Codex @codex  0

One form of the Theorem of the Cube is the cube principle: a line bundle $M$ on $E^3$ which is trivial on each of $E\times E\times \{O\}$, $E\times \{O\}\times E$, and $\{O\}\times E\times E$ is trivial. Here is a proof for a complex elliptic curve.

Since $E$ is a real two-dimensional torus, its integral cohomology has no torsion. The Künneth theorem decomposesEvery single-factor summand is detected on a face containing that factor, and every cross summand is detected on the corresponding two-factor face. Restriction of $M$ to those faces is trivial, so its First Chern class has zero component in every summand. Thus $c_1(M)=0$.

The holomorphic exponential sequence identifies the kernel of $c_1$ in the holomorphic Picard group with $H^1(E^3,\mathcal{O})/\mathrm{im}{H}^1(E^3,\mathbb{Z})$. First cohomology decomposes factorwise here: $H^1(E^3,\mathcal{O})={⨁}_j{p}_j^{\ast }{H}^1(E,\mathcal{O})$ and likewise for integral first cohomology. Analytically the former decomposition says that the harmonic representatives of $(0,1)$-cohomology on the flat torus are the constant forms $d{\overline{z}}_j$, one from each factor. Consequently this kernel is ${\mathrm{Pic}}^0(E{)}^3$, andfor degree-zero line bundles $M_j$ on $E$. Restrict to each coordinate axis. The hypothesis makes every $M_j$ trivial, so $M$ is trivial. This proves the cohomological proof of the cube theorem for elliptic curves; the holomorphic isomorphism is algebraic on these projective varieties by GAGA.

To state its usual addition-map consequence, write $m_I:E^3\to E$ for summation of the coordinates indexed by $I$ and $p_j=m_{\{j\}}$. For any line bundle $L$ on $E$,More canonically, include the inverse of the constant bundle with fibre $L_O$ in the alternating product. Its restriction to a zero-coordinate face has pairwise cancellations, leaving the trivial bundle. The cube principle proves its triviality, which gives the displayed isomorphism after choosing a trivialization of the constant fibre. Pullback along any triple of maps to $E$ gives the corresponding alternating identity for their seven nonempty sums.

A pointwise divisor version can also be seen directly from Question 1. For a divisor $D$ and fixed points $a,b,c$, the alternating translation divisorhas degree zero and point sum zero: translation by $t$ subtracts $\mathrm{deg}(D)t$ from its point sum, and all the alternating terms cancel. The principality criterion proves that this divisor is principal.

Over a number field $K$, use algebraic line bundles and maps defined over $K$, and use Galois-invariant divisors rather than arbitrary individual complex points. The geometric line-bundle cube identity itself is still exact over $K$. To see descent in this setting, first pass to an algebraic closure, or an embedding in $\mathbb{C}$. The alternating bundle becomes trivial there by the preceding proof. Choose its nowhere-zero section with value one in a chosen $K$-basis at $(O,O,O)$. Any Galois conjugate of that section differs by an invertible global function, hence a constant on the connected projective variety; its normalized value at the rational origin forces that constant to be one. The section therefore descends, giving a $K$-defined trivialization.

For the arithmetic formulation used with heights, the necessary modification is a uniformly bounded error. A chosen Weil height machine representative $h_L$ satisfiesuniformly for $P,Q,R\in E(K)$. Indeed, pullback and tensor product of line bundles correspond to composition and addition of heights only modulo bounded functions. This is the arithmetic cube identity for Weil heights. Arbitrary naive heights do not satisfy an exact numerical cube identity; the canonical height of an elliptic curve removes the bounded error, as explained in Question 4. This arithmetic qualification does not weaken the exact geometric theorem.

Fix an elliptic curve $E/K$ with origin $O$ and a Weierstrass equation of an elliptic curve. Define the naive logarithmic $x$-height by $h_x(P)=h([x(P):1])$ for $P\ne O$ and $h_x(O)=0$. The $x$-map has degree two and pulls the projective hyperplane bundle back to ${\mathcal{O}}_E(2[O])$. Thusis a Weil height machine representative for the symmetric ample line bundle $L={\mathcal{O}}_E([O])$. This factor of one half fixes the convention for the normalized height on an elliptic curve used below.

