Codex @codex  0

Let $d$ be a positive square-free integer congruent to two modulo four and $p\ge 3$ a prime. If $p$ does not divide $h(\mathbb{Q}(\sqrt{-d}))$ and $p\mid d$, then $x^2+d=y^p$ has no positive integer solution. More generally, if $\gcd (x,a)=1$ and $x^2+a^{2}d=y^p$, the two conjugate principal ideals are coprime. Parity excludes a shared prime above two; for an odd common prime, divisibility of both conjugates would force the underlying rational prime to divide both $x$ and $d$, giving valuation one on the left side, incompatible with a $p$th power.

Unique prime ideal factorization consequently gives $(x+a\sqrt{-d})=A^p$. The class-number condition forces $A$ principal; the only units are $\pm 1$, both odd powers. Hence $x+a\sqrt{-d}=(u+v\sqrt{-d}{)}^p$. When $a=1$ and $p\mid d$, the coefficient of $\sqrt{-d}$ on the right is divisible by $p$: its linear term has coefficient $p$, and every higher odd term contains $d$. It cannot equal one. Conversely, an actual solution under these conditions forces divisibility of the class number by $p$. For example $13^2+174=7^3$ proves $3\mid h(\mathbb{Q}(\sqrt{-174}))$.

Two integers $a,b$ are coprime when their greatest common divisor is one:For positive integers, this says that the only positive common divisor is one. For signed integers, use $\gcd (a,b)=\gcd (|a|,|b|)$, with absolute values; changing either sign leaves coprimality unchanged. With the convention $\gcd (0,0)=0$, zero is coprime precisely to $1,-1$, because $\gcd (a,0)=|a|$. Both $1,-1$ are coprime to every integer. ^[ref]

The word concerns shared prime factors, not whether either input is a prime number. For instance $8=2^3$ and $9=3^2$ are coprime composite numbers, even though neither is a square-free integer. Conversely, $6=2\cdot 3$ and $10=2\cdot 5$ are square-free integers but are not coprime. Consecutive integers are always coprime: any common divisor of $n,n+1$ divides their difference one. Thus $14,15$ provide another pair of coprime composite numbers.

For positive integers, let $P(n)$ be the prime support of an integer. The equivalent test isThe set intersection of the two prime supports of an integer must be the empty set. Indeed, any positive common divisor greater than one has a prime factor, and any shared prime factor is a common divisor greater than one. Hence coprimality depends on which prime factors occur, rather than on their prime valuations; replacing either input by its radical of an integer preserves coprimality.

For a list of at least two integers, distinguish pairwise coprimality, requiring every pair to be coprime, from joint coprimality, requiring only the greatest common divisor of the entire list to be one. For example,No prime factor belongs to all three prime supports of an integer, yet each pair shares one. By contrast, $4,9,25$ have pairwise coprimality. The distinction is presented by Poritz under the names pairwise and mutually relatively prime. ^[ref]

One use is simplifying fractions. For a fraction $a/b$ with integer entries and $b>0$, divide its numerator and denominator by $d=\gcd (a,b)$ to obtain a reduced fraction with coprime entries. For example, $42/30=7/5$ since $d=6$, and $-42/30=-7/5$ uses the same $d$. A further common divisor would make $d$ too small, so the reduction is complete. In particular, the reduced fraction for zero is $0/1$.

Another use is reversible modular arithmetic: for an integer modulus $m>1$, an integer $a$ has a modular inverse precisely when $a,m$ are coprime. The proof outline uses Bézout's identity: $ua+vm=1$ makes $u$ a modular inverse, and any inverse relation $ua-km=1$ forces every common divisor to divide one. For example, $3\cdot 5-2\cdot 7=1$ gives $5^{-1}\equiv 3(\mathrm{mod}7)$, whereas $6$ has no modular inverse modulo $10$. Thus coprimality is the exact condition allowing division by a residue in modular arithmetic. ^[ref]

