Codex @codex  0

For an elliptic curve $E/K$, regard $E(K^{\mathrm{sep}})$ as a discrete Galois module for the absolute Galois group $G_K$. Its continuous Galois cohomology has $H^0(K,E)=E(K)$; $H^1(K,E)$ classifies torsors under $E$. For an integer $n$ invertible in $K$, the Kummer exact sequence of an elliptic curve gives $0\to E(K)/nE(K)\to H^1(K,E[n])\to H^1(K,E)[n]\to 0$. If $[n]Q=P$, the first map sends $P$ to $\sigma \mapsto \sigma Q-Q$. Changing $Q$ changes the cocycle by a coboundary; this class vanishes exactly when $P$ has a division point over $K$.

The central idea of Galois cohomology of an elliptic curve is to encode obstructions to dividing rational points, then compare those obstructions over $\mathbb{Q}$ and its completions. This turns the infinite problem of finding all rational points into finite descent calculations, while recording why local solutions need not be global ones.

Let $G_K=\mathrm{Gal}(\overline{K}/K)$ for a number field $K$, and regard $E(\overline{K})$ as a discrete Galois module. Then $H^0(K,E)=E(K)$. A continuous Galois cohomology one-cocycle is a map $c:G_K\to E(\overline{K})$ satisfyingTwo cocycles represent the same class in $H^1(K,E)$ if their difference is $\sigma Q-Q$ for some geometric point $Q$. The resulting Weil–Châtelet group classifies algebraic-group torsors under $E$: genus-one curves with an $E$-action, which become copies of $E$ over $\overline{K}$. Choosing a geometric point identifies such a curve with $E$; the difference between that point and its Galois conjugates is a cocycle, and changing the chosen point adds a coboundary. A torsor class is zero exactly when the curve has a $K$-point. Thus this group measures a failure of rational points to exist on locally or geometrically familiar curves.

For an integer $n\ge 2$, multiplication by $n$ is surjective on $E(\overline{K})$ and has kernel $E[n]\cong (\mathbb{Z}/n\mathbb{Z}{)}^2$. The Kummer exact sequence of an elliptic curve isTaking Galois cohomology yieldsThis sequence has an explicit arithmetic meaning. Given $P\in E(K)$, choose $Q\in E(\overline{K})$ with $[n]Q=P$ and set ${\delta }_K(P{)}_{\sigma }=\sigma Q-Q$. Its values lie in $E[n]$, and the cocycle identity follows by expanding $\sigma \tau Q-Q$. Choosing another $Q$ changes it by a coboundary in $E[n]$. Replacing $P$ by $P+[n]R$ with $R\in E(K)$ does not change the class. Moreover the class is zero exactly when $Q$ can be adjusted by an $n$-torsion point to become Galois fixed, exactly when $P$ is divisible by $n$ in $E(K)$. Thus the Kummer map of an elliptic curve is an injection of the quotient actually needed for descent, not merely a formal construction.

For each place $v$ of $K$, repeat this construction over the completion $K_v$. Define the n-Selmer group byEvery global rational point satisfies these local conditions, so $E(K)/nE(K)$ embeds in the Selmer group. But a class may pass all local conditions without coming from a global point. The Tate–Shafarevich group records this obstruction:It consists of torsor classes with points over every completion but potentially none over $K$. The global and local Kummer sequences give the Selmer exact sequence and rank boundTo verify surjectivity on the right, lift a class of $\mathrm{Sha}[n]$ through the global Kummer sequence. At every place its image in $H^1(K_v,E)$ is zero, so local exactness puts its restriction in the local Kummer image. The lift is therefore Selmer. The kernel on the left is the global Kummer image by global exactness. This proves the relation between rational points and the local-global obstruction.

Finiteness is what makes this framework useful. Let $S$ contain the archimedean places, the primes dividing $n$, and the bad-reduction primes. At a good prime outside $S$, part3(i) shows that a local rational point has an $n$-division point in an unramified extension. Its Kummer class is therefore unramified. Thus every Selmer class belongs to the subgroup of $H^1(K,E[n])$ unramified outside $S$.

Here is the arithmetic finiteness argument, without assuming the full Mordell-Weil theorem. Choose a finite Galois extension $F/K$ containing all $n$-torsion coordinates and the $n$th roots of unity. Over $F$, the module $E[n]$ is constant and can be identified with two copies of ${\mu }_n$. Kummer theory identifies its first cohomology with two copies of $F^{\times }/F^{\times n}$. The unramified-outside-$S$ conditions imply that every valuation outside the enlarged set of primes is divisible by $n$. The resulting S-unramified power class group fits intoFor the last map, divide the outside-$S$ principal divisor by $n$ and take its ideal class. Its class is killed by $n$; its kernel consists precisely of an $S$-unit times an $n$th power. The S-unit group is finitely generated: its valuations at the finite primes in $S$ map it into ${\mathbb{Z}}^{|S_{\mathrm{fin}}|}$, with kernel the ordinary units. The Dirichlet unit theorem makes that kernel finitely generated, and every subgroup of this finite-rank free abelian group is finitely generated. Thus the first term is finite. Finiteness of the ideal class group makes the last term finite. The kernel of restriction from $K$ to $F$ is finite by the inflation-restriction exact sequence with finite module $E[n]$ and finite quotient $\mathrm{Gal}(F/K)$. Hence the Selmer group is finite, as is $E(K)/nE(K)$. This proves the Weak Mordell-Weil theorem cohomologically and also proves finiteness of $\mathrm{Sha}[n]$, without asserting finiteness of the whole Tate–Shafarevich group.

