LECTURE 4: CHINESE REMAINDER THEOREM AND MULTIPLICATIVE FUNCTIONS

Similar documents
The Chinese Remainder Theorem

a = mq + r where 0 r m 1.

Part II. Number Theory. Year

CHAPTER 6. Prime Numbers. Definition and Fundamental Results

Lecture 4: Number theory

An integer p is prime if p > 1 and p has exactly two positive divisors, 1 and p.

Lecture notes: Algorithms for integers, polynomials (Thorsten Theobald)

Math 314 Course Notes: Brief description

A Readable Introduction to Real Mathematics

ax b mod m. has a solution if and only if d b. In this case, there is one solution, call it x 0, to the equation and there are d solutions x m d

Theory of Numbers Problems

Summary Slides for MATH 342 June 25, 2018

Chapter 5. Modular arithmetic. 5.1 The modular ring

Notes on Systems of Linear Congruences

The Chinese Remainder Theorem

CPSC 467b: Cryptography and Computer Security

Smol Results on the Möbius Function

A Guide to Arithmetic

Course 2BA1: Trinity 2006 Section 9: Introduction to Number Theory and Cryptography

2 More on Congruences

10 Problem 1. The following assertions may be true or false, depending on the choice of the integers a, b 0. a "

Homework #2 solutions Due: June 15, 2012

COMP239: Mathematics for Computer Science II. Prof. Chadi Assi EV7.635

MATH 361: NUMBER THEORY FOURTH LECTURE

The security of RSA (part 1) The security of RSA (part 1)

Objective Type Questions

Know the Well-ordering principle: Any set of positive integers which has at least one element contains a smallest element.

Course MA2C02, Hilary Term 2013 Section 9: Introduction to Number Theory and Cryptography

Part IA. Numbers and Sets. Year

Numbers. Çetin Kaya Koç Winter / 18

Definition 6.1 (p.277) A positive integer n is prime when n > 1 and the only positive divisors are 1 and n. Alternatively

Course 2316 Sample Paper 1

CPSC 467: Cryptography and Computer Security

A SURVEY OF PRIMALITY TESTS

Part IA Numbers and Sets

2.3 In modular arithmetic, all arithmetic operations are performed modulo some integer.

Number Theory. CSS322: Security and Cryptography. Sirindhorn International Institute of Technology Thammasat University CSS322. Number Theory.

Number Theory. Modular Arithmetic

Basic elements of number theory

Basic elements of number theory

4. Congruence Classes

CS 5319 Advanced Discrete Structure. Lecture 9: Introduction to Number Theory II

Mathematics for Cryptography

Elementary Number Theory Review. Franz Luef

7. Prime Numbers Part VI of PJE

3.7 Non-linear Diophantine Equations

I216e Discrete Math (for Review)

PREPARATION NOTES FOR NUMBER THEORY PRACTICE WED. OCT. 3,2012

MATH 433 Applied Algebra Lecture 4: Modular arithmetic (continued). Linear congruences.

Math 324, Fall 2011 Assignment 7 Solutions. 1 (ab) γ = a γ b γ mod n.

g(x) = 1 1 x = 1 + x + x2 + x 3 + is not a polynomial, since it doesn t have finite degree. g(x) is an example of a power series.

All variables a, b, n, etc are integers unless otherwise stated. Each part of a problem is worth 5 points.

Simultaneous Linear, and Non-linear Congruences

D-MATH Algebra II FS18 Prof. Marc Burger. Solution 26. Cyclotomic extensions.

Number Theory and Group Theoryfor Public-Key Cryptography

Part IA Numbers and Sets

[Part 2] Asymmetric-Key Encipherment. Chapter 9. Mathematics of Cryptography. Objectives. Contents. Objectives

Elementary Number Theory MARUCO. Summer, 2018

Chapter 1 : The language of mathematics.

Public-key Cryptography: Theory and Practice

A Few Primality Testing Algorithms

Number Theory and Algebra: A Brief Introduction

I(n) = ( ) f g(n) = d n

MATH 145 Algebra, Solutions to Assignment 4

The number of ways to choose r elements (without replacement) from an n-element set is. = r r!(n r)!.

