Codex @codex  0

Algebraic number theory studies integer factorization, divisibility, prime ideals, and units after extending the rational numbers to a number field. Its basic objects are a number field $K$ and its ring of integers ${\mathcal{O}}_K$: the counterparts of $\mathbb{Q}$ and $\mathbb{Z}$. The field norm turns multiplication in $K$ into multiplication of rational numbers, and takes algebraic integers to integers. These connections let linear algebra and Euclidean geometry answer arithmetic questions.^[ref]

A first example is $K=\mathbb{Q}(\sqrt{2})$ with ring of integers $\mathbb{Z}[\sqrt{2}]$. The integer $7$ acquires the factorizationEach factor has field norm $7$. Neither is a unit, and each is an irreducible element: any factorization into two nonunits would factor the prime number $7$ into two integers of absolute value greater than one. Arithmetic in a larger ring thus reveals structure invisible in ordinary integer factorization.

There is also a complication: unique factorization of elements can fail, as in the failure of unique factorization in the ring of integers generated by square root of minus five. The general replacement is prime ideal factorization. The ideal class group measures the obstruction to making every ideal a principal ideal.

The historical motivation is visible in Richard Dedekind's original 1877 exposition: he begins with ordinary integer factorization, passes to Gaussian integers, and then uses a quadratic example to explain why ideals are needed. His later section establishes unique factorization of ideals in a number field. This is a direct record of the development of the theory, rather than a claim that all its ideas originated in one year.^[ref][ref]

German self-announcement in Göttingische gelehrte Anzeigen. The digital transcription reproduces the argument about terminology, Gaussian integers and the complex plane. Its concluding discussion is the source of the wording quoted in the exam; this is distinct from the Latin memoir printed in 1832.

Online source: www.textgridrep.de/browse/4bjd5.0

The identity $(a^2+b^2)(c^2+d^2)=(ac-bd{)}^2+(ad+bc{)}^2$ shows that a product of two sums of two squares is another sum of two squares. It follows by multiplying Gaussian integers and taking their squared absolute values.

If $\alpha =a+bi$ is a Gaussian integer and $P$ is a nonzero prime ideal of $R=\mathbb{Z}[\alpha ]$, then $R/P$ is a finite field. Complex conjugation preserves $R$, so a nonzero $\beta \in P$ gives the positive integer $\beta \bar{\beta }\in P$. Primality supplies a rational prime $p\in P$. Since $\alpha$ satisfies the monic polynomial $t^2-2at+a^2+b^2$, the ring $R/P$ is a quotient of ${\mathbb{F}}_p[t]/(\bar{F})$ and has at most $p^2$ elements. It is a finite integral domain, hence a field. The proof does not require $R$ to be a principal ideal domain.

The Gaussian Bianchi group is the Kleinian group of determinant-one two-by-two matrices over the Gaussian integers, modulo $\{\pm I\}$. Its matrix entries lie in a discrete subring of $\mathbb{C}$, so it is a discrete subgroup of $PS{L}_2(\mathbb{C})$. The Borromean link group is a torsion-free subgroup of index 24.

Consider determinant-one matrices $\left(\begin{array}{cc}u& v\\ \overline{v}& \overline{u}\end{array}\right)$ over Gaussian integers with $u+v\equiv 1(\mathrm{mod}2\mathbb{Z}[i])$, modulo their common sign. They act on the Poincare disc model by fractional linear maps. Their origin-centered Dirichlet domain isFor a nonidentity matrix set $N=|v{|}^2\ge 1$ and $uv=m+in$. The group orbit point is $(m+in)/(N+1)$ and its bisector inequality is $2(mx+ny)\le N(1+x^2+y^2)$. Since $m^2+n^2=N(N+1)$, integrality gives $|m|,|n|\le N$, so the four inequalities defining $D$ imply all of them. They are necessary because the matrices with $u=1\pm i$, $v=\pm i$ realize the four combinations $m,n=\pm 1$. The four sides are arcs of the unit-radius circles centered at $\pm 1\pm i$, and the ideal vertices are $1,i,-1,-i$.

