# ALGEBRAIC NUMBER THEORY AND QUADRATIC RECIPROCITY

Save this PDF as:

Size: px
Start display at page:

## Transcription

1 ALGEBRAIC NUMBER THEORY AND QUADRATIC RECIPROCITY HENRY COHN, JOSHUA GREENE, JONATHAN HANKE 1. Introduction These notes are from a series of lectures given by Henry Cohn during MIT s Independent Activities Period in January, They were first revised by Henry Cohn and Jon Hanke at PROMYS 1995 and then Joshua Greene worked on further revision at PROMYS The main references are A Classical Introduction to Modern Number Theory by Ireland and Rosen and Algebraic Theory of Numbers by Weyl; the proofs of uniqueness of ideal factorizations and the finiteness of the class number are taken from Ireland and Rosen, and the proof of quadratic reciprocity is taken from Weyl. Several theorems from algebra are stated without proof. In all cases, proofs can be found in Algebra by M. Artin. The goal of these notes is to develop the basic properties of rings of integers in algebraic number fields, and then to deduce the law of quadratic reciprocity in an especially clear and compelling way. We have tried to avoid using much algebra. (In particular, no Galois theory is required.) However, a few fundamental definitions are needed. One ought to know the definitions of rings (which we assume to be commutative and have multiplicative identities) and fields, and of vector spaces and dimension; the main non-obvious fact which we will assume is that the dimension of a finite-dimensional vector space is well-defined. We will want to use the language of ideals, but we will not assume any prior familiarity with them. Suppose n is an integer, and consider the set (n) of multiples of n. This set has several useful properties: the sum of any two elements of (n) is in (n), and if a is in (n) and b is any integer, then ab is in (n). Any non-empty subset I of a ring R with these two properties (a, b I implies a + b I and a I, b R implies ab I) is called an ideal. The intuition is that every ideal is the set of multiples of some element. For some rings, such as Z, this claim is true, as we will prove below. For some rings, it is false, but we can imagine that the ideal is the set of multiples of some ideal element not contained in the actual ring (hence the name ideal ). Given any element a R, we define (a) to be the set of multiples of a. Clearly, (a) is an ideal, called the principal ideal generated by a. (Sometimes it is denoted by ar or Ra.) A ring in which every ideal is of this form (and which also is an integral domain, i.e., ab = 0 implies a = 0 or b = 0) is called a principal ideal domain (or PID). More generally, we can look at ideals generated by several elements. We define (a 1, a 2,..., a n ) = {a 1 b a n b n : b 1,..., b n R}. This set is easily shown to be an ideal, and is in fact the smallest ideal of R containing a 1,..., a n. As we will see in Theorem 2.2 (in the case n = 2), in Z this ideal is generated by the greatest common divisor (gcd) of a 1,..., a n. The main use of ideals is that one can mod out by them. Given an ideal I, the quotient ring R/I is defined basically by identifying two elements of R iff they differ by an element of I. For example, if n Z, the ring Z/(n) is the ring of integers modulo n. We assume some familiarity with this process, although perhaps not expressed in this language, so we will not pause to prove the basic properties of quotient rings. For the most part, they are evident from the definitions. Date: July, Note that this is an unfinished draft, and should be treated as such, although it will likely never be finished. 1

2 2 HENRY COHN, JOSHUA GREENE, JONATHAN HANKE 2. Ideals in Z and Unique Factorization Lemma 2.1 (Division Algorithm in Z). For integers a and b with b 0, there exist integers q and r such that a = bq + r and 0 r < b. We omit the proof (which is straightforward using induction or well ordering). Theorem 2.2. Z is a principal ideal domain. Proof. Let I (0) be an ideal in Z. It seems that I should be generated by its least positive element. Let g be that element, and let n be any element of I. Since we would like to show that n is a multiple of g, we divide n by g. By the division algorithm, there exist q and r such that n = gq + r with 0 r < g. Since r = n gq, r I. Because g is the smallest positive element of I and 0 r < g, r = 0 and therefore n is a multiple of g, as desired. Proposition 2.3. For a, b Z, there exist c, d Z such that ac + bd = gcd(a, b). Proof. Consider the ideal (a, b) generated by a and b. Since Z is a PID, (a, b) = (g) for some g. Then g divides each of a and b. Since g (a, b), there exist c and d such that g = ac + bd. Thus, any common divisor of a and b divides g. We see that g = gcd(a, b), and that g is a linear combination of a and b. Using a variant of Euclid s algorithm (related to continued fractions), one can find efficiently the c and d which Proposition 2.3 says exist. Definition 2.4. A prime is an integer p other than ±1 whose only factors are ±1 and ±p. (In particular, we allow negative primes.) Theorem 2.5. If p is prime and p divides ab, then p divides a or p divides b. Proof. Suppose p does not divide a. Then since p is prime, p and a are relatively prime, i.e., their gcd is 1. By Proposition 2.3, there exist c and d such that pc + ad = 1. Multiplication by b yields pbc + abd = b. By assumption p divides ab and therefore abd, and clearly p divides pbc, so p divides b. Theorem 2.6 (Unique Factorization in Z). Factorization of non-zero integers into primes is unique, up to rearrangement of the factors and change of their signs. Note that we consider 1 to have the empty prime factorization: it is the product of no primes. Proof. We first need to establish the existence of prime factorizations. The proof is most easily organized by induction. The base case 2 is trivial because 2 is already prime. Now, say that n is a natural number and assume that all natural numbers less than n have a prime factorization. If n is prime already, then we are done. If n is composite, then there are two natural numbers a, b such that ab = n and a, b < n. By induction a = p 1 p 2 p r and b = q 1 q 2 q s for primes p i, q j. Then p 1 p 2 p r q 1 q 2 q s = n and this is a prime factorization. The next step is to show that the prime factorization is unique. Suppose there were integers with several prime factorizations. Then there would be a non-zero integer n with several prime factorizations such that n is as small as possible, say n = p 1 p s = q 1 q t. Then p 1 divides q 1 q t so by Theorem 2.5 (iterated) it divides some q i, without loss of generality q 1. Since p 1 and q 1 are prime, we must have p 1 = ±q 1. Then n/p 1 < n, but n/p 1 = p 2 p s = ±q 2 q t has two different prime factorizations. This is a contradiction, so prime factorizations are unique. There are shorter proofs of unique factorization, but they are tricky and unrelated to algebraic number theory. This proof, however, generalizes nicely, as we will see in the next lecture. Remark 2.7. There is a strong analogy in number theory between the ring Z of integers and the ring K[x] of polynomials over a field K. (The analogy is strongest when K is a finite field, but for these results any field will do.) Making only a few changes, we can carry over all of the results of this section to K[x]. The main change is that the right way to measure the size of a polynomial is by its degree. For reference, we restate the results of this section in terms of polynomials: In the following statements, K is a field.

3 ALGEBRAIC NUMBER THEORY AND QUADRATIC RECIPROCITY 3 Lemma 2.8. For f, g K[x] with g 0, there exist q, r K[x] such that f = gq + r and r = 0 or deg r < deg g. Theorem 2.9. K[x] is a principal ideal domain. Proposition For f, g K[x], there exist h, k K[x] such that fh + gk = gcd(f, g). Theorem If f is irreducible and f divides gk, then f divides g or f divides k. Theorem Factorization of non-zero polynomials into irreducibles is unique, up to rearrangement of the factors and multiplication by units (here, units are just non-zero constants from K). 3. Modular Arithmetic Theorem 3.1. If a is relatively prime to n, then there exists b such that ab 1 (mod n). Proof. Proposition 2.3 tells us that there exist b and c such that ab+nc = 1. Hence, ab 1 (mod n). Corollary 3.2. The group of units modulo m, (Z/mZ), is {a + mz Z/mZ : (a, m) = 1}. Corollary 3.3. If p is prime, then Z/pZ is a field. Theorem 3.4 (Euler s Theorem). If a is relatively prime to n, then a ϕ(n) 1 (mod n), where ϕ(n) is the number of integers from 1 to n that are relatively prime to n. Proof. By Theorem 3.1, a is invertible modulo n. Let {u 1,..., u ϕ(n) } be a system of integers representing the elements of (Z/nZ). It follows that, modulo n, the numbers au 1, au 2,..., au ϕ(n) are another system of representatives for (Z/nZ). Multiplying these tells us that u 1 u 2 u ϕ(n) au 1 au 2 au ϕ(n) We can cancel the u i to get a ϕ(n) 1 (mod n). (mod n). Corollary 3.5 (Fermat s Little Theorem). If p is prime, then a p a (mod p). Proof. For an integer a, there are only two possibilities: a is relatively prime to p or p divides a. In the former case Euler s Theorem tells us that a ϕ(p) 1 (mod p). Recall that ϕ(p) is the number of positive integers less than p and relatively prime to p. Because p is prime, ϕ(p) = p 1. Thus, a p a. If p divides a, then a 0 (mod p) so a p a (mod p) trivially. The logic that leads to Corollary 3.3 also proves the following result: Corollary 3.6. If K is a field and f K[x] is irreducible, then K[x]/(f) is a field. 4. Field Extensions This section and the next summarize the basic definitions and facts for field extensions. Some familiarity with field theory may be necessary to follow this, but we hope not too much. Definition 4.1. Given fields K and L with K L, we call L an extension of K. We often refer to the extension L/K. (Note that this does not indicate a quotient ring.) We can regard L as a vector space over K. The extension L/K is finite if L is a finite-dimensional K-vector space. The degree of L/K is the dimension of L as a K-vector space, and is denoted [L : K]. Proposition 4.2 (Multiplicativity of Degrees). Given field extensions L/K and K/F, if two of the three degrees [L : K], [K : F ], and [L : F ] are finite, then the third is, and [L : F ] = [L : K][K : F ]. Sketch of Proof. If α 1,..., α n form a basis of L/K, and β 1,..., β m form a basis of K/F, then one can check that α i β j (i = 1,..., n, j = 1,..., m) form a basis of L/F. Definition 4.3. Given an extension L/K, an element α L is algebraic over K if it satisfies a non-zero polynomial equation with coefficients in K. Proposition 4.4. If L/K is a finite extension, then every element of L is algebraic over K.

4 4 HENRY COHN, JOSHUA GREENE, JONATHAN HANKE Proof. The infinitely many elements 1, α, α 2,... cannot be linearly independent. A linear dependence between them gives a polynomial equation, showing that α is algebraic. Proposition 4.5. Suppose L/K is a field extension. Each element α of L that is algebraic over K is the root of a unique irreducible polynomial over K (unique up to multiplication by non-zero constants, that is). If α is the root of an irreducible polynomial of degree n, then K(α)/K is finite, and has degree n. Proof. Consider the map π : K[x] K[α] that substitutes α for x in a polynomial. The kernel of this map is a principal ideal (since K[x] is a PID), generated by a polynomial f, which is the polynomial of least degree which has α as a root. This polynomial is irreducible, since if it factored, then α would be a root of one of the factors. Further, f divides any polynomial which has α as a root because ker π = (f). Therefore, up to multiplication by a constant, it is the only irreducible polynomial to have α as a root. Now suppose that f(x) has degree n. The ring K[α] is isomorphic to K[x]/(f(x)) (the quotient of the polynomial ring K[x] by the ideal generated by f(x)). In particular, K[α] has a basis 1, α,..., α n 1 consisting of n elements. Corollary 3.6 implies that K[α] is a field, from which it follows that K(α) = K[α], and K(α) is a degree n extension of K. Definition 4.6. If α is algebraic over K, then the unique monic irreducible polynomial satisfied by α is called the minimal polynomial of α over K. Theorem 4.7. Given any extension L/K, the set F of elements of L which are algebraic over K forms a field. Proof. Notice that for any α K, α is the root of a polynomial (x α) K[x]. Therefore, α is algebraic over K, so K F. Suppose α and β are algebraic over K. Since K(α, β) is a finite extension of K(α), which is a finite extension of K, we see that K(α, β) is a finite extension of K, by Proposition 4.2. Hence, Proposition 4.4 implies that α + β and αβ are algebraic. Thus, F is a ring. Since implies a n α n + a n 1 α n a 1 α + a 0 = 0 a n + a n 1 α a 1 α n+1 + a 0 α n = 0, we see that α 1 is algebraic if α 0 is. Hence, F is a field. Proposition 4.8. Let L/K be an extension of fields of characteristic 0. If α, β L, then for all but finitely many choices of c K, α + cβ generates K(α, β) over K, i.e. K(α, β) = K(α + cβ). The proof of this proposition can be found in Weyl s book or Artin s (see the references section). Corollary 4.9. Any finite extension L/K of fields of characteristic 0 is generated by a single element, i.e., there is some α L such that L = K(α). 5. Conjugates and Symmetry Definition 5.1. A polynomial f(x 1,..., x n ) of n variables is called symmetric if for each permutation σ of {1,..., n}, f(x 1,..., x n ) = f(x σ(1),..., x σ(n) ). Definition 5.2. For 1 i n, the i-th elementary symmetric polynomial s i (x 1,..., x n ) in the variables x 1,..., x n is the sum of all products of i of the variables. For example, s 1 = x x n, s 2 = j<k x j x k = x 1 x 2 + x 1 x x 1 x n + x 2 x 3 + x 2 x x n 1 x n, and s n = x 1 x n.

