Académique Documents
Professionnel Documents
Culture Documents
Yunghsiang S. Han
Groups
Let G be a set of elements. A binary operation on G is a rule
that assigns to each pair of elements a and b a uniquely defined
third element c = a b in G.
A binary operation on G is said to be associative if, for any a,
b, and c in G,
a (b c) = (a b) c.
A set G on which a binary operation is defined is called a group
if the following conditions are satisfied:
1. The binary operation is associative.
2. G contains an element e, an identity element of G, such that,
for any a G,
a e = e a = a.
3. For any element a G, there exists another element a G
such that
a a = a a = e.
a and a are inverse to each other.
A group G is called to be commutative if its binary operation
also satisfies the following condition: for any a and b in G,
a b = b a.
Properties of Groups
The identity element in a group G is unique.
Proof: Suppose there are two identity elements e and e in G.
Then
e = e e = e.
Example of Groups
(Z, +). e = 0 and the inverse of i is i.
(Q {0}, ). e = 1 and the inverse of a/b is b/a.
({0, 1}, ), where is exclusive-OR operation.
The order of a group is the number of elements in the group.
Additive group: ({0, 1, 2, . . . , m 1}, ), where m Z + , and
i j i + j mod m.
(i j) k = i (j k).
e = 0.
0 < i < m, m 1 is the inverse of i.
i j = j i.
Multiplicative group: ({1, 2, 3, . . . , p 1}, ), where p is a prime
and i j i j mod p.
Subgroups
H is said to be a subgroup of G if (i) H G and H = . (ii) H is
closed under the group operation of G and satisfies all the
conditions of a group.
Let G = (Q, +) and H = (Z, +). Then H is a subgroup of G.
Fields
Let F be a set of elements on which two binary operations, called
addition + and multiplication , are defined. The set F
together with the two binary operations + and is a field if the
following conditions are satisfied:
1. (F, +) is a commutative group. The identity element with
respect to addition is called the zero element or the additive
identity of F and is denoted by 0.
2. (F {0}, ) is a commutative group. The identity element
with respect to multiplication is called the unit element or the
multiplicative identity of F and is denoted by 1.
3. Multiplication is distributive over addition; that is, for any
three elements a, b and c in F ,
a (b + c) = a b + a c.
Properties of Fields
a F, a 0 = 0 a = 0.
Proof: a = a 1 = a (1 + 0) = a + a 0.
0 = a + a = a + (a + a 0). Hence, 0 = 0 + a 0 = a 0.
Let a, b F and a, b = 0. Then a b = 0.
a b = 0 and a = 0 imply that b = 0.
a, b F , (a b) = (a) b = a (b).
Proof: 0 = 0 b = (a + (a)) b = a b + (a) b. Similarly, we
can prove that (a b) = a (b).
Cancellation law: a = 0 and a b = a c imply that b = c.
Proof: Since a = 0, a1 (a b) = a1 (a c). Hence,
(a1 a) b = (a1 a) c, i.e., b = c.
Examples of Fields
(R, +, ).
({0, 1}, , ), binary field (GF (2)).
({0, 1, 2, 3 . . . , p 1}, , ), prime field (GF (p)), where p is a
prime.
There is a prime field for any prime.
It is possible to extend the prime field GF (p) to a field of pm
elements, GF (pm ), which is called an extension field of GF (p).
Finite fields are also called Galois fields.
nm
Hence, 1 = 0.
i=1
There must exist a smallest positive integer such that 1 = 0.
i=1
This integer is called the characteristic of the field GF (q).
is a prime.
k
m
Then 1 = 0 or 1 = 0. Contradiction.
i=1 i=1
k
m
1 = 1 for any k, m < and k = m.
i=1 i=1
1
2
1
1= 1, 1, . . . , 1, 1 = 0 are distinct elements in
i=1 i=1 i=1 i=1
GF (q). It cab be proved that these elements is a field, GF (),
under the addition and multiplication of GF (q). GF () is called
a subfield of GF (q).
If q = , then q is a power of .
Proof: We have GF () a subfield of GF (q). Let
1 GF (q) GF (). There are elements in GF (q) of the form
a1 1 , a1 GF (). Since = q, we choose 2 GF (q) not of the
form a1 1 . There are 2 elements in GF (q) of the form
a1 1 + a2 2 . If q = 2 , we are done. Otherwise, we continue in
this fashion and will exhaust all elements in GF (q).