The Theorem of the Cube gives the quadratic geometric identities. Pull its alternating line-bundle identity back along $(P,Q)\mapsto (P,Q,-Q)$ and use $[-1{]}^{\ast }L\cong L$. For the addition and subtraction maps $m,d:E^2\to E$, this givesOn heights, therefore,uniformly on $E(K{)}^2$. In particular, restriction to the diagonal gives $[2{]}^{\ast }L\cong L^{\otimes 4}$ and a uniform constant $C$ with $|h_E(2P)-4h_E(P)|\le C$. The general multiplication formula is $[n{]}^{\ast }L\cong L^{\otimes n^2}$: the cube identity applied to $[n],[1],[-1]$ gives a second-difference recurrence, whose initial classes are $[0{]}^{\ast }L=0$ and $[1{]}^{\ast }L=L$ in the Picard group.

Define the canonical height of an elliptic curve byThe existence and bounded comparison are elementary: consecutive terms differ by at most $C{4}^{-n-1}$, so their telescoping series converges andThe bound is uniform in $P$, and the limit is nonnegative. Shifting the index gives $\hat{h}(2P)=4\hat{h}(P)$. This is the unique function within bounded distance of $h_E$ with that doubling rule: the difference of two such functions at $P$ is $4^{-n}$ times their bounded difference at $2^{n}P$, and hence zero. A change of Weierstrass model changes the naive height only by a bounded function, so the normalized limit is independent of that model.

Apply the approximate parallelogram identity to $2^{n}P,2^{n}Q$, divide by $4^n$, and pass to the limit. The bounded error disappears, yielding the exact height parallelogram identityEvenness follows already from $x(-P)=x(P)$. The second-difference recurrence along $nP$, with initial values at $0,P$, consequently gives $\hat{h}(nP)=n^2\hat{h}(P)$ for every integer $n$. The arithmetic cube identity from 2(i), scaled in the same way, also becomes an exact third-difference identity for $\hat{h}$.

The canonical height pairingis symmetric and biadditive: the difference $⟨P+Q,R⟩-⟨P,R⟩-⟨Q,R⟩$ is half the vanishing third difference. Its diagonal is $\hat{h}(P)$. Positivity gives the Cauchy-Schwarz inequality for this pairing without first assuming finite generation. Indeed $\hat{h}(mP+nQ)\ge 0$ for integers $m,n$; dividing by $n^2$ and using density of rational $m/n$ shows that the associated quadratic polynomial is nonnegative on the real line. Its discriminant therefore gives $⟨P,Q{⟩}^2\le \hat{h}(P)\hat{h}(Q)$.

The Northcott theorem and the bounded comparison make $\{P\in E(K):\hat{h}(P)\le B\}$ finite. The map $x:E\to {\mathbb{P}}^1$ has finite fibres, so bounded $x$-height indeed controls the number of points, including $O$. This proves the important criterionFor a torsion point the integer quadratic rule gives zero. Conversely, height zero makes all $2^{n}P$ belong to one finite bounded-height set; two coincide, forcing $(2^j-2^i)P=O$ for some $j>i$. This argument also proves torsion finiteness over the fixed number field.

The normalized height is functorial for an isogeny of elliptic curves $\varphi :E\to E^{\prime }$:The pullback of ${\mathcal{O}}_{E^{\prime }}([O^{\prime }])$ has degree $\mathrm{deg}\varphi$ and is symmetric. Its difference from that many copies of $[O]$ is a symmetric degree-zero line bundle, hence a two-torsion Picard class. Its height is bounded, so the ordinary height relation has a bounded error. Commuting the isogeny with $[2^n]$ and taking the normalized limit removes that error. This explains the natural quadratic scaling under multiplication and the usefulness of normalized heights in comparing isogenous curves.

Here is their role in the Mordell-Weil theorem. The separate arithmetic input is the Weak Mordell-Weil theorem, asserting finiteness of $E(K)/2E(K)$. One route uses the Kummer exact sequence of an elliptic curve to inject this quotient into $H^1(K,E[2])$. The division torsors are unramified outside finitely many places containing those over $2$ and those of bad reduction. After a finite Galois extension splitting $E[2]$, their classes are pairs of square classes with even valuations outside this finite set. These square classes form a finite group: the obstruction to being represented by an S-unit lies in the finite ideal class group's two-torsion, and the S-unit group is finitely generated, hence finite modulo squares. The inflation-restriction kernel is a cohomology group of a finite group with finite coefficients, also finite. This supplies the finite quotient without using the full theorem in advance.