5 ALGEBRAIC NUMBER THEORY AND QUADRATIC RECIPROCITY 5 Theorem 5.3 (Fundamental Theorem on Symmetric Polynomials). Every symmetric polynomial is a polynomial in the elementary symmetric polynomials. In other words, if f is a symmetric polynomial of n variables, then there exists a polynomial g such that f(x 1,..., x n ) = g(s 1,..., s n ). (This holds for polynomials with coefficients in any ring.) We omit the proof of this theorem. It can be found in Artin s book. Also, a solution is sketched in Exercise 7 below. Note that since (y x 1 ) (y x n ) = y n s 1 y n ( 1) n s n, the coefficients of the polynomial with roots x 1,..., x n are plus or minus s 1,..., s n. It is common to try to express some function of the roots of a polynomial in terms of its coefficients. We see now that if that function is a polynomial, then this can be done if (and obviously only if) the polynomial is symmetric. For example, x x 2 n is symmetric, and The product x x 2 n = s 2 1 2s 2. (x j x k ) j<k is not symmetric, so it cannot be expressed in terms of elementary symmetric polynomials. However, its square (x j x k ) 2 j<k is symmetric, and can therefore be expressed in terms of elementary symmetric polynomials. The expression is something of a mess, however. Incidentally, this is the discriminant of the polynomial y n s 1 y n ( 1) n s n. Proposition 5.4. Let f be an irreducible polynomial over a field K of characteristic 0. In any extension of K, f has no multiple roots. Proof. Recall that a multiple root of f is the same as a common root of f and f. Since f is irreducible and deg f < deg f, they are relatively prime. (Note that this requires that the characteristic of f be 0. In characteristic p, we could have f = 0. For example, the derivative of x p a is px p 1 = 0. However, this cannot happen in characteristic 0. In characteristic 0, f is not zero. Then since deg f < deg f, f is not divisible by f, and thus since f is irreducible, we must have gcd(f, f ) = 1.) In particular, there exist g and k such that fg + f k = 1. This implies that f and f are relatively prime over any extension of K, and hence that f has no multiple roots in any extension of K. Note the use of the derivative in the preceding proof. We used only purely formal properties of it, and can thus define it by the formula for differentiating a polynomial (so we needn t worry about limits if K is a weird field). Definition 5.5. An embedding of a field K into a field L is a one-to-one homomorphism K L. Let us consider the possible embeddings of Q into another field. Say that K is a field, and σ : Q K is an embedding. Then σ(1) 0 because σ is injective. Further, for any a Q, σ(a) = σ(1 a) = σ(1)σ(a). Cancelling σ(a) from both sides (we are in a field here!), we obtain σ(1) = 1. This, and the fact that σ is additive, uniquely specifies σ on all of Z. Given r Q, we can write r = m/n for appropriately chosen integers, m, n. We already know that σ(m) and σ(n) are specified, and σ(r) = σ(m)(σ(n)) 1. Therefore, σ is uniquely determined on all of Q, so there can be at most one embedding of Q into a given field. Also, if the characteristic of K is 0 then the map taking 1 Q to 1 K does define an embedding. In particular, Q sits as a subset of C and this argument shows that there is no other way to embed Q in C. In the rest of this section, the results mention the field Q explicitly. They can all be stated in more general forms, but for our purposes that won t be necessary.

6 6 HENRY COHN, JOSHUA GREENE, JONATHAN HANKE Proposition 5.6. An extension of Q of degree n has exactly n embeddings into C. Proof. By Corollary 4.9, the extension is Q(α) for some α, and by Proposition 4.5, α is a root of an irreducible polynomial f(x) of degree n. Suppose that the n roots of f(x) in C are α 1,..., α n. These roots must all be distinct, by Proposition 5.4. For 1 i n, we can define a map σ i : Q(α) C that takes α to α i. Note that σ i has no choice about where to take Q, so it is uniquely determined by the image of α. Also, note that there really is such as map. To see this, recall that Q(α i ) is isomorphic to Q[x]/(f(x)). To get σ i, we just compose the isomorphism from Q(α) to Q[x]/(f(x)) that takes α to x with the isomorphism from Q[x]/(f(x)) to Q(α i ) that takes x to α i. Now we have at least n embeddings from Q(α) to C. Say that τ is an embedding from Q(α) to C. Then τ(f(α)) = τ(0) = 0. However, because τ fixes Q and τ is a homomorphism, τ(f(α)) = f(τ(α)). The image of α under an embedding must, therefore, be a root of f. Thus, τ is one of the σ i, so we have exactly n embeddings. Definition 5.7. Suppose K/Q is an extension of degree n, with embeddings σ 1,..., σ n into C. Given α K, the conjugates of α are σ 1 (α),..., σ n (α). The trace of α is and the norm of α is tr(α) = σ 1 (α) + + σ n (α) nm(α) = σ 1 (α) σ n (α). The conjugates, norm, and trace of α depend not only on α, but also on K. For example, in Q, nm(2) = 2, but in Q(i) the two conjugates of 2 are 2 and 2, so nm(2) = 4. Because of this, we may sometimes denote the norm and trace by nm K and tr K. Also, given any finite extension K/F, one can define relative norms and traces from K to F. However, we won t need to use them in these notes. Proposition 5.8. Given α in a finite extension K of Q, nm(α) and tr(α) are in Q. More generally, any symmetric polynomial in the conjugates of α is in Q. Proof. By Corollary 4.9, we can suppose K = Q(θ). Also, say that the degree of K over Q is n, so {1, θ, θ 2,..., θ n 1 } is a vector space basis for K over Q. Then α can be written as a Q-linear combination of these basis elements, and this is the same as writing α as a polynomial in θ with Q coefficients. Let g be such a polynomial, so that α = g(θ). The conjugates of α are then given by g(σ i (θ)), where σ 1,..., σ n are the embeddings of K into C. In other words, they are given by the same polynomial, with θ replaced by its conjugates. Any polynomial p(σ 1 (α),..., σ n (α)) that is symmetric in the conjugates of α then becomes a polynomial p(g(σ 1 (θ)),..., g(σ n (θ)), which is symmetric in the conjugates of θ. However, we know that θ is a root of a polynomial over Q of degree n. Thus, the elementary symmetric polynomials in the conjugates of θ are rational, since they are plus or minus the coefficients of the irreducible polynomial of θ over Q. By the Fundamental Theorem on Symmetric Polynomials, we see that p is also rational. Proposition 5.9. Suppose we have a finite extension K/Q, and α, β K. If the embeddings of K into C are σ 1,..., σ n, then the polynomials (x σ i (α) σ j (β)) and have rational coefficients. i,j (x σ i (α)σ j (β)) i,j Proof. Pick one of the two polynomials and designate it as F (x). Consider the coefficients of x in F. Each coefficient is symmetric separately in the conjugates of α and the conjugates of β. Focus on a l, the

7 ALGEBRAIC NUMBER THEORY AND QUADRATIC RECIPROCITY 7 coefficient of x l. This coefficient a l, is a polynomial in the conjugates of β, with coefficients which are conjugates of α. That is a l is some element of h(x 1,..., X n ) Q[σ 1 (α),..., σ n (α)][x 1,..., X n ] evaluated at (σ 1 (β),..., σ n (β)). Then, because the coefficients of h are symmetric polynomials in the σ i (α), these coefficients are actually rational. This means that h(x 1,..., X n ) is really in Q[X 1,..., X n ]. Thus, a l is a rational polynomial in the conjugates of β, but it is also symmetric in the conjugates of β. Therefore, a l is rational. Because a l was an arbitrary coefficient, F is itself in Q[x]. Note that this gives polynomials over Q satisfied by α + β and αβ, thus giving another, more concrete proof that they are algebraic. In general, this is how one gets a polynomial over Q satisfied by an algebraic number. For example, consider a root α of 2x 4 + 3x 3 x Of course, α ought to be algebraic, but the equation we have here does not have rational coefficients. Instead, it has coefficients in the field K = Q( 2, 3). To get rational coefficients, we simply try to make everything symmetric in the conjugates of the coefficients. The field K has degree 4 over Q. Its four embeddings into C are the identity, the map sending 2 to 2 and 3 to itself, the map sending 2 to 2 and 3 to 3, and the map sending 2 to itself and 3 to 3. Now consider the product ( 2x 4 + 3x 3 x 2 + 6)( 2x 4 + 3x 3 x 2 6)( 2x 4 3x 3 x 2 + 6)( 2x 4 3x 3 x 2 6). This simplifies to 4x 16 12x x 12 6x 10 48x 9 23x 8 36x 6 12x Since α is a root of this polynomial over Q, α is indeed algebraic over Q. In general, the reasoning used in the proof of Proposition 5.9 shows that this always works. 6. Problems Learning the material well requires more than just reading the notes. Besides reviewing what was done and possibly doing additional reading, working problems is very useful. Each problem has a difficulty rating from 1 to 3. Problems rated 1 are meant to be relatively easy; everyone should work on them to see how well they understand the material from the preceding sections. Problems rated 2 should be doable. Problems rated 3 can be tricky or time consuming; one should work on them only if they look interesting. (1) 1. Imitating the proof of Theorem 2.5, use Proposition 2.3 to prove the following result: Given a, b, c Z such that a divides bc and gcd(a, b) = 1, a divides c. (1.5) 2. Suppose p is prime. By Fermat s Little Theorem, the polynomial x p 1 1 has the roots 1, 2,..., p 1 modulo p. How does it factor in Z/pZ? What can one conclude about (p 1)! modulo p? (The result is called Wilson s Theorem, although Wilson didn t prove it. Supposedly, he stated it as a conjecture, and then claimed that nobody could prove it because there was no good notation for dealing with primes. Gauss disproved Wilson s claim by proving his conjecture.) (1) 3. Consider the extension Q( 2)/Q. What is the trace of ? What is its norm? (1.5) 4. Consider the extension Q(2 1/3 )/Q. What is the trace of /3 2 2/3? What is its norm? (1.5) 5. Find an element α Q( 2, 3) such that Q( 2, 3) = Q(α). Find the irreducible polynomial satisfied by α. (2) 6. Prove that 2 1/3 2 1/5 Q( 2, 3). (2.5) 7. Prove the Fundamental Theorem on Symmetric Polynomials as follows. First, we define an ordering on the monomials in the variables x 1,..., x n, so that we can talk about the leading term of a polynomial in several variables. For the ordering, we first order by degree, and then break ties using lexicographic (dictionary) ordering. For example, x 3 1 comes before x 2 1 because of their degrees, and x 2 1x 2 2x 3 comes before x 2 1x 2 x 2 3 because although they have the same degrees and the exponents of x 1 are the same, the exponent of x 2 in x 2 1x 2 2x 3 is greater than that in x 2 1x 2 x 2 3.

