of f The theorem is proved. D Definition 1.3. Let f and g be two polynomials. Consider the set of polynomials of the form mf + ng where m, n are polynomials. From Theorem 1.2 we see that this set is identical with the set of polynomial which are multiple of a polynomial d. We call this polynomial dthe greatest common divisor offand g, and we write (f, g) = d. For the sake of uniqueness we shall take the leading coefficient of (f, g) to be I, that is a monic polynomial. Theorem 1.3. The greatest common divisor (f, g) has the following properties: (i) There are two polynomials m, n such that (f, g) = mf + ng; (ii) For every pair of polynomials m, n we have if, g)lmf + ng; (iii) If Ilf and Ilg, then 11(f, g). D Definition 1.4. If(f, g) = I, then we say thatfand g are coprime. Theorem 1.4. Let p be an irreducible polynomial. If plfg, then either plf or pig. Proof If p,tf, then (f, p) = I. Thus, from Theorem 1.3 there are polynomials m, n such that mf + np = 1 so that mfg + ngp = g. Since plfg, it follows that pig. D
4.2 The Unique Factorization Theorem Theorem 2.1. Any polynomial can be factorized into a product of irreducible polynomials. If associated polynomials are treated as identical, then, apart from the ordering of the factors, this factorization is unique. D
59
4.2 The Unique Factorization Theorem
The theorem can be proved by mathematical induction on the degree of the polynomial. Theorem 2.2. Letj(x) and g(x) be two polynomials with rational coefficients, and that j(x) be irreducible. Suppose that f(x) = 0 and g(x) = 0 have a common root. Then j(x)lg(x). Proof Sincefand g have a common zero, it follows that (f, g) # l. Let d(x) be the greatest common factor of j(x) and g(x). Then d(x) and j(x) are associated polynomials, because j(x) is irreducible. Therefore j(x)lg(x). 0
From this theorem we deduce the following: Ifj(x) is an irreducible polynomial of degree n, then the zeros
are distinct. Moreover, if 9(i) is a zero of another polynomial g(x) with rational coefficients, then the other n - I numbers are also the zeros of g(x). Theorem 2.3. Let f and g be monic polynomials:
where Pv are distinct irreducible monic polynomials. Then
where
Cv
= min (a v , bv )' 0
Definition 2.1. Letfand g be two polynomials. Polynomials which are divisible by bothfand g are called common multiples offand g. Those common multiples which have the least degree are called the least common multiples, and we denote by [f, g] the monic least common multiple. Theorem 2.4. Under the same hypothe~is as Theorem 2.3 we have
where dv
= max (a v , bv ). 0
From this we deduce: Theorem 2.S. A least common multiple divides every common multiple. Theorem 2.6. Let f, g be monic polynomials. Then fg
=
[f, g](f, g).
0
0
60
4. Properties of Polynomials
4.3 Congruences Let m(x) be a polynomial. If m(x)lfix) - g(x), then we say that fix) is congruent to g(x) modulo m(x) and we write
fix)
= g(x)
(modm(x)).
With respect to any modulus m(x) we have: (i)f=f(modm); (ii) iff= g (modm), then g =f(modm); (iii) iff= g, g = h (modm), thenf= h (modm); (iv) iff= g, fl gl (modm), thenf ±fl g ± gl,ffl ggl (modm). Being congruent is an equivalence relation which partitions the set polynomials into equivalence classes. From (iv) we see that addition and multiplication can be defined on these classes. We denote by 0 the class whose members are divisible by m(x). If m(x) is irreducible we can even define division on the set of equivalence classes (except by 0, of course). Specifically, if fix) is not a mUltiple of m(x), then there are polynomials a(x), b(x) such that a(x}f{x) + b(x)m(x) = 1 which means that there is a polynomial a(x) such that a(x)f(x) = 1 (modm(x)). We state this as a theorem.
=
=
=
Theorem 3.1. Let m(x) be irreducible. Then any non-zero equivalence class has a reciprocal. That is, if A is a non-zero equivalence class, then there exists a class B such that for any polynomials fix) and g(x) in A and B respectively we have fix)g(x) = 1 (mod m(x)). D We now give an example to illustrate the ideas in this section. Let m(x) = x 2 + 1, an irreducible polynomial. Each equivalence class contains a unique polynomial ax + b which we may take as the representative. The addition and subtraction of classes is given by ax + b ± (alx + b l ) = (a ± al)x + (b ± bl)' Multiplication is given by (ax + b)(alx + b l ) = aalx 2 + (ab l + alb)x + bb l = (ab l + alb)x + bb l - aal (modx 2 + 1). Using the ordered pair (a, b) to denote the class containing ax + b we then have
(a,b)
± (abb l ) =
(a, b)(ah b l )
(a
± abb ± bl),
= (ab l + bal, bb l - aal)'
From
(ax
+ b)( -
ax
. . ( we see thatthe Inverse of (a, b) IS
+ b) = a2 + b2
(modx 2
+ 1),
b)
a 2' 2 2 2 ' In other words we have the a +b a +b arithmetic of the complex number ai + b. Extending the idea here, if m(x) is a monic polynomial of degree n, then each equivalence class possesses a unique polynomial with degree less than n, say -
and the arithmetic of the congruence modulo m(x) becomes the arithmetic of these
61
4.4 Integer Coefficients Polynomials
polynomials. The sum of two such polynomials is obtained by adding the corresponding coefficients, and the product is the ordinary product polynomial reduced modulo m(x). Exercise 1. Let OCl, OC2, OC3 be distinct. Determine a quadratic polynomial j(x) satisfying j(OC1) = /31 '/(OC2) = /32, j(OC3) = /33'
Answer: The Lagrange interpolation formula ft..x) = /31
(x - O(2)(X - O(3) (OCI - O(2)(OCl - O(3)
+ /32
(x - O(3)(X - OCl) (OC2 - O(3)(OC2 - OCl)
(x - OCl)(X - O(2)
+ /33...,..-----,---(OC8 - OCl)(OC3 - O(2)
Exercise 2. Let ml(x) and m2(x) be two non-associated irreducible polynomials. Let fl(X) andf2(x) be two given polynomials. Prove that there exists a polynomialj(x) such thatj(x) =/;(x) (modmi(x)), i = 1,2.
