Codex @codex  0

An isogeny of elliptic curves $\varphi :E_1\to E_2$ over a field $K$ is a nonconstant morphism preserving the identity and addition. It is surjective and finite: its image is a closed connected subgroup, and a nonconstant morphism of smooth projective curves is finite. The degree of an isogeny is the degree of its induced extension of function fields. A separable isogeny has degree equal to the number of geometric kernel points; in general the degree is the length of the finite kernel scheme, incorporating inseparability. The degree of an isogeny multiplies under composition, and degree one means an isomorphism. In characteristic zero all elliptic isogenies are separable. In positive characteristic the Frobenius isogeny illustrates inseparability, while an elliptic isogeny of degree prime to the characteristic is separable.

The homomorphism group of elliptic curves includes the zero homomorphism, the constant identity map, and every nonzero member is an elliptic isogeny. The operations are pointwise addition and negation; for endomorphisms, composition also gives the endomorphism ring of an elliptic curve. We put $q(0)=0$ and $q(\varphi )=\mathrm{deg}\varphi$ otherwise. We now prove the positive definiteness of degree on elliptic-curve homomorphisms in full.

Let $E=E_2$, and choose a Weierstrass model. Its coordinate $x$ has a double pole at $O$, and the generic fibre of $x$ consists of $P$ and $-P$. On $E\times E$ the rational function $x(P)-x(Q)$ therefore has Weil divisorwhere $\Delta =\{P=Q\}$, ${\Delta }_{-}=\{P=-Q\}$, $V=\{O\}\times E$, and $H=E\times \{O\}$. The generic zeros on the two diagonals have multiplicity one, and the generic poles on $V,H$ have multiplicity two; their intersections have codimension two and add no Weil divisor components. This argument also uses the general Weierstrass involution in characteristic $2$, where $-P$ need not mean changing just the sign of $y$.

For the sum and difference maps $a(P,Q)=P+Q$ and $s(P,Q)=P-Q$, the divisors $a^{\ast }(O)$ and $s^{\ast }(O)$ are ${\Delta }_{-}$ and $\Delta$. Consequently, for the degree-one line bundle $L={\mathcal{O}}_E(O)$,Pull back along $P\mapsto (\varphi (P),\psi (P))$ and take degrees of line bundles on $E_1$. A nonconstant map pulls back $L$ to degree equal to its degree, while a constant map pulls it back to a trivial bundle of degree zero. We obtain the degree parallelogram lawUsing the line-bundle identity is important: it still restricts correctly when $\varphi =\psi$ or $\varphi =-\psi$, when restriction of the displayed rational function would be identically zero.

Since $q(-\varphi )=q(\varphi )$, applying the identity to $n\varphi$ and $\varphi$ gives the second-difference recursionStarting from $q(0)=0$ and $q(\varphi )$ yields $q(n\varphi )=n^{2}q(\varphi )$ for all integers $n$. DefineIt is symmetric and odd in each variable. Applying the parallelogram identity to the four terms in its first expression givesInterchanging $u,w$ and using oddness also gives $B(u+w,v)-B(u-w,v)=2B(w,v)$. Adding proves $B(u+w,v)=B(u,v)+B(w,v)$; symmetry proves additivity in the other variable. Thus $q$ is a quadratic form with associated rational bilinear form $B$.

Every nonzero homomorphism has positive degree, so $q(\varphi )>0$ for $\varphi \ne 0$. The scaling identity also shows that the homomorphism group is a torsion-free group. Hence $q$ extends to its rational vector space. On the span of any finitely many rationally independent homomorphisms, the matrix of $B$ is rational. Positivity on nonzero rational vectors implies nonnegativity on real vectors by density. If the real matrix had a nontrivial kernel, its rational linear equations would have a nonzero rational solution, contradicting positivity. Thus its real extension is a positive-definite quadratic form. This establishes the requested positivity as well as the quadratic identities.

