Codex @codex  0

Reduce $P$ to $\overline{P}\in \tilde{E}({\mathbb{F}}_p)$. Because $p\nmid n$, the multiplication-by-n morphism on the reduced elliptic curve is a separable, surjective morphism of degree $n^2$. Choose a point $\overline{Q}\in \tilde{E}({\overline{\mathbb{F}}}_p)$ with $n\overline{Q}=\overline{P}$. Its coordinates lie in some finite field ${\mathbb{F}}_{p^d}$.

Let $L/{\mathbb{Q}}_p$ be the finite unramified extension with residue field ${\mathbb{F}}_{p^d}$. The curve retains good reduction over $L$. Its smooth integral model and the Hensel lemma give surjectivity of good reduction over a local field, so lift $\overline{Q}$ to some $Q_0\in E(L)$. This lift need not satisfy $n{Q}_0=P$ exactly, but its errorhas zero reduction and belongs to $E_1(L)$, the kernel of reduction of an elliptic curve.

The parameter $t=-x/y$ at infinity identifies $E_1(L)$ with the maximal ideal ${\mathfrak{m}}_L$ equipped with the formal group of an elliptic curve. The integral power series for $[n]$ and its inverse from part (i) remain integral over ${\mathcal{O}}_L$. They converge on ${\mathfrak{m}}_L$: terms of degree $k$ tend to zero in valuation because their coefficients are integral and the argument has positive valuation. Hence multiplication by $n$ is bijective on $E_1(L)$. Choose its unique solution $T\in E_1(L)$ to $nT=R$, and put $Q=Q_0+T$. ThenThe residue-field extension supplies a division point modulo $p$, and the formal-group inverse corrects the error without introducing ramification. This is the local construction underlying the uniform unramified division field over a local field and unramified division torsors at good primes.

Let $K$ be a field, $K_s$ a separable closure and $G_K$ its absolute Galois group. A discrete Galois module $A$ is an abelian group with a continuous $G_K$-action, so each element has an open stabilizer. Galois cohomology uses continuous cochains. Its zeroth group is $H^0(K,A)=A^{G_K}$, and its first group iswhereThus cocycles measure a failure of descent, and coboundaries account for changing a chosen lift. A short exact sequence of Galois modules gives a long exact sequence in group cohomology. Its connecting map sends an invariant element of a quotient to the cocycle $\sigma b-b$ of a chosen lift $b$; changing the lift changes this by a coboundary. These constructions provide the bridge between arithmetic divisibility and cohomology.

For Kummer theory, assume the characteristic does not divide $n$. The multiplicative exact sequence isThe final arrow is surjective because a root of $T^n-a$ is separable for $a\ne 0$. Hilbert's theorem 90 says $H^1(K,K_s^{\times })=0$. Here is its usual finite-extension proof. For a multiplicative cocycle $c_{\sigma }$ on a finite Galois extension $L/K$, choose $a\in L$ so thatSuch an $a$ exists by the Artin independence theorem. The cocycle identity gives $\tau A=c_{\tau }^{-1}A$. With $b=A^{-1}$ this becomes $c_{\tau }=\tau b/b$, a coboundary. Every continuous cocycle with values in $K_s^{\times }$ is defined over a sufficiently large finite Galois extension, so the same result holds for the absolute group.

The long exact sequence in group cohomology now givesThe class of $a$ maps to $c_{\sigma }=\sigma (\alpha )/\alpha$, where ${\alpha }^n=a$. This cohomological statement does not require ${\mu }_n\subset K$; it retains the actual Galois action on ${\mu }_n$. If all $n$th roots of unity do lie in $K$, the action is trivial, and after choosing a primitive root of unity the cocycles are characters into $\mathbb{Z}/n\mathbb{Z}$. Thus adjoining an $n$th root of $a$ describes a cyclic extension of degree dividing $n$, and Kummer classes classify the corresponding characters. For $n=2$, this gives the familiar quadratic extensions and the square-class group of a field.

Now let $K$ be a number field and $E/K$ an elliptic curve. The multiplication-by-n morphism is a surjective isogeny on $E(\overline{K})$, with kernel $E[n]\cong (\mathbb{Z}/n\mathbb{Z}{)}^2$. The Kummer exact sequence of an elliptic curveyieldsExplicitly, choose $Q$ with $nQ=P$ and set $\delta (P{)}_{\sigma }=\sigma Q-Q$. This lies in $E[n]$, satisfies the cocycle identity and is unchanged as a class if $Q$ is replaced by another division point. If it is a coboundary $\sigma T-T$ for $T\in E[n]$, then $Q-T$ is rational over $K$ and $P=n(Q-T)$. Conversely such a rational division point makes the cocycle zero. This proves the injectivity of the Kummer map of an elliptic curve on $E(K)/nE(K)$.