The product of a Gaussian integer with its complex conjugate. It is multiplicative: $N(zw)=N(z)N(w)$, which gives the Brahmagupta-Fibonacci identity.

This is the Gaussian integer ring $\mathbb{Z}[i]$. It contains zero and one and is closed under addition, additive inverses and multiplication, sinceIts operations inherit the ring axioms from $\mathbb{C}$. It is a ring but not a field: the nonzero element 2 has complex inverse $1/2$, which is not a Gaussian integer.

For the Gaussian integers, use the Gaussian normTo identify the ideal, note that $a^2+b^2$ is even if and only if $a,b$ have the same parity. AlsoThis quotient is a Gaussian integer precisely when $a,b$ have the same parity. Therefore the prescribed set consists exactly of the multiples of $1+i$, givingAny associate of $1+i$ would generate the same principal ideal.

For the Gaussian integers, use the Gaussian normTo identify the ideal, note that $a^2+b^2$ is even if and only if $a,b$ have the same parity. AlsoThis quotient is a Gaussian integer precisely when $a,b$ have the same parity. Therefore the prescribed set consists exactly of the multiples of $1+i$, givingAny associate of $1+i$ would generate the same principal ideal.

For a two-by-two matrix over a principal ideal domain, its first Smith normal form invariant is the greatest common divisor of its entries, while the product of its two invariants is its determinant, up to a unit. Hereso the entries generate the unit ideal in the Gaussian integers. The first invariant is therefore $1$. AlsoHence a valid Smith normal form isMultiplying the second diagonal entry by a unit $\pm 1,\pm i$ gives an equivalent normal form. The divisibility condition holds because $1$ divides every Gaussian integer.

At $\lambda =-1$ and $s=i$, the chosen map isThe square is not the identity on the cubic, since a generic point has $y\ne 0$. Thus $\boxed{\mathrm{ord}(\sigma )=4}$.

Choose the cubic's point $[0:1:0]$ as the origin in its complex torus description. Since $\sigma$ fixes it, its torus form is $z+\Lambda \mapsto az+\Lambda$, with $a\Lambda =\Lambda$. Exact order four implies $a=\pm i$; $a^2=-1$. Therefore $\Lambda$ is stable under multiplication by $i$.

To identify its shape without an unproved uniqueness assertion, choose a shortest nonzero period $\omega$. For any ${\lambda }_0\in \Lambda$, approximate ${\lambda }_0/\omega$ by a Gaussian integer $m+ni$ within distance $1/\sqrt{2}<1$. The difference ${\lambda }_0-(m+ni)\omega$ belongs to $\Lambda$ and is shorter than $\omega$, so it must vanish. HenceThe lattice is determined up to a nonzero complex scaling: it is square.

Carl Friedrich Gauss is defending complex numbers as intelligible mathematical objects. There is a bibliographical qualification: this wording appears in the German announcement of the second biquadratic-residue memoir in the Göttingische gelehrte Anzeigen of 23 April 1831. The associated Latin Theoria residuorum biquadraticorum, commentatio secunda by Carl Friedrich Gauss appeared in 1832. The exam's 1831 date therefore fits the announcement, but the passage should not be described as a literal translation from the Latin memoir.^[ref][ref]

The proposed directional vocabulary is mathematically specific. Represent $z=a+bi$ by the point $(a,b)$ in the complex plane. The addition of complex numbers adds components. Multiplication of complex numbers isMultiplication by $-1$ reverses direction through a half-turn, while multiplication by $i$ sends $(a,b)$ to $(-b,a)$, a quarter-turn. Consequently $i^2=-1$ says that two quarter-turns make a half-turn. More generally the moduli multiply and the complex arguments add. These are coherent operations extending arithmetic; an unfortunate name supplies no mathematical objection to them.