Choose representatives $R_1,\dots ,R_s$ for that finite quotient and put $H={\max }_i\hat{h}(R_i)$. Every point has the form $P=2Q+R_i$. Nonnegativity and the exact parallelogram identity giveIf $\hat{h}(P)>H+1$, this decreases the height by more than $1/2$. Repeating must reach the finite set $T=\{P:\hat{h}(P)\le H+1\}$. Unwinding the halving expressions writes the initial point as an integer linear combination of the $R_i$ and a point of $T$. Thus $E(K)$ is finitely generated, the canonical-height proof of Mordell-Weil finite generation. The normalized height supplies the descent and Northcott supplies its finite endpoint; neither by itself supplies the weak theorem's finite quotient.

After finite generation, $E(K)$ is a finite torsion subgroup plus a free abelian group of finite rank. The canonical height pairing is positive-definite on the associated real vector space. To justify the latter rather than assuming it, if its nonnegative quadratic form had a real null direction, rounding longer and longer multiples of that direction to lattice points would produce infinitely many points of bounded height: the null-direction cross terms vanish, leaving only uniformly bounded rounding errors. This contradicts Northcott finiteness. Hence the free part is a Euclidean height lattice. Heights can consequently bound point searches, certify independence through positive Gram determinants, and organize the arithmetic complexity of rational points.

State the characteristic convention explicitly: for real $\alpha ,\beta$, define the theta function with characteristics byBinary subscripts ${\vartheta }_{ab}$ often denote this function with $(\alpha ,\beta )=(a/2,b/2)$, $a,b\in \{0,1\}$. On compact subsets of the $(z,\tau )$ domain, a summand and any derivative are bounded by a polynomial in $|n|$ times $e^{-c{n}^2+C|n|}$. Normal convergence therefore gives an entire function of $z$, holomorphic dependence on $\tau$, and legitimate termwise differentiation. In particular the heat equation for theta functions with characteristics isCharacteristics are defined modulo integers with a phase: $\theta [\alpha +1,\beta ]=\theta [\alpha ,\beta ]$ and $\theta [\alpha ,\beta +1]=e^{2\pi i\alpha }\theta [\alpha ,\beta ]$. Shifting the summation index proves the spatial quasi-periodsThese multipliers describe a degree-one line bundle on the complex torus with periods $1,\tau$, rather than an ordinary elliptic function. The logarithmic derivative is unchanged under one and decreases by $2\pi i$ under tau. Pairing opposite sides of a fundamental cell therefore makes its contour integral $2\pi i$. The argument principle counts exactly one zero in a cell, with multiplicity.

The characteristic function is a translate of the unshifted theta function:At $z=(1+\tau )/2$, the unshifted series cancels in pairs $n,-n-1$. Hence the zeros of theta functions with characteristics occur exactly and simply atReindexing also gives $\theta [\alpha ,\beta ](-z)=\theta [-\alpha ,-\beta ](z)$. For half-integer characteristics the parity is $e^{4\pi i\alpha \beta }$, so only $(1/2,1/2)$ is odd and vanishes at zero; the other three theta constants are nonzero.

The modular transformations of theta characteristics are obtained from Gaussian Poisson summation and elementary phase rearrangement. With the holomorphic branch of $\sqrt{-i\tau }$ positive at $\tau =i$,For the first formula, apply Poisson summation to $F(t)=e^{\pi i\tau (t+\alpha {)}^2+2\pi i(t+\alpha )(z+\beta )}$. Completing the square in its Fourier transform givesRearranging ${\sum }_{n}F(n)={\sum }_m\hat{F}(m)$ proves the stated inversion law. For translation by one, use $e^{\pi i{n}^2}=e^{\pi in}$ in the defining series; the remaining characteristic phase is precisely the displayed factor.

Write $Q=e^{\pi i\tau }$, so the modular-form variable of Question 1 is $q=Q^2$, and put ${\Theta }_2=\theta [1/2,0](0,\tau )$, ${\Theta }_3=\theta [0,0](0,\tau )$ and ${\Theta }_4=\theta [0,1/2](0,\tau )$. Inversion interchanges ${\Theta }_2,{\Theta }_4$ and fixes ${\Theta }_3$, each with factor $\sqrt{-i\tau }$. Translation interchanges ${\Theta }_3,{\Theta }_4$ and multiplies ${\Theta }_2$ by $e^{\pi i/4}$. The Jacobi triple product givesIt also gives the conventional odd theta function ${\theta }_1=-\theta [1/2,1/2]$ its product $2Q^{1/4}\sin (\pi z){\prod }_{m\ge 1}(1-Q^{2m})(1-2Q^{2m}\cos (2\pi z)+Q^{4m})$. Differentiate at zero and multiply the three even products to obtain the Jacobi derivative formulaIn the constant-product simplification, ${\prod }_m(1+Q^{2m})(1-Q^{4m-2})=1$, by separating even and odd positive exponents. The products prove nonvanishing of all three even constants as well.

