Irreducible Polynomials. Finite Fields of Order p m (1) Primitive Polynomials. Finite Fields of Order p m (2)

Similar documents
17 Galois Fields Introduction Primitive Elements Roots of Polynomials... 8

ELG 5372 Error Control Coding. Lecture 12: Ideals in Rings and Algebraic Description of Cyclic Codes

ELEC-E7240 Coding Methods L (5 cr)

Section VI.33. Finite Fields

The BCH Bound. Background. Parity Check Matrix for BCH Code. Minimum Distance of Cyclic Codes

Information Theory. Lecture 7

ELG 5372 Error Control Coding. Lecture 5: Algebra 3: Irreducible, Primitive and Minimal Polynomials

Section 33 Finite fields

Fundamental Theorem of Algebra

Quasi-reducible Polynomials

Computer Algebra for Computer Engineers

QUALIFYING EXAM IN ALGEBRA August 2011

Finite Fields. Saravanan Vijayakumaran Department of Electrical Engineering Indian Institute of Technology Bombay

RINGS: SUMMARY OF MATERIAL

Coding Theory and Applications. Solved Exercises and Problems of Cyclic Codes. Enes Pasalic University of Primorska Koper, 2013

A connection between number theory and linear algebra

Galois Theory TCU Graduate Student Seminar George Gilbert October 2015

LECTURE NOTES IN CRYPTOGRAPHY

MATH 3030, Abstract Algebra Winter 2012 Toby Kenney Sample Midterm Examination Model Solutions

Factorization in Polynomial Rings

7.1 Definitions and Generator Polynomials

EE 229B ERROR CONTROL CODING Spring 2005

Extension fields II. Sergei Silvestrov. Spring term 2011, Lecture 13

Introduction to finite fields

Algebra Review 2. 1 Fields. A field is an extension of the concept of a group.

Abstract Algebra: Chapters 16 and 17

Page Points Possible Points. Total 200

Cyclic Codes from the Two-Prime Sequences

1 Rings 1 RINGS 1. Theorem 1.1 (Substitution Principle). Let ϕ : R R be a ring homomorphism

School of Mathematics and Statistics. MT5836 Galois Theory. Handout 0: Course Information

Foundations of Cryptography


ECEN 5682 Theory and Practice of Error Control Codes

Mathematics for Cryptography

Supplement. Dr. Bob s Modern Algebra Glossary Based on Fraleigh s A First Course on Abstract Algebra, 7th Edition, Sections 0 through IV.

ϕ : Z F : ϕ(t) = t 1 =

but no smaller power is equal to one. polynomial is defined to be

Finite Fields. Sophie Huczynska (with changes by Max Neunhöffer) Semester 2, Academic Year 2012/13

Chapter 4 Mathematics of Cryptography

Graduate Preliminary Examination

Part IX. Factorization

Galois Theory, summary

Idempotent Generators of Generalized Residue Codes

CHAPTEER - TWO SUBGROUPS. ( Z, + ) is subgroup of ( R, + ). 1) Find all subgroups of the group ( Z 8, + 8 ).

ECEN 5022 Cryptography

Homework 8 Solutions to Selected Problems

Fields and Galois Theory. Below are some results dealing with fields, up to and including the fundamental theorem of Galois theory.

Algebraic Cryptography Exam 2 Review

Section X.55. Cyclotomic Extensions

TC10 / 3. Finite fields S. Xambó

Algebra Homework, Edition 2 9 September 2010

Math 429/581 (Advanced) Group Theory. Summary of Definitions, Examples, and Theorems by Stefan Gille

Outline. MSRI-UP 2009 Coding Theory Seminar, Week 2. The definition. Link to polynomials

CSIR - Algebra Problems

Math 250: Higher Algebra Representations of finite groups

ALGEBRA PH.D. QUALIFYING EXAM September 27, 2008

Automorphisms and bases

Abstract Algebra, Second Edition, by John A. Beachy and William D. Blair. Corrections and clarifications

MATH 431 PART 2: POLYNOMIAL RINGS AND FACTORIZATION

1. Group Theory Permutations.

Galois fields/1. (M3) There is an element 1 (not equal to 0) such that a 1 = a for all a.

Section V.8. Cyclotomic Extensions

Explicit Methods in Algebraic Number Theory

Finite Fields. Sophie Huczynska. Semester 2, Academic Year

The Galois group of a polynomial f(x) K[x] is the Galois group of E over K where E is a splitting field for f(x) over K.

