Professional Documents
Culture Documents
Cyclic FP
Cyclic FP
KEITH CONRAD
1. Introduction
For any prime p, the group (Z/(p))
other than a brute force search: try a = 2, 3, . . . until you nd an element with
order p 1.
While the proof that a generator of (Z/(p))
is cyclic, so we state it
rst.
Theorem 1.1. For any r 1, there are at most r solutions to the equation a
r
= 1 in
Z/(p).
A proof of Theorem 1.1 is given in Appendix A. Theorem 1.1 is a special case of a
broader result on polynomials: any polynomial with coecients in Z/(p) has no more roots
in Z/(p) than its degree. (The link to Theorem 1.1 is that the equation a
r
= 1 is satised
by the roots of the polynomial T
r
1, whose degree is r.) This upper bound breaks down
in Z/(m) for non-prime m, e.g., the polynomial T
2
1 has four solutions in Z/(8).
2. First Proof: A -identity
For our rst proof that (Z/(p))
, which has size p 1, the order of any element divides p 1. For each
positive divisor of p 1, say d, let N
p
(d) be the number of elements of order d in (Z/(p))
.
For instance, N
p
(1) = 1 and the cyclicity of (Z/(p))
d|(p1)
N
p
(d) = p 1.
1
2 KEITH CONRAD
Theorem 2.1. Let d|p 1. If N
p
(d) > 0, then N
p
(d) = (d).
Proof. When N
p
(d) > 0, there is an element of order d in (Z/(p))
d|(p1)
N
p
(d)
d|(p1)
(d).
We have obtained an inequality for any prime p:
(2.4) p 1
d|(p1)
(d).
If the inequality in (2.2) is strict (that is, <) for some d dividing p 1, then the inequality
in (2.3) is strict, and thus the inequality in (2.4) is strict. How sharp is (2.4)? Lets look at
some examples.
Example 2.2. If p = 5, then
d|4
(d) = (1) + (2) + (4) = 1 + 1 + 2 = 4.
Example 2.3. If p = 11, then
d|10
(d) = (1)+(2)+(5)+(10) = 1+1+4+4 = 10.
Example 2.4. If p = 29, then
d|28
(d) = (1) + (2) + (4) + (7) + (14) + (28) =
1 + 1 + 2 + 6 + 6 + 12 = 28.
It appears that (2.4) might be an equality! This inspires us to prove it, and the number
being of the form p 1 is completely irrelevant.
Theorem 2.5. For any n 1,
d|n
(d) = n. In particular, for a prime p we have
d|(p1)
(d) = p 1.
Proof. We will count the n fractions
(2.5)
1
n
,
2
n
,
n 1
n
,
n
n
according to their denominator when put in reduced form.
For such a fraction m/n with denominator n, its reduced form denominator is a divisor
of n. How many of these reduced form fractions have a given denominator? Writing
m/n = a/d, where (a, d) = 1, the condition 1 m n is equivalent to 1 a d.
Therefore the number of fractions in (2.5) with reduced form denominator d is the number
of a between 1 and d with (a, d) = 1. There are (d) such numbers. Thus, counting the
fractions in (2.5) according to the reduced form denominator, we get
n =
d|n
(d).
CYCLICITY OF (Z/(p))
3
Theorem 2.5 tells us (2.4) is an equality, so the inequalities in (2.2) must all be equalities:
we cant have N
p
(d) = 0 at all. (Reread the discussion right after (2.4) if you dont see this.)
In particular, N
p
(p1) > 0, so there is an element of order p1. Weve (non-constructively)
proved the existence of a generator!
Lets summarize the argument again.
Theorem 2.6. For any prime p, the group (Z/(p))
is cyclic.
Proof. For d|(p 1), let N
p
(d) be the number of elements of order d in (Z/(p))
. By
Theorem 2.1, N
p
(d) (d). Therefore
p 1 =
d|(p1)
N
p
(d)
d|(p1)
(d).
By Theorem 2.5, the sum on the right is p 1, so the is an equality. That means the
inequalities N
p
(d) (d) for all d have to be equalities. In particular, N
p
(p1) = (p1),
which is positive, so there is an element of (Z/(p))
with order p 1.