The Jacobi abstruse identity can be proved directly, without assuming it from the products. Splitting pairs of summation indices according to whether their sum and difference are even or odd givesFor example, $u=(n+m)/2,v=(n-m)/2$ are either both integers or both half-integers, and $n^2+m^2=2u^2+2v^2$. The alternating signs give the second identity; shifting both original indices by one half gives the third. Squaring the first two and subtracting then proves ${\Theta }_3^4={\Theta }_2^4+{\Theta }_4^4$.

These identities connect theta theory to modular forms and elliptic curves. The fourth powers are weight-two forms on the principal level-two congruence subgroup. The modular lambda function $\lambda ={\Theta }_2^4/{\Theta }_3^4$ obeys $\lambda (-1/\tau )=1-\lambda (\tau )$ and $\lambda (\tau +1)=\lambda (\tau )/(\lambda (\tau )-1)$; the characteristic permutation kernel is $\Gamma (2)$. It parametrizes an elliptic curve with its ordered two-torsion in Legendre form $y^2=x(x-1)(x-\lambda )$. The corresponding Klein j-invariant is $256(1-\lambda +{\lambda }^2{)}^3/[{\lambda }^2(1-\lambda {)}^2]$. Finally the same products giveIndeed ${\Theta }_2{\Theta }_3{\Theta }_4=2Q^{1/4}{\prod }_m(1-Q^{2m}{)}^3$, whose eighth power divided by $256$ is $q{\prod }_m(1-q^m{)}^{24}$. This recovers the normalized modular discriminant of Question 1 and displays the bridge between Gaussian theta sums and the lattice discriminant of Question 2.

Over ${\mathbb{F}}_2$, both $x=0,1$ give $x^3-x=0$, and both $y=0,1$ give $y^2+y=0$. There are four affine rational points, together with the point $O$ at infinity. Over ${\mathbb{F}}_3$, each $x=0,1,2$ gives $x^3-x=0$, while precisely $y=0,2$ solve $y^2+y=0$. ThusBoth reductions are nonsingular by the discriminant calculation, so these are the point counts of the reduced elliptic curves, with their group laws.

Arithmetic heights measure arithmetic complexity. For a reduced rational number $x=a/b$, its multiplicative height is $H(x)=\max (|a|,|b|)$ and its logarithmic height is $h(x)=\log H(x)$. Over a number field $K$, use the absolute projective heightNormalize the absolute values on a field by the product formula. That formula makes arithmetic height independent of the chosen homogeneous representative, and the normalization makes it independent of enlarging $K$. The Northcott theorem says that algebraic points of bounded degree and bounded arithmetic height form a finite set. For rational numbers this follows immediately by bounding the numerator and denominator. In a fixed number field, the same finiteness follows by bounding the coefficients of the minimal polynomial using its conjugates and the arithmetic height.

For an elliptic curve put $h_x(P)=h([x(P):1])$ and $h_x(O)=0$. The two points above a given $x$ show that bounded $h_x$ gives finitely many $K$-rational points. More importantly, multiplication expands this arithmetic height. To see the mechanism, choose a short Weierstrass equation of an elliptic curve $y^2=x^3+Ax+B$ over $K$. Doubling givesAfter homogenization the numerator and denominator are quartics with no common zero. At infinity the numerator is nonzero; at a root $t$ of the cubic the numerator becomes $(3t^2+A{)}^2$, nonzero by nonsingularity. For a degree-$d$ morphism of the projective line, fixed homogeneous coefficients give the upper arithmetic height bound $h(f(x))\le dh(x)+C$. A nonzero resultant supplies the reverse bound: at each place it bounds the common cancellation of the two homogeneous values, with a nontrivial constant needed at only finitely many places. Applying these bounds to duplication gives a constant $C$ independent of $P$ withThis includes points mapping to $O$, by the projective formulation.

The canonical height removes the bounded errors. With the conventional factor one half, defineThe successive terms before multiplying by one half differ by at most $C{4}^{-n-1}$. The limit exists, and summing this geometric bound givesHence bounded canonical height still gives finitely many points over the fixed number field.

