HOME

TheInfoList



OR:

In
mathematics Mathematics is a field of study that discovers and organizes methods, Mathematical theory, theories and theorems that are developed and Mathematical proof, proved for the needs of empirical sciences and mathematics itself. There are many ar ...
, a finite field or Galois field (so-named in honor of
Évariste Galois Évariste Galois (; ; 25 October 1811 â€“ 31 May 1832) was a French mathematician and political activist. While still in his teens, he was able to determine a necessary and sufficient condition for a polynomial to be solvable by Nth root, ...
) is a field that contains a finite number of elements. As with any field, a finite field is a set on which the operations of multiplication, addition, subtraction and division are defined and satisfy certain basic rules. The most common examples of finite fields are the integers mod p when p is a
prime number A prime number (or a prime) is a natural number greater than 1 that is not a Product (mathematics), product of two smaller natural numbers. A natural number greater than 1 that is not prime is called a composite number. For example, 5 is prime ...
. The ''order'' of a finite field is its number of elements, which is either a prime number or a prime power. For every prime number p and every positive integer k there are fields of order p^k. All finite fields of a given order are
isomorphic In mathematics, an isomorphism is a structure-preserving mapping or morphism between two structures of the same type that can be reversed by an inverse mapping. Two mathematical structures are isomorphic if an isomorphism exists between the ...
. Finite fields are fundamental in a number of areas of mathematics and
computer science Computer science is the study of computation, information, and automation. Computer science spans Theoretical computer science, theoretical disciplines (such as algorithms, theory of computation, and information theory) to Applied science, ...
, including
number theory Number theory is a branch of pure mathematics devoted primarily to the study of the integers and arithmetic functions. Number theorists study prime numbers as well as the properties of mathematical objects constructed from integers (for example ...
,
algebraic geometry Algebraic geometry is a branch of mathematics which uses abstract algebraic techniques, mainly from commutative algebra, to solve geometry, geometrical problems. Classically, it studies zero of a function, zeros of multivariate polynomials; th ...
,
Galois theory In mathematics, Galois theory, originally introduced by Évariste Galois, provides a connection between field (mathematics), field theory and group theory. This connection, the fundamental theorem of Galois theory, allows reducing certain problems ...
, finite geometry,
cryptography Cryptography, or cryptology (from "hidden, secret"; and ''graphein'', "to write", or ''-logy, -logia'', "study", respectively), is the practice and study of techniques for secure communication in the presence of Adversary (cryptography), ...
and
coding theory Coding theory is the study of the properties of codes and their respective fitness for specific applications. Codes are used for data compression, cryptography, error detection and correction, data transmission and computer data storage, data sto ...
.