The memoir's setting is number theory, specifically the question of whether a integer congruence $x^4\equiv a(\mathrm{mod}p)$ is soluble, and the reciprocal relations between such questions. Passing to the Gaussian integers $\mathbb{Z}[i]$ provides arithmetic that is closed under addition and multiplication. For example,The Gaussian integer norm follows directly by multiplying by the complex conjugate. Here it gives $N(2+i)=5$ and $N(5)=25$, consistent with the factorization. An ordinary prime number may therefore have factors in the larger arithmetic without any contradiction: the permissible factors have changed. The original announcement explicitly motivates the extension of arithmetic to these numbers and describes their square-lattice representation.^[ref]

It is helpful to separate two domains. Arbitrary complex numbers form a field, since the inverse of nonzero $a+bi$ is $(a-bi)/(a^2+b^2)$. The Gaussian integers form a ring, but not a field: $1/2$ is not a Gaussian integer. Thus geometric legitimacy and arithmetic usefulness support one another without erasing distinctions between mathematical structures.

The terminology argument accompanies a constructive account of the numbers. It is not a claim that renaming alone proves a theorem, or that all earlier work with complex numbers had lacked meaning. A mathematical proof still has to establish the laws of the extended arithmetic and the assertions about biquadratic residues. Carl Friedrich Gauss's geometric explanation makes those operations accessible while his arithmetic application gives a strong reason to accept the enlarged domain.

The quotient. Evaluation $\mathbb{Z}[t]\to \mathbb{Z}[i]$, $t\mapsto i$, is a surjective ring homomorphism whose kernel of a ring homomorphism is $(t^2+1)$. Indeed, division by this monic polynomial leaves a remainder $a+bt$, and $a+bi=0$ for $a,b\in \mathbb{Z}$ forces $a=b=0$. Taking the further quotient ring modulo $p$ gives the explicit isomorphism

All fibers, including the generic fiber. For a point $s\in \mathrm{Spec}\mathbb{Z}$ with residue field $\kappa (s)$, its scheme-theoretic fiber isAt the generic point $s=(0)$, the residue field is $\mathbb{Q}$, and $t^2+1$ is an irreducible polynomial over $\mathbb{Q}$, so $X_{(0)}=\mathrm{Spec}\mathbb{Q}(i)$. For a closed point $(p)$ the residue field is ${\mathbb{F}}_p$. The permitted criterion for a square root of $-1$ gives three cases. If $p\equiv 1(\mathrm{mod}4)$, choose $a\in {\mathbb{F}}_p$ with $a^2=-1$; the two roots $a,-a$ are distinct, so the Chinese remainder theorem gives ${\mathbb{F}}_p[t]/(t^2+1)\cong {\mathbb{F}}_p\times {\mathbb{F}}_p$. If $p\equiv 3(\mathrm{mod}4)$, the quadratic has no root and is an irreducible polynomial, giving the finite field ${\mathbb{F}}_{p^2}$. Finally, in characteristic two, $t^2+1=(t+1{)}^2$; setting $ϵ=t+1$ gives the dual numbers. ThusThe split scheme-theoretic fiber has two closed points, represented by $(p,i-a)$ and $(p,i+a)$. The inert scheme-theoretic fiber has one closed point, represented by $(p)$. The scheme-theoretic fiber over $(2)$ has one closed point, represented by $(1+i)$, but is a nonreduced scheme: its nonzero element $ϵ$ is nilpotent. These descriptions retain the residue fields and the nilpotent structure, which a count of points alone would lose.

The topology. The printed PDF says that the nonempty proper Zariski closed subsets are finite subsets of $\mathbb{Z}[i]\setminus \{0\}$. Its points are prime ideals, so the intended set is $\mathrm{Spec}\mathbb{Z}[i]\setminus \{(0)\}$.

Put $R=\mathbb{Z}[i]$. Since $R$ is a principal ideal domain, every nonzero prime ideal is a maximal ideal. Each such prime ideal contains a nonzero Gaussian integer $z$, and therefore contains the positive integer $z\overline{z}$. Its contraction to $\mathbb{Z}$ is consequently a nonzero prime ideal $(p)$, so the scheme-theoretic fibers just computed list all the closed points of $X$. The sole remaining point is the generic point $(0)$.