4.4 Integer Coefficients Polynomials It is clear that the set of integer coefficients polynomials is closed with respect to addition, subtraction and multiplication. A set of integer coefficients polynomials is called an ideal if (i) f + g belongs to the set whenever f and g belong to the set, (ii) fg belongs to the set whenever f belongs to the set, and g is any integer coefficients polynomial. Theorem 4.1. (Hilbert) Every ideal A possesses a finite number of polynomials fl' ... ,J,. with the following property: Every polynomial f E A is representable as f = glfl + ... + gnfn where gb' .. , gn are integer coefficients polynomials.
Proof 1) Denote by B the set ofleading coefficients of members of A. We claim that B forms an integral modulus. To see this, we observe that if a, bEB, where ft..x) = axn + .. " g(x) = bxm + .. " then by (ii) we know thatj{x)xm, g(x)x" E A so that
j(x)xm ± g(x)xn
=
(a
± b)xm+n + ...
are in A. Therefore a ± bEB which proves our claim. From Theorem 1.4.3 members of B are multiples of an integer d. Let the corresponding polynomial with leading coefficient d be
2) Let fEA. Then there are two polynomials q(x) and r(x) such that ft..x) = q(X)fl (x) + r(x) where oOr < OOfl or r = O. This is certainly so if the degree of fis less than that offl' Ifj(x) = axn + ... + an (n ~ I), then by 1) we see that dla, and
62
4. Properties of Polynomials
is a polynomial with degree at most n - I. If the degree here is greater than or equal to I, then its leading coefficient is again divisible by d. Continuing the argument we see that our claim is valid. 3) If every member of A has degree at least I, then the theorem is proved. Otherwise we let d' be the greatest common divisor of the leading coefficients of . members of A whose degree are less than I, and we let f2
= d'xl' + d'lX"-l + ...
(did')
be the corresponding polynomial in A. From the above, we see that members of A whose degree lies between l' and I can be written asfix) = Q(X)f2(X) + r(x) where aOr < a 2f2 or r = O. Continuing this argument the theorem is proved. 0
4.5 Polynomial Congruences with a Prime Modulus In this section all the polynomials have integer coefficients and p is a fixed prime number. Definition 5.1. If the corresponding coefficients of two polynomials fix) and g(x) differ by multiples of p, then we say thatf(x) and g(x) are congruent modulo p, and we writefix)~g(x) (modp). By the degree aOfofj(x) modulo p we mean the highest degree of f(x) whose coefficient is not a multiple of p. For example 7x 2 + 16x + 9~2x + 2 (mod 7), and a°(7x 2 + 16x + 9) = I (mod 7). But with respect to the modulus 3, a 2(7 x 2 + 16x + 9) = 2. Clearly we have (i) j(x)~j(x) (modp); (ii) if f~g (modp), then g~f (modp); (iii) if f~g, g~h (modp), thenf~h (modp); (iv) iff~g,Jl ~gl (modp), thenf ±fl ~g ± gl and ffl ~ggl (modp). We note particularly that (f(xW
~j(xP)
(modp).
Definition 5.2. Letf(x) and g(x) be polynomials with g(x) not identically zero mod p. If there is a polynomial h(x) such thatj(x) ~h(x)g(x) (modp), then we say that g(x) dividesf(x) modulo p. We call g(x) a divisor ofj(x) modulo p, and we write g(x)lj(x) (modp). Example. From XS + 3x4 - 4x 3 + 2 ~ (2X2 - 3)(3x3 - x 2 + I) (mod 5) we see that 2X2 - 31x s + 3x4 - 4x 2 + 2 (mod 5). We have the following: (i) f(x)lj(x) (modp); (ii) if j(x)lg(x) and g(x)lf(x) (modp), thenj(x) and g(x) differs only by a constant factor; that is, there exists an integer a such thatj(x)~ag(x) (modp). In this case we say thatj(x) and g(x) are associated modulo p. It is easy to see that every polynomial has p - I associates
63
4.6 On Several Theorems Concerning Factorizations
modulo p. Moreover, there is a unique monic associated polynomial. (iii) Ifflg, glh (modp), thenflh (modp). (iv) Letfix) and g(x) be two polynomials with g(x) not identically zero modulo p. Then there are two polynomials q(x) and r(x) such that fi.x)~q(x)g(x) + r(x) (modp), where either aOr < aOg, or r(x)~O (modp). Definition 5.3. If a polynomial fix) cannot be factorized into a product of two polynomials with smaller degrees modp, then we say that f(x) is an irreducible polynomial modp, or thatf(x) is prime modp. Example. We take p = 3. There are three non-associated linear polynomials, namely x, x + 1, x + 2, which are irreducible. There are nine non-associated quadratic polynomials, namely x 2 , x 2 + x, x 2 + 2x, x 2 + 1, x 2 + X + 1, x 2 + 2x + 1, x 2 + 2, x 2 + X + 2, x 2 + 2x + 2. Of these there are 6 (= (x + a)(x + b)) which are reducible, and the three irreducible ones are x 2 + 1, x 2 + X + 2, x 2 + 2x + 2.