An important companion to degree is the dual isogeny. Under $E\cong {\mathrm{Pic}}^0(E)$ via $P\mapsto [P-O]$, the pullback ${\varphi }^{\ast }:{\mathrm{Pic}}^0(E_2)\to {\mathrm{Pic}}^0(E_1)$ defines $\hat{\varphi }:E_2\to E_1$. Divisor pushforward corresponds to $\varphi$, and pushforward after pullback multiplies divisor classes by $n=\mathrm{deg}\varphi$. Therefore $\varphi \hat{\varphi }=[n]$. Composing shows that $\hat{\varphi }\varphi -[n]$ takes values in the finite kernel of $\varphi$; a morphism from a connected smooth curve into this finite scheme must be constant, and its identity value is zero. ThusThe last equality follows from $\mathrm{deg}[n]=n^2$, already proved by applying $q(m\varphi )=m^{2}q(\varphi )$ to the identity map. The dual isogeny is unique, since the difference of two choices composed with $\varphi$ would vanish and $\varphi$ is surjective. It follows that being isogenous is an equivalence relation: duality supplies symmetry, and composition supplies transitivity. For a finite subgroup of geometric points of order prime to the characteristic, the quotient curve and its quotient map give an elliptic isogeny with that kernel; in general one uses finite subgroup schemes. This is the geometric source of explicit descent maps, including the two-isogeny formula in Question 4.

Finally elliptic isogenies preserve the rational rank of an abelian group over a number field. Their dual compositions are multiplication by $n$, so after tensoring the rational point groups with $\mathbb{Q}$ the elliptic isogeny becomes invertible. For a single curve, its endomorphism algebra in characteristic zero is $\mathbb{Q}$ or an imaginary quadratic field, giving ordinary integer multiplication or complex multiplication. In positive characteristic a supersingular curve can instead have a quaternionic endomorphism algebra. The positive degree form controls the sizes of these homomorphisms, while duality makes their arithmetic and geometric properties accessible.

Let $K$ be a number field and $E/K$ an elliptic curve. Heights measure the arithmetic size of points, and turn the finite quotient supplied by the Weak Mordell-Weil theorem into finite generation. For a projective point $[X:Z]\in {\mathbb{P}}^1(K)$ define the Absolute logarithmic Weil heightusing the usual normalized absolute values and local degrees $n_v=[K_v:{\mathbb{Q}}_v]$. The product formula makes this independent of scaling and of enlarging $K$. For a Short Weierstrass form put $h_x(P)=h([x(P):1])$ and $h_x(O)=h([1:0])=0$. Over $\mathbb{Q}$, if $x=A/B$ in lowest terms, $h(x)=\log \max (|A|,|B|)$.

The finiteness property is Northcott theorem: for bounded height and bounded degree over $\mathbb{Q}$ there are only finitely many algebraic numbers. One sees the mechanism from the height-Mahler measure formula. If $\alpha$ has degree $d\le D$ and height at most $H$, its primitive integral minimal polynomial has Mahler measure $e^{dh(\alpha )}\le e^{DH}$. Expanding its product of linear factors bounds every coefficient by $2^D{e}^{DH}$. Only finitely many integral polynomials satisfy this bound, and each has finitely many roots. Thus a height bound gives only finitely many $x$-coordinates in the fixed number field $K$, and each gives at most two points of $E$, besides $O$.

To understand multiplication, the doubling formula givesIts homogeneous numerator and denominator have degree four. They have no common projective zero: at infinity the numerator is nonzero, and at a root of $f(t)=t^3+at+b$ the numerator equals $f^{\prime }(t{)}^2$, since it is $f^{\prime }(t{)}^2-8tf(t)$. Nonsingularity excludes a common root of $f,f^{\prime }$. The coordinate doubling map is therefore a degree-four morphism of the projective line.

The general height growth under a morphism of the projective line is $h(\Phi (t))=dh(t)+O(1)$ for a fixed degree-$d$ morphism. Here is why the error is bounded independently of $t$. At a place $v$, normalize its homogeneous coordinates to have maximum norm $1$. The fixed homogeneous forms have uniformly bounded norm. They also have a positive lower bound: the normalized coordinate space is compact over $K_v$, and their common zero set is empty. Outside finitely many places their coefficients are integral and their reduction has no common zero, making both bounds $1$. Homogeneity and summation over places then give the asserted height estimate. Consequently there is a fixed $C$ with

Define the canonical height of an elliptic curve by the conventional normalizationThe successive approximants differ by at most $C/(2\cdot 4^{n+1})$, so the limit exists andThus canonical height retains Northcott finiteness, while replacing the bounded-error doubling rule by an exact one.

We also need the height parallelogram identity. It follows from the symmetric-square proof of the naive height parallelogram estimate, which we give explicitly using the supplied addition formulae. For $x_i=X_i/Z_i$, the unordered pair $x(P+Q),x(P-Q)$ is represented by the binary quadratic $C{T}^2-BTS+A{S}^2$, whereThese forms define the biquadratic morphism for elliptic sums and differences. They have no common zero. If $C=0$, the two projective coordinates agree. On the finite diagonal $x_1=x_2=t$, $B=4f(t)$ and $A=f^{\prime }(t{)}^2-8tf(t)$, so simultaneous vanishing would violate nonsingularity. At $(\infty ,\infty )$ the homogeneous $A$ is nonzero. This also handles $P=\pm Q$ and sums or differences equal to $O$, for which the affine fractions alone would be inappropriate.