Every proper Zariski closed subset is $V((a))$ with $a\ne 0$: if its defining ideal were zero, it would be all of $X$. A nonzero nonunit $a$ has a finite unique factorizationHere the ${\pi }_j$ are pairwise nonassociate prime elements. Conversely, any finite set of nonzero prime ideals $\{({\pi }_1),\dots ,({\pi }_r)\}$ equals $V(({\pi }_1\cdots {\pi }_r))$; the empty set is $V((1))$. ThereforeIn particular, the closure of the generic point is $X$, and every nonempty open subset contains that generic point and all but finitely many closed points.

A nonidentity automorphism. Complex conjugationis a ring automorphism fixing $\mathbb{Z}$. It induces the automorphism $\sigma =\mathrm{Spec}(c)$ over $\mathrm{Spec}\mathbb{Z}$. Since $c(i)=-i\ne i$, this is not the identity morphism of schemes. On the generic fiber it is the nontrivial field automorphism of $\mathbb{Q}(i)/\mathbb{Q}$. On a split scheme-theoretic fiber it swaps the two closed points, since $i-a$ maps to $-(i+a)$. On an inert scheme-theoretic fiber it fixes the only point but induces the nonidentity finite-field Frobenius automorphism $z\mapsto z^p$ on its residue field, because $i^p=-i$. On the scheme-theoretic fiber over $(2)$ it is the identity on the entire scheme: $-i=i$ in $R/(2)$, so $ϵ=i+1$ is fixed. Thus

Let $\pi$ be a prime element of the Gaussian integers. Its norm $\pi \overline{\pi }$ is a positive integer greater than one, so $\pi$ divides some ordinary positive prime number in its integer prime factorization. It cannot divide two distinct such primes $p,q$: an integer Bézout identity $up+vq=1$ would imply $\pi \mid 1$, contrary to its being a nonunit. This proves existence and uniqueness of the rational prime lying below $\pi$.

Up to associates, the complete list of Gaussian prime elements is: $1+i$; the positive rational primes $p\equiv 3(\mathrm{mod}4)$; and, for every rational prime $p\equiv 1(\mathrm{mod}4)$, the two nonassociate elements $a+bi$ and $a-bi$, where $a,b>0$ and $p=a^2+b^2$. Representatives related by multiplication by one of $\pm 1,\pm i$ are associates. The last pair accounts for both factors of a split prime.

Every residue class modulo $p$ has a unique representative $a+bi$ with $0\le a,b<p$, since $p\mid (a-a^{\prime })+(b-b^{\prime })i$ means both coordinate differences are divisible by $p$. Hence $\boxed{|R/pR|=p^2}$ andFor $p=2$, the class of $1+i$ is nonzero but its square is $2i=0$; thus the quotient ring is not a field. For $p\equiv 3(\mathrm{mod}4)$, a root $r^2=-1$ would imply $r^{p-1}=(-1{)}^{(p-1)/2}=-1$, contradicting Fermat's little theorem. The quadratic $X^2+1$ is therefore irreducible and its quotient is a field with $p^2$ elements.

For $p\equiv 1(\mathrm{mod}4)$, choose a generator $g$ of the cyclic group ${\mathbb{F}}_p^{\times }$. Then $r=g^{(p-1)/4}$ satisfies $r^2=-1$. The two nonzero classes $i-r$ and $i+r$ have product zero in $R/pR$. ThusFor $p\equiv 1(\mathrm{mod}4)$ it is instead isomorphic to ${\mathbb{F}}_p\times {\mathbb{F}}_p$, by the distinct linear factors and the Chinese remainder theorem.