Properties

A finite field is a finite set that is a field; this means that multiplication, addition, subtraction and division (excluding division by zero) are defined and satisfy the rules of arithmetic known as the field axioms. The number of elements of a finite field is called its ''order'' or, sometimes, its ''size''. A finite field of order q exists if and only if q is a prime power p^k (where p is a prime number and k is a positive integer). In a field of order p^k, adding p copies of any element always results in zero; that is, the characteristic of the field is p. For q=p^k, all fields of order q are
isomorphic In mathematics, an isomorphism is a structure-preserving mapping or morphism between two structures of the same type that can be reversed by an inverse mapping. Two mathematical structures are isomorphic if an isomorphism exists between the ...
(see ' below). Moreover, a field cannot contain two different finite subfields with the same order. One may therefore identify all finite fields with the same order, and they are unambiguously denoted \mathbb_, \mathbf_q or \mathrm(q), where the letters GF stand for "Galois field". In a finite field of order q, the
polynomial In mathematics, a polynomial is a Expression (mathematics), mathematical expression consisting of indeterminate (variable), indeterminates (also called variable (mathematics), variables) and coefficients, that involves only the operations of addit ...
X^q-X has all q elements of the finite field as
root In vascular plants, the roots are the plant organ, organs of a plant that are modified to provide anchorage for the plant and take in water and nutrients into the plant body, which allows plants to grow taller and faster. They are most often bel ...
s. The non-zero elements of a finite field form a
multiplicative group In mathematics and group theory, the term multiplicative group refers to one of the following concepts: *the group under multiplication of the invertible elements of a field, ring, or other structure for which one of its operations is referre ...
. This group is cyclic, so all non-zero elements can be expressed as powers of a single element called a primitive element of the field. (In general there will be several primitive elements for a given field.) The simplest examples of finite fields are the fields of prime order: for each
prime number A prime number (or a prime) is a natural number greater than 1 that is not a Product (mathematics), product of two smaller natural numbers. A natural number greater than 1 that is not prime is called a composite number. For example, 5 is prime ...
p, the
prime field In mathematics, a field is a set on which addition, subtraction, multiplication, and division are defined and behave as the corresponding operations on rational and real numbers. A field is thus a fundamental algebraic structure which is wid ...
of order p may be constructed as the integers modulo p, \mathbb/p\mathbb. The elements of the prime field of order p may be represented by integers in the range 0,\ldots,p - 1. The sum, the difference and the product are the remainder of the division by p of the result of the corresponding integer operation. The multiplicative inverse of an element may be computed by using the extended Euclidean algorithm (see '). Let F be a finite field. For any element x in F and any
integer An integer is the number zero (0), a positive natural number (1, 2, 3, ...), or the negation of a positive natural number (−1, −2, −3, ...). The negations or additive inverses of the positive natural numbers are referred to as negative in ...
n, denote by n \cdot x the sum of n copies of x. The least positive n such that n \cdot 1 = 0 is the characteristic p of the field. This allows defining a multiplication (k,x) \mapsto k \cdot x of an element k of \mathrm(p) by an element x of F by choosing an integer representative for k. This multiplication makes F into a \mathrm(p)-
vector space In mathematics and physics, a vector space (also called a linear space) is a set (mathematics), set whose elements, often called vector (mathematics and physics), ''vectors'', can be added together and multiplied ("scaled") by numbers called sc ...
. It follows that the number of elements of F is p^n for some integer n. The identity (x+y)^p=x^p+y^p (sometimes called the freshman's dream) is true in a field of characteristic p. This follows from the binomial theorem, as each
binomial coefficient In mathematics, the binomial coefficients are the positive integers that occur as coefficients in the binomial theorem. Commonly, a binomial coefficient is indexed by a pair of integers and is written \tbinom. It is the coefficient of the t ...
of the expansion of (x+y)^p, except the first and the last, is a multiple of p. By Fermat's little theorem, if p is a prime number and x is in the field \mathrm(p) then x^p=x. This implies the equality X^p-X=\prod_ (X-a) for polynomials over \mathrm(p). More generally, every element in \mathrm(p^n) satisfies the polynomial equation x^-x=0. Any finite
field extension In mathematics, particularly in algebra, a field extension is a pair of fields K \subseteq L, such that the operations of ''K'' are those of ''L'' restricted to ''K''. In this case, ''L'' is an extension field of ''K'' and ''K'' is a subfield of ...
of a finite field is separable and simple. That is, if E is a finite field and F is a subfield of E, then E is obtained from F by adjoining a single element whose minimal polynomial is separable. To use a piece of jargon, finite fields are perfect. A more general
algebraic structure In mathematics, an algebraic structure or algebraic system consists of a nonempty set ''A'' (called the underlying set, carrier set or domain), a collection of operations on ''A'' (typically binary operations such as addition and multiplicatio ...
that satisfies all the other axioms of a field, but whose multiplication is not required to be
commutative In mathematics, a binary operation is commutative if changing the order of the operands does not change the result. It is a fundamental property of many binary operations, and many mathematical proofs depend on it. Perhaps most familiar as a pr ...
, is called a division ring (or sometimes ''skew field''). By Wedderburn's little theorem, any finite division ring is commutative, and hence is a finite field.


Existence and uniqueness

Let q=p^n be a prime power, and F be the
splitting field In abstract algebra, a splitting field of a polynomial with coefficients in a field is the smallest field extension of that field over which the polynomial ''splits'', i.e., decomposes into linear factors. Definition A splitting field of a polyn ...
of the polynomial P = X^q-X over the prime field \mathrm(p). This means that F is a finite field of lowest order, in which P has q distinct roots (the
formal derivative In mathematics, the formal derivative is an operation on elements of a polynomial ring or a ring of formal power series that mimics the form of the derivative from calculus. Though they appear similar, the algebraic advantage of a formal deriv ...
of P is P'=-1, implying that \mathrm(P,P')=1, which in general implies that the splitting field is a separable extension of the original). The above identity shows that the sum and the product of two roots of P are roots of P, as well as the multiplicative inverse of a root of P. In other words, the roots of P form a field of order q, which is equal to F by the minimality of the splitting field. The uniqueness up to isomorphism of splitting fields implies thus that all fields of order q are isomorphic. Also, if a field F has a field of order q=p^k as a subfield, its elements are the q roots of X^q-X, and F cannot contain another subfield of order q. In summary, we have the following classification theorem first proved in 1893 by E. H. Moore:
The order of a finite field is a prime power. For every prime power q there are fields of order q, and they are all isomorphic. In these fields, every element satisfies x^q = x, and the polynomial X^q - X factors as X^q - X = \prod_ (X - a).
It follows that \mathrm(p^n) contains a subfield isomorphic to \mathrm(p^m) if and only if m is a divisor of n; in that case, this subfield is unique. In fact, the polynomial X^-X divides X^-X if and only if m is a divisor of n.