Let a be a nonzero element in GF (q). Then the following powers
of a,
a1 = a, a2 = a a, a3 = a a a, . . .
must be nonzero elements in GF (q). Since GF (q) has only finite
number of elements, there must exist two positive integers k and
m such that k < m and ak = am . Hence, amk = 1.
There must exist a smallest positive integer n such that an = 1.
n is called the order of the finite field element a.
Graduate Institute of Communication Engineering, National Taipei University
Y. S. Han Finite fields 14
(a b1 ) (a b2 ) (a bq1 ) = b1 b2 bq1 .
Then,
aq1 (b1 b2 bq1 ) = b1 b2 bq1 ,
and then aq1 = 1.
Contradiction.
Primitive Element
In GF (q), a nonzero element a is said to be primitive if the order
of a is q 1.
The powers of a primitive element generate all the nonzero
elements of GF (q).
Every finite field has a primitive element.
Proof: Assume that q > 2. Let h = pr11 pr22 prmm be the prime
factor decomposition of h = q 1. For every i, the polynomial
xh/pi 1 has at most h/pi roots in GF (q). Hence, there is at
least one nonzero element in GF (q) that are not a root of this
polynomial. Let ai be such an element and set
r
h/(pi i )
bi = ai .
r
pi i
We have bi = 1 and the order of bi is a divisor of pri i .
h/p
Now, for 1 < i, pri i divides h/p1 , and hence bi 1 = 1. Therefore,
h/p
b1 1 = 1. This implies that the order of b1 must divide h/p1 .
Contradiction.
Consider GF (7). We have
31 = 3, 32 = 2, 33 = 6, 34 = 4, 35 = 5, 36 = 1.
41 = 4, 42 = 2, 43 = 1
Proof:
f 2 (x) = (f0 + f1 x + + fn xn )2
= [f0 + (f1 x + f2 x2 + + fn xn )]2
= f02 + (f1 x + f2 x2 + + fn xn )2
Construction of GF (2m )
Initially, we have two elements 0 and 1 from GF (2) and a new
symbol . Define a multiplication as follows:
1.
0 0 = 0, 01=10=0 11=1
0 = 0 = 0, 1=1=
2. 2 = 3 = j = (j times)
3. F = {0, 1, , 2 , . . . , j , . . .}.
Let p(x) be a primitive polynomial of degree m over GF (2).
2m 1
Assume that p() = 0. Since p(x)|x + 1,
x2 1 + 1 = q(x)p(x). Hence,
m
for i < 2m 1.
Let
2m 2
F = {0, 1, , , . . . ,
2
}.
It can be proved that F {0} is a communicative group under
.
2m 2
1, , , . . . ,
2
represent 2m 1 distinct elements.
Next we define an additive operation + on F such that F
forms a communicative group under +.
For 0 i < 2m 1, we have
where
ai (x) = ai0 + ai1 x + ai2 x2 + + ai(m1) xm1 and aij {0, 1}.
2m 2
The 2 1 nonzero elements, , , , . . . ,
m 0 1
in F can be
2
0 + i = i + 0 = ,
! !2 !4 !8 !16 ! !
!3 !6 !12 !24 !48 ! !3
! !9
Representations of GF(24). p(z) = z4 + z + 1
Exponential Polynomial Binary Decimal Minimal
Notation Notation Notation Notation Polynomial
0 0 0000 0 x
!0 1 0001 1 x+1
!1 z 0010 2 x4 + x + 1
!2 z2 0100 4 x4 + x + 1
!3 z3 1000 8 x4 + x3 + x2 + x + 1
!4 z+1 0011 3 x4 + x + 1
!5 z2 + z 0110 6 x2 + x + 1
!6 z3 + z2 1100 12 x4 + x3 + x2 + x + 1
!7 z3 + z + 1 1011 11 x4 + x3 + 1
!8 z2 + 1 0101 5 x4 + x + 1
!9 z3 + z 1010 10 x4 + x3 + x2 + x + 1
!10 z2 + z + 1 0111 7 x2 + x + 1
!11 z3 + z2 + z + 1 1110 14 x4 + x3 + 1
!12 z3 + z2 + z + 1 1111 15 x4 + x3 + x2 + x + 1
!13 z3 + z2 + 1 1101 13 x4 + x3 + 1
!14 z3 + 1 1001 9 x4 + x3 + 1
GF(2) GF(3)
+ 0 1 * 0 1 + 0 1 2 * 0 1 2
0 0 1 0 0 0 0 0 1 2 0 0 0 0
1 1 0 1 0 1 1! 1 2 0 1 0 1 2
GF(2)[!] 2! 2 0 1 2 0 2 1
!2+ !+1 Primitive polynomial over GF(2)
GF(4) GF(22), p(x) = 1 + x + x2
( p(!) = 1 + ! + ! 2 = 0 )
+ 0 1 2 3 * 0 1 2 3
0 0 1 2 3 0 0 0 0 0 0 0 00 0
1! 1 0 3 2 1 0 3 1 2 1! 1 10 2
!! ! 01 1
2! 2 3 0 1 2 0 1 2 3
!2 1+ ! 11 3
3! 3 2 1 0 3 0 2 3 1
Properties of GF (2m )
In GF (2) x4 + x3 + 1 is irreducible; however, GF (24 ),
x4 + x3 + 1 = (x + 7 )(x + 11 )(x + 13 )(x + 14 ).