= 1 2x. x 2 a ) 0 (mod p n ), (x 2 + 2a + a2. x a ) 2

The primitive root theorem

Number Theory Proof Portfolio

Divisibility. 1.1 Foundations

Number Theory A focused introduction

Basic Algorithms in Number Theory

The Chinese Remainder Theorem

Congruences and Residue Class Rings

Q 2.0.2: If it s 5:30pm now, what time will it be in 4753 hours? Q 2.0.3: Today is Wednesday. What day of the week will it be in one year from today?

Math 547, Exam 2 Information.

Solution Sheet (i) q = 5, r = 15 (ii) q = 58, r = 15 (iii) q = 3, r = 7 (iv) q = 6, r = (i) gcd (97, 157) = 1 = ,

Quizzes for Math 401

Mathematics 4: Number Theory Problem Sheet 3. Workshop 26 Oct 2012

MATH FINAL EXAM REVIEW HINTS

Solutions to Problem Set 4 - Fall 2008 Due Tuesday, Oct. 7 at 1:00

Basic Algorithms in Number Theory

Computer Architecture 10. Residue Number Systems

Lecture Notes. Advanced Discrete Structures COT S

ALGEBRA I (LECTURE NOTES 2017/2018) LECTURE 9 - CYCLIC GROUPS AND EULER S FUNCTION

ϕ : Z F : ϕ(t) = t 1 =

LECTURE NOTES IN CRYPTOGRAPHY

CHAPTER 3. Congruences. Congruence: definitions and properties

1 Overview and revision

Number Theory. Henry Liu, 6 July 2007

I Foundations Of Divisibility And Congruence 1

1. Algebra 1.5. Polynomial Rings

Covering Subsets of the Integers and a Result on Digits of Fibonacci Numbers

Chapter 8. Introduction to Number Theory

Notes on Primitive Roots Dan Klain

Chapter 9 Mathematics of Cryptography Part III: Primes and Related Congruence Equations

Introduction to Number Theory 1. c Eli Biham - December 13, Introduction to Number Theory 1

2. THE EUCLIDEAN ALGORITHM More ring essentials

CYCLICITY OF (Z/(p))

NOTES ON SIMPLE NUMBER THEORY

NUMBER THEORY. Anwitaman DATTA SCSE, NTU Singapore CX4024. CRYPTOGRAPHY & NETWORK SECURITY 2018, Anwitaman DATTA

Transcription:

LECTURE 4: CHINESE REMAINDER THEOREM AND MULTIPLICATIVE FUNCTIONS 1. The Chinese Remainder Theorem We now seek to analyse the solubility of congruences by reinterpreting their solutions modulo a composite integer m in terms of related congruences modulo prime powers. Theorem 1.1 (Chinese Remainder Theorem). Let m 1,..., m r denote positive integers with (m i, m j ) = 1 for i j, and let a 1,..., a r Z. Then the system of congruences x a i (mod m i ) (1 i r) (1.1) is soluble simultaneously for some integer x. If x 0 is any one such solution, then x is a solution of (1.1) if and only if x x 0 (mod m 1 m 2... m r ). Proof. Let m = m 1 m 2... m r, and n j = m/m j (1 j r). Then for each j = 1,..., r one has (m j, n j ) = 1, whence there exists an integer b j with Moreover, ( m1 m r n j b j = m j m i whenever i j. Then if we put n j b j 1 (mod m j ). b j ) m i 0 (mod m i ) x 0 = n 1 b 1 a 1 + + n r b r a r, we find that x 0 n i b i a i a i (mod m i ) for 1 i r. Thus we may conclude that x 0 is a solution of (1.1). In order to establish uniqueness, suppose that x and y are any two solutions of (1.1). Then one has x y (mod m i ), 1 i r, and (m i, m j ) = 1, i j. Then it follows that x y (mod [m 1,..., m r ]). Since m i s are coprime, [m 1,..., m r ] = m 1... m r. Example 1.2. Find the set of solutions to the system of congruences 4x 1 (mod 3), x 2 (mod 5), 2x 5 (mod 7). We first convert this into a form where the leading coefficients are all 1. Thus, multiplying the final congruence through by 4 (the multiplicative inverse of 2 modulo 7), we obtain the equivalent system x 1 (mod 3), x 2 (mod 5), x 6 (mod 7). 1

