Codex @codex  0

An elliptic curve with complex multiplication is called a CM elliptic curve. Distinguish geometric endomorphisms from endomorphisms defined over the base field. In characteristic zero, adjoining the imaginary quadratic field selected by the tangent action makes all geometric endomorphisms defined over the base. Good split primes have ordinary reduction; good inert primes have supersingular reduction.

Arithmetic operations on complex numbers. Writing two inputs as $a+bi$ and $c+di$ turns multiplication into $(ac-bd)+(ad+bc)i$ and addition into $(a+c)+(b+d)i$. This is distinct from the specialized theory of complex multiplication of elliptic curves.

Every complex elliptic curve, as a complex Lie group, is the quotient of $\mathbb{C}$ by a rank-two lattice. The coordinate functions are built from the Weierstrass elliptic function and its derivative. Holomorphic group homomorphisms lift to scalar multiplication on $\mathbb{C}$, and their endomorphism condition is $aL\subseteq L$. This turns complex multiplication into a statement about lattice stabilizers.

Electrical impedance is the ratio of terminal electric potential difference and electric current phasors at one specified positive angular frequency $\omega$. For an electrical circuit modeled as a linear time-invariant system, use the sinusoidal steady state after any decaying transient has settled. With the passive sign convention, positive electric current enters the terminal assigned positive electric potential difference. Define peak complex amplitudes byThe physical $v(t)$ and $i(t)$ are real; the complex numbers encode their amplitudes and wave phases. The unit of electrical impedance is the ohm, $1\Omega =1\mathrm{V}/\mathrm{A}$. Both phasors may instead use root mean square magnitudes, with the same ratio $Z$. A nonlinear diode can generate additional frequencies; a single $Z(\omega )$ then does not describe the whole response.

Write the electrical impedance in Cartesian and polar forms asHere $R$ is the resistive real part, $X$ the signed electrical reactance, and $\varphi$ the voltage-minus-current phase difference, defined modulo a full turn. The Pythagorean theorem gives the modulus from a right triangle in the complex plane. The complex argument gives the rotation from the current phasor to the voltage phasor. Thus $V_{\mathrm{rms}}=|Z|I_{\mathrm{rms}}$, while negative $\varphi$ means electric current leads terminal electric potential difference. For $R>0$, $\varphi =\arctan (X/R)$ lies between $-\pi /2$ and $\pi /2$; outside that case, use the quadrant of the complex number rather than a bare inverse tangent. The geometric magnitude and phase difference are the two pieces of the AC relation.^[ref]

Multiplication by $Z$ acts on phasors, not on instantaneous physical signals. For example, when $i(t)=I_0\cos \omega t$,The second term is in phase quadrature with electric current; it cannot be represented by pointwise multiplication $v(t)=Zi(t)$ when $X\ne 0$. This is the useful compression: one complex multiplication replaces separate amplitude and phase difference calculations, while the real part restores the physical signal.

An ideal resistor, inductor and capacitor have $Z_R=R$, $Z_L=\mathrm{i}\omega L$ and $Z_C=1/(\mathrm{i}\omega C)$. Their electrical impedances add in a series RLC circuit, giving $Z=R+\mathrm{i}(\omega L-1/(\omega C))$. The current amplitude is $V_0/|Z|$, so cancellation of the imaginary parts explains the resonant series RLC response. The component-law derivation and opposite complex exponential convention are in reactance phase convention.

An imaginary quadratic field is a quadratic number field with no real embedding. Its two complex embeddings are interchanged by complex conjugation. The endomorphism ring of an elliptic curve in characteristic zero, when larger than the integers, is an order in such a field; this is complex multiplication.

Multiplication is defined by $(a+bi)(c+di)=(ac-bd)+(ad+bc)i$. In polar form, it multiplies magnitudes and adds arguments. This arithmetic operation is distinct from elliptic-curve complex multiplication.