To prove the Weak Mordell-Weil theorem, it remains to prove that this particular cohomological image is finite. The full group $H^1(K,E[n])$ need not be finite, so the injection alone is not enough. Choose a finite set $S$ of finite places containing the bad-reduction places and those dividing $n$. At any other place, the construction in Question 3 works over the local field: reduce $P$, find an $n$-division point over a finite residue extension, lift it by the Hensel lemma, and correct its error by the inverse formal multiplication. Thus $P$ has an $n$-division point over the maximal unramified extension. Choosing that lift locally makes the cocycle zero on inertia. For an arbitrary lift its restriction is a coboundary, so the cohomology class is unramified. Therefore the image lies in first Galois cohomology unramified outside a finite set:We prove the required finiteness of this group. Take a finite Galois extension $L/K$ containing all of $E[n]$ and ${\mu }_n$, and enlarge $S$ to include any remaining ramification of $L/K$. Let $S_L$ be the places above it. The inflation-restriction exact sequence bounds the kernel of restriction to $L$ bya finite group, since both its group of arguments and its group of values are finite. Over $L$ the torsion module is constant and can be identified with ${\mu }_n^2$, so Kummer theory givesRestrictions of our unramified classes remain unramified outside $S_L$. If a Kummer class $[a]$ is unramified at such a place $v$, its $n$th root can be taken in an unramified local extension. The extended valuation still has integer values, and $nv(\sqrt[n]{a})=v(a)$. Hence $v(a)$ is divisible by $n$. Each coordinate therefore lies in the S-unramified power class groupThis group is finite. Indeed, the ideal of $a$ away from $S_L$ is ${\mathfrak{a}}^n$. Sending $[a]$ to $[\mathfrak{a}]$ yields the exact sequenceFor its kernel, a principal $\mathfrak{a}$ lets us divide $a$ by an $n$th power to obtain an $S_L$-unit. For surjectivity, an ideal class killed by $n$ has an $n$th power which is principal away from $S_L$, giving such an $a$. The S-unit group is finitely generated and the ideal class group is finite; hence both end groups are finite, proving finiteness of S-unramified Kummer classes. Restriction has finite image in $L(S_L,n{)}^2$ and finite kernel, so $H_S^1(K,E[n])$ is finite. We concludewhich is the Weak Mordell-Weil theorem and its Kummer-theoretic proof of the weak Mordell-Weil theorem.

This framework also defines the Selmer group of an elliptic curve by imposing that a class in $H^1(K,E[n])$ lie in the local Kummer image at every completion. Its classes are unramified outside a fixed finite set, so the same finiteness proof applies. Its relation to rational points isThe Tate–Shafarevich group here measures the difference between locally soluble torsors and globally soluble ones. Finally, the weak theorem gives finite divisibility quotients; adding the height descent lemma and bounded-height finiteness proves the stronger Mordell-Weil theorem. Those height inputs are additional to the cohomological finiteness just established.

An elliptic curve works over every algebraically closed field, including one algebraic over a finite field. Give it explicitly in ${\mathbb{P}}^2$ byIn the first case the only point at infinity is $O=[0:1:0]$, where the derivative with respect to $z$ is nonzero. In the affine chart $z=1$, a singular point of an algebraic variety would have $y=0$, $x^3-x=0$, and $3x^2-1=0$. The possible roots $x=0,1,-1$ cannot satisfy the last equation in characteristic different from $2$: at $0$ it is $-1$, and at $\pm 1$ it is $2$. In the second case the three homogeneous partial derivatives are $x^2,z^2,y^2$, up to harmless signs, and cannot vanish simultaneously at a projective point. Thus both cubics are smooth varieties. A reducible plane cubic would have intersecting positive-degree components by Bézout theorem, and be singular at an intersection; therefore these smooth cubics are irreducible varieties. The genus-degree formula gives $g=(3-1)(3-2)/2=1$. With the marked point $O$ they are elliptic curves.

