Lecture from: 18.11.2024 | Video: Videos ETHZ

Rings

Recall from last time…

A ring is an algebraic structure with two binary operations, addition () and multiplication (), and specific elements and that act as additive and multiplicative identities, respectively.

Key Properties:

  1. Additive Abelian Group: forms an abelian (commutative) group.
  2. Multiplicative Monoid: forms a monoid. Note: can equal only in the trivial ring with one element.
  3. Distributivity: Multiplication distributes over addition both from the left and the right: and .

Important Lemmas:

  • for all .
  • for all .
  • If , then . This ensures that the multiplicative identity is distinct from the additive identity in non-trivial rings.

Special Types of Rings:

  • Integral Domain: A commutative ring with and no zero divisors. A zero divisor is a non-zero element such that there exists a non-zero with . Integral domains have the cancellation property: if and , then .

Important Elements within a Ring:

  • Units (denoted by ): Elements with multiplicative inverses within the ring. The set of units, , forms a group under multiplication called the group of units.
  • Irreducible Elements: Analogous to prime numbers in integers. A non-zero, non-unit element is irreducible if implies either or is a unit.

Examples of Rings and their Groups of Units:

  • (Integers): An integral domain. .
  • (Real Numbers): A field. .
  • (Gaussian Integers): An integral domain. . Divisibility is determined using the norm .
  • (Integers Modulo m): A ring. consists of elements coprime to . Has zero divisors if is not prime.
  • (Polynomial Rings): The ring of polynomials with coefficients in a ring . (i.e., the units of the polynomial ring are the units of the underlying ring , viewed as constant polynomials.) If is a field, then .

Fields

A field is a commutative ring where and every non-zero element has a multiplicative inverse. In other words, the set of units, , is equal to . This means for every such that , there exists an element such that .

This requirement for multiplicative inverses for all non-zero elements makes fields particularly well-suited for algebraic manipulations, as division (except by zero) is always possible.

Key Properties of Fields:

  • Commutativity: Both addition and multiplication are commutative.
  • No Zero Divisors: If , then either or . This property follows directly from the existence of multiplicative inverses for non-zero elements. If and , then multiplying both sides by yields .
  • Cancellation Property: If and , then .
  • Solutions to Linear Equations: Equations of the form always have a unique solution , provided .

Examples of Fields:

  • (Rational Numbers): The field of rational numbers is formed by fractions , where and are integers and .
  • (Real Numbers): The field of real numbers includes all rational and irrational numbers.
  • (Complex Numbers): The field of complex numbers is formed by numbers of the form , where and are real numbers and .
  • (Integers Modulo where is prime): When is a prime number, every non-zero element in has a multiplicative inverse modulo . This makes a finite field. If is not prime then has zero divisors.
  • Finite Fields (Galois Fields): There exist finite fields other than . These are called Galois fields and are denoted as , where is prime and is a positive integer. These are crucial in cryptography, coding theory, and other areas. is equivalent to , though usually denotes finite fields with elements, where can be a prime number or prime to the power of , which is a natural number without zero. gets us back to .

Non-Examples:

  • (Integers): Not a field because most integers do not have multiplicative inverses within . For example, 2 does not have a multiplicative inverse within the integers.
  • (Integers Modulo where is composite): Not a field. For example is not a field since not every non-zero element has an inverse with respect to multiplication in . has no solution.

Fields are fundamental structures in abstract algebra and have wide-ranging applications in many areas of mathematics and computer science.

Secret Sharing with Polynomials

One application of abstract algebra, specifically fields, is secret sharing. Secret sharing schemes allow distributing a secret among multiple parties so that only authorized combinations of parties can reconstruct the secret. Here’s a simple example using a polynomial over a field:

Suppose we want to share a secret among 4 people. We can construct a polynomial of degree 3:

where is our secret. The coefficients are randomly chosen from the field we are working over.

We then evaluate the polynomial at four distinct non-zero -values (e.g., 1, 2, 3, 4) and distribute these points (shares) to the four people. Each person receives a pair , represented by the yellow lines in the graph.

Polynomial Interpolation:

The key to this scheme is polynomial interpolation. Given any four points on the polynomial, we can uniquely reconstruct the entire polynomial, including the secret . This is because a polynomial of degree is uniquely determined by points. Lagrange interpolation is a common technique for reconstructing the polynomial.