We note that if a polynomial is irreducible mod p, then it is irreducible and from this we deduce that x 2 + 2x + 2 has no rational zeros. The determination of the number of irreducible polynomials modp of degree n is an interesting problem which we shall solve in §9. Theorem 5.1. Any polynomial can be written as aproduct of irreducible polynomials modp, and this product representation is unique apartfrom associates and ordering of the factors. 0 We can define, similarly to §1, the greatest common divisor and the least common multiple. If we denote by (f, g) the monic greatest common divisor, then we have Theorem 5.2. Given polynomials j(x) and g(x), there are polynomials m(x) and n(x) such that m(x)f(x) + n(x)g(x)~(f(x), g(x)) (modp). 0
4.6 On, Several Theorems Concerning Factorizations Definition 6.1. Letj(x) = anxn + an_1x"-1 + ... be a polynomial. The polynomial + (n - 1)an_lxn- 2 + ... is called the derivative ofj(x) and is denoted by
nanx"-l f'(x).
Clearly we have (f(x) + g(x))' = f'(x) that (f(x)g(x)), = f'(x)g(x) + g'(x)j(x).
+ g'(x),
and it is not difficult to prove
Definition 6.2. If a polynomial j(x) is divisible by the square of a non-constant polynomial modp, then we say thatfix) has repeated/actors modp. For example, x 5 + X4 - x 3 - x 2 + X + 1 has the repeated factors (x 2 + 1)2 modulo 3.
64
4. Properties of Polynomials
Theorem 6.1. A necessary and sufficient condition for j(x) to have repeatedfactors is that the degree of (j(x),f'(x» is at least 1. D Theorem 6.2. Ijp,(n, then X' - 1 has no repeatedfactors modp. Theorem 6.3. Let (m,n)
=
d. Then (x'" - 1, xn - 1) =;xd - 1.
D
D
Theorem 6.4. Let (m, n) = d. Then
4.7 Double Moduli Congruences Definition 7.1. Let p be a prime number and q>(x) be a polynomial. Iff1 (x) - fix) is a multiple of q>(x) mod p, then we say that f1 and f2 are congruent to the double moduli p, q>(x) and we write
f1(X) §. f2 (x)
(moddp, q>(x».
For example, x 5 + 3x4 + x 2 + 4x + 3 §. 0 (modd 5, 2X2 - 3). Double moduli congruences have the following properties: 1) j(x)§.j(x) (moddp, q>(x»; 2) If f§.g (moddp, q», then g§.f(moddp, q»; 3) If f§.g and g§.h (moddp, q», thenf§.h (moddp, q»; 4) If f§.g and f1 §.gl (modd p, q», then f ±f1 §.g ± gl and ff1 §.ggl (moddp, q»; 5) Suppose that the degree of q>(x) (modp) is n. Then every polynomial is congruent to one of the following polynomials
0::;;; ai::;;;p - 1.
(1)
It is clear that there are pn polynomials in (1), no two of them are congruent (moddp, q>(x», and any polynomial must be congruent to one of them (moddp, q>(x». Definition 7.2. We call the pn polynomials in (1) a complete residue system (moddp, q>(x». By discarding those polynomials which are not coprime with q>(x) we have a reduced residue system (moddp, q>(x».
Theorem 7.1. Let (g(x), q>(x» = 1. Then, asj(x) runs through a complete (or reduced) residue system (moddp, q>(x», so does f(x)g(x). Proof If g(X)f1 (x) §. g(X)f2(X) (moddp, q>(x», then from (g(x), q>(x» = I we deduce that f1 (x) §. f2 (x) (moddp, q>(x». The required result follows easily from this. D
65
4.8 Generalization of Fermat's Theorem
4.8 Generalization of Fermat's Theorem Let p be a prime number, and
(x). Then ffl' ... ,jJp" _ I is also a reduced residue system. Therefore p"-l
p"-l
n /;(x) n (f(x)f;(x)) ~
i= I
(moddp,
L. This shows that, when I > L, the first t + k (k ;;:: 0) terms of the power series in p representing a" a, + 1, a, + 2, ••• must be equal. Since t can be arbitrarily large the required result follows. We have proved that all the power series in p of the form (3), finite or infinite, together give the whole set of p-adic numbers.