Explicit construction


Non-prime fields

Given a prime power q=p^n with p prime and n > 1 , the field \mathrm(q) may be explicitly constructed in the following way. One first chooses an irreducible polynomial P in \mathrm(p) /math> of degree n (such an irreducible polynomial always exists). Then the
quotient ring In ring theory, a branch of abstract algebra, a quotient ring, also known as factor ring, difference ring or residue class ring, is a construction quite similar to the quotient group in group theory and to the quotient space in linear algebra. ...
\mathrm(q) = \mathrm(p) (P) of the polynomial ring \mathrm(p) /math> by the ideal generated by P is a field of order q. More explicitly, the elements of \mathrm(q) are the polynomials over \mathrm(p) whose degree is strictly less than n. The addition and the subtraction are those of polynomials over \mathrm(p). The product of two elements is the remainder of the Euclidean division by P of the product in \mathrm(q) /math>. The multiplicative inverse of a non-zero element may be computed with the extended Euclidean algorithm; see '. However, with this representation, elements of \mathrm(q) may be difficult to distinguish from the corresponding polynomials. Therefore, it is common to give a name, commonly \alpha to the element of \mathrm(q) that corresponds to the polynomial X. So, the elements of \mathrm(q) become polynomials in \alpha, where P(\alpha)=0, and, when one encounters a polynomial in \alpha of degree greater or equal to n (for example after a multiplication), one knows that one has to use the relation P(\alpha)=0 to reduce its degree (it is what Euclidean division is doing). Except in the construction of \mathrm(4), there are several possible choices for P, which produce isomorphic results. To simplify the Euclidean division, one commonly chooses for P a polynomial of the form X^n + aX + b, which make the needed Euclidean divisions very efficient. However, for some fields, typically in characteristic 2, irreducible polynomials of the form X^n+aX+b may not exist. In characteristic 2, if the polynomial X^n+X+1 is reducible, it is recommended to choose X^n+X^k+1 with the lowest possible k that makes the polynomial irreducible. If all these trinomials are reducible, one chooses "pentanomials" X^n+X^a+X^b+X^c+1, as polynomials of degree greater than 1, with an even number of terms, are never irreducible in characteristic 2, having 1 as a root. A possible choice for such a polynomial is given by Conway polynomials. They ensure a certain compatibility between the representation of a field and the representations of its subfields. In the next sections, we will show how the general construction method outlined above works for small finite fields.


Field with four elements

The smallest non-prime field is the field with four elements, which is commonly denoted \mathrm(4) or \mathbb_4. It consists of the four elements 0, 1, \alpha, 1 + \alpha such that \alpha^2=1+\alpha, 1 \cdot \alpha = \alpha \cdot 1 = \alpha, x+x=0, and x \cdot 0 = 0 \cdot x = 0, for every x \in \mathrm(4), the other operation results being easily deduced from the
distributive law In mathematics, the distributive property of binary operations is a generalization of the distributive law, which asserts that the equality x \cdot (y + z) = x \cdot y + x \cdot z is always true in elementary algebra. For example, in elementary ...
. See below for the complete operation tables. This may be deduced as follows from the results of the preceding section. Over \mathrm(2), there is only one irreducible polynomial of degree 2: X^2+X+1 Therefore, for \mathrm(4) the construction of the preceding section must involve this polynomial, and \mathrm(4) = \mathrm(2) (X^2+X+1). Let \alpha denote a root of this polynomial in \mathrm(4). This implies that \alpha^2 = 1 + \alpha, and that \alpha and 1+\alpha are the elements of \mathrm(4) that are not in \mathrm(2). The tables of the operations in \mathrm(4) result from this, and are as follows: A table for subtraction is not given, because subtraction is identical to addition, as is the case for every field of characteristic 2. In the third table, for the division of x by y, the values of x must be read in the left column, and the values of y in the top row. (Because 0 \cdot z = 0 for every z in every ring the division by 0 has to remain undefined.) From the tables, it can be seen that the additive structure of \mathrm(4) is isomorphic to the
Klein four-group In mathematics, the Klein four-group is an abelian group with four elements, in which each element is Involution (mathematics), self-inverse (composing it with itself produces the identity) and in which composing any two of the three non-identi ...
, while the non-zero multiplicative structure is isomorphic to the group Z_3. The map \varphi:x \mapsto x^2 is the non-trivial field automorphism, called the Frobenius automorphism, which sends \alpha into the second root 1+\alpha of the above-mentioned irreducible polynomial X^2+X+1.


GF(''p''2) for an odd prime ''p''