3. Second Proof: One Subgroup per Size
We begin our second proof by establishing a divisibility property among orders of elements
which is peculiar to nite abelian groups. In any nite group, all elements have order
dividing the size of the group. In the abelian setting all orders also divide something else:
the maximal order.
Lemma 3.1. Let G be a nite abelian group. If n is the maximal order among the elements
in G, then the order of every element divides n.
For example, in (Z/(56))
The following will be our criterion for showing a group is cyclic. Recall that in a cyclic
group there is just one subgroup of any size. Assuming the group is abelian, the converse
holds.
Theorem 3.3. Let G be a nite abelian group with at most one subgroup of any size. Then
G is cyclic.
Proof. Let n be the maximal order among the elements of G, and let g G be an element
with order n. We will show every element of G is a power of g, so G = g.
Pick any h G, and say h has order d. Since d|n by Lemma 3.1, we can write down
another element of order d: g
n/d
. Thus we have two subgroups of size d: h and g
n/d
.
By hypothesis, these subgroups are the same: h = g
n/d
. In particular, h g
n/d
g,
so h is a power of g. Since h was arbitrary in G, G = g.
Remark 3.4. Is the abelian hypothesis in Theorem 3.3 necessary? That is, are there any
non-abelian groups with one subgroup of each size? No. A nite group with at most one
subgroup of each size must be cyclic, even if we dont assume at rst that the group is
abelian. However, to prove this without an abelian hypothesis is quite a bit more involved
than the proof of Theorem 3.3. (Where did we use the abelian hypothesis in the proof of
Theorem 3.3?)
Now we are ready to show (Z/(p))
is cyclic.
Theorem 3.5. For any prime p, the group (Z/(p))
is cyclic.
Proof. We will show (Z/(p))
5
4. Third Proof: Bounding with the Maximal Order
Our third proof that (Z/(p))
is cyclic.
Proof. Let n be the maximal order among the elements in (Z/(p))
. We want to show
n = p 1, so there is an element of order p 1. Obviously n p 1. (More precisely,
n|(p 1), but the crude inequality will suce.)
Every element has order dividing n, by Lemma 3.1, so each a (Z/(p))
satises a
n
= 1.
Theorem 1.1 says the equation x
n
= 1 has at most n solutions in Z/(p). We already
produced p 1 dierent solutions (namely all of (Z/(p))
), so p 1 n.
Comparing the two inequalities, n = p 1. Thus there is an element of order p 1, so
(Z/(p))
is cyclic.
5. Fourth Proof: Prime-Power Subgroups are Cyclic
Our next proof that (Z/(p))
.
This gives us factors T 1, T 2, . . . , T (p 1). These p 1 factors are relatively prime
to each other (theyre linear, with dierent roots), so (by a polynomial analogue of Bezout)
their product is a factor:
T
p1
1 = (T 1)(T 2)(T 3) (T (p 1))h(T)
for some polynomial h(T). Comparing degrees on both sides, we see h(T) has degree 0,
so h(T) is a constant. Now comparing leading coecients on both sides, we must have
h(T) = 1.
6 KEITH CONRAD
Example 5.3. Take p = 7. Treating coecients as elements of Z/7Z, the polynomial
(T 1)(T 2)(T 3)(T 4)(T 5)(T 6) can be rewritten as
(T 1)(T 2)(T 3)(T + 3)(T + 2)(T + 1) = (T
2
1)(T
2
4)(T
2
9)
= (T
4
5T
2
+ 4)(T
2
9)
= T
6
14T
4
+ 49T
2
36
= T
6
1.
Corollary 5.4. If d|(p 1), there are exactly d solutions to the equation T
d
= 1 in Z/(p).
Notice this strengthens Theorem 1.1, and it could be used in place of Theorem 1.1 to
shorten the rst two proofs that (Z/(p))
is cyclic.
Proof. Since d|(p1), the polynomial T
d
1 is a factor of T
p1
1. Indeed, write p1 = dm.
Then we have a polynomial identity
T
m
1 = (T 1)(T
m1
+ T
m2
+ + T + 1).
Replace T with T
d
in this identity; T
m
1 becomes T
p1
1 and T 1 becomes T
d
1. The
other factor on the right side becomes another polynomial. We have an equation showing
T
d
1 is a factor of T
p1
1.