15.9 Application Although the notion ofap-adic number is introduced as such only in this chapter, it has appeared several times already in this book. An example of this was pointed out in the beginning of this chapter. Th,e generalization of this example is known as Hensel's Lemma. Theorem 9.1 (Hensel). Let f(x) be a polynomial with integer coefficients, and f(x) == go(x)ho(x) (modp), where go(x) and ho(x) are coprime polynomials. Then, among the p-adic numbers, there are two polynomials g(x), h(x) such that g(x) == go(x), h(x) == ho(x) (modp), andf(x) = g(x)h(x). Proof Let g,(x), h,(x) be two polynomials satisfying
and
Clearly g, and h, are coprime (modp). Let
and
422
15. p-adic Numbers
so that we have
Let
j(x) - g,(x)h,(x)
------;-,- - == t(x) (modp). p
Since g,(x) and h,(x) are coprime (modp), there are two polynomials cp(x) and t/J(x) such that t(x) == cp(x)hl(x) + t/J(x)Mx) (modp). Therefore j(x) - gl+ 1 (x)h l + 1 (x) ==j(x) - g,(x)hl(x) - pl(cp(x)hl(X)
+ t/J(x)g,(x»
== p'(t(x) - cp(x)h,(x) - t/J(x)g,(x» == 0 (modp'+ 1). Since the degree of t(x) does not exceed the degree of g,(x)h,(x) we may assume that the degrees of cp(x) and t/J(x) do not exceed the degrees of g,(x) and h,(x) respectively. The coefficients of g,(x) and hl(x) are cp-convergent, and so they converge to g(x) and hex) respectively. The theorem is proved. 0
Note: Lemma 7.10.1 can be given an interpretation in p-adic numbers.
Chapter 16. Introduction to Algebraic Number Theory
16.1 Algebraic Numbers Definition 1.1. By an algebraic number we mean a number 8 which is a root of the algebraic equation (1)
where the coefficients a r are rational numbers.
J=l
Examples of algebraic numbers are j2, i = and the rational numbers themselves. By clearing the denominators of all the fractions a r in equation (1) we obtain an algebraic equation with integer coefficients. From now on we shall call an ordinary integer a rational integer to distinguish it from an algebraic integer, which we shall define later. We see therefore that algebraic numbers may also be defined as the roots of algebraic equations with rational integer coefficients. If the equation (1) is irreducible and an i= 0, then we call n = aOfthe degree of the algebraic number 8. For example, rational numbers have degree 1, and the number i has degree 2. Let the equation (1) be irreducible and let 8(1), 8(2), ••• , 8(n) be all its roots. From Theorem 4.2.2 we know that 8(j) 'are distinct, and if 8(j) satisfies a rational coefficient equation g(x) = 0, then so do the remaining n - 1 numbers. We see therefore that the degree of an algebraic number is uniquely determined. Theorem 1.1. The sum, the diflerence, the product and the quotient (not dividing by zero) of two algebraic numbers are algebraic. 0 With the aid of the symmetric polynomial theorem, the proof of this theorem is only a simple exercise, and we shall omit many of the proofs in this chapter. Definition 1.2. If the irreducible algebraic equation defining 8 has rational integer . coefficients and leading coefficient 1, then we call 8 an algebraic integer. Examples of algebraic integers are themselves.
j2, i, (1 + fi)/2, and the rational integers
Theorem 1.2. Any algebraic integer which is rational must be a rational integer.
0
424
16. Introduction to Algebraic Number Theory
Theorem 1.3. The sum, the difference and the product of two algebraic integers are algebraic integers. D Theorem 1.4. Let 8 be an algebraic number. Then there exists a natural number q such that q8 is an algebraic integer. D Definition 1.3. If 8 and 8 - 1 are both algebraic integers, then we call 8 a unit. Examples of units are i and 3 - 2)2. Theorem 1.5. A necessary and sufficient condition for 8 to be a unit is that 8 satisfies an algebraic equation with rational integer coefficients, and with leading coefficient 1 and last coefficient ± 1. D
16.2 Algebraic Number Fields Definition 2.1. Let Fbe a set of complex numbers with at least two distinct members. Suppose that, given any two members in F, their sum, difference, product and quotient (not dividing by 0) are also members of F. Then we call Fa number field, or simply a field. An example of a field is the set of rational numbers which we shall, from now on, denote by R. It is clear that every number field must contain the rational field R. Theorem 2.1. Let 8 be an algebraic number ofdegree n. Then the set ofnumbers of the form (1)
where ak are rational numbers, forms a field. Moreover numbers represented by (1) are all distinct.
D
Dermition 2.2. The field in Theorem 2.1 is called the single extension of R by 8, and we shall denote it by R(8). For example, R(i) is the field of numbers of the form a rational numbers.
+ ib where a and bare
Theorem 2.2. /f8 "# 0, then R(8) is largest set ofnumbers obtainedfrom 8 by means of addition, subtraction, multiplication and division (except by 0). D Definition 2.3. Let 81> ... ,8, be algebraic numbers. The field obtained from addition, subtraction, multiplication and division (except by 0) of these numbers is called a finite extension of R and is denoted by R(8 1 , .•• , 8,).