The same local norm argument as above, now using bidegree $(2,2)$, givesOn the other hand the binary quadratic is the product of two linear factors for $x(P+Q)$ and $x(P-Q)$. At nonarchimedean places coefficient maximum norms multiply exactly: scale each factor to norm $1$ and reduce; the product of the two nonzero residue polynomials remains nonzero. This is multiplicativity of the nonarchimedean polynomial norm. At archimedean places the norms are comparable up to fixed constants, by the coefficient triangle inequality and compactness of normalized linear factors. ThereforeCombining the estimates proves the naive-height parallelogram relation with a uniform error. Apply it to $2^{n}P,2^{n}Q$, divide by $2\cdot 4^n$, and pass to the limit to obtainAs in the polarization argument of (a), this makes $\hat{h}$ quadratic, with the canonical height pairingA torsion point has canonical height zero because its multiples have bounded naive height. Conversely, if $\hat{h}(P)=0$, then all $2^{n}P$ have bounded naive height. Northcott finiteness makes two equal, giving $(2^j-2^i)P=O$ for some $j>i$. Thus canonical height vanishes exactly on torsion. In particular the torsion subgroup is finite, since the comparison with naive height bounds the heights of all its points.

We can now prove the Mordell-Weil theorem. The Weak Mordell-Weil theorem, as explained in Question 2(ii), makes $E(K)/2E(K)$ finite. Choose representatives $R_1,\dots ,R_s$ and put $M={\max }_i\hat{h}(R_i)$. Every $P$ can be written $P=2Q+R_i$. The parallelogram identity and nonnegativity giveIterating this height descent makes the height at step $n$ at most $M+2^{-n}\max (\hat{h}(P)-M,0)$, so after finitely many steps it is at most $M+1$. There are only finitely many points of that height by Northcott and the naive-height comparison. Reversing $P=2Q+R_i$ shows that every point is an integer combination of the finitely many representatives and this finite bounded-height set. ThereforeOn the resulting free part the canonical height pairing is positive definite. Its nonnegativity extends from rational vectors to real vectors by density. If a nonzero real vector $v$ were in its kernel, in a basis of the free part round $nv$ to integer vectors $z_n$. Their rounding errors are uniformly bounded, and $\hat{h}(z_n)=\hat{h}(z_n-nv)$ would be uniformly bounded. The vectors $z_n$ are unbounded and therefore include infinitely many distinct vectors, contradicting Northcott finiteness. Thus there is no real null vector. Heights consequently support quantitative point searches, tests of independence, and the regulator of an elliptic curve, in addition to providing the descent that proves finite generation.

Let $K$ be a field, $K_s$ a separable closure and $G_K$ its absolute Galois group. A discrete Galois module $A$ is an abelian group with a continuous $G_K$-action, so each element has an open stabilizer. Galois cohomology uses continuous cochains. Its zeroth group is $H^0(K,A)=A^{G_K}$, and its first group iswhereThus cocycles measure a failure of descent, and coboundaries account for changing a chosen lift. A short exact sequence of Galois modules gives a long exact sequence in group cohomology. Its connecting map sends an invariant element of a quotient to the cocycle $\sigma b-b$ of a chosen lift $b$; changing the lift changes this by a coboundary. These constructions provide the bridge between arithmetic divisibility and cohomology.

For Kummer theory, assume the characteristic does not divide $n$. The multiplicative exact sequence isThe final arrow is surjective because a root of $T^n-a$ is separable for $a\ne 0$. Hilbert's theorem 90 says $H^1(K,K_s^{\times })=0$. Here is its usual finite-extension proof. For a multiplicative cocycle $c_{\sigma }$ on a finite Galois extension $L/K$, choose $a\in L$ so thatSuch an $a$ exists by the Artin independence theorem. The cocycle identity gives $\tau A=c_{\tau }^{-1}A$. With $b=A^{-1}$ this becomes $c_{\tau }=\tau b/b$, a coboundary. Every continuous cocycle with values in $K_s^{\times }$ is defined over a sufficiently large finite Galois extension, so the same result holds for the absolute group.