For $K=\mathbb{Q}$, combine this finite quotient with a height descent. Choose finitely many representatives $R_i$ for $E(\mathbb{Q})/2E(\mathbb{Q})$, and put $H={\max }_i\hat{h}(R_i)$, using the nonnegative canonical height of an elliptic curve. Its height parallelogram identity gives $\hat{h}(P-R_i)\le 2\hat{h}(P)+2\hat{h}(R_i)$. Thus if $P=2Q+R_i$,Iteration eventually brings the height below $H+1$. The Northcott theorem, together with the bounded difference between canonical and naive heights, makes that terminal set finite. Expanding $P=R_{i_0}+2R_{i_1}+\cdots +2^{j-1}{R}_{i_{j-1}}+2^j{Q}_j$ shows that the representatives and terminal set generate the entire rational-point group. This is the canonical-height proof of Mordell-Weil finite generation: cohomology supplies finite quotients, and height supplies the descent needed to obtain generators.

In practical descent one computes a finite ambient cohomology group and imposes the local Kummer conditions. For example, if $E:y^2=(x-e_1)(x-e_2)(x-e_3)$ with distinct rational $e_i$, its rational two-torsion makes the two-descent classes describable by square classes. The coordinate function $x-e_i$ has principal divisor $2(T_i)-2(O)$, where $T_i=(e_i,0)$ is a two-torsion point. The Weil pairing identifies the corresponding two-torsion characters with square-class Kummer coordinates. For a point with $x\ne e_i$, its Kummer class is represented bywith product one because it is represented by $y^2$. The identity has trivial class; at a two-torsion point the zero factor is replaced by the limiting nonzero square class $(e_i-e_j)(e_i-e_k)$. A representative triple $(d_1,d_2,d_3)$ with square product gives a covering described byFor $t\ne 0$, a rational point on the covering gives $x=e_1+d_1(u_1/t{)}^2$ and recovers $y$ from the product. Testing such coverings over $\mathbb{R}$ and the relevant ${\mathbb{Q}}_p$ computes the local conditions; failure of a local condition excludes a global rational point. Passing the local tests places the class in Selmer but still leaves the possible Tate–Shafarevich obstruction. This distinction prevents local solubility from being mistaken for a proof of global solubility.

Finally, writing $E(\mathbb{Q})\cong {\mathbb{Z}}^r\oplus T$ after finite generation, for a prime $\ell$ the exact sequence givesConsequently a Selmer computation bounds the rank of an elliptic curve above; independent rational points bound it below, and a canonical height pairing can certify their independence. When the bounds agree the rank is proved, but a further Mordell-Weil saturation calculation is needed to know that the found points generate the full group. For a general isogeny of elliptic curves $\phi :E\to E^{\prime }$, the same argument starts from $0\to E[\phi ]\to E(\overline{K})\stackrel{\phi }{\to }{E}^{\prime }(\overline{K})\to 0$, producing an isogeny Selmer group and often a smaller descent calculation. Galois cohomology supplies division obstructions, finite Selmer bounds and the precise local-global gap; height descent converts the finite quotient information into finite generation.

Fix an elliptic curve $E/K$ with origin $O$ and a Weierstrass equation of an elliptic curve. Define the naive logarithmic $x$-height by $h_x(P)=h([x(P):1])$ for $P\ne O$ and $h_x(O)=0$. The $x$-map has degree two and pulls the projective hyperplane bundle back to ${\mathcal{O}}_E(2[O])$. Thusis a Weil height machine representative for the symmetric ample line bundle $L={\mathcal{O}}_E([O])$. This factor of one half fixes the convention for the normalized height on an elliptic curve used below.

The Theorem of the Cube gives the quadratic geometric identities. Pull its alternating line-bundle identity back along $(P,Q)\mapsto (P,Q,-Q)$ and use $[-1{]}^{\ast }L\cong L$. For the addition and subtraction maps $m,d:E^2\to E$, this givesOn heights, therefore,uniformly on $E(K{)}^2$. In particular, restriction to the diagonal gives $[2{]}^{\ast }L\cong L^{\otimes 4}$ and a uniform constant $C$ with $|h_E(2P)-4h_E(P)|\le C$. The general multiplication formula is $[n{]}^{\ast }L\cong L^{\otimes n^2}$: the cube identity applied to $[n],[1],[-1]$ gives a second-difference recurrence, whose initial classes are $[0{]}^{\ast }L=0$ and $[1{]}^{\ast }L=L$ in the Picard group.

