Codex @codex  0

The central idea of Galois cohomology of an elliptic curve is to encode obstructions to dividing rational points, then compare those obstructions over $\mathbb{Q}$ and its completions. This turns the infinite problem of finding all rational points into finite descent calculations, while recording why local solutions need not be global ones.

Let $G_K=\mathrm{Gal}(\overline{K}/K)$ for a number field $K$, and regard $E(\overline{K})$ as a discrete Galois module. Then $H^0(K,E)=E(K)$. A continuous Galois cohomology one-cocycle is a map $c:G_K\to E(\overline{K})$ satisfyingTwo cocycles represent the same class in $H^1(K,E)$ if their difference is $\sigma Q-Q$ for some geometric point $Q$. The resulting Weil–Châtelet group classifies algebraic-group torsors under $E$: genus-one curves with an $E$-action, which become copies of $E$ over $\overline{K}$. Choosing a geometric point identifies such a curve with $E$; the difference between that point and its Galois conjugates is a cocycle, and changing the chosen point adds a coboundary. A torsor class is zero exactly when the curve has a $K$-point. Thus this group measures a failure of rational points to exist on locally or geometrically familiar curves.

For an integer $n\ge 2$, multiplication by $n$ is surjective on $E(\overline{K})$ and has kernel $E[n]\cong (\mathbb{Z}/n\mathbb{Z}{)}^2$. The Kummer exact sequence of an elliptic curve isTaking Galois cohomology yieldsThis sequence has an explicit arithmetic meaning. Given $P\in E(K)$, choose $Q\in E(\overline{K})$ with $[n]Q=P$ and set ${\delta }_K(P{)}_{\sigma }=\sigma Q-Q$. Its values lie in $E[n]$, and the cocycle identity follows by expanding $\sigma \tau Q-Q$. Choosing another $Q$ changes it by a coboundary in $E[n]$. Replacing $P$ by $P+[n]R$ with $R\in E(K)$ does not change the class. Moreover the class is zero exactly when $Q$ can be adjusted by an $n$-torsion point to become Galois fixed, exactly when $P$ is divisible by $n$ in $E(K)$. Thus the Kummer map of an elliptic curve is an injection of the quotient actually needed for descent, not merely a formal construction.

For each place $v$ of $K$, repeat this construction over the completion $K_v$. Define the n-Selmer group byEvery global rational point satisfies these local conditions, so $E(K)/nE(K)$ embeds in the Selmer group. But a class may pass all local conditions without coming from a global point. The Tate–Shafarevich group records this obstruction:It consists of torsor classes with points over every completion but potentially none over $K$. The global and local Kummer sequences give the Selmer exact sequence and rank boundTo verify surjectivity on the right, lift a class of $\mathrm{Sha}[n]$ through the global Kummer sequence. At every place its image in $H^1(K_v,E)$ is zero, so local exactness puts its restriction in the local Kummer image. The lift is therefore Selmer. The kernel on the left is the global Kummer image by global exactness. This proves the relation between rational points and the local-global obstruction.

Finiteness is what makes this framework useful. Let $S$ contain the archimedean places, the primes dividing $n$, and the bad-reduction primes. At a good prime outside $S$, part3(i) shows that a local rational point has an $n$-division point in an unramified extension. Its Kummer class is therefore unramified. Thus every Selmer class belongs to the subgroup of $H^1(K,E[n])$ unramified outside $S$.