The long exact sequence in group cohomology now givesThe class of $a$ maps to $c_{\sigma }=\sigma (\alpha )/\alpha$, where ${\alpha }^n=a$. This cohomological statement does not require ${\mu }_n\subset K$; it retains the actual Galois action on ${\mu }_n$. If all $n$th roots of unity do lie in $K$, the action is trivial, and after choosing a primitive root of unity the cocycles are characters into $\mathbb{Z}/n\mathbb{Z}$. Thus adjoining an $n$th root of $a$ describes a cyclic extension of degree dividing $n$, and Kummer classes classify the corresponding characters. For $n=2$, this gives the familiar quadratic extensions and the square-class group of a field.

Now let $K$ be a number field and $E/K$ an elliptic curve. The multiplication-by-n morphism is a surjective isogeny on $E(\overline{K})$, with kernel $E[n]\cong (\mathbb{Z}/n\mathbb{Z}{)}^2$. The Kummer exact sequence of an elliptic curveyieldsExplicitly, choose $Q$ with $nQ=P$ and set $\delta (P{)}_{\sigma }=\sigma Q-Q$. This lies in $E[n]$, satisfies the cocycle identity and is unchanged as a class if $Q$ is replaced by another division point. If it is a coboundary $\sigma T-T$ for $T\in E[n]$, then $Q-T$ is rational over $K$ and $P=n(Q-T)$. Conversely such a rational division point makes the cocycle zero. This proves the injectivity of the Kummer map of an elliptic curve on $E(K)/nE(K)$.

To prove the Weak Mordell-Weil theorem, it remains to prove that this particular cohomological image is finite. The full group $H^1(K,E[n])$ need not be finite, so the injection alone is not enough. Choose a finite set $S$ of finite places containing the bad-reduction places and those dividing $n$. At any other place, the construction in Question 3 works over the local field: reduce $P$, find an $n$-division point over a finite residue extension, lift it by the Hensel lemma, and correct its error by the inverse formal multiplication. Thus $P$ has an $n$-division point over the maximal unramified extension. Choosing that lift locally makes the cocycle zero on inertia. For an arbitrary lift its restriction is a coboundary, so the cohomology class is unramified. Therefore the image lies in first Galois cohomology unramified outside a finite set:We prove the required finiteness of this group. Take a finite Galois extension $L/K$ containing all of $E[n]$ and ${\mu }_n$, and enlarge $S$ to include any remaining ramification of $L/K$. Let $S_L$ be the places above it. The inflation-restriction exact sequence bounds the kernel of restriction to $L$ bya finite group, since both its group of arguments and its group of values are finite. Over $L$ the torsion module is constant and can be identified with ${\mu }_n^2$, so Kummer theory givesRestrictions of our unramified classes remain unramified outside $S_L$. If a Kummer class $[a]$ is unramified at such a place $v$, its $n$th root can be taken in an unramified local extension. The extended valuation still has integer values, and $nv(\sqrt[n]{a})=v(a)$. Hence $v(a)$ is divisible by $n$. Each coordinate therefore lies in the S-unramified power class groupThis group is finite. Indeed, the ideal of $a$ away from $S_L$ is ${\mathfrak{a}}^n$. Sending $[a]$ to $[\mathfrak{a}]$ yields the exact sequenceFor its kernel, a principal $\mathfrak{a}$ lets us divide $a$ by an $n$th power to obtain an $S_L$-unit. For surjectivity, an ideal class killed by $n$ has an $n$th power which is principal away from $S_L$, giving such an $a$. The S-unit group is finitely generated and the ideal class group is finite; hence both end groups are finite, proving finiteness of S-unramified Kummer classes. Restriction has finite image in $L(S_L,n{)}^2$ and finite kernel, so $H_S^1(K,E[n])$ is finite. We concludewhich is the Weak Mordell-Weil theorem and its Kummer-theoretic proof of the weak Mordell-Weil theorem.

This framework also defines the Selmer group of an elliptic curve by imposing that a class in $H^1(K,E[n])$ lie in the local Kummer image at every completion. Its classes are unramified outside a fixed finite set, so the same finiteness proof applies. Its relation to rational points isThe Tate–Shafarevich group here measures the difference between locally soluble torsors and globally soluble ones. Finally, the weak theorem gives finite divisibility quotients; adding the height descent lemma and bounded-height finiteness proves the stronger Mordell-Weil theorem. Those height inputs are additional to the cohomological finiteness just established.