A representative of an element of $G$ is a determinant-one matrix $\left(\begin{array}{cc}a& b\\ \overline{b}& \overline{a}\end{array}\right)$ over the Gaussian integers, considered up to its common sign. It acts by a Möbius transformation of the disk. Since $T(0)=b/\overline{a}$ and $|a{|}^2-|b{|}^2=1$, we haveOnly finitely many Gaussian-integer pairs $(a,b)$ can have $T(0)$ in a fixed compact subdisk. More generally, if $T$ carries some point of a compact set $K$ into $K$, and $K$ lies in the hyperbolic ball of radius $R$ about zero, the triangle inequality gives $\rho (0,T0)\le 2R$. Thus there are only finitely many such $T$. This proves the properly discontinuous group action, and in particular discreteness. The specified $A,B$ belong to $G$, so their subgroup $H$ is discrete as well.

The fixed-point equations reduce to $-i(z-1{)}^2=0$ for $A$ and $i(z+1{)}^2=0$ for $B$. Thus their unique fixed points are respectively $1$ and $-1$ on the ideal boundary. Neither transformation is the identity; their displayed determinant-one representatives have trace two. They are therefore parabolic Möbius transformations.

To find the Dirichlet domains, use the Möbius transformationIt takes the disk to the upper half-plane, and direct substitution givesFor $w=x+iy$ and $v$ in the upper half-plane, the hyperbolic distance obeys $\cosh \rho (w,v)=1+|w-v{|}^2/(2y\mathrm{Im}v)$. Since $C(A^{k}0)=i-2k$, the distance inequalities are equivalent toThese reduce to $kx+k^2\ge 0$ for all integers $k$. The cases $k=1,-1$ imply $-1\le x\le 1$, which also suffices for every other $k$. Therefore the cyclic Dirichlet domain becomes the strip $|\mathrm{Re}w|\le 1$.

The two vertical hyperbolic geodesics pull back to arcs joining $1$ to $i$ and $1$ to $-i$. In disk coordinates they are the circles $|z-(1+i)|=1$ and $|z-(1-i)|=1$, restricted to the disk. ThusConjugating by $z\mapsto -z$ gives $B$, so its two hyperbolic geodesics join $-1$ to $i$ and $-1$ to $-i$, andThe requested drawing and their intersection are shown below.

For any $z_0$, the orbit points satisfying $\rho (0,T{z}_0)\le \rho (0,z_0)$ form a nonempty finite set, by proper discontinuity and compactness of closed hyperbolic balls. Choose a closest one, $q=T{z}_0$. For every integer $k$, its minimality givesand the same inequality with $B$. Hence $q$ lies in the ideal hyperbolic quadrilateralIts ideal vertices are $1,i,-1,-i$.

For the quotient identification, it remains to justify that this covering region is a fundamental polygon. The four open corner caps excluded by $P$ are pairwise disjoint inside the disk. The transformation $A$ carries the exterior of the lower-right cap into the upper-right cap; $A^{-1}$ reverses the pairing. Similarly $B$ carries the exterior of the upper-left cap into the lower-left cap, and $B^{-1}$ reverses this. These assertions follow either from the upper-half-plane formulas or by mapping their boundary circles and testing zero: $A0=(1+i)/2$ and $B0=(-1-i)/2$.

Apply a reduced word in $A^{\pm 1},B^{\pm 1}$ from right to left to a point in the interior of $P$. The first letter puts it into its target cap. Every subsequent letter can do the same, since its inverse cap is distinct from the preceding target cap unless the word cancels. Thus the final point lies in the target cap of the leftmost letter, never in the interior of $P$. This ping-pong lemma argument proves freeness and disjointness of distinct translated interiors. Together with orbit coverage it makes $P$ a fundamental polygon. The corresponding argument on closed caps shows that boundary identifications are generated by the stated side pairings.

The generator $A$ pairs the side from $1$ to $-i$ with the side from $1$ to $i$, fixing the ideal endpoint $1$ and sending $-i$ to $i$. The generator $B$ pairs the side from $-1$ to $i$ with the side from $-1$ to $-i$, fixing $-1$ and sending $i$ to $-i$. There are three ideal-vertex classes: $\{1\}$, $\{-1\}$ and $\{i,-i\}$. The first two give parabolic ends from $A,B$; the third does too, since $AB$ is a nonidentity parabolic transformation fixing $i$. Adding one point at each end produces an oriented closed surface with one face, two edges and three vertices. Its Euler characteristic is $1-2+3=2$, so it is a sphere. Removing the three added points gives a thrice-punctured sphere, proving