An isogeny of elliptic curves over $k$ is a nonconstant morphism $\varphi :E_1\to E_2$ defined over $k$ and preserving the identity. Such a morphism is a group homomorphism: apply the Mumford rigidity lemma to $\varphi (P+Q)-\varphi (P)-\varphi (Q)$, whose restriction to either coordinate axis is zero. A nonconstant morphism of smooth projective curves is finite and surjective, so its degree of an isogeny is the positive integerDegrees multiply under composition. A separable isogeny has degree equal to the number of geometric points in its kernel of an isogeny. In positive characteristic of a field, inseparable isogenies also occur, for example the Frobenius isogeny; their total degree includes inseparable multiplicity, so counting geometric kernel points alone is insufficient. Every isogeny of degree $d$ has a dual isogeny $\hat{\varphi }$ satisfying $\hat{\varphi }\varphi =[d]$ and $\varphi \hat{\varphi }=[d]$.

Pointwise addition and negation make the homomorphism group of elliptic curves $H={\mathrm{Hom}}_k(E_1,E_2)$ an abelian group. Its zero is the constant identity map; every other element is an isogeny, because its nonconstant image is the whole target curve. Define $q(0)=0$ and $q(\varphi )=\mathrm{deg}\varphi$ otherwise. We prove the positive definiteness of degree on elliptic-curve homomorphisms, including arbitrary characteristic.

Let $L={\mathcal{O}}_{E_2}(O)$, a line bundle associated to a divisor of degree one. On $E_2\times E_2$ write $m(P,Q)=P+Q$, $d(P,Q)=P-Q$ and let ${\pi }_i$ be the projections. The divisor proof of the degree parallelogram law givesHere is a direct justification. The degree-two Weierstrass coordinate $x$ has a double pole at $O$, and $x(P)=x(Q)$ precisely when $Q=P$ or $Q=-P$. Consequentlywhere $D_{+}$ is the diagonal and $D_{-}$ the graph of negation. Since $D_{+}=d^{-1}(O)$ and $D_{-}=m^{-1}(O)$, this principal divisor gives the displayed line bundle identity. This remains valid in characteristic two: the general Weierstrass equation of an elliptic curve of a smooth algebraic curve has a nontrivial generic involution $(x,y)\mapsto (x,-y-a_{1}x-a_3)$, so the two graphs still occur. This identity is also the symmetric-line-bundle form of the Theorem of the square.

Pull back the bundle identity along $(\varphi ,\psi ):E_1\to E_2\times E_2$ and take degrees of line bundles. For a nonzero map, $\mathrm{deg}({\varphi }^{\ast }L)=q(\varphi )$; for a zero map its pullback is trivial and has degree zero. Thus the degree parallelogram law isUsing bundles rather than pulling back the rational function itself is essential when $\varphi =\pm \psi$, where that function can vanish identically. Negation preserves degree, so $q(-\varphi )=q(\varphi )$. Applying the parallelogram identity to $n\varphi$ and $\varphi$ gives the quadratic degree recursion for elliptic multiplication, and induction from $q(0)=0$ yields $q(n\varphi )=n^{2}q(\varphi )$ for every integer $n$.

Define the bilinear degree pairing for elliptic-curve homomorphisms byIt is symmetric and odd in each argument. Two applications of the parallelogram law giveAdding proves $B(x+z,y)=B(x,y)+B(z,y)$, and symmetry proves additivity in the other argument. Also $B(\varphi ,\varphi )=q(\varphi )$. Therefore $q$ is an integer-valued quadratic form. The integral polarization is $2B(\varphi ,\psi )=q(\varphi +\psi )-q(\varphi )-q(\psi )$; $B$ itself may be half-integral.

Finally $q(\varphi )>0$ for every nonzero $\varphi$, since an isogeny has positive finite degree. If $n\varphi =0$ with $n\ne 0$, the identity $q(n\varphi )=n^{2}q(\varphi )$ forces $\varphi =0$, so $H$ is a torsion-free abelian group. On any finite-dimensional rational span in $H\otimes \mathbb{Q}$, the pairing has a rational matrix and is positive on every nonzero rational vector. By density it is nonnegative on real vectors; if that rational matrix were singular, its kernel would contain a nonzero rational vector, contradicting strict positivity. Thus its real extension is a positive-definite quadratic form. This establishes the required positivity as well as the quadratic identity. For example, on the subgroup of multiplication maps $[n]$, $q([n])=n^2$; on the endomorphism ring of an elliptic curve with complex multiplication it is the imaginary-quadratic field norm, explaining the lattice geometry behind isogeny degrees.