Why Fields are Essential:

Fields are crucial for this scheme to work because they guarantee the existence of multiplicative inverses for non-zero elements. This is essential for Lagrange interpolation and other methods for reconstructing the polynomial from its shares. Without inverses, we might encounter situations where the necessary calculations are not possible. We’ll learn more on this later…

Security:

Any three or fewer people cannot determine the secret. With only three points, there are infinitely many polynomials of degree 3 that pass through those points, each with a different value at . This means that any guess for the secret is equally likely, providing no information about the actual secret.

For example, those 3 people know where the polynomial is at their x-values, however they don’t know where the constant part is (S). There exist infinitely many polynomials passing through these 3 lines, all with different intercepts at . Therefore those three people alone cannot gain any information about the constant term.

Practical Considerations (Finite Fields):

In computer science, we typically work with finite fields rather than infinite fields like real numbers. This is because computers have finite precision and cannot represent arbitrary real numbers exactly. Finite fields provide a suitable algebraic structure for secret sharing and other cryptographic applications on computers.

Quaternion Numbers

William Rowan Hamilton sought a way to extend the geometric interpretation of complex numbers, which represent rotations and scaling in the 2D plane, to three dimensions. He specifically wanted a number system that could represent rotations in 3D space analogously to how complex numbers handle rotations in 2D.

Complex numbers can be visualized as points in the 2D plane. Multiplying a complex number by another complex number corresponds to a rotation and scaling in the plane. The norm (magnitude) of the product is the product of the norms.

This system of quaternions, denoted by , forms a ring. Interestingly, every non-zero element in has a multiplicative inverse, meaning . This makes similar to a field, but crucially, quaternion multiplication is not commutative.

Structures that satisfy all the field axioms except for the commutativity of multiplication are called division rings or skew fields (Schiefkörper in German). The lack of commutativity in quaternion multiplication, while essential for its ability to represent 3D rotations, makes it less convenient for certain algebraic manipulations compared to fields. For our purposes in this course, the non-commutativity of makes it less suitable than fields, so we’ll primarily focus on fields.

The set under quaternion multiplication forms a group called the quaternion group, denoted . It’s a non-abelian group of order 8. This is a subset of the quaternions and forms a group, but it is not the full set of quaternions , which is a ring (and a division ring/skew field). is closed under multiplication and inverses and provides a concrete example of a non-commutative group. This was the last group of order 8 we hadn’t found yet…

Theorem: A Field is an Integral Domain

Theorem: Every field is an integral domain.

Proof:

  1. Definition of Field: A field is a commutative ring where and every non-zero element has a multiplicative inverse.

  2. Definition of Integral Domain: An integral domain is a commutative ring with and no zero divisors. This means if , then either or .

  3. Showing No Zero Divisors: Let be a field. We need to show that has no zero divisors. Suppose and .

  4. Case 1: . If , then the condition for no zero divisors is satisfied.

  5. Case 2: . If , then has a multiplicative inverse . We can multiply both sides of by : (Associativity)

  6. Conclusion: In both cases, either or . Therefore, has no zero divisors.

  7. Final Statement: Since is a commutative ring with and no zero divisors, is an integral domain.

Therefore, every field is an integral domain. The converse is not necessarily true; integral domains are not always fields. For example, is an integral domain but not a field, as integers other than 1 and -1 do not have multiplicative inverses within .

Galois Fields (Finite Fields)

Recall that , the integers modulo , forms a ring. However, it’s a field if and only if is a prime number. This is because if is prime, every non-zero element in has a multiplicative inverse modulo . In other words, for any , there exists a such that .

The reason composite don’t form fields is the presence of zero divisors. If is composite, then for some integers and , where . This means , even though neither nor is congruent to 0 modulo . In a field, the product of two non-zero elements must be non-zero.

When is prime, we denote the field as or , where is the prime number. These are examples of Galois fields (also called finite fields).

However, Galois fields are more general than just . For any prime and any positive integer , there exists a unique (up to isomorphism) finite field with elements, denoted .

When , is indeed equivalent to . However, for , is not the same as (which is a ring but not a field when ). Constructing for requires more advanced techniques involving polynomials and modular arithmetic over polynomials, which we might discuss later.

Constructing Fields

Just as we can construct the finite field from the ring of integers by taking residues modulo a prime , we can construct fields from polynomial rings. This process mirrors the progression from to (a ring) and further to (a field when is prime).