Over Z/(p), T
p1
1 breaks up into distinct linear factors by Theorem 5.2. Therefore,
by unique factorization of polynomials over Z/(p), its factor T
d
1 must be a product of
some of those linear factors. Counting degrees, T
d
1 must be a product of d of those
linear factors. The linear factors all have dierent roots, so T
d
1 has d dierent solutions
in Z/(p) when d|(p 1).
Corollary 5.4 tells us T
d
= 1 has d solutions in Z/(p), but it does not tell us there is an
element of order d. For the case of prime power d, however, we will now derive exactly such
a result.
Corollary 5.5. If q
e
is a prime power dividing p 1, with e 1, then there is an element
of order q
e
in (Z/(p))
.
Proof. By Corollary 5.4, the polynomial T
q
e
1 has q
e
dierent roots in Z/(p) and T
q
e1
1
has q
e1
dierent roots (this would be nonsense if e = 0; we really do need e > 0). Since
q
e
> q
e1
, our count of roots shows there must be a root, say a, of T
q
e
1 which is not a
root of T
q
e1
1. That means a
q
e
= 1 but a
q
e1
= 1, so a has order q
e
in (Z/(p))
.
Theorem 5.6. For any prime p, the group (Z/(p))
is cyclic.
Proof. Write p 1 as a product of primes:
p 1 = q
e
1
1
q
e
2
2
q
em
m
.
By Corollary 5.5, for each i from 1 to m there is an element a
i
of (Z/(p))
with order q
e
i
i
.
These orders are relatively prime, and (Z/(p))
.
CYCLICITY OF (Z/(p))
7
6. Fifth proof: the Chinese Remainder Theorem
The fth proof that (Z/(p))
-th
power inside g. We claim = 1. That is, some element outside g has its q-th power
inside g. Indeed, suppose > 1 and let h
0
be an element outside of g with h
q
0
g.
Then h
q
1
0
g by minimality of , yet this element itself satises (h
q
1
0
)
q
g, so there
is an element whose is 1. Thus = 1.
Take h
1
to be such an element outside g with h
q
1
g, say h
q
1
= g
n
. Since h
1
has (like
all elements of A) order dividing q
t
, the order of h
q
1
is at most q
t1
. Then g
n
has order at
most q
t1
, so q must divide n. (Otherwise n is relatively prime to the order of g, which
would imply g
n
= h
q
1
has order q
t
, and that is not correct.) Setting n = qr, we have
h
q
1
= g
qr
.
Then (h
1
g
r
)
q
= 1 and h
1
g
r
g (after all, h
1
g), so h
1
g
r
is an element of order q
in A which lies outside of g.
Remark 6.2. In Remark 3.4, it was noted that Theorem 3.3 is true (but harder to prove)
without an abelian hypothesis. What about Theorem 6.1? Is its conclusion correct if we
dont make an initial abelian hypothesis? Yes if q is an odd prime, but no if q = 2. For
instance, Q
8
is not cyclic but it has only two solutions to x
2
= 1. This is not a quirk about
Q
8
: there are innitely many non-abelian groups of 2-power order having only two solutions
to x
2
= 1.
Theorem 6.3. For any prime p, the group (Z/(p))
is cyclic.
Proof. Write p 1 = q
e
1
1
q
e
2
2
q
em
m
, where the q
i
s are dierent primes (and each e
i
is
positive). Set
A
i
= {a (Z/(p))
: a
q
e
i
i
= 1}.
This is a subgroup of (Z/(p))
. Then
we will show the single product a
1
a
2
a
m
is a generator of the group.
Dividing p 1 by each of q
e
1
1
, . . . , q
em
m
, we get the integers
p 1
q
e
1
1
,
p 1
q
e
2
2
, . . . ,
p 1
q
em
m
.
These have no collective common prime factor, so some Z-combination of them is equal to
1 (iterated Bezout?):
m
i=1
c
i
p 1
q
e
i
i
= 1,
where c
i
Z. Then any a (Z/(p))
can be written as
a = a
1
= a
i
c
i
(p1)/q
e
i
i
=
m
i=1
a
c
i
(p1)/q
e
i
i
.