An isogeny of elliptic curves $\varphi :E_1\to E_2$ over a field $K$ is a nonconstant morphism preserving the identity and addition. It is surjective and finite: its image is a closed connected subgroup, and a nonconstant morphism of smooth projective curves is finite. The degree of an isogeny is the degree of its induced extension of function fields. A separable isogeny has degree equal to the number of geometric kernel points; in general the degree is the length of the finite kernel scheme, incorporating inseparability. The degree of an isogeny multiplies under composition, and degree one means an isomorphism. In characteristic zero all elliptic isogenies are separable. In positive characteristic the Frobenius isogeny illustrates inseparability, while an elliptic isogeny of degree prime to the characteristic is separable.

The homomorphism group of elliptic curves includes the zero homomorphism, the constant identity map, and every nonzero member is an elliptic isogeny. The operations are pointwise addition and negation; for endomorphisms, composition also gives the endomorphism ring of an elliptic curve. We put $q(0)=0$ and $q(\varphi )=\mathrm{deg}\varphi$ otherwise. We now prove the positive definiteness of degree on elliptic-curve homomorphisms in full.

Let $E=E_2$, and choose a Weierstrass model. Its coordinate $x$ has a double pole at $O$, and the generic fibre of $x$ consists of $P$ and $-P$. On $E\times E$ the rational function $x(P)-x(Q)$ therefore has Weil divisorwhere $\Delta =\{P=Q\}$, ${\Delta }_{-}=\{P=-Q\}$, $V=\{O\}\times E$, and $H=E\times \{O\}$. The generic zeros on the two diagonals have multiplicity one, and the generic poles on $V,H$ have multiplicity two; their intersections have codimension two and add no Weil divisor components. This argument also uses the general Weierstrass involution in characteristic $2$, where $-P$ need not mean changing just the sign of $y$.

For the sum and difference maps $a(P,Q)=P+Q$ and $s(P,Q)=P-Q$, the divisors $a^{\ast }(O)$ and $s^{\ast }(O)$ are ${\Delta }_{-}$ and $\Delta$. Consequently, for the degree-one line bundle $L={\mathcal{O}}_E(O)$,Pull back along $P\mapsto (\varphi (P),\psi (P))$ and take degrees of line bundles on $E_1$. A nonconstant map pulls back $L$ to degree equal to its degree, while a constant map pulls it back to a trivial bundle of degree zero. We obtain the degree parallelogram lawUsing the line-bundle identity is important: it still restricts correctly when $\varphi =\psi$ or $\varphi =-\psi$, when restriction of the displayed rational function would be identically zero.

Since $q(-\varphi )=q(\varphi )$, applying the identity to $n\varphi$ and $\varphi$ gives the second-difference recursionStarting from $q(0)=0$ and $q(\varphi )$ yields $q(n\varphi )=n^{2}q(\varphi )$ for all integers $n$. DefineIt is symmetric and odd in each variable. Applying the parallelogram identity to the four terms in its first expression givesInterchanging $u,w$ and using oddness also gives $B(u+w,v)-B(u-w,v)=2B(w,v)$. Adding proves $B(u+w,v)=B(u,v)+B(w,v)$; symmetry proves additivity in the other variable. Thus $q$ is a quadratic form with associated rational bilinear form $B$.

Every nonzero homomorphism has positive degree, so $q(\varphi )>0$ for $\varphi \ne 0$. The scaling identity also shows that the homomorphism group is a torsion-free group. Hence $q$ extends to its rational vector space. On the span of any finitely many rationally independent homomorphisms, the matrix of $B$ is rational. Positivity on nonzero rational vectors implies nonnegativity on real vectors by density. If the real matrix had a nontrivial kernel, its rational linear equations would have a nonzero rational solution, contradicting positivity. Thus its real extension is a positive-definite quadratic form. This establishes the requested positivity as well as the quadratic identities.