For applying the above general construction of finite fields in the case of \mathrm(p^2), one has to find an irreducible polynomial of degree 2. For p=2, this has been done in the preceding section. If p is an odd prime, there are always irreducible polynomials of the form X^2-r, with r in \mathrm(p). More precisely, the polynomial X^2-r is irreducible over \mathrm(p) if and only if r is a quadratic non-residue modulo p (this is almost the definition of a quadratic non-residue). There are \frac quadratic non-residues modulo p. For example, 2 is a quadratic non-residue for p=3,5,11,13,\ldots, and 3 is a quadratic non-residue for p=5,7,17,\ldots. If p \equiv 3 \mod 4, that is p=3,7,11,19,\ldots, one may choose -1 \equiv p - 1 as a quadratic non-residue, which allows us to have a very simple irreducible polynomial X^2+1. Having chosen a quadratic non-residue r, let \alpha be a symbolic square root of r, that is, a symbol that has the property \alpha^2=r, in the same way that the complex number i is a symbolic square root of -1. Then, the elements of \mathrm(p^2) are all the linear expressions a+b\alpha, with a and b in \mathrm(p). The operations on \mathrm(p^2) are defined as follows (the operations between elements of \mathrm(p) represented by Latin letters are the operations in \mathrm(p)): \begin -(a+b\alpha)&=-a+(-b)\alpha\\ (a+b\alpha)+(c+d\alpha)&=(a+c)+(b+d)\alpha\\ (a+b\alpha)(c+d\alpha)&=(ac + rbd)+ (ad+bc)\alpha\\ (a+b\alpha)^&=a(a^2-rb^2)^+(-b)(a^2-rb^2)^\alpha \end


GF(8) and GF(27)

The polynomial X^3-X-1 is irreducible over \mathrm(2) and \mathrm(3), that is, it is irreducible
modulo In computing and mathematics, the modulo operation returns the remainder or signed remainder of a division, after one number is divided by another, the latter being called the '' modulus'' of the operation. Given two positive numbers and , mo ...
2 and 3 (to show this, it suffices to show that it has no root in \mathrm(2) nor in \mathrm(3)). It follows that the elements of \mathrm(8) and \mathrm(27) may be represented by expressions a+b\alpha+c\alpha^2, where a, b, c are elements of \mathrm(2) or \mathrm(3) (respectively), and \alpha is a symbol such that \alpha^3=\alpha+1. The addition, additive inverse and multiplication on \mathrm(8) and \mathrm(27) may thus be defined as follows; in following formulas, the operations between elements of \mathrm(2) or \mathrm(3), represented by Latin letters, are the operations in \mathrm(2) or \mathrm(3), respectively: \begin -(a+b\alpha+c\alpha^2)&=-a+(-b)\alpha+(-c)\alpha^2 \qquad\text \mathrm(8), \text\\ (a+b\alpha+c\alpha^2)+(d+e\alpha+f\alpha^2)&=(a+d)+(b+e)\alpha+(c+f)\alpha^2\\ (a+b\alpha+c\alpha^2)(d+e\alpha+f\alpha^2)&=(ad + bf+ce)+ (ae+bd+bf+ce+cf)\alpha+(af+be+cd+cf)\alpha^2 \end


GF(16)

The polynomial X^4+X+1 is irreducible over \mathrm(2), that is, it is irreducible modulo 2. It follows that the elements of \mathrm(16) may be represented by expressions a+b\alpha+c\alpha^2+d\alpha^3, where a,b,c,d are either 0 or 1 (elements of \mathrm(2)), and \alpha is a symbol such that \alpha^4=\alpha+1 (that is, \alpha is defined as a root of the given irreducible polynomial). As the characteristic of \mathrm(2) is 2, each element is its additive inverse in \mathrm(16). The addition and multiplication on \mathrm(16) may be defined as follows; in following formulas, the operations between elements of \mathrm(2), represented by Latin letters are the operations in \mathrm(2). \begin (a+b\alpha+c\alpha^2+d\alpha^3)+(e+f\alpha+g\alpha^2+h\alpha^3)&=(a+e)+(b+f)\alpha+(c+g)\alpha^2+(d+h)\alpha^3\\ (a+b\alpha+c\alpha^2+d\alpha^3)(e+f\alpha+g\alpha^2+h\alpha^3)&=(ae+bh+cg+df) +(af+be+bh+cg+df +ch+dg)\alpha\;+\\ &\quad\;(ag+bf+ce +ch+dg+dh)\alpha^2 +(ah+bg+cf+de +dh)\alpha^3 \end The field \mathrm(16) has eight primitive elements (the elements that have all nonzero elements of \mathrm(16) as integer powers). These elements are the four roots of X^4+X+1 and their
multiplicative inverse In mathematics, a multiplicative inverse or reciprocal for a number ''x'', denoted by 1/''x'' or ''x''−1, is a number which when Multiplication, multiplied by ''x'' yields the multiplicative identity, 1. The multiplicative inverse of a ra ...
s. In particular, \alpha is a primitive element, and the primitive elements are \alpha^m with m less than and
coprime In number theory, two integers and are coprime, relatively prime or mutually prime if the only positive integer that is a divisor of both of them is 1. Consequently, any prime number that divides does not divide , and vice versa. This is equiv ...
with 15 (that is, 1, 2, 4, 7, 8, 11, 13, 14).