8 8 HENRY COHN, JOSHUA GREENE, JONATHAN HANKE Now show that we can systematically express any symmetric polynomial in terms of elementary symmetric polynomials as follows. Suppose we have a symmetric polynomial p. Show that there is a unique product of elementary symmetric polynomials such that subtracting a multiple of it will cancel the leading term of p. Prove that doing this repeatedly eventually gives 0, thereby expressing p in terms of elementary symmetric polynomials. For example, suppose n = 3, and we have the polynomial p(x 1, x 2, x 3 ) = (x 1 x 2 ) 2 (x 2 x 3 ) 2 (x 1 x 3 ) 2. The leading term of p is x 4 1x 2 2. From p, we subtract s 2 1s 2 2, since it has the same leading term. The remaining polynomial has leading term 4x 4 1y 1 z 1, so we add to it 4s 3 1s 3. Continuing in this way, we eventually find that (3) 8. Prove Proposition 4.8. (x 1 x 2 ) 2 (x 2 x 3 ) 2 (x 1 x 3 ) 2 = s 2 1s 2 2 4s 3 1s 3 4s s 1 s 2 s 3 27s The Gaussian Integers Definition 7.1. The Gaussian integers are the ring Z[i] = {a + bi : a, b Z}. Note that the conjugate of a Gaussian integer α is just its complex conjugate, which we denote ᾱ. Then its norm is nm(α) = αᾱ. This is the square of its absolute value, of course. It is a more convenient measure of size than the absolute value is. One reason is that it is always an integer, while its square root is not. Another, deeper reason has to do with quotients of Z[i]. Given an element a + bi of Z[i], we can form the quotient ring Z[i]/(a + bi)z[i], just as we form Z/nZ from Z. One can show that Z[i]/(a + bi)z[i] = nm(a + bi), i.e., Z[i]/(a + bi)z[i] has nm(a + bi) elements. It turns out that Z[i] is in many ways analogous to Z. For example, Gaussian integers factor uniquely into primes. It turns out that theorems about factorization in Z[i] have some surprising consequences, so in this section we will prove unique factorization in Z[i]. Of course, we have to be careful about what we mean by unique factorization. In Z, the numbers ±1 have a special role. Because they are units (i.e., have multiplicative inverses), they can occur arbitrarily in factorizations. In Z[i], the units are ±1 and ±i. Note that these are exactly the elements of norm 1. In a factorization in Z[i], we do not want to distinguish between a number and that number multiplied by a unit, just as we do not distinguish between numbers and their negatives in a factorization in Z. Two Gaussian integers are called associates of each other if each is a unit times the other. For example, 2 is an associate of 2i. In the same way, one can define units and associates in any ring. We now can generalize the definition of prime. For reasons to be explained in Section 9, we use the term irreducible rather than prime. (In general, we call irreducibles primes when we are dealing with a ring in which factorizations are unique. Irreducible polynomials are an exception to this.) Definition 7.2. An irreducible in a ring is an element which is not a unit, and whose only factors are units or associates. Note that whether an element is irreducible depends on the ring in which you view it. For example, 2 is irreducible in Z, but in Z[i] it factors as 2 = i(1 i) 2. Now that we have a notion of irreducibles and units, we can say what it means for a ring to have unique factorization. Definition 7.3. An integral domain R is called a unique factorization domain (UFD) if each non-zero element of R factors as a product of irreducibles and units, and the irreducible factors are unique up to rearrangement and multiplication by units. We will show that Z[i] is a UFD. To do this, we will imitate the proof in Z. We will prove an analogue of the division algorithm in Z[i], and deduce from that that Z[i] is a PID. Then essentially the same proof as in the case of Z will show that Z[i] is a UFD. In formulating the division algorithm in Z[i], we seem to run into a problem that Z[i] is not ordered, so we can t compare two Gaussian integers. However, this is not really a problem, since we can simply use the ordering on their norms.

9 ALGEBRAIC NUMBER THEORY AND QUADRATIC RECIPROCITY 9 Proposition 7.4 (Division Algorithm in Z[i]). For α, β Z[i] with β 0, there exist κ, ρ Z[i] such that α = βκ + ρ and 0 nm(ρ) < nm(β). Before proving this, recall how we divide Gaussian integers in practice. Suppose we want to obtain a quotient and remainder from the division of 7 5i by 3 + 4i. The main idea is to convert this into a problem of dividing integers. First, note that we have 7 5i (7 5i)(3 4i) = 3 + 4i (3 + 4i)(3 4i) = 1 43i = (1/25) + ( 2 + 7/25)i. 25 We choose 2i as the quotient because 2i is close to (1/25) + ( 2 + 7/25)i. In general, the quotient cannot be chosen uniquely. Then, we have 7 5i = (3 + 4i)( 2i) + ( 1 + i), and indeed nm( 1 + i) = 2 < 25 = nm(3 + 4i) so we see that we have chosen the quotient well to obtain a remainder with smaller norm than that of the divisor. Proof. As above, we divide α β by nm(β). Suppose α β = x 1 + x 2 i, with x 1, x 2 Z. Using division in Z, we can divide each of x 1 and x 2 by nm(β). We choose the quotient so that instead of getting the least positive remainder, we get the remainder with the smallest absolute value. Then we have x 1 = nm(β)q 1 + r 1 and x 2 = nm(β)q 2 + r 2, with q 1, q 2, r 1, r 1 Z, r 1 nm(β)/2, and r 2 nm(β)/2. It follows that α β = nm(β)(q 1 + q 2 i) + (r 1 + r 2 i) = ββ(q 1 + q 2 i) + (r 1 + r 2 i). Every term in this equation is divisible by β except possibly for r 1 + r 2 i, so it also must be divisible by β. Write r 1 + r 2 i = βρ with ρ a Gaussian integer, and also write κ = q 1 + q 2 i. Then α = βκ + ρ and nm(ρ) = nm(r 1 + r 2 i) nm( β) = (r2 1 + r 2 2) nm(β) (nm(β)2 /4 + nm(β) 2 /4) nm(β) = nm(β). 2 Note that the proof shows that we can choose a quotient such that nm(ρ) nm(β)/2, which is better than nm(ρ) < nm(β). Also, note that the quotient and remainder are not necessarily unique. For example, 3 = (1 + i)(2 i) i and 3 = (1 + i)(1 2i) + i. Now that we have the division algorithm, exactly the same proof as in the case of Z shows that the Gaussian integers form a PID, and hence a UFD (see Proposition 2.3 to Theorem 2.6). As before, one needs to prove the existence of factorizations. In fact, one can prove that factorizations exist in any PID. One can also prove it directly in cases like Z[i]. For example, suppose there were non-zero, non-unit Gaussian integers that didn t factor into irreducibles. Choose one with minimal norm, say z. It can t be irreducible itself, so z must factor non-trivially. Then its factors have smaller norm, so they factor into irreducibles, and combining those two factorizations gives one for z, which is a contradiction. 8. Sums of Squares and Splitting of Primes Now that we know that Gaussian integers factor uniquely into primes, we can ask what their factorizations look like. In particular, one interesting and important question is how ordinary integers factor in Z[i]. Of course, we only need to answer this for prime 1 integers, which we call rational primes to distinguish them from primes in Z[i]. It turns out that this is connected to whether the prime is a sum of two squares. Proposition 8.1. If p is a rational prime, then p is a sum of two squares iff p is not prime in Z[i]. For example, 5 = = (1 + 2i)(1 2i), but 3 is prime in Z[i]. 1 In this section, prime means positive prime. When dealing with factorizations in various rings, it is more convenient not to try to normalize the primes, as one does in Z by looking only at positive primes. However, when dealing with congruences, it is convenient to consider only positive primes, because 3 behaves like 3, which is a prime congruent to 3 modulo 4, even though 3 1 (mod 4).

10 10 HENRY COHN, JOSHUA GREENE, JONATHAN HANKE Proof. If p = a 2 + b 2, then p = (a + bi)(a bi), so p is not prime in Z[i]. Conversely, suppose p factors as αβ with α, β Z[i] and not units. Then taking norms gives p 2 = nm(p) = nm(α)nm(β). Since α and β are not units, nm(α) and nm(β) are not 1, so they must each be p. Thus, p is the norm of a Gaussian integer. However, nm(a + bi) = a 2 + b 2, so that means p is the sum of two squares. Proposition 8.2. If p is a rational prime, then p is not prime in Z[i] iff there is a square root of 1 modulo p, i.e., iff there exists an integer h such that h 2 1 (mod p). Proof. If p is not prime in Z[i], then Proposition 8.1 implies that p = a 2 + b 2 for some a, b Z. Because p is a rational prime and a, b Z, neither a nor b can be a multiple of p, so they are units modulo p. If we take h a/b (mod p), then h 2 a 2 /b 2 1 (mod p). Now we prove the converse. Suppose h 2 1 (mod p). Then p divides h In Z[i], h factors as (h + i)(h i). Note that p does not divide h + i (since it would have to divide the imaginary part), and p does not divide h i. Since p divides the product (h + i)(h i) but neither factor, p must not be prime in Z[i]. Notice that this last conclusion of this proof depends on the fact that Z[i] has unique factorization. So far, we have shown that p is the sum of two squares iff 1 is a square modulo p. Using the following lemma, we will be able to determine when 1 is a square modulo p: Lemma 8.3 (Euler s Criterion). If p is an odd, rational prime, and a 0 (mod p), then a is a square modulo p iff a (p 1)/2 1 (mod p). If a is not a square modulo p, then a (p 1)/2 1 (mod p). Proof. If a is a square modulo p, then a b 2 (mod p) for some b. Then a (p 1)/2 b p 1 1 by Fermat s Little Theorem. Note that there are (p 1)/2 non-zero squares modulo p (since there are (p 1)/2 pairs of non-zero square roots, which are plus or minus each other). The polynomial x (p 1)/2 1 can have only (p 1)/2 roots modulo p, since Z/pZ is a field. Therefore, if a is not a square modulo p, then a (p 1)/2 1 (mod p). Because a p 1 1 (mod p), a (p 1)/2 is a square root of 1 modulo p. Since p is prime, if it is not 1, then it must be 1, modulo p. Corollary 8.4. If p is an odd prime, then p is a sum of two squares iff p is 1 modulo 4. At this point, it is easy to completely classify the primes in Z[i]. First, note that Corollary 8.4 and Proposition 8.1 together imply that all rational primes 3 (mod 4) remain prime in Z[i]. Rational primes p, which are 1 (mod 4) factor into p = π π, but π is now prime in Z[i]: if αβ = π, then nm(αβ) = nm(π) = p, but nm(αβ) = nm(α)nm(β), so this gives a factorization of p in Z. One of nm(α), nm(β) must be 1, so αβ is a trivial factorization of π. A similar argument reveals that (1 + i) is prime. We will now show that, up to associates, these are the only primes in Z[i]. Say that we start with π Z[i] a prime. Then we already know how to factor nm(π) in Z, so write π π = nm(π) = 2 r p 1 p 2 p s q 1 q 2 q t where the p i are rational primes congruent to 1 (mod 4), and the q j are rational primes congruent to 3 (mod 4). When we pass to Z[i] and factor further into primes, 2 r = i r (1 + i) 2r, p i = π i π i and the q j remain prime. Therefore, π π = i r (1 + i) 2r π 1 π 1 π s π s q 1 q 2 q t. Because π is prime and factorization into primes is unique in Z[i], π must be an associate of one of the primes on the right hand side. Therefore, π was already on our list of Gaussian primes. 9. Failure of Unique Factorization Ideally, every ring would have unique factorization. However, that is not the case, even for interesting rings. It turns out that Z[ 2] is a UFD. (One can conclude from this that an odd prime is of the form x 2 + 2y 2 iff 2 is a square modulo the prime.) However, Z[ 3] is not. In it, one has (1 + 3)(1 3) = 2 2.