  1. Starting with a Field: We begin with an existing field (e.g., , , , or ).

  2. Polynomial Ring: We construct the polynomial ring , which consists of all polynomials in the variable with coefficients in . is a Euclidean domain, meaning we have a notion of polynomial division with remainder, similar to integer division. This is crucial for the next steps.

  3. Modulo an Irreducible Polynomial: Similar to modular arithmetic with integers, we introduce the concept of modular arithmetic with polynomials. We choose an irreducible polynomial in . A polynomial is irreducible if it cannot be factored into a product of lower-degree polynomials in , analogous to prime numbers in integers.

  4. The Quotient Ring: We form the quotient ring . This ring consists of the equivalence classes of polynomials in modulo . Two polynomials are equivalent if they have the same remainder when divided by . The elements of the quotient ring can be represented by the polynomials of degree less than the degree of .

  5. A Field: The crucial result is that if is irreducible, then is a field. This is analogous to being a field when is prime. The irreducibility of ensures that every non-zero element in has a multiplicative inverse. This quotient ring is also denoted . This is an extension field of .

Real Polynomial Rings and Galois Field Polynomials

Let’s consider the polynomial ring , where polynomials have real coefficients.

  • Reducible Polynomial: The polynomial can be factored into within . Note that we can also deviate from the “canonical” factors to and get infinite new “factors”.

  • Irreducible Polynomial (in ): The polynomial cannot be factored into polynomials with real coefficients. Its roots are complex ( and ), so it is irreducible in .

  • Reducible Polynomial (in ): While is irreducible in , can be factored within as . This factorization can be found by considering the complex roots of and multiplying conjugate pairs of roots to obtain quadratic factors with real coefficients.

The key insight here is the Fundamental Theorem of Algebra.

Irreducible Polynomials in

We’re exploring irreducible polynomials in , the ring of polynomials with real coefficients. A polynomial is irreducible if it cannot be factored into lower-degree polynomials within the same ring. The key takeaway is that in , the only irreducible polynomials are linear (degree 1) and certain quadratics (degree 2).

  1. Fundamental Theorem of Algebra: The foundation of our understanding is the Fundamental Theorem of Algebra.

Fundamental Theorem of Algebra

Every non-constant polynomial with complex coefficients has at least one complex root.

This means even polynomials with real coefficients, when considered over the complex numbers, can be completely factored into linear factors.

  1. Complex Conjugate Roots: A crucial consequence for real polynomials is the property of complex conjugate roots.
  1. Constructing Real Quadratic Factors: This leads us to a powerful technique: pairing complex conjugate roots.

Constructing Real Quadratic Factors

If and are roots of a real polynomial, then multiplying the corresponding linear factors and gives: This is a quadratic with real coefficients.

This shows that complex roots allow us to create irreducible quadratic factors in .

  1. Corollary: Factoring Real Polynomials: Combining these ideas gives us a powerful corollary.

Corollary for Real Polynomials

Every polynomial in of degree greater than 2 can be factored into a product of linear and quadratic factors with real coefficients.

This means higher-degree polynomials in are always reducible.

  1. Examples:
  • : Irreducible in (complex roots and ). Its discriminant is negative.
  • : Factors as in .
  • : Factors as in . The quadratic factor has a negative discriminant.

Conclusion:

In , the only irreducible polynomials are linear polynomials and quadratic polynomials with negative discriminant. There are no irreducible polynomials of degree greater than 2 in .

Greatest Common Divisors in

Similar to integers, we can define the greatest common divisor (GCD) for polynomials in .

Definition: The greatest common divisor of two polynomials and in is a polynomial that satisfies:

  1. Divisibility: divides both and . (Meaning and for some polynomials and in ).
  2. Greatest: If any other polynomial divides both and , then must also divide .

Uniqueness: The GCD is not unique in the strictest sense. If is a GCD, then any non-zero constant multiple of (e.g., , , ) is also a GCD. To address this, we often choose the monic polynomial among the GCDs, which is the polynomial with a leading coefficient of 1. This makes the GCD unique.

Example:

Find the GCD of and .

  1. Factorization: We factor both polynomials:

  2. Common Factors: The only common factor is .

  3. GCD: Therefore, the GCD of and is . Note that any constant multiple of , such as or , would also technically be a GCD, but is the monic GCD.

Computing the GCD:

Just as with integers, we can use the Euclidean algorithm to compute the GCD of two polynomials without necessarily factoring them. The Euclidean algorithm involves repeated polynomial division until the remainder is zero. The last non-zero remainder is the GCD.