Multiplicative structure

The set of non-zero elements in \mathrm(q) is an abelian group under the multiplication, of order q-1. By Lagrange's theorem, there exists a divisor k of q-1 such that x^k=1 for every non-zero x in \mathrm(q). As the equation x^k=1 has at most k solutions in any field, q-1 is the lowest possible value for k. The structure theorem of finite abelian groups implies that this multiplicative group is cyclic, that is, all non-zero elements are powers of a single element. In summary: Such an element a is called a primitive element of \mathrm(q). Unless q=2,3, the primitive element is not unique. The number of primitive elements is \phi(q-1) where \phi is
Euler's totient function In number theory, Euler's totient function counts the positive integers up to a given integer that are relatively prime to . It is written using the Greek letter phi as \varphi(n) or \phi(n), and may also be called Euler's phi function. In ot ...
. The result above implies that x^q=x for every x in \mathrm(q). The particular case where q is prime is Fermat's little theorem.


Discrete logarithm

If a is a primitive element in \mathrm(q), then for any non-zero element x in F, there is a unique integer n with 0 \le n \le q-2 such that x=a^n. This integer n is called the discrete logarithm of x to the base a. While a^n can be computed very quickly, for example using exponentiation by squaring, there is no known efficient algorithm for computing the inverse operation, the discrete logarithm. This has been used in various
cryptographic protocol A cryptographic protocol is an abstract or concrete Communications protocol, protocol that performs a information security, security-related function and applies cryptographic methods, often as sequences of cryptographic primitives. A protocol desc ...
s, see '' Discrete logarithm'' for details. When the nonzero elements of \mathrm(q) are represented by their discrete logarithms, multiplication and division are easy, as they reduce to addition and subtraction modulo q-1. However, addition amounts to computing the discrete logarithm of a^m+a^n. The identity a^m+a^n=a^n\left(a^+1\right) allows one to solve this problem by constructing the table of the discrete logarithms of a^n+1, called Zech's logarithms, for n=0,\ldots,q-2 (it is convenient to define the discrete logarithm of zero as being -\infty). Zech's logarithms are useful for large computations, such as
linear algebra Linear algebra is the branch of mathematics concerning linear equations such as :a_1x_1+\cdots +a_nx_n=b, linear maps such as :(x_1, \ldots, x_n) \mapsto a_1x_1+\cdots +a_nx_n, and their representations in vector spaces and through matrix (mathemat ...
over medium-sized fields, that is, fields that are sufficiently large for making natural algorithms inefficient, but not too large, as one has to pre-compute a table of the same size as the order of the field.


Roots of unity

Every nonzero element of a finite field is a
root of unity In mathematics, a root of unity is any complex number that yields 1 when exponentiation, raised to some positive integer power . Roots of unity are used in many branches of mathematics, and are especially important in number theory, the theory ...
, as x^=1 for every nonzero element of \mathrm(q). If n is a positive integer, an nth primitive root of unity is a solution of the equation x^n=1 that is not a solution of the equation x^m=1 for any positive integer m. If a is a nth primitive root of unity in a field F, then F contains all the n roots of unity, which are 1,a,a^2,\ldots,a^. The field \mathrm(q) contains a nth primitive root of unity if and only if n is a divisor of q-1; if n is a divisor of q-1, then the number of primitive nth roots of unity in \mathrm(q) is \phi(n) (
Euler's totient function In number theory, Euler's totient function counts the positive integers up to a given integer that are relatively prime to . It is written using the Greek letter phi as \varphi(n) or \phi(n), and may also be called Euler's phi function. In ot ...
). The number of nth roots of unity in \mathrm(q) is \mathrm(n,q-1). In a field of characteristic p, every npth root of unity is also a nth root of unity. It follows that primitive npth roots of unity never exist in a field of characteristic p. On the other hand, if n is
coprime In number theory, two integers and are coprime, relatively prime or mutually prime if the only positive integer that is a divisor of both of them is 1. Consequently, any prime number that divides does not divide , and vice versa. This is equiv ...
to p, the roots of the nth
cyclotomic polynomial In mathematics, the ''n''th cyclotomic polynomial, for any positive integer ''n'', is the unique irreducible polynomial with integer coefficients that is a divisor of x^n-1 and is not a divisor of x^k-1 for any Its roots are all ''n''th prim ...
are distinct in every field of characteristic p, as this polynomial is a divisor of X^n-1, whose discriminant n^n is nonzero modulo p. It follows that the nth
cyclotomic polynomial In mathematics, the ''n''th cyclotomic polynomial, for any positive integer ''n'', is the unique irreducible polynomial with integer coefficients that is a divisor of x^n-1 and is not a divisor of x^k-1 for any Its roots are all ''n''th prim ...
factors over \mathrm(q) into distinct irreducible polynomials that have all the same degree, say d, and that \mathrm(p^d) is the smallest field of characteristic p that contains the nth primitive roots of unity. When computing Brauer characters, one uses the map \alpha^k \mapsto \exp(2\pi i k / (q-1)) to map eigenvalues of a representation matrix to the complex numbers. Under this mapping, the base subfield \mathrm(p) consists of evenly spaced points around the unit circle (omitting zero).