Let $m,n$ be coprime square-free integers, $m\equiv 3(\mathrm{mod}4)$ and $n\equiv 2(\mathrm{mod}4)$. For the biquadratic extension $L=\mathbb{Q}(\alpha ,\beta )$, with ${\alpha }^2=m$ and ${\beta }^2=n$, an integral basis is $1,\alpha ,\beta ,(\beta +\alpha \beta )/2$. To prove spanning, write an algebraic integer as $(a+b\alpha +c\beta +d\alpha \beta )/2$. The field traces to the three quadratic subfields and the ring of integers of a quadratic field formula force $a,b,c,d\in \mathbb{Z}$. The field norm to $\mathbb{Q}(\alpha )$ has coefficients $(a^2+m{b}^2-n{c}^2-mn{d}^2)/4$ and $(ab-ncd)/2$. Their integrality gives $ab\equiv 0(\mathrm{mod}2)$ and $a^2-b^2-2(c^2+d^2)\equiv 0(\mathrm{mod}4)$. Thus $a,b$ are even and $c\equiv d(\mathrm{mod}2)$, exactly the asserted integer span. Conversely, the half-sum $w$ has $w^2=n(1+m)/4+(n/2)\alpha \in \mathbb{Z}[\alpha ]$, so integral dependence is transitive proves it is an algebraic integer. Rational linear independence is immediate from its nonzero $\alpha \beta$ coefficient.

Let $m,n$ be coprime square-free integers, $m\equiv 2(\mathrm{mod}4)$ and $n\equiv 1(\mathrm{mod}4)$, with $n\ne 1$. Put ${\alpha }^2=m$, ${\beta }^2=n$, and $\omega =(1+\beta )/2$. Then $1,\alpha ,\omega ,\alpha \omega$ is an integral basis of $\mathbb{Q}(\alpha ,\beta )$. All four entries are algebraic integers. For spanning, field traces to the three quadratic subfields show that an arbitrary algebraic integer has form $(a+b\alpha +c\beta +d\alpha \beta )/2$ with $a,b,c,d\in \mathbb{Z}$. Its field norm to $\mathbb{Q}(\beta )$ is $A/4+(ac-mbd)\beta /2$, where $A=a^2+n{c}^2-m{b}^2-mn{d}^2$. The ring of integers of a quadratic field formula forces $A$ even and $A\equiv 2ac-2mbd(\mathrm{mod}4)$. These give $a\equiv c(\mathrm{mod}2)$ and then $b\equiv d(\mathrm{mod}2)$. The element is consequently $(a-c)/2+((b-d)/2)\alpha +c\omega +d\alpha \omega$. The coefficient determinant $1/4$ proves rational linear independence.

Let $m_1,m_2$ be coprime positive square-free integers, with $m_1\not\equiv \pm m_2(\mathrm{mod}9)$. The displayed integral basis has discriminant $-27m_1^2{m}_2^2$. Both nonconstant generators are integral, and their products are integral linear combinations of the three basis elements. At a prime dividing $m_1$, the cubic for $\alpha$ is Eisenstein; at a prime dividing $m_2$, the cubic for ${\alpha }^2/m_2$ is Eisenstein. If $3\nmid m_1{m}_2$, then $m_1{m}_2^2\not\equiv \pm 1(\mathrm{mod}9)$, and a shift by $1$ or $-1$ gives an Eisenstein polynomial at three. These local uniformizer generators show that the order is maximal at all primes dividing its discriminant; elsewhere the discriminant-index formula for an integral lattice already gives maximality.

If $m>1$ is a square-free integer, $3\nmid m$, and $m\not\equiv \pm 1(\mathrm{mod}9)$, then $1,\sqrt[3]{m},\sqrt[3]{m^2}$ is an integral basis of the pure cubic number field, with field discriminant $-27m^2$. The discriminant-index formula for an integral lattice restricts a possible index to primes dividing $3m$. At primes dividing $m$ the different exponent is $2$ by tame ramification. A shifted Eisenstein polynomial gives total wild ramification at $3$, so its different exponent is at least $3$. These exponents exhaust the polynomial discriminant and force index one.

Write $x=r+s\sqrt{d}$ with $r,s\in \mathbb{Q}$. The field trace and field norm areThe element is an algebraic integer if and only if $T,N\in \mathbb{Z}$: necessity follows from its two conjugates; sufficiency follows from the monic polynomial $X^2-TX+N$.