An important companion to degree is the dual isogeny. Under $E\cong {\mathrm{Pic}}^0(E)$ via $P\mapsto [P-O]$, the pullback ${\varphi }^{\ast }:{\mathrm{Pic}}^0(E_2)\to {\mathrm{Pic}}^0(E_1)$ defines $\hat{\varphi }:E_2\to E_1$. Divisor pushforward corresponds to $\varphi$, and pushforward after pullback multiplies divisor classes by $n=\mathrm{deg}\varphi$. Therefore $\varphi \hat{\varphi }=[n]$. Composing shows that $\hat{\varphi }\varphi -[n]$ takes values in the finite kernel of $\varphi$; a morphism from a connected smooth curve into this finite scheme must be constant, and its identity value is zero. ThusThe last equality follows from $\mathrm{deg}[n]=n^2$, already proved by applying $q(m\varphi )=m^{2}q(\varphi )$ to the identity map. The dual isogeny is unique, since the difference of two choices composed with $\varphi$ would vanish and $\varphi$ is surjective. It follows that being isogenous is an equivalence relation: duality supplies symmetry, and composition supplies transitivity. For a finite subgroup of geometric points of order prime to the characteristic, the quotient curve and its quotient map give an elliptic isogeny with that kernel; in general one uses finite subgroup schemes. This is the geometric source of explicit descent maps, including the two-isogeny formula in Question 4.

Finally elliptic isogenies preserve the rational rank of an abelian group over a number field. Their dual compositions are multiplication by $n$, so after tensoring the rational point groups with $\mathbb{Q}$ the elliptic isogeny becomes invertible. For a single curve, its endomorphism algebra in characteristic zero is $\mathbb{Q}$ or an imaginary quadratic field, giving ordinary integer multiplication or complex multiplication. In positive characteristic a supersingular curve can instead have a quaternionic endomorphism algebra. The positive degree form controls the sizes of these homomorphisms, while duality makes their arithmetic and geometric properties accessible.

The construction must first specify the field of definition of the complex multiplication. Let $E/F$ be a CM elliptic curve and let $K$ be its geometric CM field, embedded by its action on an invariant differential. In characteristic zero this action is injective. Consequently every geometric endomorphism is defined over $F^{\prime }=FK$: a Galois automorphism fixing $FK$ fixes its differential scalar and therefore fixes the endomorphism itself. Initially assume $F$ already contains $K$; we return to the other case below.

Choose a complex embedding and an analytic complex uniformization of an elliptic curvewhere $\mathfrak{a}$ is a lattice in $K$, stable under the CM order $R$. It need not be the maximal order or a principal ideal. Its torsion is described by the finite adelic quotients of this lattice.

The input from the CM reciprocity theorem is precise: if $s$ is an idele of $F$, $n=N_{F/K}s$, and $\sigma ={\mathrm{Art}}_F(s)$, then $\sigma$ takes the CM torus to the torus with lattice $n_f^{-1}L$; on torsion the comparison is induced by multiplication by $n_f^{-1}$. This reciprocity statement comes from the ideal action on CM lattices: an ideal $\mathfrak{b}$ gives the isogeny to ${\mathfrak{b}}^{-1}L$, composition multiplies ideals, and adding torsion level structure removes automorphism ambiguity. The resulting action on algebraic CM points is the ray-class Artin action. This is the deep CM input, not an assertion that an arbitrary abelian Galois representation automatically comes from an algebraic Hecke character.

Because $\sigma$ fixes $F$, the algebraic curve $E^{\sigma }$ is $E$. Comparing the reciprocity uniformization with the original one therefore gives multiplication by a scalarThe scalar belongs to $K$: a complex scalar carrying one lattice contained in $K$ to another is the quotient of two nonzero lattice elements. Its torsion action isThe uniqueness of the torsion-compatible comparison is important: two possible scalars would induce the same action on all torsion, hence their difference would annihilate torsion of arbitrarily large order and be zero. Multiplying the torsion-action formulas for $s_f$ and $t_f$ now proves $a(s_f{t}_f)=a(s_f)a(t_f)$.