Example: GF(64)

The field \mathrm(64) has several interesting properties that smaller fields do not share: it has two subfields such that neither is contained in the other; not all generators (elements with minimal polynomial of degree 6 over \mathrm(2)) are primitive elements; and the primitive elements are not all conjugate under the
Galois group In mathematics, in the area of abstract algebra known as Galois theory, the Galois group of a certain type of field extension is a specific group associated with the field extension. The study of field extensions and their relationship to the pol ...
. The order of this field being , and the divisors of being , the subfields of are , , , and itself. As and are
coprime In number theory, two integers and are coprime, relatively prime or mutually prime if the only positive integer that is a divisor of both of them is 1. Consequently, any prime number that divides does not divide , and vice versa. This is equiv ...
, the intersection of and in is the prime field . The union of and has thus elements. The remaining elements of generate in the sense that no other subfield contains any of them. It follows that they are roots of irreducible polynomials of degree over . This implies that, over , there are exactly irreducible
monic polynomial In algebra, a monic polynomial is a non-zero univariate polynomial (that is, a polynomial in a single variable) in which the leading coefficient (the nonzero coefficient of highest degree) is equal to 1. That is to say, a monic polynomial is one ...
s of degree . This may be verified by factoring over . The elements of are primitive nth roots of unity for some n dividing 63. As the 3rd and the 7th roots of unity belong to and , respectively, the generators are primitive th roots of unity for some in .
Euler's totient function In number theory, Euler's totient function counts the positive integers up to a given integer that are relatively prime to . It is written using the Greek letter phi as \varphi(n) or \phi(n), and may also be called Euler's phi function. In ot ...
shows that there are primitive th roots of unity, 12 primitive 21st roots of unity, and 36 primitive rd roots of unity. Summing these numbers, one finds again 54 elements. By factoring the
cyclotomic polynomial In mathematics, the ''n''th cyclotomic polynomial, for any positive integer ''n'', is the unique irreducible polynomial with integer coefficients that is a divisor of x^n-1 and is not a divisor of x^k-1 for any Its roots are all ''n''th prim ...
s over \mathrm(2), one finds that: * The six primitive 9th roots of unity are roots of X^6+X^3+1, and are all conjugate under the action of the Galois group. * The twelve primitive 21st roots of unity are roots of (X^6+X^4+X^2+X+1)(X^6+X^5+X^4+X^2+1). They form two orbits under the action of the Galois group. As the two factors are reciprocal to each other, a root and its (multiplicative) inverse do not belong to the same orbit. * The 36 primitive elements of \mathrm(64) are the roots of (X^6+X^4+X^3+X+1)(X^6+X+1)(X^6+X^5+1)(X^6+X^5+X^3+X^2+1)(X^6+X^5+X^2+X+1)(X^6+X^5+X^4+X+1). They split into six orbits of six elements each under the action of the Galois group. This shows that the best choice to construct \mathrm(64) is to define it as . In fact, this generator is a primitive element, and this polynomial is the irreducible polynomial that produces the easiest Euclidean division.


Frobenius automorphism and Galois theory

In this section, p is a prime number, and q=p^n is a power of p. In \mathrm(q), the identity implies that the map \varphi:x \mapsto x^p is a \mathrm(p)- linear endomorphism and a field automorphism of \mathrm(q), which fixes every element of the subfield \mathrm(p). It is called the Frobenius automorphism, after Ferdinand Georg Frobenius. Denoting by the composition of with itself times, we have \varphi^k:x \mapsto x^. It has been shown in the preceding section that is the identity. For , the automorphism is not the identity, as, otherwise, the polynomial X^-X would have more than roots. There are no other -automorphisms of . In other words, has exactly -automorphisms, which are \mathrm=\varphi^0, \varphi, \varphi^2, \ldots, \varphi^. In terms of
Galois theory In mathematics, Galois theory, originally introduced by Évariste Galois, provides a connection between field (mathematics), field theory and group theory. This connection, the fundamental theorem of Galois theory, allows reducing certain problems ...
, this means that is a Galois extension of , which has a cyclic Galois group. The fact that the Frobenius map is surjective implies that every finite field is perfect.


Polynomial factorization

If is a finite field, a non-constant
monic polynomial In algebra, a monic polynomial is a non-zero univariate polynomial (that is, a polynomial in a single variable) in which the leading coefficient (the nonzero coefficient of highest degree) is equal to 1. That is to say, a monic polynomial is one ...
with coefficients in is irreducible over , if it is not the product of two non-constant monic polynomials, with coefficients in . As every
polynomial ring In mathematics, especially in the field of algebra, a polynomial ring or polynomial algebra is a ring formed from the set of polynomials in one or more indeterminates (traditionally also called variables) with coefficients in another ring, ...
over a field is a
unique factorization domain In mathematics, a unique factorization domain (UFD) (also sometimes called a factorial ring following the terminology of Bourbaki) is a ring in which a statement analogous to the fundamental theorem of arithmetic holds. Specifically, a UFD is ...
, every monic polynomial over a finite field may be factored in a unique way (up to the order of the factors) into a product of irreducible monic polynomials. There are efficient algorithms for testing polynomial irreducibility and factoring polynomials over finite fields. They are a key step for factoring polynomials over the integers or the
rational numbers In mathematics, a rational number is a number that can be expressed as the quotient or fraction (mathematics), fraction of two integers, a numerator and a non-zero denominator . For example, is a rational number, as is every integer (for examp ...
. At least for this reason, every
computer algebra system A computer algebra system (CAS) or symbolic algebra system (SAS) is any mathematical software with the ability to manipulate mathematical expressions in a way similar to the traditional manual computations of mathematicians and scientists. The de ...
has functions for factoring polynomials over finite fields, or, at least, over finite prime fields.