425
16.3 Basis
Theorem 2.3. Every finite extension of R is a single extension. That is, given any finite extension R(8l>"" 8,), there exists an algebraic number 8 such that R(8) = R(8l> ... ,8,). 0 From this theorem we need only consider single extensions R(8), which we now call algebraic number fields. We also call the degree of 8 the degree of the field R(8). For example, R(i) is a quadratic field, and R is the only field with degree I. Theorem 2.4. Let D run over all the rational integers not equal to 1 with no square divisors. Then R(JD) runs over all the quadratic fields. 0
16.3 Basis In this section R(8) denotes an algebraic number field of degree n. We set 8 = 8(1), and let 8(2), ••• ,8(n) denote the remaining n - 1 roots of the irreducible equation defining 8. From the previous section we see that each number aE R(8) is representable as
where
aj
are rational numbers.
Dermition3.1. Leta(l) = a. Weputa(k) = a(8(k»,k conjugates of a. We also call the numbers Sea) N(a)
= 2,3, ... ,nand we call them the
= a(1) + ... + a(n) = a(8(1» + ... + a(8(n», = a(l) ... a(n) = a(8(1» ... a(8(n»,
the trace and the norm of a respectively.
It is easy to see that S(a + f3) = Sea) + S(f3) and N(af3) = N(a)N(f3). Also, from the symmetric polynomial theorem, we see that Sea) and N(a) are rational numbers, and if a is rational then Sea) = na and N(a) = an. Next, if a is an algebraic integer, then so are a(i), and hence so are Sea) and N(a); but Sea) and N(a) are known to be rational so that they must be rational integers. If a is a unit, then from N(a)N(a- 1) = N(aa- 1) = N(I) = 1 and the fact that N(a), N(IX- 1) are rational integers we deduce that N(IX) = ± 1. Conversely, if ais an algebraic integer and N(IX) = ± I, then 1X- 1 = ± a(2) ... a(n) is also an algebraic integer and so IX must be a unit. Therefore a necessary and sufficient condition for an algebraic integer IX to be a unit is that N(IX) = ± 1. Theorem 3.1. Let aE R(8) and let the irreducible equation satisfied by IX be hex) = 0, aOh = I. Also, let g(x) = rr~= 1 (x - a(v». Then g(x) is a polynomial with rational coefficients, and g(x) = c(h(x»"/', where lin and c is a rational number.
426
16. Introduction to Algebraic Number Theory
Proof That g(x) is a polynomial with rational coefficients follows at once from the symmetric polynomial theorem. Let oc = a(8). Then from h(oc) = 0 we have h(oc(v) = h(a(8(v» = 0, so that every root of g(x) = 0 is also a root of hex) = O. Since hex) is an irreducible polynomial we must have h(x)lg(x). Let g(x) = h(x)gl(x). If gl(X) is a constant, then the required result is proved; otherwise gl(X) has zeros and these must also be zeros of hex), so that h(x)lgl(x). Let gl(X) = h(x)g2(x). We can repeat the argument, and since the degree of g(x) is finite we finally obtain g(x) ::= c(h(x»n/l. 0
From this theorem we see that if 0( is an algebraic number of degree I, then there are I distinct numbers among OC(l), ••• , O(n) and each of them occurs nil times. Definition 3.2. Suppose that there exists a set of numbers OC1, ••• , O(m in R( 8) such that any number in R(8) is uniquely representable as alO(l + ... + amOCm where aj (1 ~j ~ m) are rational numbers. Then we call 0(1)'' • ,O(m a basis for R(8). It is easy to see that no one of 0(1, ••• , O(m is expressible as a linear combination of the other m - 1 numbers with rational coefficients. From Theorem 2.1 we know that 1,8, ... , 8 n- 1 forms a basis for R(8), so that basis certainly exists. Following the proof of Theorem 14.9.2 the reader can easily prove
Theorem 3.2. Every basis for R(8) has precisely n elements.
0
Let 0(1" •• , O(n and PI" .. , Pn be two bases for R(8). Then, from the definition ofa basis, there are rational numbers ajk (1 ~j, k ~ n) such that all
n
O(j
=
L ajkPk
~j~n),
(1
lajkl
a1 n
= ............ # O.
k=l
Definition 3.3. Let number
OCl, ••• , OCn E
R( 8). By the discriminant of 0(1, •••
L1(CX1, ... ,ctn) =
,O(n
we mean the
.......... .
Theorem 3.3. The discriminant
J(O(1>' •• , OCn) possesses the following properties: is a rational number; and if 0(1) ••• , OCn are algebraic integers, then J(O(1>' •• ,O(n) is a rational integer. 2) Let 0 ( 1 ) ' ' ' ' O(n and PI,"" Pn be two bases for R(8), and aj = L~= 1 ajkPk (1 ~j ~ n). Then
1)
J(O(1>""
O(n)
3) A necessary and sufficient conditionfor 0(1)' J(O(l> ... ,O(n)
# O.
•• ,
OCn
to be a basis for R(8) is that
0
Theorem 3.4. Suppose that, among the numbers 8(1), ... , 8(n), rl of them are real, and r2pairs of them are complex conjugates (r1
+ 2r2 = n). Then,for any basis
0(1)' •• ,
O(n
427
16.4 Integral Basis
of R(8), we have
Proof From Theorem 3.3 we need only examine the case = 8n - 1 • Now
0(1
= 1,
0(2 =
8, ... ,
O(n
Let us denote by !J the complex conjugate of 8. When 8(k) i= !JU) we have «8(j) - 8(k»(!J(j) - !J(k»)2 > 0, and (8(j) - !JW)2 < O. Therefore (- 1),2.1(1,8, ... , 8 n -
1)
> O.