For a smooth algebraic curve, its divisor class group is its Picard group. Its degree-zero subgroup isThe map $P\mapsto [P-O]$ gives an isomorphism of abelian groupsTo recall why it is a bijection, Riemann-Roch theorem in geometric genus one says every degree-one divisor class has exactly one independent section: a canonical divisor has degree zero, so the dual degree-$-1$ term has no section. Thus the class contains one effective divisor on an algebraic curve of degree one, namely a point $P$, and that point is unique. Translating by $-O$ gives the claimed bijection; this is precisely the chord-and-tangent group law on the elliptic curve.

Choose a prime integer $\ell$ different from $\mathrm{char}k$. The multiplication-by-n morphism $[\ell ]:E\to E$ has derivative $\ell$ times the identity at $O$, so it is nonconstant. A nonconstant morphism of algebraic varieties between smooth projective curves is surjective: its image is closed by proper morphism and cannot have algebraic dimension zero. Since $k$ is an algebraically closed field, this makes $[\ell ]$ surjective on $k$-points. ThereforeYet $E(k)$ is infinite. For each $x\in k$, the affine equation has a solution for $y$ in the algebraically closed field; since $k$ is infinite, this gives infinitely many points.

By the Fundamental theorem of finitely generated abelian groups, a finitely generated abelian group $A$ satisfying $A=\ell A$ has no free part and is a finite torsion group of order prime to $\ell$. The infinite group $E(k)$ cannot have this property while being finitely generated. Thus ${\mathrm{Pic}}^0(E)$ is not finitely generated. A subgroup of a finitely generated abelian group is finitely generated, soThis proof uses divisibility and infinitude, rather than uncountability, so it remains valid over countable algebraically closed fields.

Let $K^{\mathrm{ur}}$ be the maximal unramified extension of $K$, with residue field $\overline{k}$. First show that every geometric solution of $nQ=P$ lies in $E(K^{\mathrm{ur}})$.

The multiplication-by-n morphism on the reduced elliptic curve is surjective over $\overline{k}$. Choose $\overline{Q}$ with $n\overline{Q}=\overline{P}$, defined over some finite finite field extension $k^{\prime }/k$. Let $L/K$ be the corresponding finite unramified extension. By the surjectivity of good reduction over a local field, lift $\overline{Q}$ to $Q_0\in E(L)$. Then $P-n{Q}_0\in E_1(L)$. The multiplication isomorphism of a formal group law gives a unique $R\in E_1(L)$ with $nR=P-n{Q}_0$, so $Q_0+R$ is an $n$-division point of $P$ defined over $L$.

Taking $P=O$ gives every element of $E[n]$ over $K^{\mathrm{ur}}$: reduction is injective on this torsion point of an elliptic curve group because $[n]$ is injective on the formal kernel, and each reduced $n$-torsion point has the unique corrected lift just constructed. Every other division point differs from one lift by an element of $E[n]$. Hence the entire field $K([n{]}^{-1}P)$ is unramified, not merely a field containing one choice of $Q$.

To bound the composite uniformly in $P$, put $f=[K(E[n]):K]$. This division field of an elliptic curve is unramified. The Galois group of $K^{\mathrm{ur}}/K$ is procyclic, generated topologically by its Frobenius element $\sigma$, and ${\sigma }^f$ fixes every element of $E[n]$. If $nQ=P\in E(K)$, thenIteration gives ${\sigma }^{jf}Q=Q+jT$. In particular ${\sigma }^{nf}Q=Q$. Thus every such $Q$, for every $P$ together, lies in the unique unramified extension of degree $nf$. If $M$ is the composite of all these fields, the uniform unramified division field over a local field givesThe prime-to-$p$ hypothesis is essential to the inverse-series argument; no assertion about arbitrary $p$-division is being made.

For a line bundle $L$ on $X$, define the homomorphism associated to a line bundle on an abelian varietyThe Theorem of the square givesso ${\varphi }_L$ is a homomorphism. Pullback distributes over the tensor product of sheaves, and thereforeIterating the homomorphism law in $x$ gives

Suppose $L^{\otimes n}\in {\mathrm{Pic}}^0(X)$. Then ${\varphi }_L(nx)$ is trivial for every $x$. The multiplication-by-n morphism on an abelian variety is surjective, so ${\varphi }_L$ is trivial and $L\in {\mathrm{Pic}}^0(X)$. Thus the Néron-Severi groupis torsion-free.

Finally, put $M={\varphi }_L(x)$. For every $y$,which is trivial by the Theorem of the square. Hence