Irreducible polynomials of a given degree

The polynomial X^q-X factors into linear factors over a field of order . More precisely, this polynomial is the product of all monic polynomials of degree one over a field of order . This implies that, if then is the product of all monic irreducible polynomials over , whose degree divides . In fact, if is an irreducible factor over of , its degree divides , as its
splitting field In abstract algebra, a splitting field of a polynomial with coefficients in a field is the smallest field extension of that field over which the polynomial ''splits'', i.e., decomposes into linear factors. Definition A splitting field of a polyn ...
is contained in . Conversely, if is an irreducible monic polynomial over of degree dividing , it defines a field extension of degree , which is contained in , and all roots of belong to , and are roots of ; thus divides . As does not have any multiple factor, it is thus the product of all the irreducible monic polynomials that divide it. This property is used to compute the product of the irreducible factors of each degree of polynomials over ; see '' Distinct degree factorization''.


Number of monic irreducible polynomials of a given degree over a finite field

The number of monic irreducible polynomials of degree over is given by N(q,n)=\frac\sum_ \mu(d)q^, where is the Möbius function. This formula is an immediate consequence of the property of above and the Möbius inversion formula. By the above formula, the number of irreducible (not necessarily monic) polynomials of degree over is . The exact formula implies the inequality N(q,n)\geq\frac \left(q^n-\sum_ q^\right); this is sharp if and only if is a power of some prime. For every and every , the right hand side is positive, so there is at least one irreducible polynomial of degree over .


Applications

In
cryptography Cryptography, or cryptology (from "hidden, secret"; and ''graphein'', "to write", or ''-logy, -logia'', "study", respectively), is the practice and study of techniques for secure communication in the presence of Adversary (cryptography), ...
, the difficulty of the discrete logarithm problem in finite fields or in elliptic curves is the basis of several widely used protocols, such as the Diffie–Hellman protocol. For example, in 2014, a secure internet connection to Wikipedia involved the elliptic curve Diffie–Hellman protocol ( ECDHE) over a large finite field. In
coding theory Coding theory is the study of the properties of codes and their respective fitness for specific applications. Codes are used for data compression, cryptography, error detection and correction, data transmission and computer data storage, data sto ...
, many codes are constructed as subspaces of
vector space In mathematics and physics, a vector space (also called a linear space) is a set (mathematics), set whose elements, often called vector (mathematics and physics), ''vectors'', can be added together and multiplied ("scaled") by numbers called sc ...
s over finite fields. Finite fields are used by many error correction codes, such as Reed–Solomon error correction code or BCH code. The finite field almost always has characteristic of , since computer data is stored in binary. For example, a byte of data can be interpreted as an element of . One exception is PDF417 bar code, which is . Some CPUs have special instructions that can be useful for finite fields of characteristic , generally variations of carry-less product. Finite fields are widely used in
number theory Number theory is a branch of pure mathematics devoted primarily to the study of the integers and arithmetic functions. Number theorists study prime numbers as well as the properties of mathematical objects constructed from integers (for example ...
, as many problems over the integers may be solved by reducing them
modulo In computing and mathematics, the modulo operation returns the remainder or signed remainder of a division, after one number is divided by another, the latter being called the '' modulus'' of the operation. Given two positive numbers and , mo ...
one or several
prime number A prime number (or a prime) is a natural number greater than 1 that is not a Product (mathematics), product of two smaller natural numbers. A natural number greater than 1 that is not prime is called a composite number. For example, 5 is prime ...
s. For example, the fastest known algorithms for polynomial factorization and
linear algebra Linear algebra is the branch of mathematics concerning linear equations such as :a_1x_1+\cdots +a_nx_n=b, linear maps such as :(x_1, \ldots, x_n) \mapsto a_1x_1+\cdots +a_nx_n, and their representations in vector spaces and through matrix (mathemat ...
over the field of
rational number In mathematics, a rational number is a number that can be expressed as the quotient or fraction of two integers, a numerator and a non-zero denominator . For example, is a rational number, as is every integer (for example, The set of all ...
s proceed by reduction modulo one or several primes, and then reconstruction of the solution by using
Chinese remainder theorem In mathematics, the Chinese remainder theorem states that if one knows the remainders of the Euclidean division of an integer ''n'' by several integers, then one can determine uniquely the remainder of the division of ''n'' by the product of thes ...
, Hensel lifting or the LLL algorithm. Similarly many theoretical problems in number theory can be solved by considering their reductions modulo some or all prime numbers. See, for example, '' Hasse principle''. Many recent developments of
algebraic geometry Algebraic geometry is a branch of mathematics which uses abstract algebraic techniques, mainly from commutative algebra, to solve geometry, geometrical problems. Classically, it studies zero of a function, zeros of multivariate polynomials; th ...
were motivated by the need to enlarge the power of these modular methods. Wiles' proof of Fermat's Last Theorem is an example of a deep result involving many mathematical tools, including finite fields. The Weil conjectures concern the number of points on algebraic varieties over finite fields and the theory has many applications including exponential and character sum estimates. Finite fields have widespread application in
combinatorics Combinatorics is an area of mathematics primarily concerned with counting, both as a means and as an end to obtaining results, and certain properties of finite structures. It is closely related to many other areas of mathematics and has many ...
, two well known examples being the definition of Paley Graphs and the related construction for Hadamard Matrices. In arithmetic combinatorics finite fields and finite field models are used extensively, such as in Szemerédi's theorem on arithmetic progressions.