16.4 Integral Basis In the remaining part of this chapter we shall use the word integer to mean an algebraic integer. Definition 4.1. Let Oh, . .. , Wm be m integers in R(8). If every integer in R(8) can be expressed uniquely as a1 W1 + ... + amw m, where a1' ... ,am are rational integers, then we call W1>'" ,Wm an integral basis for R(8). Theorem 4.1. Integral basis exists. More specifically let W1, ... ,Wnbe a basis where Wj (l ~j ~ n) are integers such that ILI(w1>"" wn)1 is least. Then W1>"" Wn is an integral basis. Proof We can choose a natural number q so that q8 is an integer, and now 1, q8, (q8)2, ... , (q8)"-1 are integers which form a basis for R(8). Therefore a basis 0(1) .•• ,lXn consisting of integers certainly exists. We shall now prove the set W1,' .. ,Wn of integers forming a basis which makes 1.1(0(1>' •• ,00n)lleast is an integral basis. Suppose the contrary. Then there exists an integer W = a1W1 + ... + anWn> where some ai is not a rational integer. We may assume without loss that a1 is not a rational integer, say a1 = g + t where g is a rational integer and 0 < t < 1. Then W'l = W - gW1 = tW1 + a2W2 + ... + anWnis also an integer, and w~, W2," . ,Wn still forms a basis for R(8). But
contradicting the minimal property of ILI(w1>' .. ,wn)l. The theorem is proved.
0
From this theorem we see that an integral basis is a basis, so that each integral basis consists of n elements. Theorem 4.2. All integral basis have the same discriminant. That is, if W1> ... , Wn and W'l' ... ,w~ are two integral bases, then L1(W1> ... ,wn) = L1(w'1" .. ,w~). 0
428
16. Introduction to Algebraic Number Theory
Definition 4.2. By the discriminant of the field R(.9) we mean the discriminant of its integral basis. We shall denote the discriminant of R(.9) by LI(R(.9» or simply LI. Theorem 4.3 (Stickelberger). The discriminant ofafield satisfies LI == 0 or 1 (mod 4). Proof Let il>' .. , in be a permutation of 1, 2, ... , n, and let (jil ....• i be 1 or - 1 depending on whether il>' .. , in is an even or odd permutation. Then, from the expansion of a determinant, we have n
"
(j.
~
. w(ill .•• w(in)
It""f1n
1
n
(i1to .. ,i n )
L
W~ll ... W~in)
+ 21] =
a
+ 21],
(it, ... ,i n )
where I] is an algebraic integer, and a = L(il ..... i n ) W~l) ••• w~in) is a symmetric function of .9(1), ••. , .9(n), so that a is rational and hence a rational integer. Therefore
Since the integer 1](1] + a) = (LI - a 2 )/4 is rational, it is a rational integer. Therefore LI == a 2 == 0 or I (mod 4). D We shall now examine the quadratic field R(jD) where D is a square-free rational integer. Each number in R(jD) is representable as 0( = (a + bjD)/2 where a, b are rational numbers. The trace and the norm of 0( are given by S(O() = a,
a2 _ b 2 D N(O()=--'4
Theorem 4.4. In the quadratic field R(jD), a necessary and sufficient conditionfor 0( to be an integer is that a, b are both rational integers satisfying a
== b (mod 2),
a == b == 0 (mod 2),
when
D == 1 (mod4);
when
D == 2,3
(mod 4).
(1)
Proof Since, in a quadratic field, 0( is an integer if and only if S(O(), N(O() are rational integers, the sufficiency of the condition (1) follows at once. Conversely, if 0( is an integer, then a and (a 2 - b 2 D)/4 are rational integers, so that
is also a rational integer. Since D is square-free, the number b must be rational. The necessity of the condition (1) now follows from a 2 - b 2 D == O. D
429
16.4 Integral Basis
When D == 1 (mod4), (l
+ jD)/2 is an integer in R(jD).
From
a + bjD a - b 1 + jD ----,,--'--- = - - + b ----'--
2
2
2
and 1
1jD
1 12 _jD =4D,
1
1
l+jD
I-jD
2
2
2
=D,
we have the following:
Theorem 4.5. Let D be a square-free rational integer, and let
D
Ll- { - 4D'
when
D== 1
(mod 4),
when
D == 2,3
(mod 4).