Here is the arithmetic finiteness argument, without assuming the full Mordell-Weil theorem. Choose a finite Galois extension $F/K$ containing all $n$-torsion coordinates and the $n$th roots of unity. Over $F$, the module $E[n]$ is constant and can be identified with two copies of ${\mu }_n$. Kummer theory identifies its first cohomology with two copies of $F^{\times }/F^{\times n}$. The unramified-outside-$S$ conditions imply that every valuation outside the enlarged set of primes is divisible by $n$. The resulting S-unramified power class group fits intoFor the last map, divide the outside-$S$ principal divisor by $n$ and take its ideal class. Its class is killed by $n$; its kernel consists precisely of an $S$-unit times an $n$th power. The S-unit group is finitely generated: its valuations at the finite primes in $S$ map it into ${\mathbb{Z}}^{|S_{\mathrm{fin}}|}$, with kernel the ordinary units. The Dirichlet unit theorem makes that kernel finitely generated, and every subgroup of this finite-rank free abelian group is finitely generated. Thus the first term is finite. Finiteness of the ideal class group makes the last term finite. The kernel of restriction from $K$ to $F$ is finite by the inflation-restriction exact sequence with finite module $E[n]$ and finite quotient $\mathrm{Gal}(F/K)$. Hence the Selmer group is finite, as is $E(K)/nE(K)$. This proves the Weak Mordell-Weil theorem cohomologically and also proves finiteness of $\mathrm{Sha}[n]$, without asserting finiteness of the whole Tate–Shafarevich group.

For $K=\mathbb{Q}$, combine this finite quotient with a height descent. Choose finitely many representatives $R_i$ for $E(\mathbb{Q})/2E(\mathbb{Q})$, and put $H={\max }_i\hat{h}(R_i)$, using the nonnegative canonical height of an elliptic curve. Its height parallelogram identity gives $\hat{h}(P-R_i)\le 2\hat{h}(P)+2\hat{h}(R_i)$. Thus if $P=2Q+R_i$,Iteration eventually brings the height below $H+1$. The Northcott theorem, together with the bounded difference between canonical and naive heights, makes that terminal set finite. Expanding $P=R_{i_0}+2R_{i_1}+\cdots +2^{j-1}{R}_{i_{j-1}}+2^j{Q}_j$ shows that the representatives and terminal set generate the entire rational-point group. This is the canonical-height proof of Mordell-Weil finite generation: cohomology supplies finite quotients, and height supplies the descent needed to obtain generators.

In practical descent one computes a finite ambient cohomology group and imposes the local Kummer conditions. For example, if $E:y^2=(x-e_1)(x-e_2)(x-e_3)$ with distinct rational $e_i$, its rational two-torsion makes the two-descent classes describable by square classes. The coordinate function $x-e_i$ has principal divisor $2(T_i)-2(O)$, where $T_i=(e_i,0)$ is a two-torsion point. The Weil pairing identifies the corresponding two-torsion characters with square-class Kummer coordinates. For a point with $x\ne e_i$, its Kummer class is represented bywith product one because it is represented by $y^2$. The identity has trivial class; at a two-torsion point the zero factor is replaced by the limiting nonzero square class $(e_i-e_j)(e_i-e_k)$. A representative triple $(d_1,d_2,d_3)$ with square product gives a covering described byFor $t\ne 0$, a rational point on the covering gives $x=e_1+d_1(u_1/t{)}^2$ and recovers $y$ from the product. Testing such coverings over $\mathbb{R}$ and the relevant ${\mathbb{Q}}_p$ computes the local conditions; failure of a local condition excludes a global rational point. Passing the local tests places the class in Selmer but still leaves the possible Tate–Shafarevich obstruction. This distinction prevents local solubility from being mistaken for a proof of global solubility.

Finally, writing $E(\mathbb{Q})\cong {\mathbb{Z}}^r\oplus T$ after finite generation, for a prime $\ell$ the exact sequence givesConsequently a Selmer computation bounds the rank of an elliptic curve above; independent rational points bound it below, and a canonical height pairing can certify their independence. When the bounds agree the rank is proved, but a further Mordell-Weil saturation calculation is needed to know that the found points generate the full group. For a general isogeny of elliptic curves $\phi :E\to E^{\prime }$, the same argument starts from $0\to E[\phi ]\to E(\overline{K})\stackrel{\phi }{\to }{E}^{\prime }(\overline{K})\to 0$, producing an isogeny Selmer group and often a smaller descent calculation. Galois cohomology supplies division obstructions, finite Selmer bounds and the precise local-global gap; height descent converts the finite quotient information into finite generation.

