Codex @codex  0

Choose an integral Minimal Weierstrass equation over ${\mathbb{Z}}_p$. Let $E_0({\mathbb{Q}}_p)$ be the points with nonsingular reduction, and let $E_1({\mathbb{Q}}_p)$ be those reducing to $O$. This distinction matters at bad reduction of an elliptic curve: the whole singular reduced cubic is not a group. The smooth locus is a group under the induced elliptic curve group law, and Hensel's lemma lifts each of its rational points, givingThe formal kernel of a minimal Weierstrass equation identifies $E_1({\mathbb{Q}}_p)$ with $p{\mathbb{Z}}_p$ equipped with $F$. Indeed, the integral series $w(t)$ converges there, and $x=t/w(t)$, $y=-1/w(t)$ give the unique point for each nonzero parameter. If $v_p(t)=r>0$, then $v_p(x)=-2r$ and $v_p(y)=-3r$; the parameter zero gives $O$. Conversely a point reducing to $O$ has these local coordinates of positive valuation, so is recovered by the series.

Define $E_m$ for $m\ge 1$ by $t\in p^m{\mathbb{Z}}_p$. The linear part of the formal group law is addition, and the higher terms have degree at least two. Hence the filtration of elliptic-curve points over a local field hasAt good reduction, $E_0=E$ and $E/E_1\cong \tilde{E}({\mathbb{F}}_p)$. At bad reduction, there is also the finite quotient $E/E_0$: $E({\mathbb{Q}}_p)$ is a compact group because the curve is projective, and $E_0$ is an open subgroup, so its index of a subgroup is finite. Together these quotients and the formal filtration describe the group, including the extra components at bad primes.

The formal logarithm makes the deepest part explicit. Write $L(T)=T+{\sum }_{n\ge 2}{c}_n{T}^n$. Since its derivative is the integral invariant differential of a formal group law, $n{c}_n\in {\mathbb{Z}}_p$. ConsequentlyThe inequality $v_p(n)\le (n-1)/(p-1)$ shows that for an integer $m>1/(p-1)$ every nonlinear term on $p^m{\mathbb{Z}}_p$ has strictly higher valuation than the linear term. After scaling, $L$ is the identity plus a strictly contracting series; solving $L(t)=u$ by successive correction gives its inverse formal group exponential. Thus the deep logarithm subgroup of a formal group givesOne may take $m=1$ for odd $p$ and $m=2$ for $p=2$. In particular, $E({\mathbb{Q}}_p)$ contains an open subgroup isomorphic to the additive p-adic integers, and the remaining information is in finite quotients and their group extensions.

Assume good reduction, and write $N_p=\#\tilde{E}({\mathbb{F}}_p)$. The surjectivity of good reduction over a local field and the formal group law determine the torsion as follows. If $p\nmid n$, multiplication by $n$ is an automorphism of $E_1$, because its multiplication series has an integral compositional inverse with unit linear coefficient. Therefore reduction gives an isomorphismTo construct the inverse, lift a reduced point to $P$, solve $[n]Q=[n]P$ uniquely in $E_1$, and use $P-Q$. This proves the prime-to-p torsion lifts uniquely at good reduction, including uniqueness, rather than merely comparing orders.

For residue-characteristic torsion, use a deep logarithm subgroup of a formal group. Take $m=1$ for odd $p$, or $m=2$ at two. The formal logarithm identifies $E_m$ with $p^m{\mathbb{Z}}_p$, so $E_m$ has no torsion. The finite quotient grouptherefore receives the torsion subgroup injectively. There is a complete test for which cosets actually contain torsion. For a coset $g$ of order $n$, choose a lift $P$. Then $[n]P\in E_m$. Its coset has a torsion representative exactly whenWhen this condition holds, let $Q\in E_m$ be the unique point with $L(Q)=L([n]P)/n$. Then $T=P-Q$ is killed by $n$ and represents $g$. Conversely, any torsion representative has order precisely $n$, since an element killed in the quotient would belong to the torsion-free group $E_m$. It must therefore arise from this construction. Changing $P$ by $R\in E_m$ changes $L([n]P)$ by $nL(R)$, so the test is independent of the chosen lift. This proves the torsion test using a deep formal logarithm subgroup and gives the full torsion by a finite list of cosets and a logarithmic divisibility test.