Then Ll is the discriminant of R(jD) , and 1, w is an integral basis. The numbers 1, (Ll + Jii)/2 also form an integral basis. D
From this theorem we see that, in a quadratic field, we may choose an integer w such that 1, w form an integral basis. This is not true in general; that is, if R(8) is a field of degree n ~ 3, we may not always find an integer w such that 1, w, ... ,wn - 1 is an integral basis for R(8). Example. Let oc be a zero offix) = x 3 - x 2 - 2x - 8. We shall prove that no integer w, with the property that 1, w, w 2 is an integral basis for R(oc), exists. Since ± 1, ± 2, ± 4, ± 8 are not zeros offix) , we know thatfix) is irreducible so that R(oc) is definitely a cubic field. It is easy to show that Ll(I, oc, o( 2 ) = - 4 x 503. Since p = 4/oc is a zero of g(y) = y3 + y2 + 2y - 8, it follows that pis an integer in R(oc). Let us denote by oc' and oc" the two remaining zeros of fix). Then
Ll(I,oc,P)
=
oc oc' oc"
4/oc 4/oc' 4/oc"
42
2
=
2
(N(oc»
1 oc 1 oc' 1 oc"
oc 2
2
OC,2 OC"2
Since Ll(l, oc, P) i= 0, the numbers 1, oc, Pform a basis. Indeed 1, oc, p must be an integral basis for R(oc), since otherwise the discriminant Ll of the field must satisfy ILlI < 503, and from Theorem 3.3 there exists a natural number a i= 1 such that - 503 = a 2 Ll, which is impossible because 503 is a prime number. Now let w be any integer in R(oc). Then there are rational integers a, b, c such that w = a + boc + cpo Now
430
16. Introduction to Algebraic Number Theory
8
1X2
= IX + 2 + - = 2 + IX + 2{J,
{J2
= -
IX
{J - 2
8
+ Ii = -
2
+ 21X -
(J,
so that w 2 = a 2 + b 2(2 =
+ IX + 2{J) + e2( - 2 + 21X - (J) + 2abIX + 8be + 2ae{J (a 2 + 2b 2 - 2e 2 + 8be) + (b 2 + 2e 2 + 2ab)1X + (2b 2 - e 2 + 2ae){J,
and hence .d(I, W, w 2)
=
1 a 0 b o e
a 2 + 2b 2 - 2e 2 + 8be 2 b2 + 2e 2 + 2ab . .d(1, IX, (J) 2b 2 - e2 + 2ae
== 0 (mod 4 ·503).
Therefore 1, w, w 2 cannot be an integral basis for R(IX).
16.5 Divisibility Definition 5.1. Let IX and {J be two integers. Suppose that there exists an integer y such that IX = {Jy. Then we say that {J divides IX and we write {JIIX. We also say {J is a divisor of IX, or that IX is a multiple of (J. Theorem 5.1. Let g(x) = IX,X'
+ ... + lXo,
1X, "# 0,
where the numbers IX, (J are integers, and let g(x)h(x)
= Y,+mx,+m + ... + Yo.
If there exists an integer (j satisfying (jlyu
o ~ w ~ m).
(0
~
u ~ 1+ m), then (jllXv{Jw (0 ~ v ~ I,
0
The consideration of divisibility leads naturally to the problem of factorization of algebraic integers and the uniqueness of factorization. However, the factorization of integers in the field of all algebraic numbers has little meaning since an integer may be a product of infinitely many integers. For example 2 = 2! x 2! x 2t .... From this we see that we must somehow restrict the domain of the divisors, and therefore we only discuss the factorization problem within a certain algebraic field R(9). Next, there may be infinitely many units in an algebraic field. If e is a unit, then every integer may be written as IX = e . e-llX, and therefore IX has infinitely many
431
16.6 Ideals
factorizations whenever R(B) has infinitely many units. For example, the numbers (1 + J2)n (n = ± 1, ± 2, ... ) are all units in R(J2) so that integers in R(J2) have infinitely many factorizations. In order to avoid this difficulty we introduce the notion of association. Definition 5.2. Two integers associates of each other.
0(,
Pwhich differ only from a unit divisor are called
Being associates is an equivalence relation. Definition 5.3. Let 0( be an integer in R(B). If there exist non-unit integers p, y such that 0( = Py, then we say that 0( is non-prime; otherwise we call 0( a prime in R(B). Theorem 5.2. Every algebraic integer in R(B) can be factorized into a product of primes in R(B). Proof If 0( is a prime, then there is nothing to prove. If 0( = py wher p, yare not units, then IN(O() I = IN(P)I . IN(y)l. Since p, yare not units the natural numbers.IN(p)l, IN(y) I are proper divisors of IN(O()I, so that IN(O()I > IN(P) I > 1 and IN(O()I > IN(y)1 > 1. The proof can now be completed by induction on IN(O()I. D It remains to consider the uniqueness of the factorization, and this is an important problem in algebraic number theory. We shall now examine the quadratic field R(J=5) and show that there is no unique factorization. Since - 5 == 3 (mod 4), every integer in the field takes the form 0( = a + bJ=5 where a, b are rational integers. We shall show that 2,3, 1 ± J=5 are primes in the field, and that 2, 3 are not associates of 1 ± J=5, so that from 6 = 2 . 3 = (1 + J=5)(1 - J=5) we see that there is no unique factorization in R(J=5). First 2, 3 cannot be associates of 1 ± J=5 because IN(2)1 = 4, IN(3)1 = 9 and IN(1 ± J=5)1 = 6. Next, if 2 is non-prime in R(J=5), we let
2 = O(P,
IN(O() I >
1,
IN(P) I > 1.