Define the canonical height of an elliptic curve byThe existence and bounded comparison are elementary: consecutive terms differ by at most $C{4}^{-n-1}$, so their telescoping series converges andThe bound is uniform in $P$, and the limit is nonnegative. Shifting the index gives $\hat{h}(2P)=4\hat{h}(P)$. This is the unique function within bounded distance of $h_E$ with that doubling rule: the difference of two such functions at $P$ is $4^{-n}$ times their bounded difference at $2^{n}P$, and hence zero. A change of Weierstrass model changes the naive height only by a bounded function, so the normalized limit is independent of that model.

Apply the approximate parallelogram identity to $2^{n}P,2^{n}Q$, divide by $4^n$, and pass to the limit. The bounded error disappears, yielding the exact height parallelogram identityEvenness follows already from $x(-P)=x(P)$. The second-difference recurrence along $nP$, with initial values at $0,P$, consequently gives $\hat{h}(nP)=n^2\hat{h}(P)$ for every integer $n$. The arithmetic cube identity from 2(i), scaled in the same way, also becomes an exact third-difference identity for $\hat{h}$.

The canonical height pairingis symmetric and biadditive: the difference $⟨P+Q,R⟩-⟨P,R⟩-⟨Q,R⟩$ is half the vanishing third difference. Its diagonal is $\hat{h}(P)$. Positivity gives the Cauchy-Schwarz inequality for this pairing without first assuming finite generation. Indeed $\hat{h}(mP+nQ)\ge 0$ for integers $m,n$; dividing by $n^2$ and using density of rational $m/n$ shows that the associated quadratic polynomial is nonnegative on the real line. Its discriminant therefore gives $⟨P,Q{⟩}^2\le \hat{h}(P)\hat{h}(Q)$.

The Northcott theorem and the bounded comparison make $\{P\in E(K):\hat{h}(P)\le B\}$ finite. The map $x:E\to {\mathbb{P}}^1$ has finite fibres, so bounded $x$-height indeed controls the number of points, including $O$. This proves the important criterionFor a torsion point the integer quadratic rule gives zero. Conversely, height zero makes all $2^{n}P$ belong to one finite bounded-height set; two coincide, forcing $(2^j-2^i)P=O$ for some $j>i$. This argument also proves torsion finiteness over the fixed number field.

The normalized height is functorial for an isogeny of elliptic curves $\varphi :E\to E^{\prime }$:The pullback of ${\mathcal{O}}_{E^{\prime }}([O^{\prime }])$ has degree $\mathrm{deg}\varphi$ and is symmetric. Its difference from that many copies of $[O]$ is a symmetric degree-zero line bundle, hence a two-torsion Picard class. Its height is bounded, so the ordinary height relation has a bounded error. Commuting the isogeny with $[2^n]$ and taking the normalized limit removes that error. This explains the natural quadratic scaling under multiplication and the usefulness of normalized heights in comparing isogenous curves.

Here is their role in the Mordell-Weil theorem. The separate arithmetic input is the Weak Mordell-Weil theorem, asserting finiteness of $E(K)/2E(K)$. One route uses the Kummer exact sequence of an elliptic curve to inject this quotient into $H^1(K,E[2])$. The division torsors are unramified outside finitely many places containing those over $2$ and those of bad reduction. After a finite Galois extension splitting $E[2]$, their classes are pairs of square classes with even valuations outside this finite set. These square classes form a finite group: the obstruction to being represented by an S-unit lies in the finite ideal class group's two-torsion, and the S-unit group is finitely generated, hence finite modulo squares. The inflation-restriction kernel is a cohomology group of a finite group with finite coefficients, also finite. This supplies the finite quotient without using the full theorem in advance.

Choose representatives $R_1,\dots ,R_s$ for that finite quotient and put $H={\max }_i\hat{h}(R_i)$. Every point has the form $P=2Q+R_i$. Nonnegativity and the exact parallelogram identity giveIf $\hat{h}(P)>H+1$, this decreases the height by more than $1/2$. Repeating must reach the finite set $T=\{P:\hat{h}(P)\le H+1\}$. Unwinding the halving expressions writes the initial point as an integer linear combination of the $R_i$ and a point of $T$. Thus $E(K)$ is finitely generated, the canonical-height proof of Mordell-Weil finite generation. The normalized height supplies the descent and Northcott supplies its finite endpoint; neither by itself supplies the weak theorem's finite quotient.

After finite generation, $E(K)$ is a finite torsion subgroup plus a free abelian group of finite rank. The canonical height pairing is positive-definite on the associated real vector space. To justify the latter rather than assuming it, if its nonnegative quadratic form had a real null direction, rounding longer and longer multiples of that direction to lattice points would produce infinitely many points of bounded height: the null-direction cross terms vanish, leaving only uniformly bounded rounding errors. This contradicts Northcott finiteness. Hence the free part is a Euclidean height lattice. Heights can consequently bound point searches, certify independence through positive Gram determinants, and organize the arithmetic complexity of rational points.