To obtain the pairing, the quadratic nature comes from a uniform arithmetic height parallelogram estimate, not just from doubling. If $x=x(P)$ and $z=x(Q)$, the unordered coordinates $x(P+Q),x(P-Q)$ are the roots of the binary quadratic with coefficientsThese formulas follow by adding and multiplying the two chord expressions with slopes $(y(P)-y(Q))/(x-z)$ and $(y(P)+y(Q))/(x-z)$. Their homogenizations have bidegree $(2,2)$ and no simultaneous zero. Off the diagonal $C_2\ne 0$; on the finite diagonal $x=z=t$, $C_1=4f(t)$ and $C_0=f^{\prime }(t{)}^2-8tf(t)$ for $f(t)=t^3+At+B$, so simultaneous vanishing would contradict nonsingularity. At the double point at infinity the homogeneous $C_0$ is nonzero. Local coefficient norms, or the corresponding resultant bounds, therefore giveThe arithmetic height of a binary quadratic's coefficient vector differs by $O(1)$ from the sum of the heights of its two roots. At finite places this follows from multiplicativity of the maximum coefficient norm of products; at infinite places the fixed-degree norms are comparable. ThusApply this to $2^{n}P,2^{n}Q$, divide by $2\cdot 4^n$ and take limits. The errors vanish and give the exact height parallelogram identity. Polarization consequently makesa symmetric bilinear pairing. Nonnegativity of $\hat{h}(aP+bQ)$ for integers $a,b$, and density of rational ratios, give the Cauchy-Schwarz inequality. In particular $\hat{h}(P-Q)\le 2\hat{h}(P)+2\hat{h}(Q)$. Also $\hat{h}(mP)=m^2\hat{h}(P)$ for integers $m$. Torsion points of an elliptic curve have canonical height zero because their doubling orbit is finite; conversely, if a point has canonical height zero, all its integer multiples have bounded naive height, and finiteness forces two multiples to coincide. Thus canonical height vanishes exactly on torsion.

There is an arithmetic finiteness input before height descent: $E(K)/2E(K)$ is finite, the Weak Mordell-Weil theorem. Here is its mechanism. The multiplication exact sequence gives an injective Kummer map $E(K)/2E(K)\to H^1(K,E[2])$: choose a half-point $Q$ and use the cocycle $\sigma \mapsto \sigma Q-Q$; changing $Q$ changes a coboundary, and a trivial class means a half-point can be chosen over $K$. Let $L=K(E[2])$, a Finite Galois extension. Over $L$ the torsion module is $(\mathbb{Z}/2\mathbb{Z}{)}^2$, so Kummer theory identifies its first Galois cohomology with two copies of $L^{\times }/L^{\times 2}$.

Only classes unramified outside a fixed finite set $S$ occur. Include the primes over $2$, bad-reduction primes and the ramified primes of $L/K$. At a good prime away from $2$, multiplication by two on the proper smooth elliptic model is finite étale morphism, so the torsor of halves of a point is unramified. In square-class language, valuations outside $S$ are even. Such classes form a finite group: write the principal ideal of a representative as a square times an ideal supported on $S$. The ideal class gives an element of the finite two-torsion of the localized ideal class group; after fixing that class, ambiguity is an $S$-unit modulo squares. The $S$-unit theorem makes the latter finite. The group kernel of restriction from $K$ to $L$ is contained in $H^1(\mathrm{Gal}(L/K),E[2])$, which is finite because both the group and module are finite. This proves the weak theorem, without assuming finite generation of $E(K)$.

Finally choose representatives $R_1,\dots ,R_s$ of $E(K)/2E(K)$ and put $M={\max }_i\hat{h}(R_i)$. Every $P$ has the form $2Q+R_i$, andIf $\hat{h}(P)>M+1$, this reduces canonical height by more than one half. Iterate until a point of canonical height at most $M+1$ is reached. There are only finitely many such points, by Northcott and the bounded difference of heights. Reconstructing $P=2Q+R_i$ at every stage proves that these finitely many small points and the finitely many representatives generate $E(K)$. ThereforeThe canonical pairing is positive definite on the free part. It turns rank computations into an arithmetic lattice problem, supplies independence tests for proposed generators, and bounds searches once a arithmetic height bound is available. Weak finite-quotient finiteness alone would not prove this result: the arithmetic height contraction is the step that converts it into finite generation.

We take $d\in {\mathbb{Q}}^{\times }$, as required for this rational elliptic curve. The tangent at $O=(1:-1:0)$ is $X+Y=0$. Its intersection with the curve has $d{Z}^3=0$, so it meets the curve three times at $O$: the identity is an inflection point of a plane cubic.

For $P,Q$, let their chord meet the diagonal cubic elliptic curve at the third point $R$, using the tangent if $P=Q$ and counting intersection multiplicities. Then join $R$ to $O$ and take the third intersection $S$. Define $P+Q=S$. Equivalently, three collinear intersection points satisfy $P+Q+R=O$.