12 12 HENRY COHN, JOSHUA GREENE, JONATHAN HANKE 11. Quadratic Reciprocity We have seen that an odd prime p is a sum of two squares iff 1 is a square modulo p, and is of the form x 2 + 2y 2 iff 2 is a square modulo p. Examples such as these, as well as other considerations, make it very interesting to know when an integer n is a square modulo p. It is easy to show that the product of two numbers is a square iff either both are squares, or neither are. Because of this, we see that it is enough to know which primes reduce to squares modulo p. That is taken care of by the famous Law of Quadratic Reciprocity: Theorem 11.1 (Law of Quadratic Reciprocity). Let p and q be distinct, positive, odd primes. If either is 1 modulo 4, then p is a square modulo q iff q is a square modulo p. If both are 3 modulo 4, then p is a square modulo q iff q is not a square modulo p. Furthermore, 2 is a square modulo p iff p ±1 (mod 8) and 1 is a square modulo p iff p 1 (mod 4). We will prove this theorem later in the course. It is one of the most amazing theorems in mathematics: who could imagine that whether p is a square modulo q has anything to do with whether q is a square modulo p? As an application of Quadratic Reciprocity, consider the question of when 3 is a square modulo p. We see that if p 1 (mod 4), then 3 is a square modulo p iff p is a square modulo 3, i.e., iff p 1 (mod 3). For p 3 (mod 4), p 3, we see that 3 is a square modulo p iff p is not a square modulo 3, i.e., iff p 2 (mod 3). Combining these, we see that for primes p > 3, 3 is a square modulo p iff p ±1 (mod 12). 12. Algebraic Integers Definition A number field is a finite extension of Q. We normally consider number fields to be embedded in C. (Sometimes this is mildly inconvenient. However, it is often convenient. For example, then one embedding of it into C is the identity map, so each element is one of its own conjugates.) Given a number field K, we would like to have a ring O K K that stands in the same relation to K as Z does to Q. We call O K the ring of integers in K. (This is the reason for the term rational integers for ordinary integers.) If K = Q(i), then O K should be Z[i]. However, we have seen that things can be more complicated. If K = Q( 3), then O K should be Z[ω], where ω is a complex cube root of 1. There are several properties which O K should have. First, K should be the field of fractions of O K. In other words, every element of K should be the ratio of two elements of O K. Second, O K should have an integral basis, which is defined as follows: Definition An integral basis for a ring R consists of elements ω 1,..., ω n R such that each α R can be written uniquely in the form α = a 1 ω a n ω n, with a 1,..., a n Z. It follows immediately that a ring has an integral basis iff its additive group is a free abelian group on finitely many generators. Finally, O K should have unique factorization, if that is possible. (In many cases, such as K = Q( 5), it is not possible.) To construct such a ring O K, we need the notion of an algebraic integer. Once we have defined algebraic integers, we will show that of all the rings contained in K, only the ring of algebraic integers can have all the properties we would like (i.e., the quotient field is K, there is an integral basis, and unique factorization holds). Of those three properties, the only one that ever fails is unique factorization. Definition A number is an algebraic integer if it is the root of a monic polynomial with coefficients in Z. For example, ( 1 + 3)/2 is an algebraic integer, since it is a root of x 2 + x + 1 = 0. However, (1 + 5)/2 is not an algebraic integer. This will follow from Proposition 12.9, since the irreducible polynomial of (1 + 5)/2 is x 2 x + 3/2. Definition Given a number field K, the ring of integers O K in K is defined to be the set of all algebraic integers in K. Proposition O K is a ring.

13 ALGEBRAIC NUMBER THEORY AND QUADRATIC RECIPROCITY 13 Proof. Suppose α, β O K. Let α 1,..., α n be the roots of some monic polynomial over Z satisfied by α, and let β 1,..., β m be the roots of some monic polynomial over Z satisfied by β. Then the polynomials (x α i β j ) and i,j (x α i β j ) i,j are monic, and have integer coefficients. This follows by an argument identical to that given in the proof of Proposition 5.8. Since these polynomials are monic polynomials over Z with α + β and αβ as roots, α + β and αβ are both algebraic integers. Proposition Suppose R is a subring of a number field K, and that R has an integral basis. Then R O K. In fact, we can prove the same results with a weaker hypotheses. We do not really need to require that the integral basis be linearly independent. It is enough for it to span R. Proposition Suppose R is a subring of a number field K, and that for some n, R contains elements ω 1,..., ω n such that for all x R, there exist a 1,..., a n Z such that x = a 1 ω a n ω n. Then R O K. Proof. Let x R. For each i, there exist a 1i,..., a ni such that xω i = a 1i ω a ni ω n. Consider the following simultaneous equations in the variables y 1,..., y n : (a 11 x)y 1 + a 21 y a n1 y n = 0 a 12 y 1 + (a 22 x)y a n2 y n = 0 a 1n y 1 + a 2n y (a nn x)y n = 0 These equations have a non-zero solution, namely y i = ω i. Hence, the determinant of the matrix of coefficients must be zero. Expanding this determinant out gives a monic polynomial with integer coefficients satisfied by x. In fact, it isn t surprising that we can prove results like Proposition 12.7, because its hypotheses imply that R has an integral basis. To see this, we apply the following theorem: Theorem Every torsion-free, finitely-generated abelian group is a free abelian group on finitely many generators. Every subgroup of a finitely generated free abelian group is a finitely generated free abelian group itself. A proof of this theorem can be found in Artin s book. One can sometimes use ad hoc arguments to avoid citing this theorem, but we won t bother. Note that the hypotheses of Proposition 12.7 essentially say that the additive group of R is generated by finitely many elements ω 1,..., ω n. The additive group is clearly torsion-free (since that just means it has no elements of finite order), so we see that it is a free abelian group on finitely many generators. Hence, R has an integral basis. Proposition A algebraic number is an algebraic integer if and only if its minimal polynomial has integer coefficients. We have already found this theorem useful in showing that isn t an algebraic integer. Proof. What we need to prove is that if α is an algebraic integer, then the minimal polynomial of α has integer coefficients. Consider the ring Z[α]. Regardless of what α is, the additive group of this ring is generated by 1, α, α 2,.... Suppose α satisfies a monic polynomial of degree n with integer coefficients. Let us write this polynomial as x n + q(x) where q Z[x] and has degree at most n 1. Then for k n, we can use the polynomial to write α k as an.

14 14 HENRY COHN, JOSHUA GREENE, JONATHAN HANKE integer linear combination of lower powers of α. For example, α n = q(α) and the general case follows by induction. We see, then, that 1, α,..., α n 1 generate the additive group of Z[α]. Since it is finitely-generated, and is obviously torsion-free, it has an integral basis, say of m elements. That integral basis is also a basis of Q(α)/Q, so the degree of α must be the same as the size of the integral basis, (i.e., m = n). The proof of Proposition 12.7 shows that α satisfies a monic polynomial over Z of degree n. Since this polynomial has the same degree as the minimal polynomial of α, they must be the same. Thus, the minimal polynomial of α has integer coefficients. Proposition For a number field K, K is the field of fractions of O K. α K, there exists d Z such that dα O K. Proof. Since α K, α satisfies a polynomial equation x n + a n 1 x n a 1 x + a 0 = 0, Moreover, given any with a 0, a 1,..., a n 1 Q. Choose d to be divisible by the denominators of a 0, a 1,..., a n 1. Then dα satisfies the equation x n + da n 1 x n d n 1 a 1 x + d n a 0 = 0, which has integer coefficients. Lemma If ω 1,..., ω n are a basis of K/Q, and σ 1,..., σ n are the embeddings of K into C, then square of the determinant of the matrix M with M ij = σ i (ω j ) is a non-zero rational number. Proof. One can change from any basis to any other via a matrix with rational entries. This changes det(m) 2 by a factor of the square of the determinant of that change of basis matrix. Thus, we need only prove that det(m) 2 Q for one basis, and it will follow for all the others. Let K = Q(θ) (again, this follows from Corollary 4.9). We choose the basis 1, θ,..., θ n 1. Then det(m) is a Vandermonde determinant, and det(m) 2 is therefore the discriminant of the minimal polynomial of θ. As we saw in the section on symmetric polynomials, this is rational. Furthermore, by Proposition 5.4, all of the roots are distinct and the discriminant is non-zero. Proposition For a number field K, O K has an integral basis. Proof. Let σ 1,..., σ n be the embeddings of K into C. Consider a basis ω 1,..., ω n of K/Q such that each ω i is an algebraic integer. (We can do this simply by taking any basis and multiplying each element of it by a suitable rational integer.) We will show that there is a d Z such that every element of O K is an integer linear combination of ω 1 /d,..., ω n /d. Then the additive group of O K is a subgroup of a free abelian group on ω 1 /d,..., ω n /d, and is hence finitely generated, so O K has an integral basis. Suppose α O K. We know that α can be expressed uniquely as a 1 ω 1 + +a n ω n with a 1,..., a n Q. These a 1,..., a n are determined by being the solutions of the following simultaneous linear equations: a 1 σ 1 (ω 1 ) + + a n σ 1 (ω n ) = σ 1 (α) a 1 σ n (ω 1 ) + + a n σ n (ω n ) = σ n (α) Note that the determinant of the coefficient matrix (σ i (ω j )) is non-zero by Lemma Thus, the a i exist and are unique. Let d be the square of the determinant of the coefficient matrix of these equations. We use Cramer s Rule to solve the simultaneous equations. This gives the solutions a i as the ratio of two determinants. If we multiply numerator and denominator by the denominator, then the denominator becomes d, and the numerator is the product of two determinants. Because d is the square of the determinant of a matrix of algebraic integers, d is an algebraic integer. By Lemma 12.11, d Q. Therefore, d is an integer (by Proposition 12.9). For essentially the same reason that d is an algebraic integer, the numerators of the fractions giving a i are also algebraic integers. Because a i and d are rational, the numerators must be rational as well, so they are also ordinary integers..