Since the i-th factor has order dividing q
e
i
i
(raise it to the q
e
i
i
-th power as a check), it lies
in A
i
and thus the i-th factor is a power of a
i
. Therefore a is a product of powers of the
a
i
s, which means
(Z/(p))
= a
1
, a
2
, . . . , a
m
.
To end the proof, we show that any product of powers a
n
1
1
a
n
2
2
a
nm
m
is equal to a single
power (a
1
a
2
a
m
)
n
. Considering that each a
i
has order dividing q
e
i
i
, we could nd such
an n by trying to solve the simultaneous congruences
n n
1
mod q
e
1
1
, n n
2
mod q
e
2
2
, . . . , n n
m
mod q
em
m
.
(Then a
n
i
i
= a
n
i
.) Can we solve all of these congruences with a common n? Absolutely: the
moduli are pairwise relatively prime, so just use the Chinese Remainder Theorem.
Remark 6.4. The arguments in this proof really showed something quite general about
nite abelian groups. If A is a nite abelian group and p is any prime, let A
p
be the
subgroup of elements with p-power order. Then A is cyclic if and only if A
p
is cyclic for
every p. (If p does not divide A, then A
p
is trivial.)
7. Sixth Proof: Cyclotomic Polynomials
In our nal proof that (Z/(p))
! It almost
sounds like a constructive proof of cyclicity. But there is a catch: while we will construct
this special polynomial and show it has roots in Z/(p), the proof of the existence of these
roots will give no recipe for nding them (and thus no recipe for nding generators). So
this proof is just as non-constructive as the other proofs. Like the fourth proof, we will use
unique factorization for polynomials with coecients in Z/(p).
The new polynomials we now meet are the cyclotomic polynomials. We will dene them
rst as polynomials with complex coecients. Then we will prove that the coecients of
are in fact integers, so it makes sense to reduce the coecients modulo p. Finally we will
CYCLICITY OF (Z/(p))
9
show one of the cyclotomic polynomials, when reduced modulo p, decomposes into linear
factors and its roots in Z/(p) are generators of (Z/(p))
.
In the complex numbers, let
n
be the basic n-th root of unity cos(2/n) +i sin(2/n) =
e
2i/n
. It has order n and the other roots of unity with order n are
j
n
where 1 j n and
(j, n) = 1. Dene the n-th cyclotomic polynomial
n
(T) to be the polynomial having for
its roots the roots of unity in C with order n:
(7.1)
n
(T) :=
n
j=1
(j,n)=1
(T
j
n
).
For instance,
1
(T) = T 1,
2
(T) = T + 1, and
4
(T) = (T i)(T + i) = T
2
+ 1.
Since (7.1) is a product of linear polynomials, indexed by integers from 1 to n which are
relatively prime to n,
n
(T) has degree (n) (hence the notation for the polynomial itself;
is a capital Greek ). While the denition of
n
(T) involves complex linear factors,
the polynomials themselves, after all the factors are multiplied out, actually have integer
coecients. Here is a table listing the rst 12 cyclotomic polynomials.
n
n
(T)
1 T 1
2 T + 1
3 T
2
+ T + 1
4 T
2
+ 1
5 T
4
+ T
3
+ T
2
+ T + 1
6 T
2
T + 1
7 T
6
+ T
5
+ T
4
+ T
3
+ T
2
+ T + 1
8 T
4
+ 1
9 T
6
+ T
3
+ 1
10 T
4
T
3
+ T
2
T + 1
11 T
10
+ T
9
+ T
8
+ T
7
+ T
6
+ T
5
+ T
4
+ T
3
+ T
2
+ T + 1
12 T
4
T
2
+ 1
There are evidently a lot of patterns worth exploring here. For instance,
8
resembles
4
, which resembles
2
,
10
is similar to
5
,
12
seems related to
6
, which is close to
3
.
The constant term of
n
(T), for n > 1, seems to be 1. Maybe the most striking pattern,
which persists for the rst 100 cyclotomic polynomials, is that the coecients are all 0, 1,
or 1. We will not determine whether or not this is always true (life needs some tantalizing
mysteries), but lets show at least that all the coecients are integers. First a factorization
lemma is needed.