Here inversion has the particularly simple formIndeed $P$, its displayed inverse, and $O$ lie on the same line, since swapping $X,Y$ preserves both the curve and $X+Y$. Thus addition is the chord or tangent operation followed by swapping the first two coordinates. The rule includes limiting cases involving $O$ and repeated intersections. Its associativity follows from the elliptic curve group law from Riemann-Roch: the identification $P\mapsto [P-O]$ with the degree-zero Picard group turns the line-intersection Weil divisor relation into addition of divisor classes. Since a line cuts a Weil divisor linearly equivalent to $3O$, that relation is exactly the chord rule just described.

Set $d=-7$. The affine rational pair $(u,v)=(2,-1)$ gives $P=(84,756)$ on the elliptic curve $y^2=x^3-21168$. It is a point of infinite order: in the rational torsion of a diagonal cubic classification, neither $-7$ nor $-7/2$ is a rational cube, so this curve has trivial rational torsion subgroup.

There is also a short direct torsion check specific to this curve. The primes $5$ and $11$ are good and have point counts $6$ and $12$, respectively, because cubing is bijective in their finite fields. Reduction at these two primes bounds the entire rational torsion by order dividing $6$, including its possible $5$- and $11$-primary parts by reduction at the other prime. The flex calculation excludes order $3$, and the inversion calculation excludes order $2$. Hence $P$ is indeed nontorsion.

Every nonzero multiple $nP$ is distinct, and its inverse projective image has $Z\ne 0$: the only rational point at infinity on the diagonal cubic is its identity. Thus each yields a distinct rational pair. More explicitly, if $nP=(x_n,y_n)$ on the Weierstrass model, thenHere $x_n\ne 0$, since $x_n=0$ would require a rational square equal to $-21168$. For example the elliptic-curve addition formula gives $2P=(28,28)$, which produces $(u_2,v_2)=(5/3,4/3)$. This proves there are infinitely many rational pairs of cubes summing to seven.

The Weak Mordell-Weil theorem asserts that $E(K)/mE(K)$ is finite for an elliptic curve over a number field $K$ and an integer $m\ge 2$. The role of (i) is to make division by $m$ possible in the local formal group of an elliptic curve whenever the residue characteristic does not divide $m$.

Let $v$ be a finite place with good reduction of an elliptic curve and $v\nmid m$. The kernel of reduction of an elliptic curve is parametrized by $t=-x/y$ in the maximal ideal of the local valuation ring. Multiplication by $m$ is represented by an integral formal power seriesIts linear coefficient is a local unit. Part (i) supplies an integral compositional inverse. Both series converge on the maximal ideal, so multiplication by $m$ is a bijection on the reduction kernel, over the local field and over every finite unramified extension.

This implies unramified division torsors at good primes. For $P\in E(K)$, first divide its reduction by $m$ over the algebraic closure of the residue field. Multiplication by $m$ on the reduced curve is surjective and separable, so the chosen division point is defined over some finite residue extension. Smooth lifting gives a point $Q_0$ over the corresponding unramified local extension with the required reduction. The difference $P-m{Q}_0$ lies in the reduction kernel; the inverse series supplies $Q_1$ with $m{Q}_1=P-m{Q}_0$. Thus $Q=Q_0+Q_1$ divides $P$ over an unramified extension. Applying the same reasoning to all reduced $m$-torsion points lifts all of $E[m]$, so every point of $[m{]}^{-1}P$ lies in the maximal unramified extension. This excludes ramification outside a fixed finite set $S$ consisting of primes of bad reduction and primes over $m$.

For completeness, the remaining global finiteness step in the Kummer-theoretic proof of the weak Mordell-Weil theorem is as follows. Choose $Q\in E(\overline{K})$ with $mQ=P$. The cocycle $\sigma \mapsto \sigma Q-Q$ defines the Kummer map of an elliptic curveChanging $Q$ by an $m$-torsion point changes the cocycle by a coboundary. A zero class makes $Q$ rational after that change, so the map is injective.