Let f (x) be a polynomial with coefficients from GF (2). Let be
an element in extension field GF (2m ). If is a root of f (x), then
2
for any 0, is also a root of f (x).
The element 2 is called a conjugate of .
The 2m 1 nonzero elements of GF (2m ) form all the roots of
x2 1 + 1.
m
m 2m 1
GF (2 ) form all the roots of x + 1.
2m
The elements of GF (2 ) form all the roots of x
m
+ x.
Let (x) be the polynomial of smallest degree over GF (2) such
that () = 0. The (x) is called the minimal polynomial of .
(x) is unique.
The minimal polynomial (x) of a field element is irreducible.
Proof: Suppose that (x) is not irreducible and that
(x) = 1 (x)2 (x), where degrees of 1 (x), 2 (x) are less than
that of (x). Since () = 1 ()2 () = 0, either 1 () = 0 or
2 () = 0. Contradiction.
Let f (x) be a polynomial over GF (2). Let (x) be the minimal
polynomial of a field element . If is a root of f (x), then f (x)
is divisible by (x).
Proof: Let f (x) = a(x)(x) + r(x), where the degree of r(x) is
less than that of (x). Since f () = () = 0, we have r() = 0.
Proof: Consider
[e1 ]2 e1
2 2i i
[f (x)] = (x + ) = (x + 2 )2 .
i=0 i=0
2i 2 2 2i+1
Since (x + ) = x + ,
2
e1
i+1
e
i
[f (x)] = (x2 + 2 )= (x2 + 2 )
i=0 i=1
[e1 ]
2 2i 2 2e
= (x + ) (x + )
i=1
e
Since 2 = , then
2
e1
i
[f (x)] = (x2 + 2 ) = f (x2 ).
i=0
[f (x)]2 = (f0 + f1 x + + fe xe )2
e e e
= fi2 x2i + (1 + 1) fi fj xi+j
i=0 i=0 j=0
i=j
e
= fi2 x2i .
i=0
fi = fi2 .
n = q (2m 1).
Then n = 2m 1. Consequently, 2 is also a primitive element
of GF (2m ).
If is an element of order n in GF (2m ), all its conjugates have
the same order n.
! !2 !4 !8 !16 ! !
!3 !6 !12 !24 !48 ! !3
! !9
Representations of GF(24). p(z) = z4 + z + 1
Exponential Polynomial Binary Decimal Minimal
Notation Notation Notation Notation Polynomial
0 0 0000 0 x
!0 1 0001 1 x+1
!1 z 0010 2 x4 + x + 1
!2 z2 0100 4 x4 + x + 1
!3 z3 1000 8 x4 + x3 + x2 + x + 1
!4 z+1 0011 3 x4 + x + 1
!5 z2 + z 0110 6 x2 + x + 1
!6 z3 + z2 1100 12 x4 + x3 + x2 + x + 1
!7 z3 + z + 1 1011 11 x4 + x3 + 1
!8 z2 + 1 0101 5 x4 + x + 1
!9 z3 + z 1010 10 x4 + x3 + x2 + x + 1
!10 z2 + z + 1 0111 7 x2 + x + 1
!11 z3 + z2 + z + 1 1110 14 x4 + x3 + 1
!12 z3 + z2 + z + 1 1111 15 x4 + x3 + x2 + x + 1
!13 z3 + z2 + 1 1101 13 x4 + x3 + 1
!14 z3 + 1 1001 9 x4 + x3 + 1