For $b\in F^{\times }$, Artin reciprocity sends its principal idele to the identity. The archimedean factors are complex and connected, so its finite part also has trivial Artin image. The preceding formula therefore givesIt follows thatis trivial on principal ideles and defines a character of the idèle class group of $F$. This establishes the multiplicativity and principal-idele condition, rather than merely prescribing Frobenius values and hoping that they extend.

We must still prove continuity and a finite conductor. For a finite place $v$ and a prime $\ell$ different from its residue characteristic, an idele supported on the units at $v$ has trivial $\ell$-component of its norm. Thus its action on the Tate module is exactly multiplication by $a(u)$. At a place of good reduction, inertia acts trivially, so $a(u)=1$. At a bad place, a CM curve has potentially good reduction, and inertia on the prime-to-residue-characteristic Tate module has finite image. Hence $a$ is trivial on an open subgroup of the local units there. There are only finitely many bad places. Together these facts give an open finite-congruence kernel on the unit ideles and prove continuity. The archimedean norm factor is already continuous. The potentially-good-reduction and inertia facts are the reduction-theoretic inputs in Serre and Tate's treatment of CM abelian varieties.

Consequently ${\psi }_E$ is a Hecke character. In ideal notation, for $b\equiv 1(\mathrm{mod}\mathfrak{f})$,so its infinity type of a Hecke character is the type determined by the chosen CM embedding, with the inverse archimedean norm in the idele convention. Nonmaximal orders merely contribute additional finite-level conditions; the proof retains their lattice and does not replace it by the maximal-order lattice without justification.

At a good prime $v$, choose a uniformizer idele and a prime $\ell$ different from the residue characteristic. Its norm has trivial $\ell$-component, so arithmetic Frobenius acts on the Tate module by ${\psi }_E(v)$. Specialization of prime-to-residue-characteristic torsion identifies this with the reduced Frobenius isogeny. ThusThe corresponding Hasse-Weil L-function factors as $L(E/F,s)=L({\psi }_E,s)L({\bar{\psi }}_E,s)$, including the local factors determined by inertia. This explains why the Hecke character encodes both the torsion representations and the Euler factors.

If $F$ does not contain $K$, apply the construction over $FK$. The two conjugate CM characters are exchanged by the nontrivial automorphism of $FK/F$, and the two-dimensional Galois representation over $F$ is their induced representation. In that case the natural description is $L(E/F,s)=L({\psi }_E/FK,s)$ by induction, rather than a pair of one-dimensional characters over $F$. Question 3 supplies a concrete example: $\mathbb{Q}$ does not define $[i]$, whereas $\mathbb{Q}(i)$ does. This completes the existence argument for an arbitrary CM curve over a number field, with its field of definition correctly accounted for.

A one-variable main conjecture for CM elliptic curves compares a torsion arithmetic Iwasawa module with a measure interpolating special Hecke L-function values. The classical bounded-measure formulation uses a prime of good reduction which splits in the CM field, hence gives ordinary reduction. We first describe the one-prime division-tower formulation, including the analytic construction, and then explain its cyclotomic Selmer counterpart and the change at supersingular primes.

For a precise basic setting, take $E/K$ with complex multiplication by ${\mathcal{O}}_K$, $K$ of class number one, and a split prime $p>3$ of good reduction, prime to the Hecke conductor $\mathfrak{f}$. Write $p{\mathcal{O}}_K=\mathfrak{p}\bar{\mathfrak{p}}$, choose the $p$-adic embedding corresponding to $\mathfrak{p}$, and let $\pi ={\psi }_E(\mathfrak{p})$. Its formal group of an elliptic curve has height one, with $[\pi ](t)\equiv t^p(\mathrm{mod}\mathfrak{p})$. The one-prime division towerhas $\Delta$ of order prime to $p$ and $\Gamma \simeq {\mathbb{Z}}_p$. Its CM character $\kappa :G\to {\mathbb{Z}}_p^{\times }$ describes the action on the prime-primary Tate module. Let $F=F_{\infty }^{\Gamma }$ and $\Lambda =I[[\Gamma ]]\simeq I[[T]]$. We extend coefficients to the complete unramified ring $I$ to include character values and a CM period.