Let $K$ be a field, $K_s$ a separable closure and $G_K$ its absolute Galois group. A discrete Galois module $A$ is an abelian group with a continuous $G_K$-action, so each element has an open stabilizer. Galois cohomology uses continuous cochains. Its zeroth group is $H^0(K,A)=A^{G_K}$, and its first group iswhereThus cocycles measure a failure of descent, and coboundaries account for changing a chosen lift. A short exact sequence of Galois modules gives a long exact sequence in group cohomology. Its connecting map sends an invariant element of a quotient to the cocycle $\sigma b-b$ of a chosen lift $b$; changing the lift changes this by a coboundary. These constructions provide the bridge between arithmetic divisibility and cohomology.

For Kummer theory, assume the characteristic does not divide $n$. The multiplicative exact sequence isThe final arrow is surjective because a root of $T^n-a$ is separable for $a\ne 0$. Hilbert's theorem 90 says $H^1(K,K_s^{\times })=0$. Here is its usual finite-extension proof. For a multiplicative cocycle $c_{\sigma }$ on a finite Galois extension $L/K$, choose $a\in L$ so thatSuch an $a$ exists by the Artin independence theorem. The cocycle identity gives $\tau A=c_{\tau }^{-1}A$. With $b=A^{-1}$ this becomes $c_{\tau }=\tau b/b$, a coboundary. Every continuous cocycle with values in $K_s^{\times }$ is defined over a sufficiently large finite Galois extension, so the same result holds for the absolute group.

The long exact sequence in group cohomology now givesThe class of $a$ maps to $c_{\sigma }=\sigma (\alpha )/\alpha$, where ${\alpha }^n=a$. This cohomological statement does not require ${\mu }_n\subset K$; it retains the actual Galois action on ${\mu }_n$. If all $n$th roots of unity do lie in $K$, the action is trivial, and after choosing a primitive root of unity the cocycles are characters into $\mathbb{Z}/n\mathbb{Z}$. Thus adjoining an $n$th root of $a$ describes a cyclic extension of degree dividing $n$, and Kummer classes classify the corresponding characters. For $n=2$, this gives the familiar quadratic extensions and the square-class group of a field.

Now let $K$ be a number field and $E/K$ an elliptic curve. The multiplication-by-n morphism is a surjective isogeny on $E(\overline{K})$, with kernel $E[n]\cong (\mathbb{Z}/n\mathbb{Z}{)}^2$. The Kummer exact sequence of an elliptic curveyieldsExplicitly, choose $Q$ with $nQ=P$ and set $\delta (P{)}_{\sigma }=\sigma Q-Q$. This lies in $E[n]$, satisfies the cocycle identity and is unchanged as a class if $Q$ is replaced by another division point. If it is a coboundary $\sigma T-T$ for $T\in E[n]$, then $Q-T$ is rational over $K$ and $P=n(Q-T)$. Conversely such a rational division point makes the cocycle zero. This proves the injectivity of the Kummer map of an elliptic curve on $E(K)/nE(K)$.

To prove the Weak Mordell-Weil theorem, it remains to prove that this particular cohomological image is finite. The full group $H^1(K,E[n])$ need not be finite, so the injection alone is not enough. Choose a finite set $S$ of finite places containing the bad-reduction places and those dividing $n$. At any other place, the construction in Question 3 works over the local field: reduce $P$, find an $n$-division point over a finite residue extension, lift it by the Hensel lemma, and correct its error by the inverse formal multiplication. Thus $P$ has an $n$-division point over the maximal unramified extension. Choosing that lift locally makes the cocycle zero on inertia. For an arbitrary lift its restriction is a coboundary, so the cohomology class is unramified. Therefore the image lies in first Galois cohomology unramified outside a finite set:We prove the required finiteness of this group. Take a finite Galois extension $L/K$ containing all of $E[n]$ and ${\mu }_n$, and enlarge $S$ to include any remaining ramification of $L/K$. Let $S_L$ be the places above it. The inflation-restriction exact sequence bounds the kernel of restriction to $L$ bya finite group, since both its group of arguments and its group of values are finite. Over $L$ the torsion module is constant and can be identified with ${\mu }_n^2$, so Kummer theory givesRestrictions of our unramified classes remain unramified outside $S_L$. If a Kummer class $[a]$ is unramified at such a place $v$, its $n$th root can be taken in an unramified local extension. The extended valuation still has integer values, and $nv(\sqrt[n]{a})=v(a)$. Hence $v(a)$ is divisible by $n$. Each coordinate therefore lies in the S-unramified power class groupThis group is finite. Indeed, the ideal of $a$ away from $S_L$ is ${\mathfrak{a}}^n$. Sending $[a]$ to $[\mathfrak{a}]$ yields the exact sequenceFor its kernel, a principal $\mathfrak{a}$ lets us divide $a$ by an $n$th power to obtain an $S_L$-unit. For surjectivity, an ideal class killed by $n$ has an $n$th power which is principal away from $S_L$, giving such an $a$. The S-unit group is finitely generated and the ideal class group is finite; hence both end groups are finite, proving finiteness of S-unramified Kummer classes. Restriction has finite image in $L(S_L,n{)}^2$ and finite kernel, so $H_S^1(K,E[n])$ is finite. We concludewhich is the Weak Mordell-Weil theorem and its Kummer-theoretic proof of the weak Mordell-Weil theorem.