15 ALGEBRAIC NUMBER THEORY AND QUADRATIC RECIPROCITY 15 Therefore, we have proved that each a i is an integer divided by a fixed integer d. Therefore, every element of O K is an integer linear combination of ω 1 /d,..., ω n /d. As we saw above, this implies that O K has an integral basis. Note that the proof of Proposition lets us find an integral basis for O K (and thereby find O K itself) with only a finite amount of computation. There are ways to do the computation slightly more efficiently, but we won t go into that here. Proposition Suppose K is a number field, and R is a subring of K such that K is the field of fractions of R. If R has unique factorization, then O K R. Proof. Let α O K. Since K is the field of fractions of R, α = p/q for some p, q R. Since R has unique factorization, we choose p and q to be relatively prime. Because α is an algebraic integer, it satisfies a monic polynomial equation with a 0, a 1,..., a n 1 Z. Therefore, x n + a n 1 x n a 1 x + a 0 = 0 p n + a n 1 p n 1 q + + a 1 pq n 1 + a 0 q n = 0. It follows that q divides p n. Now we use the fact that R has unique factorization. Since q is relatively prime to p, it is relatively prime to p n. The only way it can divide p n is if q is a unit. Then since α = p/q and q is a unit, we have α R. Thus, O K R. Therefore, the only subring of a number field K that can possibly have our three properties is O K. It always has the first two, but usually it is not a UFD. When we discuss ideal factorization, we will deal with that problem. We now show that in the case of quadratic number fields, the ring of integers is what we expect. Proposition Let d be a square-free integer. Then the ring of integers in Q( d) is Z[ d] unless d 1 (mod 4), in which case it is Z[(1 + d)/2]. Proof. Because d is square-free, Q( d) Q. The only algebraic integers in Q are the integers, so we find the rest of the integers in Q( d) if we restrict our attention to an arbitrary element α = a+b d Q( d), with a, b Q and b 0. It is a root of the irreducible polynomial x 2 2ax + (a 2 db 2 ). Thus, it is an algebraic integer iff 2a Z and a 2 db 2 Z. From this, we see that (2a) 2 d(2b) 2 Z, so d(2b) 2 Z. Since d is square-free, we then have (2b) 2 Z, which implies 2b Z. Now let a = a /2 and b = b /2. We must have a, b Z. The number α is an algebraic integer iff (a ) 2 d(b ) 2 is divisible by 4. When d 1 (mod 4), this is true iff a and b are even. When d 1 (mod 4), it is true iff a and b have the same parity. This is equivalent what we were trying to prove. Note that Z[(1 + d)/2] is the same as Z[(±1 ± d)/2]. 13. Determining the Ring of Integers Let K be a number field, and O K its ring of integers. As we have seen, O K can sometimes be larger than one might guess. For example, if K = Q( 3), then O K = Z[(1+ 3)/2], rather than Z[ 3]. In this section, we will develop an algorithm for determining O K, and apply it to certain cyclotomic fields. Suppose ω 1,..., ω n is a basis K/Q, and σ 1,..., σ n are the embeddings of K into C. Let M be the matrix whose i, j entry is σ i (ω j ). Then the rational number d = det(m) 2 is called the discriminant of the basis. Recall that in proving Proposition we proved the following: Proposition Suppose K is a number field, and ω 1,..., ω n is a basis of K/Q such that each ω i is an algebraic integer. Let d be the discriminant of the basis. Then every element of O K can be expressed in the form (a 1 ω a n ω n )/d with a 1,..., a n Z.

16 16 HENRY COHN, JOSHUA GREENE, JONATHAN HANKE Given a basis of K/Q consisting of integers, we can therefore find all the algebraic integers with only a finite amount of computation. We simply need to find all the algebraic integers of the form (a 1 ω a n ω n )/d with 0 a i < d. For an example, consider the field K = Q(ζ) with ζ a primitive p-th root of unity, for p an odd prime. We will show that O K = Z[ζ]. First, we show that the polynomial x p 1 + x p x + 1 (which has ζ as a root) is irreducible. Proposition 13.2 (Eisenstein s Criterion). Let f(x) Z[x] be a polynomial of degree n such that f(x) x n (mod p) (i.e., the leading term is 1 modulo p and the other coefficients are 0 modulo p), and such that the constant term of f(x) is not divisible by p 2. Then f(x) is irreducible. Proof. Suppose f(x) = g(x)h(x) with g(x) and h(x) non-constant. We have x n g(x)h(x) (mod p), so for some i and c 0 (mod p), we have g(x) cx i (mod p) and h(x) c 1 x n i (mod p). Since g(x) and h(x) are not constant, we cannot have i = 0 or i = n. Therefore, the constant terms of g(x) and h(x) are divisible by p. It follows that the constant term of f(x) = g(x)h(x) is divisible by p 2. This contradicts our hypotheses, so f(x) must be irreducible. If we set x = y + 1, then x p x + 1 = ((y + 1) p 1)/y. Now, (y + 1) p ( ) ( ) ( ) 1 p p p = y p 1 + y p y k +, y 1 k + 1 p 1 which satisfies the hypotheses of Eisenstein s Criterion. Since the change of variables doesn t affect irreducibility, we see that x p 1 + x p x + 1 is irreducible. Therefore [K : Q] = p 1, and the numbers 1, ζ,..., ζ p 2 form a basis for K/Q. Note that this basis consists of algebraic integers. We will show that it is in fact an integral basis for O K. Lemma Suppose a and b are not divisible by p. Then (1 + ζ a )/(1 + ζ b ) is a unit in O K. Proof. There exists a c such that a bc (mod p). Then 1 + ζ a 1 + ζ b = 1 + ζbc 1 + ζ b = 1 + ζb + ζ 2b + + ζ b(c 1) O K. For the same reason, its reciprocal is also in O K, so it is a unit in O K. Let λ = 1 ζ. Since p 1 x p 1 + x p x + 1 = (x ζ i ), we have p = p 1 i=1 (1 ζi ). Applying Lemma 13.3, we see that p differs from λ p 1 by a unit factor. Proposition The discriminant of the basis 1, ζ,..., ζ p 2 is ±p p 2. Proof. The discriminant d is given by the square of a Vandermonde determinant. That is, given the matrix 1 ζ ζ 2 ζ p 1 1 (ζ 2 ) (ζ 2 ) 2 (ζ 2 ) p 1 M =......, 1 (ζ p 1 ) (ζ p 1 ) 2 (ζ p 1 ) p 1 then d = (det(m)) 2. We have i=1 d = 2 ( ζ i ζ j). i>j In this product, we get a lot of units times (p 1)(p 2) factors of λ. Therefore, d is a unit times p p 2, since λ p 1 is a unit times p. Since d Q and p p 2 Q, the unit factor must be in Q. Since it is rational and an algebraic integer, it must be an integer. The only units in Z are ±1, so d = ±p p 2. (In fact, d = ( 1) p 1 p p 2. We will need that fact in later, but for now we will ignore the sign.)

17 ALGEBRAIC NUMBER THEORY AND QUADRATIC RECIPROCITY 17 Proposition O K = Z[ζ]. Proof. Suppose that O K Z[ζ]. From Proposition 13.1, we see that there exist a 0,..., a p 2 Z, not all divisible by p, such that (a 0 + a 1 ζ + + a p 2 ζ p 2 )/p O K. (This is true since p is the only prime factor of the discriminant. If there were any other algebraic integers, multiplying by a power of p would produce one of this form.) We now change from the basis 1, ζ,..., ζ p 2 to 1, λ,..., λ p 2. Then it is not hard to check that there are integers b 0,..., b p 2, not all divisible by p, such that a 0 + a 1 ζ + + a p 2 ζ p 2 = b 0 + b 1 λ + + b p 2 λ p 2. We will show that each b i must be divisible by p, which will be a contradiction. We begin with b 0. In O K, p divides b 0 + b 1 λ + + b p 2 λ p 2. Since λ divides p, we see that λ divides b 0. If b 0 is not divisible by p, then there exist a 1, a 2 Z such that b 0 a 1 + pa 2 = 1. Then since λ is a common factor of b 0 and p, we must have that λ divides 1. However, since p is a unit times λ p 1, that would imply that p is a unit, which is a contradiction. Therefore, b 0 must be divisible by p. Now we see that λ p 2 divides b 1 + b 2 λ + + b p 2 λ p 3. From this, we can deduce as above that λ divides b 1, and then that p divides b 1. Continuing in this way, we see that p divides each b i, which means that (b 0 + b 1 λ b p 2 λ p 2 )/p Z[ζ], and therefore we must have O K = Z[ζ]. 14. Ideal Factors We have seen that in some rings of integers, such as Z[ 5], factorization is not unique. We could try to enlarge the ring to make it unique, but if we do so while staying within the field Q( 5), we find that the enlarged ring never has an integral basis. Instead, we introduce ideal factors. These new factors will not actually be elements of a ring, but they will restore unique factorization. They will correspond to ideals in the ring of integers. To see how this will restore unique factorization, consider the two factorizations in Z[ 5]. Define the ideals and 2 3 = (1 + 5)(1 5) p = (2, 1 + 5), q = (3, 1 + 5), r = (3, 1 5). The notation is meant to suggest that p is the gcd of 2 and Of course, in the ring Z[ 5], 2 and have no common factors. However, if we are going to reconcile the two factorizations of 6, then there should be such an element p. The basic idea is this: 2 and do not generate the unit ideal (1) = Z[ 5]. If they did, then there would be two algebraic integers α, β Z[ 5] such that 2α + (1 + 5)β = 1. Multiply both sides by 1 5 to obtain 2α(1 5) + 2(3β) = 1 5. This says that 2 divides 1 5. but we know that it doesn t. Because 2 and do not generate the unit ideal, they ought to have some common factor. However, they do not have any non-trivial common factor in Z[ 5]. The ideal p is not a principal ideal (since if it were, it would be generated by a common factor of 2 and and would therefore be the unit ideal). However, like all ideals, it behaves like the set of multiples of some number. We will think of p as defining an ideal factor, which doesn t correspond to any element of Z[ 5]. Recall the following definitions: Definition Let R be a ring, and I and J ideals in R. The product IJ is the ideal generated by all products ij with i I and j J. A prime ideal P is an ideal other than R such that if a, b R and ab P, then a P or b P. A maximal ideal is an ideal M R such that M R, but R is the only ideal properly containing M.

18 18 HENRY COHN, JOSHUA GREENE, JONATHAN HANKE There are two useful facts which we should mention now, but whose proof we delay to a later section. First, any ideal different from the ring itself is contained in a maximal ideal. Second, maximal ideals are always prime. From time to time, we might write ideal when we mean non-zero ideal. This is especially likely to happen when we are talking about prime ideals. The following lemma is often useful. We omit the proof, since it is easy and probably well known. Lemma An ideal P R in an arbitrary ring R is prime iff for all ideals A and B, AB P implies A P or B P. Also, P is prime (or P = R) iff R/P is an integral domain. We will now show that p, q, and r are prime ideals. Note that the principal ideal generated by a number α is prime iff α is prime, so we think of this as saying that the ideal elements generating p, q, and r are prime. To see this, we look at the quotients Z[ 5]/p, Z[ 5]/q, and Z[ 5]/r. These are all very similar, so we will deal only with the first. For it, we have Z[ 5]/p = ( Z[ 5] (1 + 5) ) /(2) = Z/(2), which is a field (and therefore an integral domain). We can check in the same way that q and r are prime. Now we will show that how these factors reconcile the two factorizations of 6 in Z[ 5]. In general, when dealing with ideal factorizations, instead of looking at actual elements α of the ring of integers, we will look at the principal ideals (α). To start off with, we will show that the principal ideal (2) factors as p 2. We have p 2 = (2 2, 2(1 + 5), (1 + 5) 2 ) = (4, , ). Since 2 = ( ) (4 + ( )), it follows that 2 p 2, and we have p 2 (2), so (2) = p 2. In the same way, we can show that (3) = qr, (1 + 5) = pq, and (1 5) = pr. Thus, both factorizations of 6 can be refined to p 2 qr. Of course, this doesn t prove that 6 has only one factorization into prime ideals, but at least it looks encouraging. 15. Uniqueness We will now prove unique factorization for ideals in rings of integers (except for one proposition which we will put off until section 16). We begin with the following very important result: Proposition Let K be a number field, and let O K denote the ring of integers of K. Every non-zero ideal of O K divides a non-zero principal ideal. We will prove this in section 16. Part of the importance of this result is that it says that there are no unnecessary ideal factors. At first, this might seem obvious. However, it is false in most rings. For example, consider the ring Z[x], which is a UFD but not a PID. One non-principal ideal in Z[x] is (2, x). This ideal does not divide any non-zero principal ideal. To see this, suppose that I is an ideal, and (2, x)i is principal, say (2, x)i = (f(x)). For all g(x) I, we must have f(x) 2g(x) and f(x) xg(x), so f(x) g(x), and hence I (f(x)). We can then conclude that (2, x)(f(x)) = (f(x)), and therefore that (2, x) = (1). However, 1 (2, x), so this is impossible. Note that this last step depends on a cancellation law. In a general ring with arbitrary ideals AC = BC, we cannot cancel, but it isn t hard to show that cancellation always holds when C is principal. So we see that Proposition 15.1 isn t completely obvious. It will be the key to almost all of our results in this section. We begin with the following two results: Proposition 15.2 (Cancellation Law). Suppose A, B, and C are ideals of O K, with C 0. If AC = BC, then A = C. Proof. Let C be an ideal such that CC is principal, say CC = (α), with α 0. Then (α)a = (α)b, from which it follows easily (as noted above) that A = B.

