Bourbaki

§ 12. Finite fields

1. The structure of finite fields

Proposition 1

— Let K be a finite field with q elements.

a) The characteristic of K is a prime number p, and there exists an integer f \geq 1 such that q = p^f.

b) The additive group of K is a direct sum of f cyclic groups of order p.

c) The multiplicative group of K is cyclic of order q - 1.

Since Z is infinite and K finite, the unique ring homomorphism \varphi : Z \to K is not injective and its kernel is a prime ideal of Z not equal to 0. Therefore the characteristic of K is a prime number and K is an algebra over the field \mathbf{F}_p of p elements (V, p. 2). Let f be the degree of K over \mathbf{F}_p. If f were infinite, K would contain, for each integer n \geq 0 a subspace of dimension n over \mathbf{F}_p, whence q \geq p^n, which is absurd. Therefore f is finite. The additive group of K is thus isomorphic to (\mathbf{F}_p)^f, whence the assertions a) and b).

Assertion c) follows by Lemma 1 (V, p. 78).

Proposition 2

— Let K be a finite field of q elements. The field K is a splitting field of the polynomial X^q - X of \mathbf{F}_p[X] and it is the set of all roots of this polynomial.

1 In agreement with the conventions of this chapter we shall only be concerned here with finite commutative fields. In fact, every finite field is commutative, as we shall see in Chapter VIII (cf. V, p. 170, Exercise 14).

For every x≠0x \neq 0 in KK we have xq−1=1x^{q-1} = 1 because K∗K^* is a finite group of order q−1q-1 (I, p. 52). It follows that xq=xx^q = x for each xx in KK. The polynomial Xq−XX^q - X of Fp[X]\mathbf{F}_p[X] is of degree qq and it has qq roots in KK, whence

Xq−X=∏ξ∈K(X−ξ). X^q - X = \prod_{\xi \in K} (X - \xi).

Proposition 2 follows at once from this.

Corollary

— *Two finite fields of the same cardinal are isomorphic.

Let K′K' be a finite field of qq elements; its characteristic is a prime number p′p' dividing q=pfq = p^f, whence p′=pp' = p. Therefore K′K' is a splitting field of the polynomial Xq−XX^q - X in Fp[X]\mathbf{F}_p[X] (Prop. 2), and so KK and K′K' are isomorphic (V, p. 22, Cor.).

When K=FpK = \mathbf{F}_p, Formula (1) reduces to the relation

Xp−X≡∏i=0p−1(X−i)mod  pZ[X] X^p - X \equiv \prod_{i=0}^{p-1} (X - i) \mod p \mathbf{Z}[X]

in the polynomial ring Z[X]\mathbf{Z}[X].

Formula (2) may also be written

Xp−1−1≡∏i=1p−1(X−i)mod  pZ[X] X^{p-1} - 1 \equiv \prod_{i=1}^{p-1} (X - i) \mod p \mathbf{Z}[X]

In particular for X=0X = 0 we obtain (« Wilson's formula »)

(p−1)!≡−1mod  p (p-1)! \equiv -1 \mod p

2. Algebraic extensions of a finite field

Proposition 3

— *Let KK be a finite field of qq elements, Ω\Omega an algebraically closed extension of KK and mm an integer ⩾1\geqslant 1. a) There exists a unique subextension KmK_m of Ω\Omega which is of degree mm over KK. b) The field KmK_m has qmq^m elements and is the set of fixed points of the automorphism x↦xqmx \mapsto x^{q^m} of Ω\Omega. c) We have Km=K(ζ)K_m = K(\zeta) for every generator ζ\zeta of the cyclic group Km∗K_m^*. Let pp be the characteristic of KK and ff the degree of KK over Fp\mathbf{F}_p. We have qm=pfmq^m = p^{fm} and the mapping x↦xqmx \mapsto x^{q^m} is thus an automorphism of the perfect field Ω\Omega (V, p. 7, Prop. 4). Therefore the set KmK_m of roots of the polynomial Xqm−XX^{q^m} - X of K[X]K[X] is a subfield of Ω\Omega. Since the derivative of Xqm−XX^{q^m} - X is equal to −1-1, all the roots of this polynomial are simple (IV, p. 17, Prop. 7) and so KmK_m has qmq^m elements. It follows that [Km:K]=m[K_m : K] = m.