2 LECTURE 4 We next put m 1 = 3, m 2 = 5, m 3 = 7, so that (m i, m j ) = 1 for i j. Define m = 3 5 7 = 105, and n 1 = 105/3 = 35, n 2 = 105/5 = 21, n 3 = 105/7 = 15. We compute integers b j with n j b j 1 (mod m j ) (j = 1, 2, 3) by means of the Euclidean Algorithm (or directly, if the numbers are small enough). Thus we find that So take 35b 1 1 (mod 3) 2b 1 1 (mod 3) b 1 2 (mod 3), 21b 2 1 (mod 5) b 2 1 (mod 5), 15b 3 1 (mod 7) b 3 1 (mod 7). x 0 = 35 2 1 + 21 1 2 + 15 1 6 = 70 + 42 + 90 = 202 97 (mod 105). Then we find that x 0 = 97 satisfies the given congruences, and the complete set of solutions is given by x = 97 + 105k (k Z). Example 1.3. Find the set of solutions, if any, to the system of congruences x 1 (mod 15), x 2 (mod 35). In this example, the moduli of the two congruences are not coprime, since (35, 15) = 5. In order to determine whether or not the system is soluble, we therefore need to examine the underlying congruences, extracting as a modulus this greatest common divisor. Thus we find that any potential solution x of the system must satisfy x 1 (mod 15) x 1 (mod 3) and x 1 (mod 5), and at the same time x 2 (mod 35) x 2 (mod 5) and x 2 (mod 7). But then one has x 1 (mod 5) and x 2 (mod 5), two congruence conditions that are plainly incompatible. We may conclude then that there are no solutions of the simultaneous congruences x 1 (mod 15) and x 2 (mod 35). 2. Multiplicative functions We wish to investigate further the properties of the Euler totient function, and so pause to introduce the concept of a multiplicative function. Definition 2.1. (i) We say that a function f : N C is an arithmetical function; (ii) An arithmetical function f is said to be multiplicative if (a) f is not identically zero, and (b) whenever (m, n) = 1, one has f(mn) = f(m)f(n); (iii) An arithmetical function g is said to be totally multiplicative if for all natural numbers m and n, one has g(mn) = g(m)g(n). Note that if f(n) is multiplicative, then necessarily one has f(1) = 1.

LECTURE 4 3 Theorem 2.2. The function φ(n) is multiplicative. Thus, whenever (m, n) = 1, one has φ(mn) = φ(m)φ(n). Moreover, if n has canonical prime factorisation n = t pr i i, then φ(n) = p r i 1 i (p i 1) = n p n (1 1/p). Proof. Let m and n be natural numbers with (m, n) = 1. Let R m and R n be reduced residue systems modulo m and n respectively. Let us consider the set We observe that if R = {an + bm : a R m, b R n }. an + bm a n + b m (mod mn) for some a, a R m and b, b R n, then an a n (mod m), and since (n, m) = 1, a a (mod m), so that a = a. Similarly, we also deduce that b = b. Hence, all the numbers an + bm with a R m and b R n are district, and R = R m R n. We claim that R is a reduced residue system modulo mn. This will immediately imply that φ(mn) = φ(m)φ(n). We note that the above argument already shows that an + bm a n + b m (mod mn) for (a, b) (a, b ) R m R n. Moreover, whenever (a, m) = (b, n) = 1, one has (an + bm, n) = (bm, n) = 1 and (an + bm, m) = (an, m) = 1, whence (an + bm, mn) = 1. Therefore, all r R satisfy (r, mn) = 1. We next seek to establish that whenever (c, mn) = 1, then there exist a R m and b R n with c an + bm (mod mn). But (m, n) = 1, so by the Euclidean Algorithm, there exist integers x and y with xm + yn = 1. It is clear from this equation that (x, n) = 1, so that (cx, n) = 1. Hence there exists a R n satisfying a cx (mod n). Similarly, (y, m) = 1, (cy, m) = 1, and there exists b R m satisfying b cy (mod m). Then an + bm (cx)n + (cy)m c (mod mn). This completes the proof that R is a reduced residue system modulo mn and establishes that the Euler φ-function is multiplicative. In order to complete the proof of the theorem, we observe next that when p is a prime number, one has φ(p r ) = p r p r 1, since the total number of residues modulo p r is p r, of which precisely the p r 1 divisible by p are not reduced. In this way, the final assertions of the theorem follow by making use of the multiplicative property of φ. Useful properties of φ(n) that will be employed later stem easily from its multiplicative property. Before establishing one such property, we establish a general result for multiplicative functions.