Lemma 7.1. For n 1, T
n
1 =
d|n
d
(T).
Proof. The roots of T
n
1 are the n-th roots of unity, so (by the same reasoning as in
Theorem 5.2) we can write
(7.2) T
n
1 =
n
=1
(T ),
where the product runs over the n-th roots of unity C. Every n-th root of unity has
some order dividing n. For each d dividing n, collect together the linear factors T
corresponding to roots of unity with order d. The product of these factors is
d
(T), by the
denition of
d
(T). Thus, we have transformed (7.2) into the desired formula.
10 KEITH CONRAD
Example 7.2. Taking n = 4,
d|4
d
(T) =
1
(T)
2
(T)
4
(T) = (T 1)(T + 1)(T
2
+ 1) = T
4
1.
Example 7.3. Taking n = p a prime number, T
p
1 = (T 1)
p
(T). Thus, we can
explicitly compute
p
(T) =
T
p
1
T 1
= 1 + T + T
2
+ + T
p1
.
Notice the coecients here all equal 1.
Theorem 7.4. For every n 1, the coecients of
n
(T) are in Z.
Proof. We will argue by induction on n. Since
1
(T) = T 1, we can take n > 1 and
assume
m
(T) has integer coecients for m < n. In Lemma 7.1, we can pull out the term
at d = n:
(7.3) T
n
1 =
d|n
d=n
d
(T)
n
(T).
Let B
n
(T) =
d|n,d=n
d
(T), so
(7.4) T
n
1 = B
n
(T)
n
(T).
By induction,
d
(T) has integer coecients when d is a proper divisor of n, so B
n
(T) has
integer coecients. Each
d
(T) has leading coecient 1, so B
n
(T) does as well. All we
know about
n
(T) is that it has complex coecients. We want to deduce from (7.4) that
its coecients are integers.
Lets cook up a second divisibility relation between T
n
1 and B
n
(T) in a completely dif-
ferent way: the usual division of (complex) polynomials, leaving a quotient and remainder.
We have
(7.5) T
n
1 = B
n
(T)Q(T) + R(T),
where R(T) = 0 or 0 deg R < deg B
n
. When we divide one polynomial by another and
both have integer coecients, the quotient and remainder may not have integer coecients.
For instance,
T
2
+ 1 = (2T + 1)
1
2
T
1
4
+
5
4
.
However, if the divisor has leading coecient 1, then everything stays integral, e.g., T
2
+1 =
(T + 1)(T 1) + 2. Briey, the source of all denominators in the quotient and remainder
comes from the leading coecient of the divisor, so when it is 1, no denominators are
introduced. Thus, since B
n
(T) has integer coecients and leading coecient 1, Q(T) and
R(T) have integer coecients.
We now compare our two relations (7.4) and (7.5). Since division of polynomials (with,
say, complex coecients) has unique quotient and remainder, we must have
n
(T) = Q(T)
and 0 = R(T). In particular, since Q(T) has integer coecients, we have proved
n
(T) has
integer coecients!
Theorem 7.5. For any prime p, the group (Z/(p))
is cyclic.
CYCLICITY OF (Z/(p))
11
Proof. Consider the factorization
(7.6) T
p1
1 =
d|(p1)
d
(T).
All polynomials appearing here have integer coecients. Collect the
d
(T) with d = p 1
into a single term:
(7.7) T
p1
1 =
p1
(T)H(T),
where H(T) has integer coecients.
Reducing the coecients in (7.7) modulo p lets us view (7.7) as a polynomial identity
over Z/(p). By Theorem 5.2, the left side of (7.7) breaks up into distinct linear factors over
Z/(p). Therefore, by unique factorization for polynomials with coecients in Z/(p), the
two factors on the right side of (7.7) are products of linear polynomials over Z/(p) (as many
linear polynomials as the degree of the factor). Therefore
p1
(T) does have a root (in
fact, (p 1) roots) in Z/(p). Let a Z/(p) be a root of
p1
(T). Certainly a = 0, since
0 is not a root of T
p1
1. Thus a (Z/(p))
is
p 1, so it is a generator.
Let d be the order of a in (Z/(p))
k|d
k
(T).