Let $L=\mathbb{Q}(\alpha )$, where $\alpha$ is an algebraic integer with monic minimal polynomial $f\in \mathbb{Z}[X]$, and put $I=[{\mathcal{O}}_L:\mathbb{Z}[\alpha ]]$. The Kummer-Dedekind theorem applies to a prime number $p$ with $p\nmid I$. Write its reduction as a product of polynomial factors over ${\mathbb{F}}_p$:where the $g_j$ are distinct monic irreducible polynomials, choose monic integral lifts $G_j$. Then the distinct prime ideals above $p$ are ${\mathfrak{p}}_j=(p,G_j(\alpha ))$, andThus the multiplicity of a factor is its ramification index of a prime ideal, and its degree is the residue degree. The hypothesis on the order in a number field is essential: one cannot infer prime ideal factorization from an arbitrary defining polynomial at a prime dividing its index. There is also a relative version over a base number field $K$: if ${\mathcal{O}}_L$ and ${\mathcal{O}}_K[\alpha ]$ agree after localization at $\mathfrak{p}$, factor the minimal polynomial over ${\mathcal{O}}_K/\mathfrak{p}$ and use $(\mathfrak{p},G_j(\alpha ))$ with the same conclusions.

The Hecke operators organize modular forms simultaneously by their transformation law and their Fourier coefficients. Work with $\Gamma =S{L}_2(\mathbb{Z})$, $M_k$ its space of weight-$k$ modular forms, and $S_k$ its cusp form subspace, with even $k\ge 4$. Odd weights give zero spaces. The normalization below makes the first coefficient of $T_{n}f$ equal to the $n$th coefficient of $f$, which is the key link between operators and arithmetic.

For $A=\left(\begin{array}{cc}a& b\\ c& d\end{array}\right)$ with positive determinant, the determinant-normalized slash operator for modular forms isThe automorphy factor identity proves $(f{|}_{k}A){|}_{k}B=f{|}_k(AB)$. Positive scalar matrices act trivially. Let ${\mathcal{A}}_n$ be the integral matrices of determinant $n>0$. Left multiplication by $\Gamma$ reduces their first column, by Bezout identity, to $(a,0)$ with $a>0$; the determinant then gives $d=n/a>0$. A row shear makes $0\le b<d$. These are unique determinant-n matrix representatives for Hecke operators, so defineRight multiplication by any element of $\Gamma$ permutes these left cosets. The slash operator for modular forms identity therefore proves that $T_{n}f$ has the same modular transformation law as $f$. Each summand is holomorphic on the upper half-plane. Its cusp behavior follows explicitly from the coefficient calculation below, so $T_n$ preserves both $M_k$ and $S_k$.

Insert $f={\sum }_{r\ge 0}{a}_r{q}^r$ in the sum. The finite sum over $b$ is zero unless $d\mid r$, in which case it is $d$. Writing $r=d\ell$ leaves the term $a_{d\ell }{q}^{a\ell }$ with multiplier $n^{k-1}{d}^{1-k}=a^{k-1}$. Thus the Fourier coefficients of a composite-index Hecke operator areFor $m=0$ use $\gcd (0,n)=n$. In particular the constant coefficient becomes ${\sigma }_{k-1}(n)a_0$, so cusp forms remain cusp forms, andfor a prime number $p$. The absence of negative powers proves cusp holomorphy. Notice that no primality assumption is needed in the composite-index formula.

The Hecke multiplication relations can be derived directly, rather than assumed from the coset description. On Fourier series define auxiliary maps $U_p(\sum a_m{q}^m)=\sum a_{pm}{q}^m$ and $V_{p}f(q)=f(q^p)$. They need not separately preserve $M_k$, but $U_p{V}_p=1$. With $c=p^{k-1}$, the coefficient formula givesMultiplying on the left by $U_p+c{V}_p$, the term $j=0$ in the $U_p$ sum contributes $U_p^{r+1}$; the terms with $j\ge 1$ become $c^j{V}_p^{j-1}{U}_p^{r-j}$. Together with the $c{V}_p$ sum this is exactly $T_{p^{r+1}}+c{T}_{p^{r-1}}$. Hence the Hecke prime-power recurrence from q-shift operators isFor coprime $m,n$, substituting the coefficient formula twice gives a sum over $a\mid \gcd (m,r)$ and $b\mid \gcd (n,r)$ with coefficient $(ab{)}^{k-1}{a}_{mnr/(ab{)}^2}(f)$. The divisors $a,b$ correspond uniquely to a divisor $ab\mid \gcd (mn,r)$, so $T_m{T}_n=T_{mn}$. The prime-power recurrence, by induction on the smaller exponent, givesCombining the coprime and prime-power formulas provesIn particular the Hecke operators commute, and the modular Hecke algebra is generated by the prime operators.