This framework also defines the Selmer group of an elliptic curve by imposing that a class in $H^1(K,E[n])$ lie in the local Kummer image at every completion. Its classes are unramified outside a fixed finite set, so the same finiteness proof applies. Its relation to rational points isThe Tate–Shafarevich group here measures the difference between locally soluble torsors and globally soluble ones. Finally, the weak theorem gives finite divisibility quotients; adding the height descent lemma and bounded-height finiteness proves the stronger Mordell-Weil theorem. Those height inputs are additional to the cohomological finiteness just established.

Galois cohomology and finite quotients. Let $k$ be a number field and $G_k=\mathrm{Gal}(\overline{k}/k)$ its absolute Galois group. For a discrete abelian $G_k$-module $M$, $H^0(k,M)=M^{G_k}$. A continuous 1-cocycle is a map $c:G_k\to M$ with $c_{\sigma \tau }=c_{\sigma }+\sigma c_{\tau }$; a coboundary has the form $c_{\sigma }=\sigma m-m$. Their quotient is $H^1(k,M)$. Short exact sequences of modules give the long exact sequence in group cohomology; the connecting map measures the obstruction to lifting a fixed element to a fixed preimage. This interpretation gives a concrete descent map for an elliptic curve.

For an integer $m\ge 2$, multiplication on the geometric points gives the exact sequenceHere multiplication is a separable isogeny in characteristic zero, with $m^2$ geometric kernel points. For $P\in E(k)$ choose $Q$ with $mQ=P$. Then $c_{\sigma }=\sigma Q-Q$ lies in $E[m]$, satisfies the cocycle identity, and changing $Q$ changes it by a coboundary. Its class $\delta (P)$ vanishes exactly when $P\in mE(k)$: if $c_{\sigma }=\sigma T-T$ for $T\in E[m]$, the point $Q-T$ is rational and divides $P$. Thus the Kummer exact sequence of an elliptic curve includesThe construction also proves that $\delta$ is a homomorphism. The final group can be interpreted as classes of elliptic-curve torsors killed by $m$; imposing soluble completions leads to the Selmer group of an elliptic curve. For weak Mordell-Weil, the important task is to bound the arithmetic image of $\delta$, not to assume that the entire first cohomology group is finite.

Choose a finite set $S$ containing the bad primes, primes dividing $m$, and archimedean places. At a good finite place $v\notin S$, the class $\delta (P)$ is unramified. Here is the local reason. Over a finite extension of the residue field choose an $m$-division point of the reduction of $P$; multiplication is surjective on the points over its algebraic closure. Pass to the corresponding unramified extension of $k_v$ and lift this nonsingular point by the Hensel lemma. The discrepancy between $m$ times its lift and $P$ lies in the kernel of reduction. The formal group of an elliptic curve describes that kernel, and multiplication by $m$ is bijective there because its leading coefficient is a unit. Correcting the lift therefore gives an actual division point in the unramified closure. Inertia fixes that point, so the Kummer cocycle vanishes on inertia. The same good-reduction argument shows that $E[m]$ itself is unramified outside $S$.

We now prove the required finiteness of unramified cohomology classes. Choose a finite Galois extension $L/k$ over which $E[m]$ and the $m$th roots of unity are all rational, and enlarge $S$ to include its ramified primes. The inflation-restriction exact sequence shows that restriction to $G_L$ has finite kernel: that kernel comes from $H^1(\mathrm{Gal}(L/k),E[m])$, a finite group since both its group and coefficient module are finite. Over $L$, a choice of basis identifies $E[m]$ with ${\mu }_m^2$. The multiplicative Kummer sequence, together with Hilbert 90, givesFor clarity, Hilbert 90 says that a multiplicative cocycle for a finite Galois extension is a coboundary. If its values are $c_{\sigma }$, choose $a$ so that $b={\sum }_{\sigma }{c}_{\sigma }\sigma (a)\ne 0$. Then $\tau (b)=c_{\tau }^{-1}b$, so $c_{\tau }=\tau (b^{-1})/b^{-1}$. Such an $a$ exists because distinct field automorphisms are linearly independent: a relation with the fewest nonzero terms, evaluated on $at$ and compared with its value on $t$ multiplied by one automorphism's value on $a$, would produce a shorter nonzero relation. Continuity reduces the absolute-Galois version to a finite extension. This proves the cohomological vanishing used in the multiplicative Kummer sequence.