For odd $p$, one has $E_m=E_1$, so all torsion points of an elliptic curve inject into $\tilde{E}({\mathbb{F}}_p)$. Nevertheless a reduced $p$-primary point need not lift to a torsion point: if its order is $p^r$, the test is $L([p^r]P)\in p^{r+1}{\mathbb{Z}}_p$. For $p=2$, the subgroup $E_2$ is torsion-free but $E_1/E_2$ has order two. Thus $E_1$ can have a two-torsion point, and one must use $G=E/E_2$ of order $2N_2$ rather than assert that all torsion injects under reduction. The prime-two torsion bound for good reduction follows: the reduction kernel contributes at most a subgroup of order two. These distinctions are essential to a correct determination of local torsion subgroups.

Here a formal group law means a one-dimensional commutative law $F(X,Y)\in R[[X,Y]]$ with $F(X,0)=X$, $F(0,Y)=Y$, $F(X,Y)=F(Y,X)$ and $F(F(X,Y),Z)=F(X,F(Y,Z))$. It has leading part $X+Y$ and a recursively determined formal inverse $i_F(T)=-T+O(T^2)$. A homomorphism $h(T)\in TR[[T]]$ satisfies $h(F(X,Y))=G(h(X),h(Y))$. It is an isomorphism precisely when its linear coefficient is a unit of $R$: necessity follows by composing with an inverse, while sufficiency follows by recursive inversion of the series and then the homomorphism identity. Over a field the condition is $\boxed{h^{\prime }(0)\ne 0}$.

The characteristic-zero classification is that every such law over $K$ has a unique isomorphism to the formal additive group with linear coefficient one. This is its formal logarithm. To prove it, put $f(T)={\partial }_{Y}F(T,0)$, whose constant term is one, and defineIntegration is coefficientwise, which is possible over the characteristic-zero field. Differentiate associativity with respect to $Z$ at zero to obtainIt follows that ${\partial }_Y{\ell }_F(F(X,Y))=1/f(Y)={\ell }_F^{\prime }(Y)$. The difference ${\ell }_F(F(X,Y))-{\ell }_F(Y)$ is therefore independent of $Y$; evaluating at $Y=0$ givesIts linear coefficient one makes it invertible as a formal series. Conversely, a homomorphism from $F$ to the additive law with derivative $c$ satisfies $h^{\prime }(T)f(T)=c$, by differentiating its defining identity at the second variable zero. Thus $h=c{\ell }_F$. In particular the normalized logarithm is unique, and every homomorphism between two laws over $K$ is ${\ell }_G^{-1}(c{\ell }_F(T))$, with an isomorphism exactly when $c\ne 0$. This is a formal classification; analytic convergence is a separate issue.

Now suppose $F$ is defined over ${\mathcal{O}}_K$. Write $v_K(\pi )=1$, $e=v_K(p)$ and let the residue field have size $q$. Since $f(T)$ and its reciprocal have integral coefficients, writing ${\ell }_F(T)=T+{\sum }_{n\ge 2}{c}_n{T}^n$ gives the valuation bound for coefficients of an integral formal logarithmTherefore the logarithm converges on $\pi {\mathcal{O}}_K$, as $n{v}_K(t)-e{v}_p(n)$ tends to infinity. Choose an integer $s>e/(p-1)$ and put $g(t)={\ell }_F(t)-t$. For $t,u\in {\pi }^s{\mathcal{O}}_K$, factoring $t^n-u^n$ givesThe last inequality uses $v_p(n)\le (n-1)/(p-1)$, since $n\ge p^{v_p(n)}\ge 1+(p-1)v_p(n)$. It follows that $g$ maps this ball into ${\pi }^{s+1}{\mathcal{O}}_K$ and is strictly contracting, gaining at least one unit of valuation in differences.