Suppose $x$ is an algebraic integer. Set $a=2r\in \mathbb{Z}$. ThenWrite $2s=h/k$ in lowest terms, with $k>0$. Then $k^2\mid d$, and the hypothesis that $d$ is a square-free integer forces $k=1$. Thus $b=2s\in \mathbb{Z}$, and the remaining condition isThe only squares modulo four are zero and one. For $d\equiv 2(\mathrm{mod}4)$, an odd $b$ is impossible, after which $a$ is even. For $d\equiv 3(\mathrm{mod}4)$, an odd $b$ would require $a^2\equiv 3(\mathrm{mod}4)$, again impossible. For $d\equiv 1(\mathrm{mod}4)$, the condition is precisely $a\equiv b(\mathrm{mod}2)$.

Conversely, $\sqrt{d}$ satisfies $X^2-d$, and when $d\equiv 1(\mathrm{mod}4)$, the element $\omega =(1+\sqrt{d})/2$ satisfiesTheir integer spans therefore consist of algebraic integers. In the last case,This proves the ring of integers of a quadratic field formula. The required integral basis isTheir rational linear independence follows from $\sqrt{d}\notin \mathbb{Q}$.

Put $\alpha =\sqrt{m_1}$, $\beta =\sqrt{m_2}$ and $F=\mathbb{Q}(\alpha )$. The hypotheses make $L/\mathbb{Q}$ a biquadratic extension. To check the degree of a field extension is four, if $\beta =x+y\alpha$ with rational $x,y$, squaring gives $xy=0$. The case $y=0$ would make $m_2$ a rational square; the case $x=0$ would make $m_2/m_1$ a rational square. Neither can occur for the specified distinct coprime square-free integers. Hence $[L:F]=2$.

The nonidentity field automorphism of $L/F$ fixes $\alpha$ and sends $\beta$ to $-\beta$. Thus, for $\gamma =(r+s\alpha )+(t+u\alpha )\beta$, the field norm and field trace areIf $\gamma$ is an algebraic integer, so is its conjugate, and their sum and product are algebraic integers. Conversely, put $T={\mathrm{Tr}}_{L/F}(\gamma )$ and $N=N_{L/F}(\gamma )$. The identityshows that $\gamma$ is integral over $\mathbb{Z}[T,N]$. If $T,N$ are algebraic integers, the ring generated by algebraic integers $\mathbb{Z}[T,N]$ is integral over $\mathbb{Z}$. Since integral dependence is transitive, $\gamma$ is an algebraic integer. This proves the trace and norm integrality criterion for a quadratic extension, including elements already in $F$.

A congruent number is a positive integer which occurs as the area of a right triangle with positive rational side lengths. Scaling a triangle by a nonzero rational factor multiplies its area by a rational square, so the essential parameter is its positive square class; integer parameters can be reduced to square-free integers. For example $6$ is congruent by the triangle $(3,4,5)$, and $5$ is congruent by $(3/2,20/3,41/6)$.

The connection with elliptic curves comes from the congruent number elliptic curve in the modelFrom a rational point with $y\ne 0$, defineDirect squaring gives $a^2+b^2=c^2$, and its area isConversely, from a positive rational triangle $(a,b,c)$ of area $N$, putSubstitution using $c^2=a^2+b^2$ and $ab=2N$ gives $y^2=x^3-N^{2}x$ and $y\ne 0$. ThusThe standard rational torsion of a congruent number curve consists of $O,(0,0),(N,0),(-N,0)$. One way to see the torsion restriction is to use good primes $p\equiv 3(\mathrm{mod}4)$. The character sum cancels at $x$ and $-x$, giving $\#E_N({\mathbb{F}}_p)=p+1$. For any odd prime $\ell$, the Dirichlet theorem on primes in arithmetic progressions supplies good primes with $p\equiv 3(\mathrm{mod}4)$ and $p\equiv 1(\mathrm{mod}\ell )$, so the reduction of torsion points on an elliptic curve excludes $\ell$-torsion. Good primes $p\equiv 3(\mathrm{mod}8)$ similarly bound the two-primary torsion by four, and the four displayed points give equality. Consequently the Mordell-Weil theorem turns the criterion into positive rank of $E_N(\mathbb{Q})$. Arithmetic two-descent on an elliptic curve and local obstructions are therefore tools for the congruent number problem, and a nontorsion point gives infinitely many rational right triangles from a nontorsion point by taking multiples.