Write 0( = a + bJ=5. Then, from IN(2) I = 4, we have IN(O() I = a 2 + 5b 2 = 2 and this is impossible. Therefore 2 is a prime in R(J=5). Similarly 3, 1 ± J=5 are also primes in R(J=5). In order to overcome this problem Kummer invented the notion of ideals.
16.6 Ideals We shall now consider a fixed algebraic number field R(B) of degree n. Definition 6.1. Let 0(1) ••• , O(q be any q integers in R(B). The set of integers of the form
432
16. Introduction to Algebraic Number Theory
where I'/l> ••• ,I'/q are integers in R(8) is called an ideal generated by OCl> ••• ,ocq, and is denoted by [OCl> ••• ,OCq]. We shall use the capital Gothic letters
~, ~, (£:,
!l, ... to denote ideals.
Definition 6.2. An ideal [ocJ generated by a single integer oc is called a principle ideal. The set [OJ containing only the integer 0 is an ideal, but we shall assume that our ideals are distinct from [0]. The ideal [IJ contains all the integers in R(8), and is called the unit ideal which we shall denote by .0. Theorem 6.1. Ideals possess the following properties: 1) If oc, 13 are in the ideal, then so are oc ± 13; 2) If oc is in the ideal and 1'/ is an integer in R(8), then We see from this theorem that if 1 E~, then
~
I'/OC
is in the ideal.
0
= [1].
Definition 6.3. Let ~ = [OCl> ••• ,ocqJ and ~ = [f3l> . •. ,f3rJ be two ideals. If ~ and ~ contain exactly the same integers in R(8), then we say that they are equal and we write ~ =~. Theorem 6.2. A necessary and sufficient condition for two ideals [OCl> ••• , ocqJ and [131, ... ,f3rJ to be equalis thatthere are integers ~ij, I'/ji (1 ~ i ~ q, 1 ~ j ~ r) such that OCi
=
L ~ijf3j, j= 1
In particular, if [ocJ
q
f3j =
L I'/jiOCi· i= 1
= [f3J, then oc and 13 are associates. 0
Let OCl> ••• ,ocq be any q rational integers with greatest common factor d. Then there are rational integers Xl> . .• , Xq such that d = X10Cl + ... + XqOCq, and hence, in the rational number field, [OCl> ••• , ocqJ = Cd]. In other words there are only principal ideals of the rational number field. On the other hand we know from our discussion in the last section that, in R(.j=5), the ideal [2, 1 + .j=5J cannot be reduced to a principal ideal, so that non-principal ideals exist. Definition 6.4. Let ~ = [OC1, ••• , ocqJ and ~ = [131, ..• , f3r J be two ideals. We call the ideal [OClf3l> ... , OClf3" OC2f3l> . •• ,OC2f3" •.• ,ocqf3rJ the product of ~ and ~; we shall denote it by ~ . ~. Theorem 6.3. The product of~ and ~ is independent of the choices OCi, f3i. That is, if
then
=
, 13'1'···' OC2, 13't'···' OCs'f3'J [ OC'13' t • 1 1'···' OC ,1 13't' OC2
o
433
16.7 Unique Factorization Theorem for Ideals
This can easily be proved from the definition of equality for ideals. Also we have ~ for any ideal ~, and that multiplication of ideals is commutative and associative. We can then use induction to define ~1 ••• ~m and ~m, where m is a natural number, and show that the usual rules of indices hold.
D .~ =
Definition 6.5. Let ~, mbe two ideals. Suppose that there exists an ideal <£: such that ~ = m<£:. Then we say that mdivides ~ and we write ml~. We call m, <£: the divisors of~.
Clearly we have: 1) if <£:Im, ml~, then <£:I~; 2) if ml~ and 3) for any ideal ~ we always have DI~, ~I~.
1) is any ideal, then
m1)I~1);
Theorem 6.4.
If ml~ then
Proof Let ~ = the form
~
is a subset of m.
m<£: where m =
[Pl>' .. ,Pr], <£:
= [Yl>' .. ,Yr]. Then each odn ~ is of
IX = j~lk~l1]jkPjYk = Jl (Jl1] jkYk)Pj where 1]jk are integers in the field, and hence
IX lies in m.
D
We shall see in the next section that the converse of this theorem also holds; that is, if every integer in ~ lies in m, then mmust divide ~. From Theorem 6.4 we see that if ~ID then ~ = D.
16.7 Unique Factorization Theorem for Ideals Theorem 7.1. Given any idea/~ there exists an idealm such that the product ~ . misa principal ideal [a] generated by a natural number a.
Proof Suppose first that
~
is a principal ideal, say [IX]. Then we take
m= [1X(2), • •• ,1X(n)] where 1X(2), ••• , lX(n) are the conjugates of IX, and with a = IN(IX)I we see at once that ~ . m= [1X1X(2) ••• lX(n)] = [a]. IX,X'
Suppose now that ~ + ... + 1X0, and set
=
[IX" . .. , 1X0] is not a principal ideal. Let fix) =
g(x) = Pm xm