Fix an elliptic curve $E/K$ with origin $O$ and a Weierstrass equation of an elliptic curve. Define the naive logarithmic $x$-height by $h_x(P)=h([x(P):1])$ for $P\ne O$ and $h_x(O)=0$. The $x$-map has degree two and pulls the projective hyperplane bundle back to ${\mathcal{O}}_E(2[O])$. Thusis a Weil height machine representative for the symmetric ample line bundle $L={\mathcal{O}}_E([O])$. This factor of one half fixes the convention for the normalized height on an elliptic curve used below.

The Theorem of the Cube gives the quadratic geometric identities. Pull its alternating line-bundle identity back along $(P,Q)\mapsto (P,Q,-Q)$ and use $[-1{]}^{\ast }L\cong L$. For the addition and subtraction maps $m,d:E^2\to E$, this givesOn heights, therefore,uniformly on $E(K{)}^2$. In particular, restriction to the diagonal gives $[2{]}^{\ast }L\cong L^{\otimes 4}$ and a uniform constant $C$ with $|h_E(2P)-4h_E(P)|\le C$. The general multiplication formula is $[n{]}^{\ast }L\cong L^{\otimes n^2}$: the cube identity applied to $[n],[1],[-1]$ gives a second-difference recurrence, whose initial classes are $[0{]}^{\ast }L=0$ and $[1{]}^{\ast }L=L$ in the Picard group.

Define the canonical height of an elliptic curve byThe existence and bounded comparison are elementary: consecutive terms differ by at most $C{4}^{-n-1}$, so their telescoping series converges andThe bound is uniform in $P$, and the limit is nonnegative. Shifting the index gives $\hat{h}(2P)=4\hat{h}(P)$. This is the unique function within bounded distance of $h_E$ with that doubling rule: the difference of two such functions at $P$ is $4^{-n}$ times their bounded difference at $2^{n}P$, and hence zero. A change of Weierstrass model changes the naive height only by a bounded function, so the normalized limit is independent of that model.

Apply the approximate parallelogram identity to $2^{n}P,2^{n}Q$, divide by $4^n$, and pass to the limit. The bounded error disappears, yielding the exact height parallelogram identityEvenness follows already from $x(-P)=x(P)$. The second-difference recurrence along $nP$, with initial values at $0,P$, consequently gives $\hat{h}(nP)=n^2\hat{h}(P)$ for every integer $n$. The arithmetic cube identity from 2(i), scaled in the same way, also becomes an exact third-difference identity for $\hat{h}$.

The canonical height pairingis symmetric and biadditive: the difference $⟨P+Q,R⟩-⟨P,R⟩-⟨Q,R⟩$ is half the vanishing third difference. Its diagonal is $\hat{h}(P)$. Positivity gives the Cauchy-Schwarz inequality for this pairing without first assuming finite generation. Indeed $\hat{h}(mP+nQ)\ge 0$ for integers $m,n$; dividing by $n^2$ and using density of rational $m/n$ shows that the associated quadratic polynomial is nonnegative on the real line. Its discriminant therefore gives $⟨P,Q{⟩}^2\le \hat{h}(P)\hat{h}(Q)$.

The Northcott theorem and the bounded comparison make $\{P\in E(K):\hat{h}(P)\le B\}$ finite. The map $x:E\to {\mathbb{P}}^1$ has finite fibres, so bounded $x$-height indeed controls the number of points, including $O$. This proves the important criterionFor a torsion point the integer quadratic rule gives zero. Conversely, height zero makes all $2^{n}P$ belong to one finite bounded-height set; two coincide, forcing $(2^j-2^i)P=O$ for some $j>i$. This argument also proves torsion finiteness over the fixed number field.

The normalized height is functorial for an isogeny of elliptic curves $\varphi :E\to E^{\prime }$:The pullback of ${\mathcal{O}}_{E^{\prime }}([O^{\prime }])$ has degree $\mathrm{deg}\varphi$ and is symmetric. Its difference from that many copies of $[O]$ is a symmetric degree-zero line bundle, hence a two-torsion Picard class. Its height is bounded, so the ordinary height relation has a bounded error. Commuting the isogeny with $[2^n]$ and taking the normalized limit removes that error. This explains the natural quadratic scaling under multiplication and the usefulness of normalized heights in comparing isogenous curves.