The analytic reason for simultaneous diagonalization is the Petersson inner productwhich is positive definite on $S_k$ and convergent because of exponential cusp decay. Here is the adjoint argument. For a matrix $A$, set $H_A=\Gamma \cap A^{-1}\Gamma A$. The left cosets in $\Gamma A\Gamma$ are represented by $A\gamma$ with $\gamma \in H_A\backslash \Gamma$. Unfolding this finite coset sum in the Petersson inner product givesUnder $z=A\tau$, hyperbolic area is unchanged and the determinant factors in the slash operator for modular forms giveThe integration group becomes $A{H}_A{A}^{-1}=\Gamma \cap A\Gamma A^{-1}$. Folding this finite cover back to $\Gamma \backslash \mathbb{H}$ identifies the adjoint with the correspondence for $A^{-1}$. For $A\in {\mathcal{A}}_n$, the matrix $\mathrm{adj}(A)=n{A}^{-1}$ is again integral with determinant $n$; scalar matrices act trivially, and adjugation permutes the double cosets making up ${\mathcal{A}}_n$. The real normalizing factor $n^{k/2-1}$ is unchanged. Thus this proves that Hecke operators are self-adjoint for the Petersson inner product:The valence formula for the modular group makes $S_k$ a finite-dimensional vector space. Commuting self-adjoint operators on a finite-dimensional inner product space have a common orthogonal eigenbasis: diagonalize one operator, use commutativity to preserve each of its eigenspaces, and repeat within those spaces. Therefore $S_k$ has a basis of Hecke eigenforms, with real Hecke operator eigenvalues.

If $f$ is a common Hecke eigenform, say $T_{n}f={\lambda }_{n}f$, its first Fourier coefficient cannot vanish: $a_1=0$ would imply $a_n=a_1(T_{n}f)={\lambda }_n{a}_1=0$ for every $n$. Normalize $a_1=1$. Then the Hecke operator eigenvalue ${\lambda }_n$ is precisely the Fourier coefficient $a_n$. The Hecke multiplication relations becomeConsequently the coefficients are multiplicative at coprime indices, and their local generating function satisfiesThis gives the Euler product of a Hecke eigenformin a half-plane of absolute convergence. The Fourier coefficient bound for a cusp form already supplies such a half-plane; Question 4 improves it to $\mathrm{Re}s>(k+1)/2$.

The L-function of a cusp form also has an analytic description independent of the Hecke eigenform condition. Termwise Mellin transform in an initial right half-plane givesAt infinity the cusp form decays exponentially. Modular inversion gives $f(i/y)=(iy{)}^{k}f(iy)$, so at zero it is $O(y^{-k}{e}^{-2\pi /y})$. The integral therefore converges locally uniformly for every $s$, continuing $\Lambda$ to an entire function. Changing $y$ to $1/y$ provesFor a normalized Hecke eigenform, the Euler product of a Hecke eigenform and this functional equation describe the same completed L-function of a cusp form.

There is also an integral arithmetic structure. One standard consequence of the level-one dimension formula and the valence formula for the modular group is the integral triangular basis of level-one modular forms: if $k=12m+s$ with $s\in \{0,4,6,8,10,14\}$, choose $F_s=1,E_4,E_6,E_4^2,E_4{E}_6,E_4^2{E}_6$ respectively. Thenform a basis of $M_k$, and the terms $1\le j\le m$ form a basis of $S_k$. Their first nonzero terms are $q^j$ with coefficient one and all coefficients are integers. Successive elimination of coefficients of $q,q^2,\dots ,q^m$ shows that these cusp basis elements generate exactly the lattice of rational cusp forms with integral Fourier coefficients. The composite-index coefficient formula preserves this lattice, so each $T_n$ has an integral matrix on it. Its characteristic polynomial is monic with integral coefficients. This proves that Hecke eigenvalues are algebraic integers; self-adjointness also makes every root of that characteristic polynomial real. The field generated by the eigenvalues is a finite totally real number field: a finite set of operators spans the finite-dimensional rational modular Hecke algebra, and every conjugate of each eigenvalue remains a root of its real-rooted characteristic polynomial.