19 ALGEBRAIC NUMBER THEORY AND QUADRATIC RECIPROCITY 19 Proposition 15.3 ( To Contain is to Divide ). Suppose A and B are non-zero ideals of O K. Then A divides B iff A contains B. Proof. Clearly, if A divides B, then A contains B. Suppose B A. Let A be an ideal such that AA = (α) with α 0. Then BA (α). Let C = (BA )/α, (i.e., the set of all β such that αβ BA ). Then C is an ideal of O K. Also, because BA (α), it is easy to check that C(α) = BA. In other words, CAA = BA. By cancellation, we have AC = B, so A divides B. Now we prove that all ideals in O K factor into primes. (This is not as obvious as it was in rings such as Z, although it is not hard to prove.) First, we need the following lemma: Lemma Let R be a ring, and I an ideal of R. Then ideals J 1 of R that contain I are in one-to-one correspondence with the ideals J 2 of R/I via J 1 = ϕ 1 (J 2 ), where ϕ : R R/I is the canonical map. Proof. The substance of this lemma is to check that ϕ 1 carries ideals of R/I to ideals of R containing I and that ϕ takes ideals of R containing I to ideals in R/I. We will leave the details here to the reader. After the two maps are shown to be well-defined, it follows immediately that the two maps are inverses and, thus, that each is bijective. Because a field is the same as a ring without any proper ideals (every non-zero element has a reciprocal iff every non-zero principal ideal is the unit ideal), we deduce the following corollary: Corollary An ideal I in a ring R is maximal iff R/I is a field. Note that because every field is an integral domain, it follows that every maximal ideal is prime. Lemma Let I be a non-zero ideal of O K. Then I Z (0). Proof. Let α I and α 0. Since α is an algebraic integer, it satisfies a polynomial equation α n + a n 1 α n a 1 α + a 0 = 0 with a i Z. We can take a 0 0. Because a 0 (α) I, we have I Z (0). Proposition Let I be a non-zero ideal of O K. Then O K /I is finite. Proof. Let a > 0 be in Z I. Since (a) I, O K /(a) maps surjectively onto O K /I. If ω 1,..., ω n form an integral basis for O K, then we see that every element of O K /(a) can be represented by a unique element a 1 ω a n ω n with 0 a i < a for each i. Therefore, O K /(a) has a n elements, and O K /I has at most a n elements, and is therefore finite. Proposition Every non-zero ideal of O K factors into prime ideals. Proof. Let I be an ideal of O K. Combining Lemmas 15.4 and 15.7 shows that only finitely many ideals of O K contain I. Therefore, I has only finitely many factors. Now let P 1 be a maximal ideal containing I. Then P 1 divides I, and I = P 1 I 1 for some ideal I 1. We can continue in this way. Since I has only finitely many factors, this process must eventually halt. This gives a factorization of I into prime ideals (since maximal ideals are prime). Lemma Every finite integral domain is a field. Proof. Suppose x 0 is an element of a finite integral domain. Since there are infinitely many powers of x, we must have x i = x j for some i > j. Because we are working in an integral domain, that implies that x (i j) = 1. Therefore, x is invertible. Since every non-zero element of the integral domain is invertible, it is a field. Proposition Every non-zero prime ideal of O K is maximal. Proof. Suppose P is a non-zero prime ideal of O K. Then O K /P is finite, by Proposition Since P is prime, O K /P is an integral domain. Therefore, it is a field, so P is maximal (by Corollary 15.5).

20 20 HENRY COHN, JOSHUA GREENE, JONATHAN HANKE From this, we see that the only divisibility relations among non-zero prime ideals are merely equality. That is, if A, B are non-zero primes and A divides B, then A must contain B. But B is maximal and A O K, so A = B. Theorem Let K be a number field, and O K its ring of integers. In O K, factorization of ideals into prime ideals is unique. Proof. We have seen that every ideal factors into prime ideals. factorizations (15.1) P 1 P 2 P r = Q 1 Q 2 Q s. Suppose we had two different prime For any ideals A and B and prime ideal P, if AB P then A P or B P by Proposition It follows that if P divides a product, then it divides one factor. Since P 1 divides the right side of (15.1), P 1 divides Q i for some i. Then P 1 contains Q i. Since Q i is maximal, we must have P 1 = Q i. Now we can cancel these factors from both sides. Continuing in this way, we see that prime factorizations of ideals are unique. 16. The Ideal Class Group We will now complete the proof that ideals factor uniquely into prime ideals, and at the same time prove that something called the ideal class group is finite. Let K be a number field, and O K its ring of integers. Definition Two ideals A and B of O K are called equivalent if there exist non-zero α, β O K such that (α)a = (β)b. We then write A B. The set of equivalence classes of non-zero ideals is called the ideal class group of K. Its order h is called the class number of K. We will prove that the set of ideal classes forms a group under the operation induced by multiplication of ideals, and that the class number is always finite. Note that the class of a non-zero principal ideal will be the identity element in the ideal class group. To show that the ideal class group really is a group, we just need to prove the following proposition, whose proof was omitted in section 15: Proposition Every non-zero ideal of O K divides a non-zero principal ideal. If A, B are ideals such that AB is principal, then the class of B is the inverse of the class of A in the ideal class group of K. Therefore, Proposition 16.2 says that every ideal class has an inverse. We will deduce Proposition 16.2 from the fact that the ideal class group is finite. Along the way, we will need to use a special case of the Cancellation Law. Because we used Proposition 16.2 to prove the general form of the cancellation law, we need to give another proof for the special case. (There are other ways to prove Proposition However, the following approach is nice because it proves at the same time that the class number is finite, which is an important result.) Proposition Suppose α K, and multiplication by α maps a finitely-generated subgroup of the additive group of K to itself. Then α O K. The proof of this statement is essentially the same as the proof of Proposition Note that the subgroup is free (since it is torsion free), and therefore has a basis. If we multiply each basis element by α and express the result in terms of the basis, then we get simultaneous linear equations satisfied by the basis elements (whose coefficients are integers minus α on the diagonal and integers elsewhere). The determinant of the coefficients must be 0, and this gives a monic polynomial over Z satisfied by α. Note that ideals are subgroups of O K, and therefore finitely-generated subgroups of K. We will usually apply Proposition 16.3 to ideals. Lemma If A and B are ideals such that A = AB, and A (0), then B = O K. Proof. Let α 1,..., α n be an integral basis for A. Since A = AB, there exist elements b ij B such that for each i, α i = j b ijα j. This gives us a set of simultaneous linear equations satisfied by the α i. The determinant of the matrix of coefficients must be 0. That is the determinant of the matrix whose i, j entry is b ij δ ij. Expanding this determinant gives 1 plus many products of elements of B. Since the total is 0, we see that 1 must be in B, so B = O K.

### Unique Factorization

Unique Factorization Waffle Mathcamp 2010 Throughout these notes, all rings will be assumed to be commutative. 1 Factorization in domains: definitions and examples In this class, we will study the phenomenon

### 3 1. Note that all cubes solve it; therefore, there are no more

Math 13 Problem set 5 Artin 11.4.7 Factor the following polynomials into irreducible factors in Q[x]: (a) x 3 3x (b) x 3 3x + (c) x 9 6x 6 + 9x 3 3 Solution: The first two polynomials are cubics, so if

### Chapter 4, Arithmetic in F [x] Polynomial arithmetic and the division algorithm.

Chapter 4, Arithmetic in F [x] Polynomial arithmetic and the division algorithm. We begin by defining the ring of polynomials with coefficients in a ring R. After some preliminary results, we specialize

### 11 Ideals. 11.1 Revisiting Z

11 Ideals The presentation here is somewhat different than the text. In particular, the sections do not match up. We have seen issues with the failure of unique factorization already, e.g., Z[ 5] = O Q(

### Quotient Rings and Field Extensions

Chapter 5 Quotient Rings and Field Extensions In this chapter we describe a method for producing field extension of a given field. If F is a field, then a field extension is a field K that contains F.

### FACTORING IN QUADRATIC FIELDS. 1. Introduction. This is called a quadratic field and it has degree 2 over Q. Similarly, set

FACTORING IN QUADRATIC FIELDS KEITH CONRAD For a squarefree integer d other than 1, let 1. Introduction K = Q[ d] = {x + y d : x, y Q}. This is called a quadratic field and it has degree 2 over Q. Similarly,

### A number field is a field of finite degree over Q. By the Primitive Element Theorem, any number

Number Fields Introduction A number field is a field of finite degree over Q. By the Primitive Element Theorem, any number field K = Q(α) for some α K. The minimal polynomial Let K be a number field and

### it is easy to see that α = a

21. Polynomial rings Let us now turn out attention to determining the prime elements of a polynomial ring, where the coefficient ring is a field. We already know that such a polynomial ring is a UF. Therefore

### POLYNOMIAL RINGS AND UNIQUE FACTORIZATION DOMAINS

POLYNOMIAL RINGS AND UNIQUE FACTORIZATION DOMAINS RUSS WOODROOFE 1. Unique Factorization Domains Throughout the following, we think of R as sitting inside R[x] as the constant polynomials (of degree 0).

### U.C. Berkeley CS276: Cryptography Handout 0.1 Luca Trevisan January, 2009. Notes on Algebra

U.C. Berkeley CS276: Cryptography Handout 0.1 Luca Trevisan January, 2009 Notes on Algebra These notes contain as little theory as possible, and most results are stated without proof. Any introductory

### The Dirichlet Unit Theorem

Chapter 6 The Dirichlet Unit Theorem As usual, we will be working in the ring B of algebraic integers of a number field L. Two factorizations of an element of B are regarded as essentially the same if

3. QUADRATIC CONGRUENCES 3.1. Quadratics Over a Finite Field We re all familiar with the quadratic equation in the context of real or complex numbers. The formula for the solutions to ax + bx + c = 0 (where

### Notes on Factoring. MA 206 Kurt Bryan

The General Approach Notes on Factoring MA 26 Kurt Bryan Suppose I hand you n, a 2 digit integer and tell you that n is composite, with smallest prime factor around 5 digits. Finding a nontrivial factor

### Elementary Number Theory We begin with a bit of elementary number theory, which is concerned

CONSTRUCTION OF THE FINITE FIELDS Z p S. R. DOTY Elementary Number Theory We begin with a bit of elementary number theory, which is concerned solely with questions about the set of integers Z = {0, ±1,

### MOP 2007 Black Group Integer Polynomials Yufei Zhao. Integer Polynomials. June 29, 2007 Yufei Zhao yufeiz@mit.edu

Integer Polynomials June 9, 007 Yufei Zhao yufeiz@mit.edu We will use Z[x] to denote the ring of polynomials with integer coefficients. We begin by summarizing some of the common approaches used in dealing

### Appendix A. Appendix. A.1 Algebra. Fields and Rings

Appendix A Appendix A.1 Algebra Algebra is the foundation of algebraic geometry; here we collect some of the basic algebra on which we rely. We develop some algebraic background that is needed in the text.