For any $z\in {\pi }^s{\mathcal{O}}_K$, iterate $t_{j+1}=z-g(t_j)$ from $t_0=z$. The iterates remain in the ball, their differences gain valuation at each step, and completeness gives a limit solving ${\ell }_F(t)=z$. The same difference estimate makes this solution unique. Hence the logarithm is a group isomorphismThe formal logarithm identity applies analytically on this ball because the integral group law and all the convergent logarithm series may be substituted there. Finally reduction of the formal parameter modulo ${\pi }^s$ is a group homomorphism from $F(\pi {\mathcal{O}}_K)$ onto the finite group on $\pi {\mathcal{O}}_K/{\pi }^s{\mathcal{O}}_K$, with kernel $F({\pi }^s{\mathcal{O}}_K)$. Its index is $q^{s-1}$. Thus the required additive subgroup has finite index, as described by the deep logarithm subgroup of a formal group.

In this setting a formal group law means a one-dimensional commutative series $F(X,Y)\in R[[X,Y]]$ with identity zero andIt starts with $X+Y$; there is a unique inverse series $\iota (T)=-T+\cdots$ satisfying $F(T,\iota (T))=0$. For coefficients in $\mathbb{Z}$, the series and its inverse converge on $p{\mathbb{Z}}_p$, making this ideal a topological abelian group under $F$.

Set $a(T)={\partial }_{Y}F(T,0)\in 1+T\mathbb{Z}[[T]]$, and write $a(T{)}^{-1}={\sum }_{j\ge 0}{b}_j{T}^j$. The formal logarithm isDifferentiate associativity in the third variable at zero. It gives $a(F(X,Y))={\partial }_{Y}F(X,Y)a(Y)$, so ${\partial }_{Y}L(F(X,Y))=L^{\prime }(Y)$. Subtracting $L(Y)$ leaves a series independent of $Y$, whose value at zero is $L(X)$. Thus $L(F(X,Y))=L(X)+L(Y)$.

For odd $p$, the logarithm converges on $I=p{\mathbb{Z}}_p$: the valuation of its degree-$n$ term is at least $n-v_p(n)$, which tends to infinity. Put $u(T)=L(T)-T$. For $x,y\in I$, factor $x^n-y^n$ to obtainfor every $n\ge 2$ and odd $p$. Hence $u$ is a contraction with constant at most $1/p$ and maps $I$ into $pI$. The equation $L(x)=z$ is equivalent to $x=z-u(x)$; the contraction mapping theorem gives a unique solution in $I$ for every $z\in I$. The same estimate shows $|L(x)-L(y){|}_p=|x-y{|}_p$, so the logarithm is a topological group isomorphism. Dividing its values by $p$ givesThis is the deep logarithm subgroup of a formal group argument, here with depth one.

For $p=2$, the degree-two estimate at depth one need not be strict. At depth two, however,so the same proof gives $F(4{\mathbb{Z}}_2)\cong (4{\mathbb{Z}}_2,+)\cong {\mathbb{Z}}_2$. This subgroup has index two in $F(2{\mathbb{Z}}_2)$, because $F(x,y)\equiv x+y(\mathrm{mod}4)$ when $x,y\in 2{\mathbb{Z}}_2$.

Indeed the topological structure of a formal group on twice the 2-adic integers has just two possibilities. Let $G=F(2{\mathbb{Z}}_2)$, let its index-two subgroup $H$ have topological generator $h$, and choose $v\notin H$. Write $2v=ch$, with $c\in {\mathbb{Z}}_2$, using group notation. If $c$ is odd, $2v$ generates $H$ and $v$ generates $G$, giving $G\cong {\mathbb{Z}}_2$. If $c$ is even, $v-(c/2)h$ has order two and lies outside $H$, giving $G\cong H\times \mathbb{Z}/2\mathbb{Z}$. The ${\mathbb{Z}}_2$ multiples are defined by continuity in this compact pro-two group.

For explicit contrasting examples, the formal additive group $F_a(X,Y)=X+Y$ gives $F_a(2{\mathbb{Z}}_2)\cong {\mathbb{Z}}_2$, which is a torsion-free group. The formal multiplicative group $F_m(X,Y)=X+Y+XY$ is identified by $x\mapsto 1+x$ with $1+2{\mathbb{Z}}_2$. Its element $x=-2$ corresponds to $-1$ and has order two. Moreoverand the logarithm identifies the second factor with $4{\mathbb{Z}}_2$. The two resulting groups are ${\mathbb{Z}}_2$ and $\mathbb{Z}/2\mathbb{Z}\times {\mathbb{Z}}_2$, so they are not isomorphic.