Public-key Cryptography: Theory and Practice

Chapter 4 Finite Fields

Ph.D. Qualifying Examination in Algebra Department of Mathematics University of Louisville January 2018

Finite Fields and Error-Correcting Codes

Sample algebra qualifying exam

1 The Galois Group of a Quadratic

Section V.6. Separability

Algebra Exam, Spring 2017

1 Vandermonde matrices

ON VALUES OF CYCLOTOMIC POLYNOMIALS. V

Algebra Qualifying Exam, Fall 2018

a * (b * c) = (a * b) * c Now, we introduce a useful algebraic system called a group.

RUDIMENTARY GALOIS THEORY

Galois groups of polynomials and the construction of finite fields

A PROOF OF BURNSIDE S p a q b THEOREM

THE JOHNS HOPKINS UNIVERSITY Faculty of Arts and Sciences FINAL EXAM - SPRING SESSION ADVANCED ALGEBRA II.

Section 19 Integral domains

Algebra Review. Instructor: Laszlo Babai Notes by Vincent Lucarelli and the instructor. June 15, 2001

Rings and Fields Theorems

Finite Fields. Mike Reiter

Math 547, Exam 2 Information.

Classification of Finite Fields

MATH 361: NUMBER THEORY TENTH LECTURE

Field Theory Qual Review

CHAPTER 14. Ideals and Factor Rings

Coding Theory ( Mathematical Background I)

AN INTRODUCTION TO THE THEORY OF FIELD EXTENSIONS

Field Theory Problems

GALOIS THEORY. Contents

CHAPTER I. Rings. Definition A ring R is a set with two binary operations, addition + and

Reducibility of Polynomials over Finite Fields

Algebra Qualifying Exam Solutions. Thomas Goller

A family Of Cyclic Codes Over Finite Chain Rings

Factorization in Integral Domains II

Definitions. Notations. Injective, Surjective and Bijective. Divides. Cartesian Product. Relations. Equivalence Relations

Transcription:

S-72.3410 Finite Fields (2) 1 S-72.3410 Finite Fields (2) 3 Irreducible Polynomials Finite Fields of Order p m (1) The following results were discussed in the previous lecture: The order of a finite field is a prime power. There is a unique finite field for each such order. If the order of a finite field is a prime p, onemayacton {0, 1,...,p 1} with addition and multiplication modulo p. The case p m, m>1, is (somewhat) more complicated. In the sequel, p is always a prime. A polynomial f(x) GF(q)[x] isirreducible if f(x) cannotbe factored into a product of lower-degree polynomials in GF(q)[x]. Otherwise, it is said to be reducible. Example 1. The polynomial x 3 +1 GF(3)[x] is not irreducible (a factoring is given in the previous example). Example 2. The polynomial x 2 + x +1 GF(2)[x] is irreducible, but x 2 + x +1 GF(4)[x] is not. (Irreducibility in GF(2)[x] follows as x (x +1)=x 2 + x, (x +1) (x +1)=x 2 +1,andx x = x 2.) The term irreducible must be used only with respect to a specific ring. S-72.3410 Finite Fields (2) 2 S-72.3410 Finite Fields (2) 4 Primitive Polynomials Finite Fields of Order p m (2) The collection of all polynomials a n x n + a n 1 x n 1 + + a 1 x + a 0 with arbitrary degree and a i GF(q) isdenotedbygf(q)[x]. (Earlier example: these polynomials form a commutative ring with identity.) Example. We consider GF(3)[x]: (x 3 +2x 2 +1)+(x 2 + x +1)=x 3 +3x 2 + x +2=x 3 + x +2, (x +1) (x 2 +2x +1)=x 3 +2x 2 + x + x 2 +2x +1=x 3 +1. An irreducible polynomial f(x) GF(p)[x] of degree m is primitive if the smallest n for which f(x) divides x n 1is n = p m 1. (It can be shown that f(x) always divides x pm 1 1.) Example. The polynomial x 3 + x +1 GF(2)[x] is primitive, since it is irreducible and does not divide any of x 4 1, x 5 1, and x 6 1(p m 1=2 3 1=7). NOTE!!! In GF(2), 1 = 1. Example. In GF(2)[x], x 7 1=x 7 +1. There are φ(2 m 1)/m binary primitive polynomials of degree m; for small values of m, see [Wic, Appendix A].