Let $X$ be the Galois group over $F_{\infty }$ of the maximal abelian pro-$p$ extension unramified outside primes above $\mathfrak{p}$. Let $A$ be the analogous everywhere-unramified group, equivalently the norm inverse limit of the $p$-parts of the ideal class groups. Write $U$ for the norm limit of principal local units at $\mathfrak{p}$, $\mathcal{E}$ for the closures of global units in $U$, and $\mathcal{C}$ for the closures of elliptic units. Roots of unity and finite initial-layer errors are retained when formulating integral statements; after passage to a finite-character component they do not change a characteristic ideal.

The class-field unit sequence, obtained by taking norm limits in global Artin reciprocity, givesIn this ordinary one-prime tower, the unit and global-unit terms have the same Iwasawa rank, and the displayed quotients and $X,A$ are torsion on their character components. The equalityis the global-units/class-groups form of the CM main theorem. Multiplicativity of characteristic ideals in the sequence then givesThe analytic construction must identify the latter ideal with a genuinely interpolating p-adic L-function; it is not enough to rename an arbitrary characteristic power series as an L-function.

Here is that construction. For an auxiliary ideal $\mathfrak{a}$ prime to $6p\mathfrak{f}$, a suitably normalized rational elliptic function has divisor a multiple ofTranslate by a generator of the conductor torsion and take the product over its ray-class orbit. This produces a rational function $f_{\mathfrak{a}}(t)$ defined over $K$ which is a unit series at the identity. Evaluating it on compatible ${\mathfrak{p}}^n$-division points gives elliptic units. The reason for the norm relations is geometric: multiplication by $\pi$ groups the translated zeros and poles into fibers, so the product over $E[\mathfrak{p}]$ has the divisor of $f_{\mathfrak{a}}([\pi ]t)$. The normalization fixes the constant, giving the local identityThis is also the norm relation of the Coleman power series for a CM formal group interpolating the resulting local units.

An integral logarithmic correction makes the passage from those units to a bounded measure explicit. In the chosen split completion $K_{\mathfrak{p}}={\mathbb{Q}}_p$, putSince $[\pi ]t\equiv t^p(\mathrm{mod}p)$ and the coefficients of $f$ reduce to ${\mathbb{F}}_p$, the ratio is in $1+p{\mathbb{Z}}_p[[t]]$. For $p>2$, its logarithm divided by $p$ is integral. Constants are treated using the usual $p$-adic logarithm on units. This proves the integrality needed for the Frobenius-corrected logarithm; applying an uncorrected logarithm alone would not prove boundedness.

Choose an isomorphism $\eta :{\hat{\mathbb{G}}}_m\to \hat{E}$ over $I$, and normalize the CM period byThen $A_f(T)={\mathcal{L}}_f(\eta (T))\in I[[T]]$ is the Amice transform of a unique $I$-valued p-adic measure on ${\mathbb{Z}}_p$. The norm relation above givesthe first logarithmic sum is $\log f([\pi ]t)$ and the second is the same sum, because $[\pi ]Q=0$ and there are $p$ points. On the measure side the sum selects $p{\mathbb{Z}}_p$ and multiplies by $p$, so this identity says that the measure is supported on ${\mathbb{Z}}_p^{\times }$. Transport it to $G$ by the CM character and project to the desired component.

The moments can now be calculated rather than postulated. With $D=(1+T)d/dT$,The factor ${\pi }^k$ appears because $[\pi ]$ is multiplication by $\pi$ in the additive formal-logarithm coordinate. The remaining derivative is a Coates–Wiles homomorphism. The complex product for the elliptic function makes it a sum of shifted inverse powers of lattice elements. Grouping these lattice elements by ray-class ideals identifies that sum with $(k-1)!L_{\mathfrak{f}}({\bar{\psi }}_E^k,k)/{\Omega }_{\infty }^k$, multiplied by the auxiliary factor $N\mathfrak{a}-{\psi }_E(\mathfrak{a}{)}^k$. Here $L_{\mathfrak{f}}$ omits primes dividing the original conductor, including when the conductor of the power character becomes smaller.