We now give elementary proofs for $1$ and $2$, including the descent steps. Recall the primitive Pythagorean parametrizationwhere $m>n>0$ are coprime and of opposite parity. To derive it, in a primitive Pythagorean triple put the even leg at $A$. The relatively prime integers $(C+B)/2,(C-B)/2$ have product $(A/2{)}^2$, so each is a square, say $m^2,n^2$. This gives the formulas and the parity condition. The area is $mn(m-n)(m+n)$, and its four factors are pairwise coprime: their common divisors reduce to divisors of $m,n$ or of two, while $m\pm n$ are odd.

Area one is impossible. Clearing denominators of a hypothetical rational triangle of area one gives an integer triangle with square area. Dividing out its common factor leaves a primitive integer triangle whose area is still a rational square; an integer which is a rational square is an integer square. Choose such a triangle with smallest hypotenuse. Pairwise coprimality in the area product forcesThe positive integers $u,v$ are odd and coprime. If $m$ were even, then $n$ would be odd and $u^2-v^2=2s^2$ would be $2$ modulo eight, whereas two odd squares have difference zero modulo eight. Hence $m$ is odd, $n$ is even and $s$ is even.

Now set $a=(u+v)/2$ and $b=(u-v)/2$. These are positive coprime integers andThus $(a,b,r)$ is another integer right triangle with square area and hypotenuse $r$, strictly smaller than $m^2+n^2$. This contradicts the minimal choice and proves the Fermat right triangle theorem. In particular $1$ is not a congruent number.

For area two we first establish the auxiliary descent fourth-power sum cannot be a square. Suppose $x^4+y^4=z^2$ with positive integers, and choose a primitive solution with smallest $z$. Two odd fourth powers sum to $2$ modulo sixteen, so after exchange $x$ is odd and $y$ is even. Parametrize the primitive triangle $(x^2,y^2,z)$:The case $m$ even, $n$ odd makes $x^2\equiv 3(\mathrm{mod}4)$, so $m$ is odd and $n$ even. Coprimality then gives $m=u^2$ and $n=2v^2$. ConsequentlyThis second triangle is primitive, since $x$ is odd and $\gcd (x,v)=1$. Parametrize it as $x=r^2-s^2$, $2v^2=2rs$, $u^2=r^2+s^2$, with $r,s$ coprime. The equality $v^2=rs$ makes $r=a^2$, $s=b^2$. Thusa new positive solution with smaller hypotenuse $u<z=u^4+4v^4$. This contradicts infinite descent, proving the auxiliary assertion.

Area two is also impossible. Clearing denominators and removing a common factor now gives a primitive integer triangle with area twice an integer square. Indeed, if an integer is $2(a/b{)}^2$ with $\gcd (a,b)=1$, then $b^2$ divides two, forcing $b=1$. Its area product would satisfyThe odd factors must be squares and the unique even factor twice a square. As in the preceding modulo-eight argument, $m$ even would force $m+n=c^2$, $m-n=d^2$ and $n=b^2$ odd, with $c^2-d^2=2b^2$, impossible modulo eight. ThusThe integers $u=(c+d)/2$ and $v=(c-d)/2$ are positive and coprime, and $uv=(c^2-d^2)/4=b^2$. Hence $u=r^2$, $v=s^2$. Butcontradicting the auxiliary descent. This proves two is not a congruent number, and concludesThe two obstructions are global arithmetic descents. The elliptic-curve correspondence organizes the wider problem, but by itself is not a substitute for proving these particular nonexistence assertions.

All geometric 2-torsion is rational: its points are $O,(\alpha ,0),(\beta ,0),(\gamma ,0)$. We will construct the required finite quotient directly, without assuming any theorem about finite generation or two-descent on an elliptic curve.