Now let L be a subextension of Ω\Omega, of degree mm over KK. As vector space over KK, LL is isomorphic to KmK^m and so has qmq^m elements. We thus have xqm=xx^{q^m} = x for all x∈Lx \in L (Prop. 2), whence L⊂KmL \subset K_m. Since [L:K]=[Km:K]=m[L : K] = [K_m : K] = m, we finally have L=KmL = K_m.

We have thus proved Assertions a) and b), and c) is trivial.

Corollary

— *Let KK be a finite field and Ω\Omega an algebraically closed extension of KK. The relative algebraic closure K‾\overline{K} of KK in Ω\Omega consists of () and roots of unity and is an algebraic closure of KK.

We know KK to be an algebraic closure of KK (V, p. 22, Example 2) and it is clear that every root of unity in Ω\Omega belongs to KK. Further, given x≠0x \neq 0 in K‾\overline{K}, of degree mm over KK, if KK has qq elements, then the field K(x)K(x) has qmq^m, whence xqm−1=1x^{q^m - 1} = 1, and so xx is a root of unity in Ω\Omega.

Let pp be a prime number and let Fp=Z/pZ\mathbf{F}_p = \mathbf{Z}/p\mathbf{Z} be the field of pp elements. We choose an algebraic closure Ω\Omega of Fp\mathbf{F}_p, whose existence follows from Steinitz's theorem (V, p. 23, Th. 2). Let ff be a positive integer and q=pfq = p^f. By Prop. 3 there exists a unique subfield of Ω\Omega which is of degree ff over Fp\mathbf{F}_p; we shall denote it by Fq(Ω)\mathbf{F}_q(\Omega) or by abuse of notation Fq\mathbf{F}_q. It is the unique subextension of Ω\Omega which has degree ff over Fp\mathbf{F}_p. It is the unique subfield of Ω\Omega of cardinal qq, and every field of cardinal qq is isomorphic (not canonically) to Fq\mathbf{F}_q (Cor. of Prop. 2). We note that Fq\mathbf{F}_q consists of those xx in Ω\Omega for which xq=xx^q = x and that F,⊂Fq′F, \subset \mathbf{F}_{q'} if and only if q′q' is a power of qq.

Proposition 4

— *Let K\mathbf{K} be a finite field of qq elements and Km\mathbf{K}_m an extension of finite degree mm of KK.

a) The field Km\mathbf{K}_m is a Galois extension of KK whose Galois group is the cyclic group of order mm generated by the automorphism σq:x↦xq\sigma_q : x \mapsto x^q.

b) For each x∈Kmx \in \mathbf{K}_m the norm of xx with respect to KK is equal to x(qm−1)/(q−1)x^{(q^m - 1)/(q - 1)}.

c) Every element of KK is the trace (resp. norm) of an element of Km\mathbf{K}_m.*

Let Γ\Gamma be the cyclic group of automorphisms of Km\mathbf{K}_m generated by σq\sigma_q. The field of invariants of Γ\Gamma consists of the elements xx of Km\mathbf{K}_m such that xq=xx^q = x, hence is equal to KK. Therefore Km\mathbf{K}_m is a Galois extension of KK with Galois group Γ\Gamma, and this latter has order equal to [Km:K]=m[K_m : K] = m (V, p. 66, Th. 3). Thus a) follows.

We have Γ={1,σq,σq2,…,σqm−1}\Gamma = \{1, \sigma_q, \sigma_q^2, \ldots, \sigma_q^{m-1}\}; the norm of an element xx of Km\mathbf{K}_m with respect to KK is thus N(x)=∏i=0m−1σqi(x)=x1+q+⋯+qm−1N(x) = \prod_{i=0}^{m-1} \sigma_q^i(x) = x^{1 + q + \cdots + q^{m-1}} and we have 1+q+⋯+qm−1=qm−1q−11 + q + \cdots + q^{m-1} = \frac{q^m - 1}{q - 1}. This proves b). Let ξ\xi be a generator of the cyclic group Km∗\mathbf{K}_m^*; the image of the norm N:Km∗→K∗N : \mathbf{K}_m^* \to K^* is the cyclic subgroup of K∗K^* generated by the element ξ=N(ξ)=ξ(qm−1)/(q−1)\xi = N(\xi) = \xi^{(q^m - 1)/(q - 1)}; since ξ\xi is of order qm−1q^m - 1, ξ\xi is of order q−1q - 1, and so generates K∗K^*. This proves that every non-zero element of K is norm of a non-zero element of K ; moreover, we have 0=N(0)0 = N(0).