S-72.3410 Finite Fields (2) 5 S-72.3410 Finite Fields (2) 7 A Finite Field as a Vector Space Constructing a Field of Order p m Let p be a prime and m>1. 1. Take a primitive polynomial f(x) ofdegreem in GF(p)[x], and let α be a root of f(x) (f(α) =0). 2. The elements of the field are 0, 1=α 0,α 1,...,α pm 2 taken modulo f(α). 3. Carry out addition and multiplication modulo f(α). Note: We do not explicitly solve f(α) =0forα. The polynomial representation for GF(p m ) has coefficients in the ground field GF(p). Therefore, one may interpret GF(p m )asa vector space over GF(p). Example. GF(4). 0 (0, 0) 1 (0, 1) α (1, 0) α 2 = α +1 (1, 1) A field of prime power order GF(p m ) is often called an extension of GF(p). S-72.3410 Finite Fields (2) 6 S-72.3410 Finite Fields (2) 8 Example: Constructing GF(4) We take the primitive polynomial f(x) =x 2 + x +1 GF(2)[x], and let α be a root of f(x). Then α 0 =1,α 1 = α, andα 2 = α +1 (and α 3 = α(α +1)=α 2 + α =1). + 0 1 α α+1 0 0 1 α α+1 1 1 0 α+1 α α α α+1 0 1 α+1 α+1 α 1 0 0 1 α α+1 0 0 0 0 0 1 0 1 α α+1 α 0 α α+1 1 α+1 0 α+1 1 α Computing in Fields (1) Addition is direct if one considers polynomials modulo f(α) =vectorsovergf(p). Multiplication is direct if one represent the elements of the field as 0 and α i,0 i p m 2. But: In neither of these cases can the other operation be carried out in a direct way.

S-72.3410 Finite Fields (2) 9 S-72.3410 Finite Fields (2) 11 Minimal Polynomials Computing in Fields (2) The study of algorithms for operating on fields is one of most important research topics in computational algrebra with many important applications (in coding, cryptography, etc.). Two possibilities if the field is relatively small: Construct a look-up table of size q q. Use so-called Zech logarithms; this requires a table of size q. Let α GF(q m ). The minimal polynomial of α with respect to GF(q) is the smallest-degree nonzero polynomial f(x) GF(q)[x] such that f(α) =0. Theorem 3-2. For each α GF(q m ) there exists a unique monic polynomial f(x) GF(q)[x] of minimal degree such that 1. f(α) =0, 2. deg(f(x)) m, 3. g(α) = 0 implies that g(x) is a multiple of f(x), 4. f(x) is irreducible in GF(q)[x]. Another definition for primitive polynomials: the minimal polynomials for primitive elements in a Galois field. S-72.3410 Finite Fields (2) 10 S-72.3410 Finite Fields (2) 12 Subfields Conjugates of Field Elements A subset S GF(p m ) that is a field is called a subfield of GF(p m ). Every field GF(p m ) has itself as subfield; any other subfield is called proper. Theorem. The subfields of GF(p m ) are exactly the fields GF(p a ) where a m. Example. GF(64) = GF(2 6 ) contains GF(2 1 ), GF(2 2 ), GF(2 3 ), and GF(2 6 ) as subfields. Motivation: If we want a polynomial f(x) GF(q)[x] tohavea root α GF(q m ), what other roots must the polynomial have? The conjugates of α GF(q m ) with respect to the subfield GF(q) are the elements α q0 = α, α q1,α q2,..., which form the conjugacy class of α with respect to GF(q). Theorem 3-3. The conjugacy class of α GF(q m ) with respect to GF(q) contains d elements (that is, α qd = α) withd m.

S-72.3410 Finite Fields (2) 13 Conjugacy Classes and Roots Example. By Theorems 2-10 and 2-12, the orders of elements in GF(16) are 1, 3, 5, and 15. Let α be an element of order 3. The conjugates of α with respect to GF(2) are α, α 2,α 22 = α 3 α = α, so the conjugacy class is {α, α 2 }. Theorem 3-4. Let α GF(q m )andletf(x) be the minimal polynomial of α with respect to GF(q). The roots of f(x) are exactly the conjugates of α with respect to GF(q). Corollary. All the roots of an irreducible polynomial have the same order. S-72.3410 Finite Fields (2) 15 Factoring x n 1 (1) Theorem 3-5. The nonzero elements in GF(q m )formthe complete set of roots of x (qm 1) 1=0. Proof: For an arbitrary α GF(q m ), ord(α) (q m 1) by Theorem 2-10, and therefore α is a root of x (qm 1) 1=0. Moreover, the equation x (qm 1) 1=0isofdegree(q m 1) and can therefore have at most (q m 1) roots. Therefore, the nonzero elements of GF(q m ) comprise the complete set of roots. Example. Factorization of x 7 1inGF(2)[x]. Using the results on the previous slide, x 7 1=(x +1)(x 3 + x +1)(x 3 + x 2 +1). S-72.3410 Finite Fields (2) 14 Example: Minimal Polynomials for GF(8) Let α be root of the primitive polynomial x 3 + x +1 GF[2](x). Then the elements of GF(8) are 0=0,α 0 =1,α 1 = α, α 2 = α 2, α 3 = α +1,α 4 = α 2 + α, α 5 = α 2 + α +1,α 6 = α 2 +1. Conjugacy class Minimal polynomial {0} M (x) =x 0=x {α 0 =1} M 0 (x) =x 1=x +1 {α, α 2,α 4 } M 1 (x) =(x α)(x α 2 )(x α 4 )=x 3 + x +1 {α 3,α 6,α 5 } M 3 (x) =(x α 3 )(x α 6 )(x α 5 )=x 3 + x 2 +1 S-72.3410 Finite Fields (2) 16 Factoring x n 1 (2) We now know how to factor x (qm 1) 1 into irreducible polynomials in the ring GF(q)[x]. What about the general case (x n 1)? All roots of (x n 1) are nth roots of unity. We need to 1. identify the field where we can find all of these roots, 2. separate the roots into conjugacy classes, and 3. compute the minimal polynomials of the nth roots of unity. If we have an element β GF(p m )ofordern, then the solutions to x n 1=0are1,β,β 2,...,β n 1.Thesedistinct elements of order n are often called primitive nth roots of unity. How to find β and the order of the field?