Note about “positive”:

The concept of “positive” doesn’t directly apply to polynomials in the same way it does to integers. Instead, we use the convention of choosing the monic polynomial for the GCD to ensure uniqueness.

Examples

Example: Factoring in

We’re working within , which is the same as , the ring of polynomials with coefficients in the finite field . Since 5 is prime, is indeed a field.

Consider the polynomial . We want to determine if it’s factorable in .

Checking for Roots:

A straightforward way to check for factorability is to test if has any roots in . If for some , then is a factor. Remember that in , the elements are .

We’ve found a root! Since , is a factor. In , , so we can write the factor as .

Polynomial Division:

Now we perform polynomial division to find the other factor. We divide by in :

x^2 + x + 2
__________________________
x+3 | x^3 + 4x^2 + 0x + 1
    -(x^3 + 3x^2)
    __________________________
           x^2 + 0x + 1
         -(x^2 + 3x)
    __________________________
              -3x + 1
            -(-3x - 9) // since -3 mod 5 = 2 mod 5 
    __________________________
                   10
                   10 mod 5 = 0. // we calculate in modulo 5

So, in .

Now if we try to see if we can factor , you’ll notice we can’t. This can be done by manually trying all values .

Further Factorization:

Now we need to check if is further factorable in . We can test for roots again:

Since has no roots in , it is irreducible in .

Therefore, the complete factorization of in is .

Example: Factoring in

Consider the polynomial in . We want to factor this polynomial.

Testing for Roots:

First, we check for roots in :

  • For :
  • For :

Since there are no roots in , the polynomial has no linear factors. We must look for higher-degree factors.

Factoring using Irreducible Polynomials:

One approach is to try dividing by irreducible polynomials of degree 2 and 3. In , the only irreducible polynomial of degree 2 is . Let’s try dividing by :

x^3 + x + 1
____________________________
x^2+x+1 | x^5 + x^4 + 0x^3 + 0x^2 + 0x + 1
         -(x^5 + x^4 + x^3)
         ____________________________
                 -x^3 + 0x^2 + 0x + 1
                 -(-x^3 - x^2 - x)
         ____________________________
                       x^2 + x + 1
                     -(x^2 + x + 1)
         ____________________________
                            0

So and it divides without any reminder. Now we know that is already irreducible since there are no roots for this polynom, so we look at :

  • :
  • :

So is also an irreducible polynom since there are no roots.

As a side remark, there exist efficient algorithms to do this kind of factorization.

Example: Dividing with Residue in

We want to divide by in . This means all coefficients are considered modulo 7.

Here’s the division worked out step-by-step, keeping in mind that we’re working modulo 7:

  1. First term: We want to multiply by something to match the leading term . We need . Since then . Since then . So, we multiply by :

    Subtracting this from gives . ()

  2. Second Term: Now we want . We multiply by :

    Subtracting this gives .

  3. Third Term: We want . We multiply by : Then we have .

Since the degree of the remainder is less than the degree of the divisor , we stop here.

Result:

The quotient is , and the remainder is .

Therefore, in .

Similar Example in

The Division Algorithm and GCD for Polynomials

A fundamental result for polynomials is the division algorithm, which allows us to divide one polynomial by another and obtain a unique quotient and remainder.

Theorem (Division Algorithm for Polynomials): Given two polynomials and in (where is a field and ), there exist unique polynomials (the quotient) and (the remainder) in such that:

where either or .

Note: The condition on the degree of the remainder is crucial. It ensures that the remainder is “smaller” than the divisor, making the division process terminate.

GCD and the Euclidean Algorithm:

The division algorithm is the basis for the Euclidean algorithm, which computes the GCD of two polynomials.

Euclidean Algorithm:

  1. Given two polynomials and , assume without loss of generality that .
  2. Divide by : , where .
  3. If , then is the GCD.
  4. Otherwise, replace with and with , and repeat the division: , where .
  5. Continue this process until the remainder is zero. The last non-zero remainder is the GCD of and .

Example:

Find the GCD of and in .

Since the remainder is 0 in the first step, the GCD is .

Uniqueness: As mentioned before, the GCD is unique up to a constant multiple. We typically choose the monic polynomial as the GCD. In the example above, is already monic.

Continue here: 19 Factorizations, Polynomial Fields and Division, Polynomial Interpolation, Constructing Galois Fields