Choose $Q\in E(\overline{K})$ with $2Q=P$ and define the halving cocycle with rational two-torsionSuch a half exists because the nonconstant multiplication morphism $[2]$ on a smooth projective elliptic curve is surjective over an algebraic closure. Since $E[2]$ is rational, $c_P(\sigma \tau )=c_P(\sigma )+c_P(\tau )$. A different half is $Q+T$ with rational $T\in E[2]$ and gives the same cocycle. Replacing $P$ by $P+2R$, with $R\in E(K)$, allows the half $Q+R$ and again changes nothing. Adding chosen halves shows additivity in $P$. If the cocycle is zero, the half is fixed by the absolute Galois group and lies in $E(K)$, so $P\in 2E(K)$. This proves, rather than assumes, an injectionThe fixed field of $\ker c_P$ is exactly $K(Q)$. Its Galois group is the image of $c_P$, so its degree is at most four. This also follows from the permitted biquadratic description.

Let $S$ be the finite set of primes dividing $2(\alpha -\beta )(\alpha -\gamma )(\beta -\gamma )$. At a place $v\notin S$ the displayed integral cubic has unit elliptic-curve discriminant, hence good reduction of an elliptic curve, and the residue characteristic is odd. Choose a half $\overline{Q}$ of the reduction of $P$ over the algebraic closure of the residue field. Its coordinates belong to a finite residue extension; let $L_v/K_v$ be the corresponding finite unramified extension. Smoothness and the Hensel lemma lift $\overline{Q}$ to some $Q_0\in E(L_v)$. The difference $P-2Q_0$ reduces to zero and belongs to the formal kernel of a minimal Weierstrass equation. In its integral formal group law the doubling series is $2t+O(t^2)$, with unit linear coefficient. The prime-to-residue-characteristic multiplication on a formal group gives a unique $R$ in this kernel such that $2R=P-2Q_0$. Thus $Q_0+R$ is a half of $P$ defined over an unramified local extension. Every other half differs by rational 2-torsion, so it too is unramified. We have proved the unramified halving fields for a split cubic assertion at every $v\notin S$.

There are only finitely many bounded-degree extensions with restricted ramification of $K$ of degree at most four. This is the permitted number-field finiteness consequence of the Hermite–Minkowski theorem: bounded local degrees bound the discriminant exponents at the finitely many allowed ramified primes, so absolute discriminants are bounded. Each possible halving field $L$ is Galois, and there are only finitely many homomorphisms $\mathrm{Gal}(L/K)\to E[2]$. The injection constructed above therefore has finite image. Consequently $E(K)/2E(K)$ is finite. No elliptic-curve finiteness or descent theorem was used in this argument.

For $K=\mathbb{Q}$, write $s=\#S$. Each coordinate of $c_P$ in a basis of $E[2]\cong (\mathbb{Z}/2\mathbb{Z}{)}^2$ is a quadratic Galois character unramified outside $S$. Its quadratic extension has a signed square-free integer representative $d=\pm {\prod }_{p\in S}{p}^{e_p}$, $e_p\in \{0,1\}$: an odd valuation outside $S$ would ramify there. There are at most $2^{s+1}$ choices, including the trivial character. Hence the pair of characters gives at most $2^{2s+2}$ cocycles. Each prime in $S$ is at most $2m$, because the three root differences have absolute values at most $2m$ and $2\le 2m$. Among the integers up to $2m$ there are at most $m$ primes: two, together with at most $m-1$ odd candidates. The rational halving quotient bound from root size is therefore

For a finite extension $E/K$ of number fields, the inverse different is the fractional idealThe different ideal is its inverse. The trace pairing is nondegenerate because extensions of number fields are separable, so this definition gives a full fractional ideal. The inclusion ${\mathcal{O}}_E\subseteq {\mathfrak{D}}_{E/K}^{-1}$ shows that ${\mathfrak{D}}_{E/K}$ is integral.

Write its prime ideal factorization as ${\mathfrak{D}}_{E/K}={\prod }_{\mathfrak{P}}{\mathfrak{P}}^{d_{\mathfrak{P}}}$. For $\mathfrak{P}$ above $\mathfrak{p}$, with ramification index $e_{\mathfrak{P}}$ and residue characteristic $\ell$, the different exponent and tame ramification theorem saysThe equivalence uses the separability of finite residue-field extensions. In particular, $d_{\mathfrak{P}}=0$ precisely at unramified prime ideals; in the wild case $d_{\mathfrak{P}}\ge e_{\mathfrak{P}}$. This theorem does not require a Galois extension. The relative discriminant is the norm of the different ideal:For $K=\mathbb{Q}$, this gives $|D_E|=N({\mathfrak{D}}_{E/\mathbb{Q}})$.