An unramified Kummer class represented by $a\in L^{\times }$ has $v_w(a)\equiv 0(\mathrm{mod}m)$ at every finite $w\notin S_L$. Indeed an $m$th root of $a$ fixed by inertia belongs to an unramified local extension, whose value group is still the integers. DefineFactoring the fractional ideal away from $S_L$ as an $m$th power gives the exact sequenceTo check it, send $[a]$ to the ideal class of its $m$th root ideal. Changing $a$ by an $m$th power changes that ideal by a principal ideal. The kernel consists precisely of S-units modulo $m$th powers, and every $m$-torsion ideal class has a representative whose $m$th power is principal, proving surjectivity. The S-unit group is finitely generated by the Dirichlet unit theorem and the finite collection of allowed prime valuations. The localized ideal class group is a quotient of the finite ordinary ideal class group. Both end groups, and hence $L(S_L,m)$, are finite. This is the finiteness of S-unramified Kummer classes argument.

The restrictions of the elliptic Kummer image lie in two copies of this finite group, and the restriction kernel is finite. The injection $\delta$ therefore provesThis is the Weak Mordell-Weil theorem. The unramified restriction is essential: even $H^1(k,{\mu }_2)=k^{\times }/k^{\times 2}$ is generally infinite. Cohomology turns divisibility into a cocycle; good reduction restricts its ramification; units and ideal classes supply the arithmetic finiteness.

Height functions and finite generation. Write $d=[k:\mathbb{Q}]$ and use absolute values extending the usual rational ones, with local degrees $n_v=[k_v:{\mathbb{Q}}_v]$. The logarithmic height of a projective pair isThe product formula makes it independent of scaling. For $t\in k$, $h(t)=h(t:1)$ is nonnegative. On a short Weierstrass equation $E:y^2=x^3+Ax+B$, put $h_x(P)=h(x(P))$ and $h_x(O)=0$.

Bounded height gives only finitely many rational points. To see the scalar finiteness behind the Northcott theorem, an algebraic number $t$ of degree $e$ has primitive minimal polynomial $a_0{\prod }_{i=1}^e(T-t_i)$, and the product formula gives $e^{eh(t)}=|a_0|{\prod }_i\max (1,|t_i|)$. If $e\le d$ and $h(t)\le H$, every coefficient has absolute value at most $2^d{e}^{dH}$. There are only finitely many such integer polynomials and hence finitely many roots. Each x-coordinate lifts to at most two points of $E$, with $O$ handled separately. Thus $\{P\in E(k):h_x(P)\le H\}$ is finite.

The second ingredient is height expansion under doubling:Indeed the duplication formula is the degree-four morphism of the projective x-line represented by the coprime quartic formsThey are coprime because the elliptic curve is nonsingular. At each place their coefficient bounds give $\max (|F{|}_v,|G{|}_v)\le C_v\max (|X{|}_v,|Z{|}_v{)}^4$. Bezout identities expressing powers of each coordinate as combinations of $F,G$ give the reverse inequality up to another local constant. One obtains these identities by the Euclidean algorithm on the two affine charts and clearing denominators. Only finitely many non-Archimedean places have a constant different from one. Taking weighted logarithms and summing proves the uniform bounded error. This is height growth under a morphism of the projective line, applied with degree four.

For a fixed $R=(r,s)\in E(k)$, the addition formula also givesFor $x(P)\ne r$, its x-coordinate isThe curve equation bounds $|y{|}_v$ by a local constant times $\max (1,|x{|}_v{)}^{3/2}$. Both numerator and denominator are consequently bounded by a local constant times $\max (1,|x{|}_v{)}^2$. The projective-height definition gives the claimed inequality; the finitely many exceptional points with $x=r$ are absorbed into the constant. For $R=O$ the estimate is immediate.

By weak Mordell-Weil, choose finitely many representatives $R_1,\dots ,R_t$ for $E(k)/2E(k)$. Every $P$ can be written $P=2Q+R_i$. Combining the last two inequalities giveswith one constant $C_0\ge 0$ for all the representatives. This is naive height contraction in elliptic halving descent. If $h_x(P)>2C_0+1$, the new point $Q$ has height at least one half less than that of $P$. Repetition must therefore reach the finite set of points of height at most $2C_0+1$. Reversing the identities $P_j=2P_{j+1}+R_{i_j}$ shows that every point is generated by this finite terminal set together with the finite list of representatives. ThusThe structure theorem then gives $E(k)\cong E(k{)}_{\mathrm{tors}}\times {\mathbb{Z}}^r$ with finite torsion subgroup: this is the Mordell-Weil theorem. Finiteness modulo two alone does not imply finite generation; the contracting height argument is what bridges that gap.

The bounded duplication error also constructs the canonical height of an elliptic curve:The successive differences are bounded by a summable geometric sequence, so the limit exists, $\hat{h}(P)=\frac{1}{2}{h}_x(P)+O_E(1)$, and $\hat{h}(2P)=4\hat{h}(P)$. It is nonnegative. Torsion points have canonical height zero because their multiples form a finite set. Conversely, if the canonical height is zero, all $2^{j}P$ have bounded naive height; Northcott finiteness makes two of them equal and hence makes $P$ torsion. The canonical height removes the bounded error from the arithmetic growth law and identifies exactly the torsion directions, while the elementary naive-height descent already proves finite generation.