Represent a transformation byMultiplication preserves this form and determinant, and the inverse has the same form with parameters $(\overline{u},-v)$. To check the congruence condition, complex conjugation is the identity modulo $2\mathbb{Z}[i]$. Thus $u+v\equiv 1$ says exactly that $M$ fixes the column $(1,1{)}^T$ modulo two. Products and inverses preserve this property. The identity belongs to the set, and changing the common sign of $(u,v)$ does not change either the transformation or its congruence. Hence these transformations form a group.

Because $|u|>|v|$, the denominator has no zero in the disc. Direct calculation givesThe inverse also maps the disc into itself, so $g$ is a disc automorphism, and these identities show that it preserves the hyperbolic metric $2|dz|/(1-|z{|}^2)$.

The action is properly discontinuous. If $C\subset \mathbb{D}$ is compact, put $R={\max }_{z\in C}\rho (0,z)$. If $gC\cap C\ne \varnothing$, choose $z,w\in C$ with $w=gz$. ThenSince $g0=v/\overline{u}$ and $|u{|}^2-|v{|}^2=1$, its distance bound gives $|v/u|\le \tanh R<1$ and therefore $|u{|}^2=1/(1-|v/u{|}^2)\le {\cosh }^{2}R$. There are only finitely many Gaussian integers $u,v$ with these bounds, so only finitely many $g$ satisfy $gC\cap C\ne \varnothing$. This proves the required properly discontinuous group action directly.

If $g0=0$, then $v=0$ and $u$ is one of the Gaussian units $1,-1,i,-i$. The congruence $u-1\in 2\mathbb{Z}[i]$ leaves only $u=\pm 1$. Both give the identity transformation. Thus the point stabilizer of zero is trivial.

The closed Dirichlet region centered at zero is the set of $z$ with $\rho (z,0)\le \rho (z,g0)$ for every $g$. For a nonidentity element, $v\ne 0$. WriteThe distance inequality is equivalent, by pseudohyperbolic distance, to $|z|\le |(z-q)/(1-\overline{q}z)|$. Squaring and subtracting yieldsSince $|z|<1$ and $|q{|}^2=N/(N+1)$, the bisector half-plane is exactlyFor $u=1+i$ or $1-i$ and $v=i$ or $-i$, all the group conditions hold and the products $uv$ are the four numbers $\pm 1\pm i$, with $N=1$. Their four inequalities forceConversely, for any group element $m^2+n^2=|uv{|}^2=N(N+1)<(N+1{)}^2$. As $m,n$ are integers, $|m|,|n|\le N$. Thus every point satisfying those four inequalities satisfies every other one:This proves, with no missing bisectors, the Gaussian-integer disc group with an ideal-square Dirichlet domain formulaEquivalently it is the part of the unit disc outside all four open circles of radius one centered at $1+i,1-i,-1+i,-1-i$. Its sides are the inward arcs of those circles. They meet the unit circle orthogonally, and their ideal vertices are $\boxed{1,i,-1,-i}$; these vertices themselves lie outside the open disc.

The origin has trivial point stabilizer and the group orbit is locally finite by the discontinuity proof, so this closed bisector intersection has translates covering the disc with disjoint interiors, as in the definition of a Dirichlet domain. Side identifications are allowed on its boundary.

The mapis an automorphism of the elliptic curve over $K$, fixes its identity point, and squares to $[-1]$. For the invariant differential on an elliptic curve $\omega =dx/(2y)$, it satisfies $[i{]}^{\ast }\omega =i\omega$. Thus $\mathbb{Z}[i]\subseteq {\mathrm{End}}_K(E)$, with the indicated embedding of $K$.