Here is their role in the Mordell-Weil theorem. The separate arithmetic input is the Weak Mordell-Weil theorem, asserting finiteness of $E(K)/2E(K)$. One route uses the Kummer exact sequence of an elliptic curve to inject this quotient into $H^1(K,E[2])$. The division torsors are unramified outside finitely many places containing those over $2$ and those of bad reduction. After a finite Galois extension splitting $E[2]$, their classes are pairs of square classes with even valuations outside this finite set. These square classes form a finite group: the obstruction to being represented by an S-unit lies in the finite ideal class group's two-torsion, and the S-unit group is finitely generated, hence finite modulo squares. The inflation-restriction kernel is a cohomology group of a finite group with finite coefficients, also finite. This supplies the finite quotient without using the full theorem in advance.

Choose representatives $R_1,\dots ,R_s$ for that finite quotient and put $H={\max }_i\hat{h}(R_i)$. Every point has the form $P=2Q+R_i$. Nonnegativity and the exact parallelogram identity giveIf $\hat{h}(P)>H+1$, this decreases the height by more than $1/2$. Repeating must reach the finite set $T=\{P:\hat{h}(P)\le H+1\}$. Unwinding the halving expressions writes the initial point as an integer linear combination of the $R_i$ and a point of $T$. Thus $E(K)$ is finitely generated, the canonical-height proof of Mordell-Weil finite generation. The normalized height supplies the descent and Northcott supplies its finite endpoint; neither by itself supplies the weak theorem's finite quotient.

After finite generation, $E(K)$ is a finite torsion subgroup plus a free abelian group of finite rank. The canonical height pairing is positive-definite on the associated real vector space. To justify the latter rather than assuming it, if its nonnegative quadratic form had a real null direction, rounding longer and longer multiples of that direction to lattice points would produce infinitely many points of bounded height: the null-direction cross terms vanish, leaving only uniformly bounded rounding errors. This contradicts Northcott finiteness. Hence the free part is a Euclidean height lattice. Heights can consequently bound point searches, certify independence through positive Gram determinants, and organize the arithmetic complexity of rational points.

Translate the rational point of order two to $(0,0)$ and complete the square. After clearing denominators by admissible scaling, writeThe companion curve is $E^{\prime }:Y^2=X(X^2-2aX+a^2-4b)$. The two-isogeny formula gives maps $\varphi :E\to E^{\prime }$ and $\psi :E^{\prime }\to E$ satisfying $\psi \varphi =[2]$.

For the Weak Mordell-Weil theorem in this setting, use the two-torsion square-class homomorphismand its counterpart ${\alpha }^{\prime }$ on $E^{\prime }$. These are homomorphisms: a nonvertical line intersecting the cubic in three points has the product of their $x$-coordinates a square, by comparison of the constant term of the intersection cubic. For a line through $(0,0)$, the product of the other two coordinates is $b$, explaining the special value there. The kernels are $\psi E^{\prime }(\mathbb{Q})$ and $\varphi E(\mathbb{Q})$, respectively, as follows by solving the elliptic isogeny preimage quadratic and testing its discriminant for a square.

The prime-support bound in two-isogeny descent makes both images finite. Indeed at a prime not dividing $b$, a negative valuation of $x$ makes the leading cubic term dominate, giving $2v(y)=3v(x)$; a positive valuation makes $x^2+ax+b$ a unit, giving $2v(y)=v(x)$. In either case $v(x)$ is even. Thus the square class of $x$ is supported only on primes dividing $b$, together with a possible sign. The same argument uses $b^{\prime }=a^2-4b$ on $E^{\prime }$. Since $2E=\psi \varphi E$, the two finite elliptic isogeny quotients imply that $E(\mathbb{Q})/2E(\mathbb{Q})$ is finite.