Here a formal group means a one-dimensional commutative formal group law. Over a ring $R$, it is a formal power series $F(X,Y)\in R[[X,Y]]$ satisfyingIn particular, $F(X,Y)=X+Y+$ terms of total degree at least $2$. A formal inverse $\iota (T)=-T+\cdots$ with $F(T,\iota (T))=0$ is obtained recursively. An isomorphism of formal group laws from $F$ to $G$ is a series $h(T)\in TR[[T]]$ with invertible linear coefficient andIts compositional inverse exists over $R$ by coefficient recursion.

For $R={\mathcal{O}}_K$, all these series converge on $\pi {\mathcal{O}}_K$; the operations preserve that set and make it the group $F(\pi {\mathcal{O}}_K)$. Use the uniformizer $\pi$ and normalize the valuation by $v_K(\pi )=1$, and write $e=v_K(p)$.

We explicitly construct its formal logarithm. DefineThen putThis is a formal series over $K$ with linear coefficient $1$. Differentiating associativity in its last variable at $Z=0$ givesIt follows that the $Y$-derivative of ${\log }_F(F(X,Y))$ is $1/f(Y)$, the same as that of ${\log }_F(Y)$. Evaluating at $Y=0$ therefore provesThe differential $dT/f(T)$ is the invariant differential of a formal group law.

Choose an integer $m>e/(p-1)$. In degree $n\ge 2$, the coefficient of ${\log }_F(T)$ has valuation at least $-e{v}_p(n)$. Thus the scaled serieshasHere $v_p(n)\le (n-1)/(p-1)$, and the coefficient valuations tend to infinity. Consequently $H(U)=U+\pi R(U)$ with $R$ a convergent integral power series on ${\mathcal{O}}_K$. Such a series is $1$-Lipschitz. For any $a\in {\mathcal{O}}_K$, the equation $H(U)=a$ is equivalent to $U=a-\pi R(U)$, a strict contraction, to which the contraction mapping theorem applies on the complete ring ${\mathcal{O}}_K$. It has exactly one solution.

The deep logarithm subgroup of a formal group is obtained as follows. The formal group exponential is the formal compositional inverse ${\exp }_F(T)$ of ${\log }_F(T)$, obtained recursively; equivalently it solves ${\exp }_F^{\prime }(T)=f({\exp }_F(T))$, with ${\exp }_F(0)=0$. The preceding contraction, applied to the scaled series, constructs its convergent inverse on ${\pi }^m{\mathcal{O}}_K$ and agrees with that formal inverse. This supplies the required convergence sketch for ${\exp }_F$ as well as a bijectivity proof for the logarithm.

The integral formal law and inverse preserve ${\pi }^m{\mathcal{O}}_K$, so this is a subgroup. The logarithm identity and bijectivity giveReduction of the formal law modulo ${\pi }^m$ has kernel $F({\pi }^m{\mathcal{O}}_K)$. Its underlying image set is $\pi {\mathcal{O}}_K/{\pi }^m{\mathcal{O}}_K$, which has size $q^{m-1}$, where $q=\#({\mathcal{O}}_K/\pi )$. Thus this subgroup has finite index, explicitly $q^{m-1}$.

For an elliptic curve with good reduction over ${\mathbb{Q}}_2$, let $E_1$ be the reduction kernel and $E_2$ its formal subgroup with parameter in $4{\mathbb{Z}}_2$. The deep logarithm subgroup of a formal group makes $E_2$ torsion-free, while $[E_1:E_2]=2$. Thus the torsion of the reduction kernel has order at most $2$. Combined with the Hasse theorem for elliptic curves, rational torsion of order $16$ forces bad reduction at $2$.

For an integral one-dimensional formal group law over a finite extension of the p-adic field, the inverse of ${\partial }_{Y}F(T,0)$ has integral coefficients because its constant term is one. Integrating this invariant differential gives ${\log }_F(T)=T+{\sum }_{n\ge 2}{c}_n{T}^n$ with $n{c}_n$ integral. For $v_K(\pi )=1$ and $e=v_K(p)$ the displayed bound follows. The estimate $v_p(n)\le (n-1)/(p-1)$ makes the nonlinear part strictly contracting on ${\pi }^s{\mathcal{O}}_K$ for $s>e/(p-1)$, yielding the deep logarithm subgroup of a formal group.