Under analytic complex uniformization of an elliptic curve $E(\mathbb{C})\simeq \mathbb{C}/L$, this automorphism acts as multiplication by $i$, so $L$ is stable under $\mathbb{Z}[i]$. It is a rank-one torsion-free module over the Gaussian integers. Since that ring is a principal ideal domain, $L=\Omega \mathbb{Z}[i]$. Every analytic endomorphism is multiplication by an $a\in \mathbb{C}$ with $aL\subseteq L$, which here says exactly $a\in \mathbb{Z}[i]$. Therefore the geometric endomorphism ring of an elliptic curve is $\mathbb{Z}[i]$, and all its elements are generated over $\mathbb{Z}$ by the displayed $K$-defined automorphism. Thus ${\mathrm{End}}_K(E)=\mathbb{Z}[i]$.

If an endomorphism is defined over $\mathbb{Q}$, its pullback on the rational differential $\omega$ has scalar in $\mathbb{Q}$. The differential action is injective in characteristic zero, because a nonzero isogeny of elliptic curves is separable and has nonzero differential. Its scalar must therefore lie in $\mathbb{Q}\cap \mathbb{Z}[i]=\mathbb{Z}$. Conversely integer multiplication is defined over $\mathbb{Q}$. Hence

Put $\lambda =1+i$. The valuations of the differences of the three nonidentity fourth roots of unity from $1$ areFor instance $2=-i{\lambda }^2$, and the other two differences are associates of $\lambda$. None is divisible by ${\lambda }^3$. The group $(\mathbb{Z}[i]/{\lambda }^3{)}^{\times }$ has $8-4=4$ elements, so the four units map bijectively to it. Every ideal prime to $\lambda$ consequently has a unique primary Gaussian integer generator.

The Grössencharacter of the square-lattice elliptic curve is explicitlyFor integral ideals prime to $2$, the generator is an odd Gaussian integer; extend multiplicatively to fractional ideals prime to $2$. Products of primary generators are primary, so this is a Hecke character with ideal infinity type $(1,0)$: on a principal ideal with generator $a\equiv 1(\mathrm{mod}{\lambda }^3)$, its value is $a$. Its conductor divides ${\lambda }^3$, and cannot divide ${\lambda }^2$, since $-1\equiv 1(\mathrm{mod}{\lambda }^2)$ would force ${\psi }_E((-1))=-1$, whereas the unit ideal has value $1$. Thus the displayed conductor is exact.

We next verify directly that this character gives the Frobenius values of this particular curve, fixing the unit ambiguity. The pointsatisfies, by the chord-and-tangent addition law,For the first addition, $[i]P=(-i,1+i)$ and the chord has slope $-1$. Since $P$ is killed by ${\lambda }^3$ but not by ${\lambda }^2$, it generates the eight-element $\mathbb{Z}[i]$-module $E[{\lambda }^3]\simeq \mathbb{Z}[i]/{\lambda }^3$. Thus all this torsion is rational over $K$.

The model has discriminant $64$, so it has good reduction at every $\gamma \ne (\lambda )$. First suppose $\gamma$ lies over a split rational prime $p$. Then its residue field is ${\mathbb{F}}_p$, $p\ge 5$, and $\pi ={\psi }_E(\gamma )$ has norm $p$. Reduction of $[\pi ]$ still has degree $p$ and has zero differential, since its differential scalar $\pi$ belongs to $\gamma$. It is therefore purely inseparable of degree $p$. Factoring out the Frobenius isogeny givesfor an automorphism $u$ of the reduction. In characteristic at least five, the automorphisms of this model fixing $O$ are the four Gaussian units: comparing coefficients in $(x,y)\mapsto (v^{2}x,v^{3}y)$ gives $v^4=1$. Prime-to-$p$ torsion reduces injectively. Both $[\pi ]$ and ${\mathrm{Frob}}_p$ fix the reduction of $E[{\lambda }^3]$, the former by the primary congruence and the latter by its rationality over the residue field. Thus $u$ fixes this entire module. The unit congruences proved above force $u=1$.