### Factoring Polynomials

Factoring Polynomials Sue Geller June 19, 2006 Factoring polynomials over the rational numbers, real numbers, and complex numbers has long been a standard topic of high school algebra. With the advent

### CHAPTER SIX IRREDUCIBILITY AND FACTORIZATION 1. BASIC DIVISIBILITY THEORY

January 10, 2010 CHAPTER SIX IRREDUCIBILITY AND FACTORIZATION 1. BASIC DIVISIBILITY THEORY The set of polynomials over a field F is a ring, whose structure shares with the ring of integers many characteristics.

### PROBLEM SET 6: POLYNOMIALS

PROBLEM SET 6: POLYNOMIALS 1. introduction In this problem set we will consider polynomials with coefficients in K, where K is the real numbers R, the complex numbers C, the rational numbers Q or any other

### Chapter 13: Basic ring theory

Chapter 3: Basic ring theory Matthew Macauley Department of Mathematical Sciences Clemson University http://www.math.clemson.edu/~macaule/ Math 42, Spring 24 M. Macauley (Clemson) Chapter 3: Basic ring

### I. GROUPS: BASIC DEFINITIONS AND EXAMPLES

I GROUPS: BASIC DEFINITIONS AND EXAMPLES Definition 1: An operation on a set G is a function : G G G Definition 2: A group is a set G which is equipped with an operation and a special element e G, called

### 1 Homework 1. [p 0 q i+j +... + p i 1 q j+1 ] + [p i q j ] + [p i+1 q j 1 +... + p i+j q 0 ]

1 Homework 1 (1) Prove the ideal (3,x) is a maximal ideal in Z[x]. SOLUTION: Suppose we expand this ideal by including another generator polynomial, P / (3, x). Write P = n + x Q with n an integer not

### Modern Algebra Lecture Notes: Rings and fields set 4 (Revision 2)

Modern Algebra Lecture Notes: Rings and fields set 4 (Revision 2) Kevin Broughan University of Waikato, Hamilton, New Zealand May 13, 2010 Remainder and Factor Theorem 15 Definition of factor If f (x)

### Revised Version of Chapter 23. We learned long ago how to solve linear congruences. ax c (mod m)

Chapter 23 Squares Modulo p Revised Version of Chapter 23 We learned long ago how to solve linear congruences ax c (mod m) (see Chapter 8). It s now time to take the plunge and move on to quadratic equations.

### Factoring of Prime Ideals in Extensions

Chapter 4 Factoring of Prime Ideals in Extensions 4. Lifting of Prime Ideals Recall the basic AKLB setup: A is a Dedekind domain with fraction field K, L is a finite, separable extension of K of degree

### OSTROWSKI FOR NUMBER FIELDS

OSTROWSKI FOR NUMBER FIELDS KEITH CONRAD Ostrowski classified the nontrivial absolute values on Q: up to equivalence, they are the usual (archimedean) absolute value and the p-adic absolute values for

### 7. Some irreducible polynomials

7. Some irreducible polynomials 7.1 Irreducibles over a finite field 7.2 Worked examples Linear factors x α of a polynomial P (x) with coefficients in a field k correspond precisely to roots α k [1] of

### Mathematics Course 111: Algebra I Part IV: Vector Spaces

Mathematics Course 111: Algebra I Part IV: Vector Spaces D. R. Wilkins Academic Year 1996-7 9 Vector Spaces A vector space over some field K is an algebraic structure consisting of a set V on which are

### 3 Factorisation into irreducibles

3 Factorisation into irreducibles Consider the factorisation of a non-zero, non-invertible integer n as a product of primes: n = p 1 p t. If you insist that primes should be positive then, since n could

### (x + a) n = x n + a Z n [x]. Proof. If n is prime then the map

22. A quick primality test Prime numbers are one of the most basic objects in mathematics and one of the most basic questions is to decide which numbers are prime (a clearly related problem is to find

### EXERCISES FOR THE COURSE MATH 570, FALL 2010

EXERCISES FOR THE COURSE MATH 570, FALL 2010 EYAL Z. GOREN (1) Let G be a group and H Z(G) a subgroup such that G/H is cyclic. Prove that G is abelian. Conclude that every group of order p 2 (p a prime

### CHAPTER 5: MODULAR ARITHMETIC

CHAPTER 5: MODULAR ARITHMETIC LECTURE NOTES FOR MATH 378 (CSUSM, SPRING 2009). WAYNE AITKEN 1. Introduction In this chapter we will consider congruence modulo m, and explore the associated arithmetic called

### Copy in your notebook: Add an example of each term with the symbols used in algebra 2 if there are any.

Algebra 2 - Chapter Prerequisites Vocabulary Copy in your notebook: Add an example of each term with the symbols used in algebra 2 if there are any. P1 p. 1 1. counting(natural) numbers - {1,2,3,4,...}

### Introduction to finite fields

Introduction to finite fields Topics in Finite Fields (Fall 2013) Rutgers University Swastik Kopparty Last modified: Monday 16 th September, 2013 Welcome to the course on finite fields! This is aimed at

### FACTORING POLYNOMIALS IN THE RING OF FORMAL POWER SERIES OVER Z

FACTORING POLYNOMIALS IN THE RING OF FORMAL POWER SERIES OVER Z DANIEL BIRMAJER, JUAN B GIL, AND MICHAEL WEINER Abstract We consider polynomials with integer coefficients and discuss their factorization

### ORDERS OF ELEMENTS IN A GROUP

ORDERS OF ELEMENTS IN A GROUP KEITH CONRAD 1. Introduction Let G be a group and g G. We say g has finite order if g n = e for some positive integer n. For example, 1 and i have finite order in C, since

### The Division Algorithm for Polynomials Handout Monday March 5, 2012

The Division Algorithm for Polynomials Handout Monday March 5, 0 Let F be a field (such as R, Q, C, or F p for some prime p. This will allow us to divide by any nonzero scalar. (For some of the following,

### MA257: INTRODUCTION TO NUMBER THEORY LECTURE NOTES

MA257: INTRODUCTION TO NUMBER THEORY LECTURE NOTES 2016 47 4. Diophantine Equations A Diophantine Equation is simply an equation in one or more variables for which integer (or sometimes rational) solutions

### 1 = (a 0 + b 0 α) 2 + + (a m 1 + b m 1 α) 2. for certain elements a 0,..., a m 1, b 0,..., b m 1 of F. Multiplying out, we obtain

Notes on real-closed fields These notes develop the algebraic background needed to understand the model theory of real-closed fields. To understand these notes, a standard graduate course in algebra is

### ON GALOIS REALIZATIONS OF THE 2-COVERABLE SYMMETRIC AND ALTERNATING GROUPS

ON GALOIS REALIZATIONS OF THE 2-COVERABLE SYMMETRIC AND ALTERNATING GROUPS DANIEL RABAYEV AND JACK SONN Abstract. Let f(x) be a monic polynomial in Z[x] with no rational roots but with roots in Q p for

### 9. POLYNOMIALS. Example 1: The expression a(x) = x 3 4x 2 + 7x 11 is a polynomial in x. The coefficients of a(x) are the numbers 1, 4, 7, 11.

9. POLYNOMIALS 9.1. Definition of a Polynomial A polynomial is an expression of the form: a(x) = a n x n + a n-1 x n-1 +... + a 1 x + a 0. The symbol x is called an indeterminate and simply plays the role

### PUTNAM TRAINING POLYNOMIALS. Exercises 1. Find a polynomial with integral coefficients whose zeros include 2 + 5.

PUTNAM TRAINING POLYNOMIALS (Last updated: November 17, 2015) Remark. This is a list of exercises on polynomials. Miguel A. Lerma Exercises 1. Find a polynomial with integral coefficients whose zeros include

### Cyclotomic Extensions

Chapter 7 Cyclotomic Extensions A cyclotomic extension Q(ζ n ) of the rationals is formed by adjoining a primitive n th root of unity ζ n. In this chapter, we will find an integral basis and calculate

### Continued Fractions and the Euclidean Algorithm

Continued Fractions and the Euclidean Algorithm Lecture notes prepared for MATH 326, Spring 997 Department of Mathematics and Statistics University at Albany William F Hammond Table of Contents Introduction

### QUADRATIC RECIPROCITY IN CHARACTERISTIC 2

QUADRATIC RECIPROCITY IN CHARACTERISTIC 2 KEITH CONRAD 1. Introduction Let F be a finite field. When F has odd characteristic, the quadratic reciprocity law in F[T ] (see [4, Section 3.2.2] or [5]) lets

### RESULTANT AND DISCRIMINANT OF POLYNOMIALS

RESULTANT AND DISCRIMINANT OF POLYNOMIALS SVANTE JANSON Abstract. This is a collection of classical results about resultants and discriminants for polynomials, compiled mainly for my own use. All results

### Introduction to Modern Algebra

Introduction to Modern Algebra David Joyce Clark University Version 0.0.6, 3 Oct 2008 1 1 Copyright (C) 2008. ii I dedicate this book to my friend and colleague Arthur Chou. Arthur encouraged me to write

### Module MA3411: Abstract Algebra Galois Theory Appendix Michaelmas Term 2013

Module MA3411: Abstract Algebra Galois Theory Appendix Michaelmas Term 2013 D. R. Wilkins Copyright c David R. Wilkins 1997 2013 Contents A Cyclotomic Polynomials 79 A.1 Minimum Polynomials of Roots of

### Finite Fields and Error-Correcting Codes

Lecture Notes in Mathematics Finite Fields and Error-Correcting Codes Karl-Gustav Andersson (Lund University) (version 1.013-16 September 2015) Translated from Swedish by Sigmundur Gudmundsson Contents

### Integral Domains. As always in this course, a ring R is understood to be a commutative ring with unity.

Integral Domains As always in this course, a ring R is understood to be a commutative ring with unity. 1 First definitions and properties Definition 1.1. Let R be a ring. A divisor of zero or zero divisor

### Math Review. for the Quantitative Reasoning Measure of the GRE revised General Test

Math Review for the Quantitative Reasoning Measure of the GRE revised General Test www.ets.org Overview This Math Review will familiarize you with the mathematical skills and concepts that are important

### Congruences. Robert Friedman

Congruences Robert Friedman Definition of congruence mod n Congruences are a very handy way to work with the information of divisibility and remainders, and their use permeates number theory. Definition

### Further linear algebra. Chapter I. Integers.

Further linear algebra. Chapter I. Integers. Andrei Yafaev Number theory is the theory of Z = {0, ±1, ±2,...}. 1 Euclid s algorithm, Bézout s identity and the greatest common divisor. We say that a Z divides

### z = i ± 9 2 2 so z = 2i or z = i are the solutions. (c) z 4 + 2z 2 + 4 = 0. By the quadratic formula,

91 Homework 8 solutions Exercises.: 18. Show that Z[i] is an integral domain, describe its field of fractions and find the units. There are two ways to show it is an integral domain. The first is to observe:

### The cyclotomic polynomials

The cyclotomic polynomials Notes by G.J.O. Jameson 1. The definition and general results We use the notation e(t) = e 2πit. Note that e(n) = 1 for integers n, e(s + t) = e(s)e(t) for all s, t. e( 1 ) =

### Factorization in Polynomial Rings

Factorization in Polynomial Rings These notes are a summary of some of the important points on divisibility in polynomial rings from 17 and 18 of Gallian s Contemporary Abstract Algebra. Most of the important

### Solutions to Practice Problems

Solutions to Practice Problems March 205. Given n = pq and φ(n = (p (q, we find p and q as the roots of the quadratic equation (x p(x q = x 2 (n φ(n + x + n = 0. The roots are p, q = 2[ n φ(n+ ± (n φ(n+2