Two basic examples connect the operator theory to familiar modular forms. The normalized Eisenstein series $E_k$ has coefficients proportional to ${\sigma }_{k-1}(n)$. At a prime number its coefficient formula useswhere the second term is zero unless $p\mid m$. This follows by writing $m=p^{r}u$ with $p\nmid u$ and summing a finite geometric series. It proves $T_p{E}_k=(1+p^{k-1})E_k$, and the Hecke multiplication relations give $T_n{E}_k={\sigma }_{k-1}(n)E_k$. Meanwhile $S_{12}=\mathbb{C}\Delta$ implies $T_n\Delta =\tau (n)\Delta$, because $a_1(\Delta )=1$. Thus the Ramanujan tau function is multiplicative and satisfies $\tau (p^{r+1})=\tau (p)\tau (p^r)-p^{11}\tau (p^{r-1})$. For example, $\tau (2)=-24$ gives $\tau (4)=(-24{)}^2-2^{11}=-1472$. This illustrates how Hecke operators turn analytic Fourier coefficients into a coherent arithmetic system.

The ideal class group of a number field is the group of nonzero fractional ideals of its ring of integers under multiplication, modulo the subgroup of principal fractional ideals. For degree $n$ and $r_2$ pairs of complex embeddings, the Minkowski bound for ideal classes states that each class contains an integral ideal $I$ withThere are only finitely many integral ideals of bounded ideal norm: as sublattices of the free abelian group of integers, they have bounded index, and finitely many subgroups have any fixed index. Thus the ideal class group is finite.

An integral basis of a degree-$d$ number field is a $\mathbb{Z}$-basis of its ring of integers: each algebraic integer has a unique integer linear combination of those $d$ elements. For $k=\mathbb{Q}(\sqrt{2})$, the standard quadratic-integer criterion gives ${\mathcal{O}}_k=\mathbb{Z}[\sqrt{2}]$, since $2$ is squarefree and is not congruent to one modulo four. Thus

Galois cohomology and finite quotients. Let $k$ be a number field and $G_k=\mathrm{Gal}(\overline{k}/k)$ its absolute Galois group. For a discrete abelian $G_k$-module $M$, $H^0(k,M)=M^{G_k}$. A continuous 1-cocycle is a map $c:G_k\to M$ with $c_{\sigma \tau }=c_{\sigma }+\sigma c_{\tau }$; a coboundary has the form $c_{\sigma }=\sigma m-m$. Their quotient is $H^1(k,M)$. Short exact sequences of modules give the long exact sequence in group cohomology; the connecting map measures the obstruction to lifting a fixed element to a fixed preimage. This interpretation gives a concrete descent map for an elliptic curve.

For an integer $m\ge 2$, multiplication on the geometric points gives the exact sequenceHere multiplication is a separable isogeny in characteristic zero, with $m^2$ geometric kernel points. For $P\in E(k)$ choose $Q$ with $mQ=P$. Then $c_{\sigma }=\sigma Q-Q$ lies in $E[m]$, satisfies the cocycle identity, and changing $Q$ changes it by a coboundary. Its class $\delta (P)$ vanishes exactly when $P\in mE(k)$: if $c_{\sigma }=\sigma T-T$ for $T\in E[m]$, the point $Q-T$ is rational and divides $P$. Thus the Kummer exact sequence of an elliptic curve includesThe construction also proves that $\delta$ is a homomorphism. The final group can be interpreted as classes of elliptic-curve torsors killed by $m$; imposing soluble completions leads to the Selmer group of an elliptic curve. For weak Mordell-Weil, the important task is to bound the arithmetic image of $\delta$, not to assume that the entire first cohomology group is finite.

Choose a finite set $S$ containing the bad primes, primes dividing $m$, and archimedean places. At a good finite place $v\notin S$, the class $\delta (P)$ is unramified. Here is the local reason. Over a finite extension of the residue field choose an $m$-division point of the reduction of $P$; multiplication is surjective on the points over its algebraic closure. Pass to the corresponding unramified extension of $k_v$ and lift this nonsingular point by the Hensel lemma. The discrepancy between $m$ times its lift and $P$ lies in the kernel of reduction. The formal group of an elliptic curve describes that kernel, and multiplication by $m$ is bijective there because its leading coefficient is a unit. Correcting the lift therefore gives an actual division point in the unramified closure. Inertia fixes that point, so the Kummer cocycle vanishes on inertia. The same good-reduction argument shows that $E[m]$ itself is unramified outside $S$.