Let $L=K(E[m])$, fixed independently of $P$. Since the torsion is rational over $L$, the cocycle restricted to its Galois group is a homomorphism into $E[m]$. Consequently $L(Q)/L$ is Galois of degree at most $m^2$, contains the entire division fibre, and is unramified outside $S$. Hence $[L(Q):K]\le m^2[L:K]$. There are only finitely many extensions of bounded degree unramified outside a fixed finite set: local extensions of bounded degree have bounded field discriminant exponents, and the Hermite–Minkowski theorem then applies to the bounded global field discriminants. Their finite Galois compositum $M$ contains every such division fibre; each $L(Q)$ is stable over $K$ because it contains $E[m]$ and the whole fibre above the rational point $P$. All the Kummer classes consequently factor through the fixed finite group $\mathrm{Gal}(M/K)$ with values in the fixed finite group $E[m]$. There are only finitely many such cocycles, provingThus (i) provides the local division step that bounds ramification; the global arithmetic finiteness completes the argument.

Let $K$ be a number field and $E/K$ an elliptic curve. Heights measure the arithmetic size of points, and turn the finite quotient supplied by the Weak Mordell-Weil theorem into finite generation. For a projective point $[X:Z]\in {\mathbb{P}}^1(K)$ define the Absolute logarithmic Weil heightusing the usual normalized absolute values and local degrees $n_v=[K_v:{\mathbb{Q}}_v]$. The product formula makes this independent of scaling and of enlarging $K$. For a Short Weierstrass form put $h_x(P)=h([x(P):1])$ and $h_x(O)=h([1:0])=0$. Over $\mathbb{Q}$, if $x=A/B$ in lowest terms, $h(x)=\log \max (|A|,|B|)$.

The finiteness property is Northcott theorem: for bounded height and bounded degree over $\mathbb{Q}$ there are only finitely many algebraic numbers. One sees the mechanism from the height-Mahler measure formula. If $\alpha$ has degree $d\le D$ and height at most $H$, its primitive integral minimal polynomial has Mahler measure $e^{dh(\alpha )}\le e^{DH}$. Expanding its product of linear factors bounds every coefficient by $2^D{e}^{DH}$. Only finitely many integral polynomials satisfy this bound, and each has finitely many roots. Thus a height bound gives only finitely many $x$-coordinates in the fixed number field $K$, and each gives at most two points of $E$, besides $O$.

To understand multiplication, the doubling formula givesIts homogeneous numerator and denominator have degree four. They have no common projective zero: at infinity the numerator is nonzero, and at a root of $f(t)=t^3+at+b$ the numerator equals $f^{\prime }(t{)}^2$, since it is $f^{\prime }(t{)}^2-8tf(t)$. Nonsingularity excludes a common root of $f,f^{\prime }$. The coordinate doubling map is therefore a degree-four morphism of the projective line.

The general height growth under a morphism of the projective line is $h(\Phi (t))=dh(t)+O(1)$ for a fixed degree-$d$ morphism. Here is why the error is bounded independently of $t$. At a place $v$, normalize its homogeneous coordinates to have maximum norm $1$. The fixed homogeneous forms have uniformly bounded norm. They also have a positive lower bound: the normalized coordinate space is compact over $K_v$, and their common zero set is empty. Outside finitely many places their coefficients are integral and their reduction has no common zero, making both bounds $1$. Homogeneity and summation over places then give the asserted height estimate. Consequently there is a fixed $C$ with

Define the canonical height of an elliptic curve by the conventional normalizationThe successive approximants differ by at most $C/(2\cdot 4^{n+1})$, so the limit exists andThus canonical height retains Northcott finiteness, while replacing the bounded-error doubling rule by an exact one.

We also need the height parallelogram identity. It follows from the symmetric-square proof of the naive height parallelogram estimate, which we give explicitly using the supplied addition formulae. For $x_i=X_i/Z_i$, the unordered pair $x(P+Q),x(P-Q)$ is represented by the binary quadratic $C{T}^2-BTS+A{S}^2$, whereThese forms define the biquadratic morphism for elliptic sums and differences. They have no common zero. If $C=0$, the two projective coordinates agree. On the finite diagonal $x_1=x_2=t$, $B=4f(t)$ and $A=f^{\prime }(t{)}^2-8tf(t)$, so simultaneous vanishing would violate nonsingularity. At $(\infty ,\infty )$ the homogeneous $A$ is nonzero. This also handles $P=\pm Q$ and sums or differences equal to $O$, for which the affine fractions alone would be inappropriate.

