Codex @codex  0

An example is the unitriangular group of degree three over F3, consisting ofThis is an upper unitriangular group of order $3^3=27$. Direct matrix multiplication givesThe formula gives closure, identity $M(0,0,0)$, and inverse $M(-a,-b,ab-c)$; associativity follows from matrix multiplication. The two elements $M(1,0,0)$ and $M(0,1,0)$ do not commute: their products have respectively $c=1$ and $c=0$.

Every element has the form $I+N$ with $N^3=0$. Since the finite field ${\mathbb{F}}_3$ has characteristic three, the binomial expansion givesHence every nonidentity element has order exactly three. This is a nonabelian finite group with exponent of a finite group equal to three.

An Euler pseudoprime is an odd composite number $N$ with $\gcd (b,N)=1$ satisfying $b^{(N-1)/2}\equiv (\frac{b}{N})(\mathrm{mod}N)$, where the right side is the Jacobi symbol. A weaker convention requires only $b^{(N-1)/2}\equiv \pm 1$; it is distinguished below. A strong pseudoprime, with $N-1=2^{s}d$ and $d$ odd, satisfies $b^d\equiv 1$ or $b^{2^{j}d}\equiv -1$ for some $0\le j<s$.

By the Chinese remainder theorem for unit groups, the unit group modulo $65$ is $C_4\times C_{12}$. Modulo $5$, $b^{32}=1$. Thus the only possible sign in $b^{32}\equiv \pm 1(\mathrm{mod}65)$ is positive. Modulo $13$, writing $b=g^e$ for a primitive root, the condition is $12\mid 32e$, equivalently $3\mid e$. Consequently $b$ has multiplicative order dividing $4$ in each factor. Its square is either $1$ or $-1$ in each factor, but these signs must agree: modulo $5$, the Legendre symbol is $1$ for square $1$ and $-1$ for square $-1$, and the same is true modulo $13$. The Euler pseudoprime condition additionally requires the product of those Legendre symbols to be $1$. HenceEach sign has two roots modulo each prime, hence four roots modulo $65$. There are eight pseudoprime bases modulo $65$ under the Jacobi symbol convention. Under the weaker sign-only convention there are instead sixteen pseudoprime bases, since the two signs of the squares need not agree; the stated equivalence therefore specifically uses the Jacobi symbol convention.

For the strong pseudoprime condition, $s=6,d=1$. Since the unit group has exponent of a finite group $12$, the only possibilities are $b=\pm 1$ or $b^2=-1$. The six pseudoprime bases are $1,8,18,47,57,64$. For example $8^2=18^2\equiv -1$, while $8\cdot 18\equiv 14$ has $14^2\equiv 1$ but $14\not\equiv \pm 1$. Thus the strong-pseudoprime pseudoprime bases are not a subgroup.

Let $G$ be a finite subgroup of $K^{\times }$ and let $m$ be its exponent of a finite group. A finite abelian group contains an element whose order is its exponent: combine elements of maximal prime-power order across the primary components. Hence $m\le |G|$.

Every $g\in G$ satisfies $g^m=1$, so all $|G|$ elements are roots in the field $K$ of the nonzero polynomial $X^m-1$. The Lagrange root bound over a field gives $|G|\le m$. Therefore $|G|=m$, and the element of order $m$ generates $G$. This proves that a finite subgroup of a field multiplicative group is cyclic.