For an inert rational prime $p\equiv 3(\mathrm{mod}4)$, we have $\gamma =(p)$, $N\gamma =p^2$, and its primary generator is $\pi =-p$, because $4\mid p+1$ implies ${\lambda }^3\mid (-p-1)$. To determine Frobenius without excluding $p=3$, writeReplacing $x$ by $-x$ changes each nonzero quadratic-character value to its negative, because $-1$ is a nonsquare. Hence $a_p=0$. The Frobenius characteristic equation ${\mathrm{Frob}}_p^2-[a_p]{\mathrm{Frob}}_p+[p]=0$ gives ${\mathrm{Frob}}_{p^2}=[-p]$. This proves the asserted Frobenius value at inert primes as well, and identifies the displayed Hecke character with that of $E$.

Finally, the formal parameter $t=-x/y$ is defined over the local ring at $\gamma$. Since the reduced endomorphism is the $q$-power Frobenius isogeny, with $q=N\gamma$, its pullback sends $t$ to $(-x/y{)}^q=t^q$. Passing to the completion at the identity gives the equality of formal series

Identify the Möbius group with ${\mathrm{PSL}}_2(\mathbb{C})$, the orientation-preserving isometry group of three-dimensional hyperbolic space. Here a properly discontinuous group action permits finite stabilizers: for each compact set $K$, only finitely many $g$ satisfy $gK\cap K\ne \varnothing$.

Fix $o\in {\mathbb{H}}^3$. The set of isometries with $d(o,go)\le R$ is compact. To see this, an orientation-preserving isometry is uniquely determined by the image of an oriented orthonormal frame at $o$. The image point lies in a compact closed hyperbolic ball and its frame lies in a compact rotation-group fiber. These choices parametrize the indicated set of isometries continuously.

A discrete subgroup of a topological group is closed: otherwise distinct subgroup elements accumulating at the same point would have quotients tending to the identity, contradicting isolation of the identity. Its intersection with a compact set is therefore finite. If $K\subseteq B(o,R)$ and $gK\cap K\ne \varnothing$, choosing $x,gx\in K$ gives $d(o,go)\le d(o,gx)+d(gx,go)\le 2R$. Hence discreteness implies a properly discontinuous group action. Conversely, if the subgroup is not discrete, distinct $g_n$ tend to the identity. For a compact ball $K$ with $o$ in its interior, eventually $g_{n}o\in K$, so infinitely many $g_{n}K$ meet $K$, contradicting proper discontinuity. This proves the equivalence.

Matrices of determinant one over the Gaussian integers are closed under multiplication and inversion, with inverse $\left(\begin{array}{cc}d& -b\\ -c& a\end{array}\right)$. Quotienting by $\{\pm I\}$ gives the specified group of Möbius transformations. The Gaussian integers form a discrete set in the complex plane, so these matrices form a discrete subgroup of ${\mathrm{SL}}_2(\mathbb{C})$, and the finite quotient remains discrete. Thus this group acts properly discontinuously on ${\mathbb{H}}^3$.

Explicit representatives of all four types areThe first is $z\mapsto -1/z$ and has order two; the second is the nonidentity translation $z\mapsto z+1$. The third has positive real reciprocal eigenvalues $(3\pm \sqrt{5})/2$, giving translation along an axis without rotation. For the last, a nonreal trace excludes both unit-modulus and real eigenvalues. Its multiplier therefore has modulus different from one and a nonzero rotation angle: it is a loxodromic Möbius transformation.

A holomorphic group endomorphism of the complex torus lifts to multiplication by a scalar $c\in \mathbb{C}$, as in Question 1. It descends exactly when $c\Lambda \subseteq \Lambda$. Applying this condition to $1$ gives $c\in \mathbb{Z}[i]$. Conversely any Gaussian integer $c$ preserves $\mathbb{Z}[i]$, since the latter is a ring. Addition of endomorphisms is addition of scalars, and composition is multiplication of scalars. Thus, as rings,The wording “endomorphism algebra” here denotes this integral endomorphism ring of an elliptic curve. If it instead meant the rational algebra ${\mathrm{End}}^0(X)=\mathrm{End}(X){\otimes }_{\mathbb{Z}}\mathbb{Q}$, that algebra would be $\mathbb{Q}(i)$.