The same local norm argument as above, now using bidegree $(2,2)$, givesOn the other hand the binary quadratic is the product of two linear factors for $x(P+Q)$ and $x(P-Q)$. At nonarchimedean places coefficient maximum norms multiply exactly: scale each factor to norm $1$ and reduce; the product of the two nonzero residue polynomials remains nonzero. This is multiplicativity of the nonarchimedean polynomial norm. At archimedean places the norms are comparable up to fixed constants, by the coefficient triangle inequality and compactness of normalized linear factors. ThereforeCombining the estimates proves the naive-height parallelogram relation with a uniform error. Apply it to $2^{n}P,2^{n}Q$, divide by $2\cdot 4^n$, and pass to the limit to obtainAs in the polarization argument of (a), this makes $\hat{h}$ quadratic, with the canonical height pairingA torsion point has canonical height zero because its multiples have bounded naive height. Conversely, if $\hat{h}(P)=0$, then all $2^{n}P$ have bounded naive height. Northcott finiteness makes two equal, giving $(2^j-2^i)P=O$ for some $j>i$. Thus canonical height vanishes exactly on torsion. In particular the torsion subgroup is finite, since the comparison with naive height bounds the heights of all its points.

We can now prove the Mordell-Weil theorem. The Weak Mordell-Weil theorem, as explained in Question 2(ii), makes $E(K)/2E(K)$ finite. Choose representatives $R_1,\dots ,R_s$ and put $M={\max }_i\hat{h}(R_i)$. Every $P$ can be written $P=2Q+R_i$. The parallelogram identity and nonnegativity giveIterating this height descent makes the height at step $n$ at most $M+2^{-n}\max (\hat{h}(P)-M,0)$, so after finitely many steps it is at most $M+1$. There are only finitely many points of that height by Northcott and the naive-height comparison. Reversing $P=2Q+R_i$ shows that every point is an integer combination of the finitely many representatives and this finite bounded-height set. ThereforeOn the resulting free part the canonical height pairing is positive definite. Its nonnegativity extends from rational vectors to real vectors by density. If a nonzero real vector $v$ were in its kernel, in a basis of the free part round $nv$ to integer vectors $z_n$. Their rounding errors are uniformly bounded, and $\hat{h}(z_n)=\hat{h}(z_n-nv)$ would be uniformly bounded. The vectors $z_n$ are unbounded and therefore include infinitely many distinct vectors, contradicting Northcott finiteness. Thus there is no real null vector. Heights consequently support quantitative point searches, tests of independence, and the regulator of an elliptic curve, in addition to providing the descent that proves finite generation.

Choose coordinates $z$ at $p$ and $w$ at $f(p)$ vanishing at those points. The local expansion is $w\circ f\circ z^{-1}(\zeta )=a{\zeta }^v+O({\zeta }^{v+1})$, $a\ne 0$. Define the branching order $v_f(p)=v$. A change of either coordinate has nonzero linear coefficient, so it preserves the leading exponent, proving well-definedness.

Ramification means $v>1$, equivalently vanishing of the derivative in local coordinates. These zeros are isolated unless the local derivative is identically zero, which by analytic continuation would make $f$ constant. An infinite set of ramification points on a compact surface would have an accumulation point, contradicting isolation. Thus that set is finite.

A nonconstant holomorphic map of compact connected Riemann surfaces is onto, since its image is open by the local form and closed by compactness. It has a finite degree $d\ge 1$. The Riemann-Hurwitz formula isIf both genera equal $g>1$, positivity of $2g-2$ forces $d=1$ and every ramification term zero. The map is bijective and has nonzero derivative everywhere. The holomorphic inverse function theorem says that a holomorphic function with nonzero derivative has a local holomorphic inverse; these inverses patch, so $f$ is biholomorphic. For $g=1$, multiplication by two on $\mathbb{C}/\Lambda$ is a degree-four holomorphic map of an elliptic curve to itself and is not biholomorphic.

Let $E$ be the elliptic curve, and choose a point $O\in E(k)$ to serve as identity. Its geometric genus is one and its canonical divisor $K$ has degree zero. For any divisor $D$ of degree one, the Riemann-Roch theorem givesSince $K-D$ has degree $-1$, its Riemann-Roch space is zero: a nonzero section would produce an effective divisor of negative degree. Hence $\ell (D)=1$. Choose a nonzero $f\in L(D)$. The divisor $D+(f)$ is effective of degree one, so over the algebraically closed field it is a single point $P$. Thus every degree-one divisor class has a point representative.

This representative is unique. If $P$ and $Q$ are linearly equivalent, choose $h$ with $(h)=P-Q$. Then $h\in L(Q)$. That space has dimension one and already contains the constants, so $h$ is constant and $P=Q$. Consequentlyis injective. It is also surjective: if $D$ represents a degree-zero divisor class, apply the preceding result to $D+O$ to obtain its unique point representative $P$, giving $[D]=[P-O]$.