### Fractions and Decimals

Fractions and Decimals Tom Davis tomrdavis@earthlink.net http://www.geometer.org/mathcircles December 1, 2005 1 Introduction If you divide 1 by 81, you will find that 1/81 =.012345679012345679... The first

### ABSTRACT ALGEBRA: A STUDY GUIDE FOR BEGINNERS

ABSTRACT ALGEBRA: A STUDY GUIDE FOR BEGINNERS John A. Beachy Northern Illinois University 2014 ii J.A.Beachy This is a supplement to Abstract Algebra, Third Edition by John A. Beachy and William D. Blair

### calculating the result modulo 3, as follows: p(0) = 0 3 + 0 + 1 = 1 0,

Homework #02, due 1/27/10 = 9.4.1, 9.4.2, 9.4.5, 9.4.6, 9.4.7. Additional problems recommended for study: (9.4.3), 9.4.4, 9.4.9, 9.4.11, 9.4.13, (9.4.14), 9.4.17 9.4.1 Determine whether the following polynomials

### CHAPTER 5. Number Theory. 1. Integers and Division. Discussion

CHAPTER 5 Number Theory 1. Integers and Division 1.1. Divisibility. Definition 1.1.1. Given two integers a and b we say a divides b if there is an integer c such that b = ac. If a divides b, we write a

### Introduction to Finite Fields (cont.)

Chapter 6 Introduction to Finite Fields (cont.) 6.1 Recall Theorem. Z m is a field m is a prime number. Theorem (Subfield Isomorphic to Z p ). Every finite field has the order of a power of a prime number

### CONTINUED FRACTIONS, PELL S EQUATION, AND TRANSCENDENTAL NUMBERS

CONTINUED FRACTIONS, PELL S EQUATION, AND TRANSCENDENTAL NUMBERS JEREMY BOOHER Continued fractions usually get short-changed at PROMYS, but they are interesting in their own right and useful in other areas

### REMARKS ABOUT EUCLIDEAN DOMAINS. 1. Introduction. Definition 1.2. An integral domain R is called Euclidean if there is a function d: R {0}

REMARKS ABOUT EUCLIDEAN DOMAINS KEITH CONRAD 1. Introduction The following definition of a Euclidean (not Euclidian!) textbooks. We write N for {0, 1, 2,... }. domain is very common in Definition 1.1.

### SUM OF TWO SQUARES JAHNAVI BHASKAR

SUM OF TWO SQUARES JAHNAVI BHASKAR Abstract. I will investigate which numbers can be written as the sum of two squares and in how many ways, providing enough basic number theory so even the unacquainted

### THE FUNDAMENTAL THEOREM OF ALGEBRA VIA PROPER MAPS

THE FUNDAMENTAL THEOREM OF ALGEBRA VIA PROPER MAPS KEITH CONRAD 1. Introduction The Fundamental Theorem of Algebra says every nonconstant polynomial with complex coefficients can be factored into linear

### minimal polyonomial Example

Minimal Polynomials Definition Let α be an element in GF(p e ). We call the monic polynomial of smallest degree which has coefficients in GF(p) and α as a root, the minimal polyonomial of α. Example: We

### The van Hoeij Algorithm for Factoring Polynomials

The van Hoeij Algorithm for Factoring Polynomials Jürgen Klüners Abstract In this survey we report about a new algorithm for factoring polynomials due to Mark van Hoeij. The main idea is that the combinatorial

### Monogenic Fields and Power Bases Michael Decker 12/07/07

Monogenic Fields and Power Bases Michael Decker 12/07/07 1 Introduction Let K be a number field of degree k and O K its ring of integers Then considering O K as a Z-module, the nicest possible case is

### Pythagorean Triples, Complex Numbers, Abelian Groups and Prime Numbers

Pythagorean Triples, Complex Numbers, Abelian Groups and Prime Numbers Amnon Yekutieli Department of Mathematics Ben Gurion University email: amyekut@math.bgu.ac.il Notes available at http://www.math.bgu.ac.il/~amyekut/lectures

### Review for Final Exam

Review for Final Exam Note: Warning, this is probably not exhaustive and probably does contain typos (which I d like to hear about), but represents a review of most of the material covered in Chapters

### Discrete Mathematics Lecture 3 Elementary Number Theory and Methods of Proof. Harper Langston New York University

Discrete Mathematics Lecture 3 Elementary Number Theory and Methods of Proof Harper Langston New York University Proof and Counterexample Discovery and proof Even and odd numbers number n from Z is called

### Number Theory Hungarian Style. Cameron Byerley s interpretation of Csaba Szabó s lectures

Number Theory Hungarian Style Cameron Byerley s interpretation of Csaba Szabó s lectures August 20, 2005 2 0.1 introduction Number theory is a beautiful subject and even cooler when you learn about it

### The Ideal Class Group

Chapter 5 The Ideal Class Group We will use Minkowski theory, which belongs to the general area of geometry of numbers, to gain insight into the ideal class group of a number field. We have already mentioned

### MODULAR ARITHMETIC. a smallest member. It is equivalent to the Principle of Mathematical Induction.

MODULAR ARITHMETIC 1 Working With Integers The usual arithmetic operations of addition, subtraction and multiplication can be performed on integers, and the result is always another integer Division, on

### The Chebotarev Density Theorem

The Chebotarev Density Theorem Hendrik Lenstra 1. Introduction Consider the polynomial f(x) = X 4 X 2 1 Z[X]. Suppose that we want to show that this polynomial is irreducible. We reduce f modulo a prime

### some algebra prelim solutions

some algebra prelim solutions David Morawski August 19, 2012 Problem (Spring 2008, #5). Show that f(x) = x p x + a is irreducible over F p whenever a F p is not zero. Proof. First, note that f(x) has no

### Prime Numbers and Irreducible Polynomials

Prime Numbers and Irreducible Polynomials M. Ram Murty The similarity between prime numbers and irreducible polynomials has been a dominant theme in the development of number theory and algebraic geometry.

### Primality - Factorization

Primality - Factorization Christophe Ritzenthaler November 9, 2009 1 Prime and factorization Definition 1.1. An integer p > 1 is called a prime number (nombre premier) if it has only 1 and p as divisors.

### Factorization Algorithms for Polynomials over Finite Fields

Degree Project Factorization Algorithms for Polynomials over Finite Fields Sajid Hanif, Muhammad Imran 2011-05-03 Subject: Mathematics Level: Master Course code: 4MA11E Abstract Integer factorization is

### Die ganzen zahlen hat Gott gemacht

Die ganzen zahlen hat Gott gemacht Polynomials with integer values B.Sury A quote attributed to the famous mathematician L.Kronecker is Die Ganzen Zahlen hat Gott gemacht, alles andere ist Menschenwerk.

### It is time to prove some theorems. There are various strategies for doing

CHAPTER 4 Direct Proof It is time to prove some theorems. There are various strategies for doing this; we now examine the most straightforward approach, a technique called direct proof. As we begin, it

### Ideal Class Group and Units

Chapter 4 Ideal Class Group and Units We are now interested in understanding two aspects of ring of integers of number fields: how principal they are (that is, what is the proportion of principal ideals

### EULER S THEOREM. 1. Introduction Fermat s little theorem is an important property of integers to a prime modulus. a p 1 1 mod p.

EULER S THEOREM KEITH CONRAD. Introduction Fermat s little theorem is an important property of integers to a prime modulus. Theorem. (Fermat). For prime p and any a Z such that a 0 mod p, a p mod p. If

### Algebraic Systems, Fall 2013, September 1, 2013 Edition. Todd Cochrane

Algebraic Systems, Fall 2013, September 1, 2013 Edition Todd Cochrane Contents Notation 5 Chapter 0. Axioms for the set of Integers Z. 7 Chapter 1. Algebraic Properties of the Integers 9 1.1. Background

### (a) Write each of p and q as a polynomial in x with coefficients in Z[y, z]. deg(p) = 7 deg(q) = 9

Homework #01, due 1/20/10 = 9.1.2, 9.1.4, 9.1.6, 9.1.8, 9.2.3 Additional problems for study: 9.1.1, 9.1.3, 9.1.5, 9.1.13, 9.2.1, 9.2.2, 9.2.4, 9.2.5, 9.2.6, 9.3.2, 9.3.3 9.1.1 (This problem was not assigned

### Homework 5 Solutions

Homework 5 Solutions 4.2: 2: a. 321 = 256 + 64 + 1 = (01000001) 2 b. 1023 = 512 + 256 + 128 + 64 + 32 + 16 + 8 + 4 + 2 + 1 = (1111111111) 2. Note that this is 1 less than the next power of 2, 1024, which

### Winter Camp 2011 Polynomials Alexander Remorov. Polynomials. Alexander Remorov alexanderrem@gmail.com

Polynomials Alexander Remorov alexanderrem@gmail.com Warm-up Problem 1: Let f(x) be a quadratic polynomial. Prove that there exist quadratic polynomials g(x) and h(x) such that f(x)f(x + 1) = g(h(x)).

### 5.1 Commutative rings; Integral Domains

5.1 J.A.Beachy 1 5.1 Commutative rings; Integral Domains from A Study Guide for Beginner s by J.A.Beachy, a supplement to Abstract Algebra by Beachy / Blair 23. Let R be a commutative ring. Prove the following

### Integer roots of quadratic and cubic polynomials with integer coefficients

Integer roots of quadratic and cubic polynomials with integer coefficients Konstantine Zelator Mathematics, Computer Science and Statistics 212 Ben Franklin Hall Bloomsburg University 400 East Second Street

### Is this number prime? Berkeley Math Circle Kiran Kedlaya

Is this number prime? Berkeley Math Circle 2002 2003 Kiran Kedlaya Given a positive integer, how do you check whether it is prime (has itself and 1 as its only two positive divisors) or composite (not

### H/wk 13, Solutions to selected problems

H/wk 13, Solutions to selected problems Ch. 4.1, Problem 5 (a) Find the number of roots of x x in Z 4, Z Z, any integral domain, Z 6. (b) Find a commutative ring in which x x has infinitely many roots.

### Computer Algebra for Computer Engineers

p.1/14 Computer Algebra for Computer Engineers Preliminaries Priyank Kalla Department of Electrical and Computer Engineering University of Utah, Salt Lake City p.2/14 Notation R: Real Numbers Q: Fractions

### = 2 + 1 2 2 = 3 4, Now assume that P (k) is true for some fixed k 2. This means that

Instructions. Answer each of the questions on your own paper, and be sure to show your work so that partial credit can be adequately assessed. Credit will not be given for answers (even correct ones) without

### Some Polynomial Theorems. John Kennedy Mathematics Department Santa Monica College 1900 Pico Blvd. Santa Monica, CA 90405 rkennedy@ix.netcom.

Some Polynomial Theorems by John Kennedy Mathematics Department Santa Monica College 1900 Pico Blvd. Santa Monica, CA 90405 rkennedy@ix.netcom.com This paper contains a collection of 31 theorems, lemmas,

### SUBGROUPS OF CYCLIC GROUPS. 1. Introduction In a group G, we denote the (cyclic) group of powers of some g G by

SUBGROUPS OF CYCLIC GROUPS KEITH CONRAD 1. Introduction In a group G, we denote the (cyclic) group of powers of some g G by g = {g k : k Z}. If G = g, then G itself is cyclic, with g as a generator. Examples

### FACTORING AFTER DEDEKIND

FACTORING AFTER DEDEKIND KEITH CONRAD Let K be a number field and p be a prime number. When we factor (p) = po K into prime ideals, say (p) = p e 1 1 peg g, we refer to the data of the e i s, the exponents

### Math 4310 Handout - Quotient Vector Spaces

Math 4310 Handout - Quotient Vector Spaces Dan Collins The textbook defines a subspace of a vector space in Chapter 4, but it avoids ever discussing the notion of a quotient space. This is understandable