Finally since KmK_m is a separable algebraic extension of K, the trace is a non-zero linear form on the vector space KmK_m over K (V, p. 49, Cor.) ; so every element of K is the trace of an element of KmK_m.

3. The Galois group of the algebraic closure of a finite field

Let S≠{1}S \neq \{1\} be a set of integers ≥1\geq 1 stable under multiplication ; we shall order it by the relation « m divides n ». When m divides n, we have mZ⊃nZm\mathbf{Z} \supset n\mathbf{Z}, hence there is a canonical homomorphism πm,n\pi_{m,n} of the ring Z/nZ\mathbf{Z}/n\mathbf{Z} onto the ring Z/mZ\mathbf{Z}/m\mathbf{Z}. We denote by A(S)A(S) the inverse limit of the inverse system of rings (Z/mZ,πm,n)(\mathbf{Z}/m\mathbf{Z}, \pi_{m,n}) indexed by S. Each finite set Z/mZ\mathbf{Z}/m\mathbf{Z} is equipped with the discrete topology and A(S)A(S) with the topology induced by that of the product ∏n∈S(Z/nZ)\prod_{n \in S} (\mathbf{Z}/n\mathbf{Z}).

Then A(S)A(S) is a compact topological ring (Gen. Top. I, p. 64, Prop. 8). We see at once that the unique ring homomorphism φ\varphi of Z\mathbf{Z} into A(S)A(S) is injective with a dense image ; we shall identify Z\mathbf{Z} with its image under φ\varphi in A(S)A(S). For the topology induced on Z\mathbf{Z} by that of A(S)A(S), the sets mZm\mathbf{Z} (for m∈Sm \in S) form a base of neighbourhoods of 0.

When S=N∗S = \mathbf{N}^*, A(S)A(S) is written Z^\hat{\mathbf{Z}}. When S consists of the powers of a prime number ll, A(S)A(S) is written Zl\mathbf{Z}_l and is called « ring of I-adic integers ». We thus have

Z^=lim⁡←m≥1Z/mZ,Zl=lim⁡←n≥0Z/lnZ. \hat{\mathbf{Z}} = \lim_{\leftarrow m \geq 1} \mathbf{Z}/m\mathbf{Z} , \quad \mathbf{Z}_l = \lim_{\leftarrow n \geq 0} \mathbf{Z}/l^n\mathbf{Z} .

When S and T are two sets of integers stable under multiplication such that S⊃TS \supset T, we have a natural projection A(S)→A(T)A(S) \to A(T) which is a continuous homomorphism of topological rings. In particular, for every prime number ll we have a continuous homomorphism Z→Zl\mathbf{Z} \to \mathbf{Z}_l. From it we obtain a continuous homomorphism

Z^→∏lZl \hat{\mathbf{Z}} \to \prod_l \mathbf{Z}_l

(product extended over all prime numbers) ; this is an isomorphism of topological rings, as follows from the passage to the inverse limit in I, p. 112, Prop. 11.

Let K be a finite field of q elements and K an algebraic closure of K. For every integer m≥1m \geq 1 we denote by KmK_m the unique subfield of K which is of degree m over K (Prop. 3). We have K‾=⋃m≥1Km\overline{K} = \bigcup_{m \geq 1} K_m. Further we denote by σq\sigma_q the automorphism x↦xqx \mapsto x^q of the perfect field K‾\overline{K}; it is called the Frobenius automorphism of K (relative to K).

Proposition 5

— There exists a unique isomorphism of topological groups πK:Z→Gal(Kˉ/K)\pi_K : \mathbf{Z} \to \mathrm{Gal}(\bar{K}/K) such that πK(1)=σq\pi_K(1) = \sigma_q.

Let Γ\Gamma be the subgroup of Gal(Kˉ/K)\mathrm{Gal}(\bar{K}/K) generated by σq\sigma_q. For every integer m>0m > 0 we have σqm(x)=xqm\sigma_q^m(x) = x^{q^m} for all x∈Kˉx \in \bar{K}, hence the set of fixed points of σqm\sigma_q^m is equal to KK. Since K≠KˉK \neq \bar{K}, we have σqm≠1\sigma_q^m \neq 1. Hence there is an isomorphism π0\pi_0 of Z\mathbf{Z} onto Γ\Gamma which maps 1 to σq\sigma_q.