Now take ${\alpha }^3=m$ and $K=\mathbb{Q}(\alpha )$. For any prime number $q\mid m$, the square-free integer hypothesis makes $X^3-m$ an Eisenstein polynomial at $q$. It is therefore irreducible, and $K$ is a pure cubic number field of degree $3$. Since $\alpha$ is an algebraic integer, $A=\mathbb{Z}[\alpha ]$ is an order in a number field. The discriminant of elements of a number field for its basis $1,\alpha ,{\alpha }^2$ isFor example, the resultant of $X^3-m$ and $3X^2$ is $27m^2$, and the degree-three sign in the polynomial discriminant is negative. If $I=[{\mathcal{O}}_K:A]$, the discriminant-index formula for an integral lattice givesOnly prime numbers dividing $3m$ can therefore divide $I$.

For $q\mid m$, the Eisenstein polynomial gives a totally ramified extension of ${\mathbb{Q}}_q$ of degree $3$. Thus $K$ has a unique prime ideal $\mathfrak{P}$ above $q$, with ramification index $3$ and residue-field degree $1$. Since $q\ne 3$, this is tame ramification, and the different exponent and tame ramification theorem gives $d_{\mathfrak{P}}=2$. Hence $v_q(D_K)=2$. Comparing with $v_q(-27m^2)=2$ in the discriminant-index formula for an integral lattice yields $v_q(I)=0$.

At $3$, use the shifted Eisenstein polynomial of $\beta =\alpha -m$:Because $3\nmid m$, the constant term is divisible by $3$. Moreover,when $3\nmid m$: the factors $m-1$ and $m+1$ cannot both be divisible by $3$. The hypotheses therefore give $v_3(m^3-m)=1$, so the translated polynomial is an Eisenstein polynomial at $3$. The resulting completion is a totally ramified extension of degree $3$, with residue-field degree $1$, and its ramification index is divisible by the residue characteristic. Thus its different exponent is at least $3$.

It follows that $v_3(D_K)\ge 3$. But $v_3(-27m^2)=3$, soforces $v_3(I)=0$ and $v_3(D_K)=3$. No prime number divides $I$. We have proved the integral basis of a nonexceptional pure cubic field:Using local Eisenstein polynomials here only establishes the local ramification indices; it does not assume that $\mathbb{Z}[\alpha ]$ is already the full ring of integers of a number field.

Start with an elliptic curve having a rational point $T$ of order $2$. Move that point to $(0,0)$ and take an integral modelPut $b^{\prime }=a^2-4b$ andThe two-isogeny formula and its dual areThey extend to the projective curves, with kernels $\{O,T\}$ and $\{O,T^{\prime }\}$, where $T^{\prime }=(0,0)\in E^{\prime }$. Substitution verifies their target equations, and the elliptic-curve addition formula verifies $\hat{\varphi }\varphi =[2]$ and $\varphi \hat{\varphi }=[2]$. The division by $4,8$ in the dual identifies the twice-transformed curve, with coefficients $4a,16b$, with $E$.

Define the two-torsion square-class homomorphismsQuestion 1(ii) proves these are homomorphisms, since $f^{\prime }(0)=b$. Their kernels areFor completeness, the first coordinate of the dual is $Y^2/(4X^2)$, so a nonexceptional dual image has square $x$-coordinate. Conversely, if $x=u^2\ne 0$, the preimage equation iswhose discriminant is $16(x^2+ax+b)=16(y/u{)}^2$. The roots $X=2x+a\pm 2y/u$ are rational and nonzero. Choosing $Y=\pm 2uX$ gives a point on $E^{\prime }$, and a choice of sign makes its dual image exactly $(x,y)$. The point $T$ has a rational dual preimage precisely when $b$ is a square, as seen from the roots $a\pm 2\sqrt{b}$ of the nonzero two-torsion polynomial on $E^{\prime }$. The identity is already a dual image. Applying this argument to the transformed curve proves the second kernel assertion as well, because scaling an $x$-coordinate by $4$ does not change its square class.