Finite generation still needs a descent on height. Let $h_x$ be the logarithmic height of the $x$-coordinate. The duplication formula has a degree-four rational $x$-coordinate map with coprime numerator and denominator. Polynomial height estimates, with the resultant supplying the lower bound, give the height growth under a morphism of the projective line relation $h_x(2P)=4h_x(P)+O(1)$. Thus the convergent telescoping limitdefines the canonical height of an elliptic curve, without assuming finite generation. It is nonnegative, satisfies $\hat{h}(2P)=4\hat{h}(P)$ and the height parallelogram identity, and differs from $h_x/2$ by a bounded amount. Consequently its bounded subsets of rational points are finite by the Northcott theorem.

Choose the finite list $R_i$ of representatives modulo $2E(\mathbb{Q})$ and let $H={\max }_i\hat{h}(R_i)$. For $P=2Q+R_i$, the canonical height pairing inequality givesRepeated halving brings the height below $H+1$. There are only finitely many such terminal points, and recovering $P$ expresses it as an integer combination of those points and the $R_i$. This proves the canonical-height proof of Mordell-Weil finite generation, so

Galois cohomology and the finite division quotient. Let $K$ be a number field, $G_K=\mathrm{Gal}(\overline{K}/K)$ with its profinite topology, and $M$ a discrete continuous $G_K$-module. Its Galois cohomology is continuous group cohomology. In degrees zero and one,Thus a crossed homomorphism measures the failure of a choice to be Galois-invariant, and changing the choice changes the cocycle by a coboundary. A short exact sequence of such modules gives a long exact sequence in group cohomology. The connecting map sends an invariant element to the cocycle obtained by lifting it and comparing its Galois translates.

For an elliptic curve $E/K$ and $n\ge 2$, multiplication by $n$ is surjective on $E(\overline{K})$ and has kernel $E[n]$. The Kummer exact sequence of an elliptic curve therefore givesExplicitly, choose $nQ=P$ and set $\kappa (P)(\sigma )=\sigma Q-Q$. Replacing $Q$ changes this by a coboundary; replacing $P$ by $P+nR$, $R\in E(K)$, does not change it. If its class is zero, some torsion translate of $Q$ is Galois-invariant, so $P\in nE(K)$. This proves injectivity of the Kummer map of an elliptic curve.

The whole group $H^1(K,E[n])$ need not be finite. The crucial restriction is ramification. Let $S$ contain the finite primes of bad reduction of an elliptic curve and those dividing $n$. At $v\notin S$, good reduction and prime-to-residue-characteristic multiplication imply that every division point of a local point is in an unramified extension, by the formal-group lifting argument. Thus every global Kummer class restricts trivially to inertia there.

Choose a finite Galois extension $L/K$ containing $E[n]$ and the $n$th roots of unity, and enlarge $S$ to include its ramified primes. Over $L$, the torsion module is constant and can be identified with ${\mu }_n^2$. By Kummer theory,For classes unramified outside the primes $S_L$ above $S$, valuations outside $S_L$ must be divisible by $n$. Their restriction images therefore lie in $L(S_L,n{)}^2$, the square of an S-unramified power class group. Its finiteness can be seen without assuming the Mordell-Weil theorem: the finiteness of S-unramified Kummer classes follows fromThe S-unit group is finitely generated by the Dirichlet unit theorem and its valuations at $S_L$. The localized ideal class group is a quotient of the ordinary ideal class group of $L$, which is finite by the finiteness of the ideal class group. The Minkowski bound for ideal classes supplies an integral ideal of bounded norm in each class, and only finitely many integral ideals have bounded norm.

The kernel of restriction from $H^1(K,E[n])$ to $H^1(L,E[n])$ is also finite: a cocycle trivial after restriction can, after subtracting a coboundary, be made to factor through the finite group $\mathrm{Gal}(L/K)$. There are only finitely many maps from that group to the finite module $E[n]$. This is the finite-extension kernel of a Kummer map mechanism. Consequently the possible Kummer classes form a finite set, provingThis is the Weak Mordell-Weil theorem. Imposing membership in the local Kummer image at every place refines the finite unramified collection to the n-Selmer group. Its relation with the obstruction to a globally rational point iswhere the last group is the $n$-torsion of the Tate–Shafarevich group. Thus local solubility gives a finite computable upper bound but can leave a genuine global obstruction.