S-72.3410 Finite Fields (2) 17 S-72.3410 Finite Fields (2) 19 Factoring x n 1 (3) By Theorem 2-12, we know that if n (p m 1), then there are φ(n) > 0 elements of order n in GF(p m ). The order of q modulo n is the smallest integer m such that n (q m 1). Example. Since 5 (2 1 1), 5 (2 2 1), 5 (2 3 1), 5 (2 4 1), GF(16) is the smallest binary extension field in which one may find primitive 5th roots of unity (and the order of 2 modulo 5 is 4). Cyclotomic Cosets The cyclotomic cosets modulo n with respect to GF(q) constitute a partitioning of the integers into sets of the form {a, aq, aq 2,...,aq d 1 }. Example. Cyclotomic cosets modulo 25 with respect to GF(2) (cf. previous example): {0}, {1, 2, 4, 8, 16, 7, 14, 3, 6, 12, 24, 23, 21, 17, 9, 18, 11, 22, 19, 13}, {5, 10, 20, 15}. S-72.3410 Finite Fields (2) 18 S-72.3410 Finite Fields (2) 20 Example: Factoring x 25 1 in GF(2)[x] Let β be a primitive 25th root of unity. The order of 2 modulo 25 is 20, so we consider GF(2 20 ). The 25 roots of x 25 1=0canbe grouped into the following conjugacy classes with respect to GF(2): {1}, {β,β 2,β 4,β 8,β 16,β 7,β 14,β 3,β 6,β 12,β 24,β 23,β 21,β 17,β 9,β 18,β 11, β 22,β 19,β 13 }, {β 5,β 10,β 20,β 15 }. Consequently, x 25 1 factors into three irreducible binary polynomials: one of degree one (x 1), one of degree four, and one of degree twenty. Polynomials Modulo f(x) Earlier result: If the ring of integers is reduced modulo m, thenwe get a field if m is a prime, and a commutative ring with identity otherwise. What if rings of polynomials are reduced modulo a polynomial f(x)? The ring of polynomials GF(q)[x] modulo f(x) is usually denoted by GF(q)[x]/f(x). Theorem 3-6. If p(x) GF(q)[x] is an irreducible polynomial, then GF(q)[x]/p(x) isafield.

S-72.3410 Finite Fields (2) 21 S-72.3410 Finite Fields (2) 23 Ideals Let R be a ring. A nonempty subset I R is said to be an ideal if Some Properties of Ideals 1. I forms a group under the additive operation in R. 2. For all a I and all r R, r a I and a r I. Example 1. In any ring R, {0} and R are ideals. These are the trivial ideals. Example 2. Let R n =GF(2)[x]/(x n +1). Theset {0,x 4 + x 3 + x 2 + x +1} forms an ideal in R 5. (Note that x 5 +1=(x 4 + x 3 + x 2 + x +1)(x + 1).) Theorem 3-7. Let I be an ideal in GF(q)[x]/(x n 1). Then the following hold: 1. There exists a unique monic polynomial g(x) I of minimal degree. 2. The ideal I is principal with generator g(x). 3. The polynomial g(x) divides (x n 1) in GF(q)[x]. S-72.3410 Finite Fields (2) 22 Principal Ideals An ideal I contained in a ring R is said to be a principal ideal if there exists g I such that every element c I canbeexpressedas m g for some m R. The element g is commonly called a generator element, and the ideal generated by g is denoted by g. Ideals in GF(q)[x]/(x n 1) play a central role in the theory of linear cyclic codes.