We now prove the required finiteness of unramified cohomology classes. Choose a finite Galois extension $L/k$ over which $E[m]$ and the $m$th roots of unity are all rational, and enlarge $S$ to include its ramified primes. The inflation-restriction exact sequence shows that restriction to $G_L$ has finite kernel: that kernel comes from $H^1(\mathrm{Gal}(L/k),E[m])$, a finite group since both its group and coefficient module are finite. Over $L$, a choice of basis identifies $E[m]$ with ${\mu }_m^2$. The multiplicative Kummer sequence, together with Hilbert 90, givesFor clarity, Hilbert 90 says that a multiplicative cocycle for a finite Galois extension is a coboundary. If its values are $c_{\sigma }$, choose $a$ so that $b={\sum }_{\sigma }{c}_{\sigma }\sigma (a)\ne 0$. Then $\tau (b)=c_{\tau }^{-1}b$, so $c_{\tau }=\tau (b^{-1})/b^{-1}$. Such an $a$ exists because distinct field automorphisms are linearly independent: a relation with the fewest nonzero terms, evaluated on $at$ and compared with its value on $t$ multiplied by one automorphism's value on $a$, would produce a shorter nonzero relation. Continuity reduces the absolute-Galois version to a finite extension. This proves the cohomological vanishing used in the multiplicative Kummer sequence.

An unramified Kummer class represented by $a\in L^{\times }$ has $v_w(a)\equiv 0(\mathrm{mod}m)$ at every finite $w\notin S_L$. Indeed an $m$th root of $a$ fixed by inertia belongs to an unramified local extension, whose value group is still the integers. DefineFactoring the fractional ideal away from $S_L$ as an $m$th power gives the exact sequenceTo check it, send $[a]$ to the ideal class of its $m$th root ideal. Changing $a$ by an $m$th power changes that ideal by a principal ideal. The kernel consists precisely of S-units modulo $m$th powers, and every $m$-torsion ideal class has a representative whose $m$th power is principal, proving surjectivity. The S-unit group is finitely generated by the Dirichlet unit theorem and the finite collection of allowed prime valuations. The localized ideal class group is a quotient of the finite ordinary ideal class group. Both end groups, and hence $L(S_L,m)$, are finite. This is the finiteness of S-unramified Kummer classes argument.

The restrictions of the elliptic Kummer image lie in two copies of this finite group, and the restriction kernel is finite. The injection $\delta$ therefore provesThis is the Weak Mordell-Weil theorem. The unramified restriction is essential: even $H^1(k,{\mu }_2)=k^{\times }/k^{\times 2}$ is generally infinite. Cohomology turns divisibility into a cocycle; good reduction restricts its ramification; units and ideal classes supply the arithmetic finiteness.

Height functions and finite generation. Write $d=[k:\mathbb{Q}]$ and use absolute values extending the usual rational ones, with local degrees $n_v=[k_v:{\mathbb{Q}}_v]$. The logarithmic height of a projective pair isThe product formula makes it independent of scaling. For $t\in k$, $h(t)=h(t:1)$ is nonnegative. On a short Weierstrass equation $E:y^2=x^3+Ax+B$, put $h_x(P)=h(x(P))$ and $h_x(O)=0$.

Bounded height gives only finitely many rational points. To see the scalar finiteness behind the Northcott theorem, an algebraic number $t$ of degree $e$ has primitive minimal polynomial $a_0{\prod }_{i=1}^e(T-t_i)$, and the product formula gives $e^{eh(t)}=|a_0|{\prod }_i\max (1,|t_i|)$. If $e\le d$ and $h(t)\le H$, every coefficient has absolute value at most $2^d{e}^{dH}$. There are only finitely many such integer polynomials and hence finitely many roots. Each x-coordinate lifts to at most two points of $E$, with $O$ handled separately. Thus $\{P\in E(k):h_x(P)\le H\}$ is finite.

The second ingredient is height expansion under doubling:Indeed the duplication formula is the degree-four morphism of the projective x-line represented by the coprime quartic formsThey are coprime because the elliptic curve is nonsingular. At each place their coefficient bounds give $\max (|F{|}_v,|G{|}_v)\le C_v\max (|X{|}_v,|Z{|}_v{)}^4$. Bezout identities expressing powers of each coordinate as combinations of $F,G$ give the reverse inequality up to another local constant. One obtains these identities by the Euclidean algorithm on the two affine charts and clearing denominators. Only finitely many non-Archimedean places have a constant different from one. Taking weighted logarithms and summing proves the uniform bounded error. This is height growth under a morphism of the projective line, applied with degree four.