4 LECTURE 4 Lemma 2.3. Suppose that f is multiplicative, and define g(n) = d n f(d). Then g is a multiplicative function. Proof. Suppose that m and n are natural numbers with (m, n) = 1, and suppose that d mn. Write d 1 = (d, m) and d 2 = (d, n). Then d = d 1 d 2 and (d 1, d 2 ) = 1. Thus we obtain g(mn) = f(d) = f(d 1 d 2 ) = f(d 1 ) f(d 2 ), d mn d 1 m d 2 n d1 m d2 n whence g(mn) = g(m)g(n). This completes the proof that g is multiplicative. Corollary 2.4. One has d n φ(d) = n. Proof. Observe that for each prime number p, and every natural number r, one has r r φ(d) = φ(p h ) = 1 + (p h p h 1 ) = p r. d p r h=0 h=1 Thus, owing to the multiplicative property of φ established in Theorem 2.2, it follows from Lemma 2.3 that d n φ(d) is a multiplicative function, and when n = t t=1 pr i i φ(d) = φ(d) = p r i = n. d p ri d n To conclude this section, we examine the set of solutions of a polynomial congruence. Definition 2.5. Let f Z[x], and suppose that r 1,..., r m is a complete residue system modulo m. Then we say that the number of solutions of the congruence f(x) 0 (mod m) is the number of residues r i with f(r i ) 0 (mod m). Theorem 2.6. Suppose that f Z[x], and denote by N f (m) the number of solutions of the congruence f(x) 0 (mod m). Then N f (m) is a multiplicative function of m, so that when m = t t=1 pr i i, N f (m) = N f (p r i ). Proof. Suppose that m 1 and m 2 are natural numbers with m = m 1 m 2 and (m 1, m 2 ) = 1. Let {r 1,..., r m1 }, {s 1,..., s m2 } and {t 1,..., t m } be complete residue systems modulo m 1, m 2 and m, respectively. Suppose that some t k satisfies f(t k ) 0 (mod m). Then there exist unique r i and s j with t k r i (mod m 1 ) and t k s j (mod m 2 ),

and they satisfy Further, if t k and t l satisfy LECTURE 4 5 f(r i ) 0 (mod m 1 ) and f(s j ) 0 (mod m 2 ). t k t l r i (mod m 1 ) and t k t l s j (mod m 2 ), then, by the Chinese Remainder Theorem t k t l (mod m), so that t k = t l. Thus we have defined an injective map from the set of solutions modulo m to the set of pairs of solutions modulo m 1 and m 2. In the other direction, whenever there exist residues r i and s j with f(r i ) 0 (mod m 1 ) and f(s j ) 0 (mod m 2 ), then by the Chinese Remainder Theorem there exists unique t k with t k r i (mod m 1 ) and t k s j (mod m 2 ), so that f(t k ) 0 (mod m i ), i = 1, 2. But since (m 1, m 2 ) = 1, it follows that f(t k ) 0 (mod m). There is therefore an injective map from pairs of solutions (r i, s j ) modulo m 1 and m 2 respectively, to solutions modulo m. Collecting together the above conclusions, we find that the solutions modulo m, and pairs of solutions modulo m 1 and m 2, are in bijective correspondence, whence N f (m) = N f (m 1 )N f (m 2 ) whenever (m 1, m 2 ) = 1. The desired conclusion now follows on considering the prime factorisation of m.