The field of invariants of Γ\Gamma consists of the x∈Kx \in K such that xq=xx^q = x, hence is equal to KK. Therefore (V, p. 67, Lemma 2) the group Γ\Gamma is dense in Gal(Kˉ/K)\mathrm{Gal}(\bar{K}/K). Since every subextension of Kˉ\bar{K} of finite degree over KK is one of the fields KmK_m, the subgroups Gal(Kˉ/Km)\mathrm{Gal}(\bar{K}/K_m) form a fundamental system of neighbourhoods of 1 in Gal(Kˉ/K)\mathrm{Gal}(\bar{K}/K). It is clear that Γ∩Gal(Kˉ/Km)\Gamma \cap \mathrm{Gal}(\bar{K}/K_m) is the cyclic group generated by σqm\sigma_q^m, hence equal to π0(mZ)\pi_0(m\mathbf{Z}).

From the above remarks about the topology of Z\mathbf{Z} the isomorphism π0:Z→Γ\pi_0 : \mathbf{Z} \to \Gamma extends in a unique fashion to an isomorphism of topological groups πK:Z→Gal(Kˉ/K)\pi_K : \mathbf{Z} \to \mathrm{Gal}(\bar{K}/K).

Let m≥1m \geq 1 be an integer; it is clear that the Frobenius automorphism of Kˉ\bar{K} relative to KK is σqm\sigma_q^m. Hence we obtain the relation

πKm(a)=πK(ma)for a∈Z. \pi_{K_m}(a) = \pi_K(ma) \quad \text{for } a \in \mathbf{Z}.

4. Cyclotomic polynomials over a finite field

Let KK be a finite field of qq elements, n≥1n \geq 1 an integer not divisible by the characteristic pp of KK and RnR_n, a cyclotomic extension of level nn of KK (V, p. 81). We know that the group μn(Rn)=μn\mu_n(R_n) = \mu_n of nn-th roots of unity in RnR_n, is cyclic of order nn, that Rn=K(μn)R_n = K(\mu_n) and that there exists an injective homomorphism

φn:Gal(Rn/K)→(Z/nZ)∗ \varphi_n : \mathrm{Gal}(R_n/K) \to (\mathbf{Z}/n\mathbf{Z})^*

such that σ(ζ)=ζj\sigma(\zeta) = \zeta^j for σ∈Gal(Rn/K)\sigma \in \mathrm{Gal}(R_n/K), ζ∈μn\zeta \in \mu_n and j∈φn(σ)j \in \varphi_n(\sigma).

Further, if ff is the degree of RnR_n over KK, then the Galois group of RnR_n over KK is cyclic of order ff, generated by the automorphism σq:x↦xq\sigma_q : x \mapsto x^q (V, p. 95, Prop. 4). We have at once:

Proposition 6

— The image under φn\varphi_n of the Frobenius automorphism σq\sigma_q is the residue class of qmod  nq \mod n.

Therefore, taking into account Prop. 6 of V, p. 84 :

Corollary

— The degree of RnR_n over KK is the least integer f≥1f \geq 1 such that qf≡1(modn)q^f \equiv 1 \pmod{n}. For the cyclotomic polynomial Φn\Phi_n to be irreducible over KK it is necessary and sufficient that the group (Z/nZ)∗(\mathbf{Z}/n\mathbf{Z})^* should be generated by the residue class of qq modulo nn.

Example 1

The polynomial Φ3(X)=X2+X+1\Phi_3(X) = X^2 + X + 1 is irreducible in Fq[X]F_q[X] if and only if q≡2(mod3)q \equiv 2 \pmod{3}. Likewise Φ4(X)=X2+1\Phi_4(X) = X^2 + 1 is irreducible in Fq[X]F_q[X] if and only if q≡3(mod4)q \equiv 3 \pmod{4} and for Φ5=X4+X3+X2+X+1\Phi_5 = X^4 + X^3 + X^2 + X + 1, the irreducibility condition reads q≡2, 3(mod5)q \equiv 2,\ 3 \pmod{5}.

Example 2

We have 52≡1(mod12)5^2 \equiv 1 \pmod{12}, hence the residue class of 5 (mod 12) does not generate (Z/12Z)∗(\mathbf{Z}/12\mathbf{Z})^*. So the polynomial Φ12(X)=X4−X2+1\Phi_{12}(X) = X^4 - X^2 + 1 is not irreducible in F5[X]F_5[X]; in fact we have

Φ5(X)=(X2+2X−1)(X2−2X−1) \Phi_5(X) = (X^2 + 2X - 1)(X^2 - 2X - 1)
in F5[X]F_5[X].

Exercises

See the exercises for § 12.

Transcribed from the printed edition, 2003, Springer. Not translated.