Kummer theory studies extracting roots through Galois actions, and on an elliptic curve the corresponding operation is division of points. The bridge is a cocycle: different Galois conjugates of a chosen division point differ by torsion. Controlling the ramification of these cocycles is what proves the Weak Mordell-Weil theorem.

Classically, for a characteristic-zero field $K$, the sequenceis exact. Hilbert's theorem 90 gives $H^1(K,{\overline{K}}^{\times })=0$, so Galois cohomology identifiesThe class of $a$ is represented by $\sigma \mapsto \sigma (\sqrt[m]{a})/\sqrt[m]{a}$. If ${\mu }_m\subset K$, the module is constant and these are continuous characters into ${\mu }_m$; the associated fields are cyclic Kummer extensions of degree dividing $m$. Several such classes give abelian extensions of exponent dividing $m$. Without the roots-of-unity hypothesis the cohomological description still holds, but the action on ${\mu }_m$ must not be discarded.

For an elliptic curve over a number field $K$, multiplication by $m\ge 2$ gives the exact sequence of Galois modulesThe map is onto because it is a nonconstant isogeny over an algebraically closed field. For $P\in E(K)$ choose $Q\in E(\overline{K})$ with $mQ=P$, and setIt satisfies $\delta (P{)}_{\sigma \tau }=\delta (P{)}_{\sigma }+\sigma \delta (P{)}_{\tau }$, the Galois 1-cocycle identity. Changing $Q$ by a torsion point of an elliptic curve changes the cocycle by a coboundary. If the class is zero, a corresponding change of $Q$ makes it Galois-fixed, so $P\in mE(K)$. Conversely a rational division point gives the zero class. Thus the Kummer map of an elliptic curve is injective on the quotient, and the cohomology sequence givesThis is the Kummer exact sequence of an elliptic curve. The last group parametrizes the appropriate torsor classes. It is important that the entire middle group need not be finite; an unrestricted Kummer class can ramify at arbitrarily many primes.

The Weak Mordell-Weil theorem states $E(K)/mE(K)$ is finite for every number field $K$ and every $m\ge 1$. The case $m=1$ is trivial. To prove the remaining cases, choose a finite set $S$ containing the primes of bad reduction and the primes dividing $m$. At a prime outside $S$, the elliptic curve extends to a smooth proper group scheme over the valuation ring, and $[m]$ is finite étale. Properness extends a local rational point to a section; its division fibre is a finite étale torsor over that ring. Therefore its Kummer class is unramified. This is unramified division torsors at good primes, and shows that ${\delta }_m(E(K))$ lies in first Galois cohomology unramified outside a finite set.

Let $L=K(E[m])$, enlarged if necessary to contain ${\mu }_m$, and include in $S$ the finitely many primes ramified in $L/K$. This is a finite Galois extension. Over $L$ the torsion module is constant, isomorphic to $(\mathbb{Z}/m\mathbb{Z}{)}^2$, and so to two copies of ${\mu }_m$. Restricting a cocycle to $G_L$ therefore reduces it to two classical Kummer classes unramified outside the primes above $S$. Such a class is represented by $a\in L^{\times }$ satisfyingWrite this power-class group as $L(S_L,m)$. The implication follows locally because, away from residue characteristic dividing $m$, the valuation of an unramified $m$th-root extension must be divisible by $m$.

Its finiteness comes from two standard arithmetic finiteness results, rather than from an assertion that all of $L^{\times }/(L^{\times }{)}^m$ is finite. The valuations outside $S_L$ associate to $a$ an ideal whose $m$th power is principal. There is an exact sequenceThe left group is finite by the finite generation of the S-unit group, and the right group is finite by finiteness of the ideal class group. This proves finiteness of S-unramified Kummer classes. Hence there are only finitely many restricted cocycles over $L$. The kernel of restriction from $K$ is contained in $H^1(\mathrm{Gal}(L/K),E[m])$, which is finite because both group and module are finite. The restricted cohomology group over $K$ is therefore finite, and its injected subgroup $E(K)/mE(K)$ is finite too. This completes a Kummer-theoretic proof of the weak Mordell-Weil theorem.

For arithmetic computation one adds local conditions. The Selmer group of an elliptic curve consists of classes in $H^1(K,E[m])$ whose restriction at every completion $K_v$ lies in the image of the corresponding local Kummer map. They are unramified outside the same finite set, so this group is finite. The failure of a everywhere locally soluble torsor to have a global point is measured by the Tate–Shafarevich group, defined as the kernel of the local restriction map on $H^1(K,E)$. The resulting exact sequence isThus the Selmer group of an elliptic curve gives a computable upper bound for the quotient; actual rational points supply lower bounds. Equality need not follow just from local solubility. Finiteness of this fixed torsion subgroup does not prove finiteness of the whole Tate–Shafarevich group.