Extensions


Wedderburn's little theorem

A division ring is a generalization of field. Division rings are not assumed to be commutative. There are no non-commutative finite division rings: Wedderburn's little theorem states that all finite division rings are commutative, and hence are finite fields. This result holds even if we relax the
associativity In mathematics, the associative property is a property of some binary operations that rearranging the parentheses in an expression will not change the result. In propositional logic, associativity is a Validity (logic), valid rule of replaceme ...
axiom to alternativity, that is, all finite alternative division rings are finite fields, by the Artin–Zorn theorem.


Algebraic closure

A finite field F is not algebraically closed: the polynomial f(T) = 1+\prod_ (T-\alpha), has no roots in F, since for all \alpha in F. Given a prime number , let \overline_p be an algebraic closure of \mathbb_p. It is not only unique
up to Two Mathematical object, mathematical objects and are called "equal up to an equivalence relation " * if and are related by , that is, * if holds, that is, * if the equivalence classes of and with respect to are equal. This figure of speech ...
an isomorphism, as do all algebraic closures, but contrarily to the general case, all its subfield are fixed by all its automorphisms, and it is also the algebraic closure of all finite fields of the same characteristic . This property results mainly from the fact that the elements of \mathbb F_ are exactly the roots of x^-x, and this defines an inclusion \mathbb \mathbb F_\subset \mathbb F_ for m>1. These inclusions allow writing informally \overline_p = \bigcup_ \mathbb_. The formal validation of this notation results from the fact that the above field inclusions form a
directed set In mathematics, a directed set (or a directed preorder or a filtered set) is a preordered set in which every finite subset has an upper bound. In other words, it is a non-empty preordered set A such that for any a and b in A there exists c in A wit ...
of fields; Its direct limit is \overline_p, which may thus be considered as "directed union".


Primitive elements in the algebraic closure

Given a primitive element g_ of \mathbb_, then g_^m is a primitive element of \mathbb_. For explicit computations, it may be useful to have a coherent choice of the primitive elements for all finite fields; that is, to choose the primitive element g_ of \mathbb_ in order that, whenever n=mh, one has g_=g_n^h, where g_ is the primitive element already chosen for \mathbb_. Such a construction may be obtained by Conway polynomials.


Quasi-algebraic closure

Although finite fields are not algebraically closed, they are quasi-algebraically closed, which means that every homogeneous polynomial over a finite field has a non-trivial zero whose components are in the field if the number of its variables is more than its degree. This was a conjecture of Artin and Dickson proved by Chevalley (see '' Chevalley–Warning theorem'').


See also

*
Elementary abelian group In mathematics, specifically in group theory, an elementary abelian group is an abelian group in which all elements other than the identity have the same order. This common order must be a prime number, and the elementary abelian groups in whic ...
* Field with one element * Finite field arithmetic * Finite ring *
Finite group In abstract algebra, a finite group is a group whose underlying set is finite. Finite groups often arise when considering symmetry of mathematical or physical objects, when those objects admit just a finite number of structure-preserving tra ...
* Galois ring * Hamming space * Quasi-finite field


Notes


References

* W. H. Bussey (1905) "Galois field tables for ",
Bulletin of the American Mathematical Society The ''Bulletin of the American Mathematical Society'' is a quarterly mathematical journal published by the American Mathematical Society. Scope It publishes surveys on contemporary research topics, written at a level accessible to non-experts. ...
12(1): 22–38, * W. H. Bussey (1910) "Tables of Galois fields of order < 1000", ''Bulletin of the American Mathematical Society'' 16(4): 188–206, * * * * *


External links


Finite Fields
at Wolfram research.
''Finite Fields and Their Applications'', Science Direct, (Open Access Journal).
{{DEFAULTSORT:Finite Field