This identity between polynomials with integer coecients can be viewed as an identity
between polynomials with coecients in Z/(p) by reducing all the coecients modulo p.
Setting T = a in this formula, the left side vanishes (in Z/(p)), so
k
(a) is 0 for some k
dividing d. (In fact, it is
d
(a) which vanishes, but we dont need to know that.) Once
k
(a) vanishes, Lemma A.2 tells us T a is a factor of
k
(T). Thus, in (7.6), T a is
a factor twice: once in
p1
(T) (that is how we dened a) and also as a factor in
k
(T)
for some k dividing d. But the factorization of T
p1
1 in Theorem 5.2 has distinct linear
factors. We have a contradiction with unique factorization, so our assumption that d < p1
was in error: d = p 1, so a is a generator of (Z/(p))
.
Example 7.6. Taking p = 7,
p1
(T) =
6
(T) = T
2
T +1. Its roots in Z/7Z are 3 and
5 (note
6
(3) = 7 and
6
(5) = 21, which both vanish modulo 7). These are the generators
of (Z/7Z)
is cyclic.)
12 KEITH CONRAD
Lemma A.2. Let f(T) be a non-constant polynomial with coecients in C or in Z/(p).
For a in C or Z/(p), f(a) = 0 if and only if T a is a factor of f(T).
Proof. If T a is a factor of f(T), then f(T) = (T a)h(T) for some polynomial h(T), and
substituting a for T shows f(a) = 0.
Conversely, suppose f(a) = 0. Write the polynomial as
(A.1) f(T) = c
n
T
n
+ c
n1
T
n1
+ + c
1
T + c
0
,
where c
j
C or Z/(p). Then
(A.2) 0 = c
n
a
n
+ c
n1
a
n1
+ + c
1
a + c
0
.
Subtracting (A.2) from (A.1), the terms c
0
cancel and we get
(A.3) f(T) = c
n
(T
n
a
n
) + c
n1
(T
n1
a
n1
) + + c
1
(T a).
Since
T
j
a
j
= (T a)(T
j1
+ aT
j2
+ + a
i
T
j1i
+ + a
j2
T + a
j1
),
each term on the right side of (A.3) has a factor of T a. Factor this out of each term, and
we obtain f(T) = (T a)g(T), where g(T) is another polynomial with coecients in C or
Z/(p).
Now we prove Theorem A.1.
Proof. We induct on the degree d of f(T). Note d 1.
A polynomial of degree 1 has the form f(T) = aT + b, where a and b are in Z/(p) and
a = 0. This has exactly one root in Z/(p), namely b/a, and thus at most one root in
Z/(p). That settles the theorem for d = 1.
Now assume the theorem is true for all polynomials with coecients in Z/(p) of degree
d. We verify the theorem for all polynomials with coecients in Z/(p) of degree d + 1.
A polynomial of degree d + 1 is
(A.4) f(T) = c
d+1
T
d+1
+ c
d
T
d
+ + c
1
T + c
0
,
where c
j
Z/(p) and c
d+1
= 0. If f(T) has no roots in Z/(p), then were done, since
0 d +1. If f(T) has a root in Z/(p), say r, then Lemma A.2 tells us f(T) = (T r)g(T),
where g(T) is another polynomial with coecients in Z/(p), of degree d (why degree d?).
We can therefore apply the inductive hypothesis to g(T) and conclude that g(T) has at
most d roots in Z/(p). Since f(a) = (a r)g(a), and a product of numbers in Z/(p) is 0
only when one of the factors is 0 (this would be false if our modulus was composite rather
than prime!), we see that any root of f(T) in Z/(p) is either r or is a root of g(T). Thus,
f(T) has at most d+1 roots in Z/(p). As f(T) was an arbitrary polynomial of degree d+1
with coecients in Z/(p), we are done with the inductive step.
Remark A.3. There were two cases considered in the inductive step: when f(T) has a
root in Z/(p) and when it does not. Certainly one of those cases must occur, but in any
particular example we dont know which occurs without actually searching for roots. This
is why the theorem is not eective. It gives us an upper bound on the number of roots,
but does not give us any tools to decide if there is even one root in Z/(p) for a particular
polynomial.