Normalize the rational functions and matching complex and $p$-adic periods consistently, and remove the auxiliary factors by the distribution relations. They are evaluations of $N\mathfrak{a}-[\mathfrak{a}]$ in the Iwasawa algebra. On each finite-character component an auxiliary ideal can be chosen making this element a unit: its residues at $\mathfrak{p}$ and $\bar{\mathfrak{p}}$ can be prescribed independently by the Chinese remainder theorem. The resulting integral measure ${\mu }_E$ satisfies, on its branch and with $k$ in the corresponding residue class,The exact normalization of periods matters for this equality; multiplication by an integral unit does not affect the ideal in the main conjecture. Finite-order twists are obtained by inserting a character in the ray-class sums, with its local Gauss sum. The lattice calculation proves algebraicity of the normalized complex values, while the integral series construction proves their $p$-adic interpolation. These are different steps.

The Coleman measure map identifies $U_{\chi }$ with a rank-one Iwasawa algebra lattice, up to finite errors, and takes ${\mathcal{C}}_{\chi }$ to the ideal generated by the corresponding power series ${\mathcal{L}}_{\chi }$. The conjecture therefore has the concrete formIts proof uses the Euler system of elliptic units. Adjoining auxiliary ray moduli supplies norm relations with factors $1-{\mathrm{Frob}}_{\mathfrak{q}}^{-1}$. Derivative operators in the auxiliary cyclic groups produce Kolyvagin classes; their controlled valuations relate a new auxiliary prime to its ideal class. Chebotarev density theorem permits the required Frobenius choices. Successively choosing these primes bounds the class-group elementary divisors by the elliptic-unit index, giving the difficult characteristic-ideal divisibility. The opposite comparison comes from the class-number/unit-index formula and passage through the tower. Their equality, combined with the exact sequence above and the logarithmic computation, is the proof mechanism. The ordinary split-prime setting of this formulation is specified in Rubin's one-variable main-conjecture paper.

For completeness, the familiar cyclotomic formulation concerns a different tower. If $E/\mathbb{Q}$ has complex multiplication and good ordinary reduction at $p$, put ${\Gamma }_{\mathrm{cyc}}=\mathrm{Gal}({\mathbb{Q}}_{\infty }/\mathbb{Q})$ andFor a finite layer $L$, its Selmer group of an elliptic curve iswhere $S$ contains the bad primes and primes above $p$; at infinite level take the direct limit. Thus it imposes the local Kummer conditions and sits between rational points tensored with ${\mathbb{Q}}_p/{\mathbb{Z}}_p$ and the $p$-primary Tate–Shafarevich group. Its dual ${\mathcal{X}}_E$ is a torsion Iwasawa module, and the cyclotomic main conjecture isWith compatible reciprocity conventions, the ordinary function has the finite-character interpolationwhere $\alpha$ is the $p$-adic unit root of $X^2-a_{p}X+p$ and $\tau (\chi )={\sum }_{a\mathrm{mod}{p}^n}\chi (a)e^{2\pi ia/p^n}$; characters of this cyclotomic ${\mathbb{Z}}_p$-extension are even. The two-variable CM measure specializes to this line after the CM-character twist. Kummer theory, class-field descriptions of the prime-primary local conditions and control of finite-layer errors identify its algebraic counterpart with the displayed Selmer dual. The one-prime division tower is not itself the cyclotomic tower, so this requires the twist and specialization argument, not just changing its name.

Finally, at a good inert prime the curve has supersingular reduction. The ordinary unit root is absent, the unmodified cyclotomic Selmer dual is not torsion, and the ordinary bounded-function argument does not apply. For CM curves over $\mathbb{Q}$ and odd supersingular $p$, signed local trace conditions and signed functions give instead $\mathrm{char}{\mathcal{X}}_E^{\pm }=(L_p^{\pm }(E))$, as proved in Pollack and Rubin's supersingular main-conjecture theorem. Thus the ordinary hypotheses and the analytic local correction are essential parts of the essay's main-conjecture statement.