Finally, weak finiteness alone is not finite generation: the additive group $\mathbb{Q}$ has trivial quotients by multiplication and is not finitely generated. The additional ingredient for the Mordell-Weil theorem is height descent. Choose representatives $P_i$ of $E(K)/mE(K)$ and write $P=P_i+mQ$. The quadratic growth of the canonical height of an elliptic curve, together with bounds for translation by the finitely many $P_i$, makes $Q$ have smaller height whenever $P$ is sufficiently large. Northcott theorem gives only finitely many points of bounded height, and repeated descent yields a finite generating set. This explains the roles of Kummer theory, local information and heights without conflating the weak and full theorems.

Classical Kummer theory relates extraction of $n$th roots to Galois cohomology. In characteristic zero the exact sequenceand Hilbert theorem 90 identify $H^1(K,{\mu }_n)$ with $K^{\times }/K^{\times n}$. For an elliptic curve, the corresponding Kummer exact sequence of an elliptic curve isMultiplication by $n$ is surjective over the algebraic closure. If $nQ=P\in E(K)$, the cocycle $\sigma \mapsto \sigma Q-Q$ takes values in $E[n]$. Changing the choice of $Q$ changes it by a coboundary, and changing $P$ by an element of $nE(K)$ does not change its class. Conversely, a trivial cocycle class allows $Q$ to be adjusted by an $n$-torsion point to become $K$-rational. Thus the Kummer map of an elliptic curve is an injectionThis is the elliptic form of Kummer theory. The full cohomology group need not be finite; the arithmetic restriction on these classes is essential.

Choose a finite set $S$ of places containing the archimedean places, the primes over $n$, and all primes of bad reduction of an elliptic curve. At a finite place outside $S$, $E$ has good reduction and $n$ is a unit. A division point of the reduction of $P$ exists over the algebraic closure of the residue field. Smooth lifting gives a point over a finite unramified extension whose multiple differs from $P$ by an element of the kernel of reduction of an elliptic curve. In the formal group of an elliptic curve, $[n](T)=nT+O(T^2)$ is an isomorphism by the invertible morphism criterion for formal group laws, and its integral inverse converges on the maximal ideal. Correcting that difference produces a division point in the maximal unramified extension. Hence the Kummer map of an elliptic curve class is unramified outside $S$.

To prove finiteness explicitly, choose a finite Galois extension $L/K$ containing all $E[n]$ and all $n$th roots of unity, and enlarge $S$ to include its ramified places. A basis of $E[n]\cong (\mathbb{Z}/n\mathbb{Z}{)}^2$ identifies it over $L$ with ${\mu }_n^2$. Classical Kummer theory then identifiesThe restriction of every class in the image of $\delta$ belongs to $L(S_L,n{)}^2$, where the S-unramified power class group isIndeed an unramified local Kummer extension at residue characteristic prime to $n$ has valuation divisible by $n$: in an unramified field containing a root, $nv(a^{1/n})=v(a)$ with integral valuations.

The finiteness of S-unramified Kummer classes follows from the exact sequenceTo see the final map, write the ideal of $a$ away from $S_L$ as ${\mathfrak{a}}^n$ and take the ideal class of $\mathfrak{a}$. Its kernel is represented by an S-unit, after division by an $n$th power; conversely an $n$-torsion ideal class yields such an $a$. The S-unit group is finitely generated by the Dirichlet unit theorem together with the finitely many inverted primes. The ideal class group of the localized ring is a quotient of the finite ordinary ideal class group. Both outer groups are therefore finite.

Finally restriction has finite kernel: inflation-restriction puts it in the finite group $H^1(\mathrm{Gal}(L/K),E[n])$. Thus the image of $\delta$ has finite restriction image and finite kernel, andThis proves the weak Mordell-Weil theorem. Combining it with the height descent lemma proves the full Mordell-Weil theorem. Local restrictions at every place refine the finite group used here to the Selmer group of an elliptic curve, which is useful for explicit descent calculations.

Galois cohomology records the obstruction to choosing Galois-invariant division points. Let $G_K=\mathrm{Gal}(\overline{K}/K)$ be the absolute Galois group and give its algebraic-point modules the discrete topology. A continuous $1$-cocycle with values in a Galois module $M$ is a function $c:G_K\to M$ satisfyingA group coboundary has the form $c_{\sigma }=\sigma a-a$. Quotienting cocycles by coboundaries defines $H^1(K,M)$. For the finite module $E[m]$ these cocycles have finite image and factor through finite data; continuity is essential because $G_K$ is a profinite group.

In characteristic zero, multiplication by $m\ge 2$ on the algebraic points of an elliptic curve is surjective, with kernel $E[m]\cong (\mathbb{Z}/m\mathbb{Z}{)}^2$. The short exact sequence of Galois modulesgives the Kummer exact sequence of an elliptic curveExplicitly, choose $Q$ with $mQ=P$ and set $\delta (P{)}_{\sigma }=\sigma Q-Q$. Changing $Q$ by an $m$-torsion point changes the cocycle by a coboundary. The class vanishes exactly when a suitable choice of $Q$ is Galois-fixed, that is, when $P\in mE(K)$. This proves the injection directly and identifies its arithmetic meaning.