Heights and finite generation. For the other essay, normalize the absolute values on a field $K$ so that the product formula holds. The Absolute logarithmic Weil height of $[x_0:x_1]\in {\mathbb{P}}^1(K)$ isAt the infinite places the local degrees are one or two and the usual real or complex modulus is used. The product formula makes this independent of scaling; it is also unchanged by extending $K$. Over $\mathbb{Q}$, using coprime integral coordinates gives $h([u:v])=\log \max (|u|,|v|)$, the naive height on the projective line. The Northcott theorem says that points of bounded height and bounded field degree form a finite set; in particular this holds over the fixed field $K$. One way to see the finiteness is the height-Mahler measure formula: for an algebraic number of degree $d$, the coefficients of its primitive minimal integer polynomial are bounded by binomial factors times $\exp (dh)$. Bounds on $d$ and $h$ therefore leave only finitely many integer polynomials and hence only finitely many algebraic numbers.

Set $h_E(P)=h(x(P))$ for $P\ne O$, and $h_E(O)=0$. Since $x:E\to {\mathbb{P}}^1$ has degree two, bounded $h_E$ gives only finitely many points of $E(K)$. The height growth under a morphism of the projective line states that a degree-$d$ morphism gives $h(f(t))=dh(t)+O(1)$. The upper bound follows from its homogeneous coordinate polynomials; the lower bound follows from their having no common zero, using a resultant identity at each place. Applied to the degree-four duplication map, it gives a uniform constant $C$ withConsequently $4^{-j}{h}_E(2^{j}P)$ is Cauchy: the absolute difference of consecutive terms is at most $C{4}^{-(j+1)}$. Define the canonical height of an elliptic curve byIt is nonnegative and satisfies $\hat{h}(2P)=4\hat{h}(P)$. The factor one-half is the conventional normalization for the divisor $(O)$, since the first-coordinate height belongs to $2(O)$.

The addition-divisor identity also gives the bounded-error height identityuniformly in $P,Q$. This is the height form of the identity for the sum and difference pullbacks of the line bundle associated to $2(O)$; it includes points where the affine addition formulas have a zero denominator. Apply it to $2^{j}P,2^{j}Q$, divide by $2\cdot 4^j$, and take the limit. Thus $\hat{h}$ satisfies the parallelogram law, and its polarization is a bilinear form, the height pairing. Nonnegativity implies the Cauchy-Schwarz inequality for that pairing, by evaluating its nonnegative quadratic polynomial on $mP+nQ$ for all integers $m,n$ and approximating real ratios by rational numbers. In particularThese properties do not presuppose finite generation. Bounded canonical height gives a finite set by the bounded difference and the Northcott theorem. Torsion points have canonical height zero. Conversely, if $\hat{h}(P)=0$, all $2^{j}P$ have bounded naive height, so two coincide; their difference makes $P$ torsion. Thus the height detects precisely the free part, once finite generation is proved.

Use the Weak Mordell-Weil theorem with $n=2$ and choose finitely many coset representatives $R_i$. Write $P=2Q+R_i$, and put $H={\max }_i\hat{h}(R_i)$. The height inequality yieldsIteration enters the finite set $\{P:\hat{h}(P)\le H+1\}$, since after $j$ steps the height is at most $H+2^{-j}\max (\hat{h}(P)-H,0)$. Unwinding $P=2Q+R_i$ expresses every point using that finite set and the $R_i$. This proves the canonical-height proof of Mordell-Weil finite generation and henceThe Fundamental theorem of finitely generated abelian groups supplies this decomposition. The Mordell-Weil theorem combines a finite quotient from arithmetic Galois cohomology with a contracting height descent; either ingredient alone would not establish finite generation.