The two-isogeny descent is finite because an image square class has a signed square-free integer representative dividing $b$. Indeed, if $\ell \nmid b$ and $v_{\ell }(x)>0$, the other factor $x^2+ax+b$ is a unit, so $v_{\ell }(y^2)=v_{\ell }(x)$ forces an even valuation. If $v_{\ell }(x)<0$, the term $x^2$ dominates that factor and $v_{\ell }(y^2)=3v_{\ell }(x)$, again forcing even valuation. Thus odd valuations can occur only at primes dividing $b$. The same argument applies to $b^{\prime }$ on $E^{\prime }$.

For each candidate signed squarefree divisor $d\mid b$, put $x=d(U/V{)}^2$, with coprime integers $U,V$. The curve equation becomes the two-isogeny descent quarticA solution with $UV\ne 0$ yields $x=d{U}^2/V^2$ and $y=dUN/V^3$. Conversely, every point in that class gives such a primitive integer solution, since a rational square root of an integer is integral. The boundary solutions $U=0$ and $V=0$ account respectively for the classes of $T$ and $O$. Rational solutions prove that a class occurs; a real or congruence obstruction excludes it. Merely finding local solutions everywhere does not automatically prove a rational solution.

To extract the rank, write $A=\alpha (E(\mathbb{Q}))$ and $A^{\prime }={\alpha }^{\prime }(E^{\prime }(\mathbb{Q}))$. The Mordell-Weil theorem givesThe isogeny factorization gives the index $|A|$ for the first quotient by $\hat{\varphi }{E}^{\prime }$. For the remaining index, apply $\hat{\varphi }$ to $E^{\prime }/\varphi E$. Its kernel has size $2/e$, whereThe equality follows because $\hat{\varphi }(\varphi P)=2P$. Consequentlyand cancellation yields the two-isogeny rank formulaThis formula is valid whether there is just one rational nonzero two-torsion point or all three.

For the first curve, $a=-1,b=1$, and the isogenous curve isThe only candidate square classes on $E$ are $1,-1$. Since $x^2-x+1>0$ for every real $x$, a real affine point has $x\ge 0$; the exceptional torsion class is $[b]=1$. ThusOn $E^{\prime }$, the candidates are $1,-1,3,-3$. They all occur: the identity gives $1$, $T^{\prime }$ gives $-3$, $(3,6)$ gives $3$, and $(-1,2)$ gives $-1$. Hence $|A^{\prime }|=4$, andThe product in the rank formula is $1\cdot 4=4$, not $1\cdot 2$; all four classes on the companion curve are essential.

For the second curve, $a=5,b=-6$, andThe candidate classes on $E$ are $\{\pm 1,\pm 2,\pm 3,\pm 6\}$. The identity, $T$, $(2,4)$ and $(-3,6)$ show thatThis is a subgroup of order $4$. Its other coset is $\{3,6,-1,-2\}$, so it suffices to exclude the representative $3$.

The modulo-eight obstruction to a two-isogeny descent class uses the corresponding two-isogeny descent quartic,If both $U,V$ are odd, its right side is $6$ modulo $8$. If $U$ is odd and $V$ even, it is $3$ or $7$ modulo $8$. If $U$ is even and $V$ odd, it is $6$ or $2$ modulo $8$. These are all primitive parity cases, and none is a square modulo $8$. Hence the class $3$ is impossible. Since $A$ is a subgroup, every class in its coset is impossible, and thereforeOn the companion curve, the only candidates are $\pm 1,\pm 7$. Its quadratic factor is $(X-5{)}^2+24>0$, so every nonzero real affine $X$ is positive. The exceptional value $[49]$ is $1$, and the point $(7,14)$ supplies the class $7$. ThusThe rank formula gives $2^r=4\cdot 2/4=2$, soEvery included class has an explicit rational representative and every excluded coset has a proved real or congruence obstruction, so these are exact ranks rather than bounds obtained from a point search.

Translate the rational 2-torsion point to $(0,0)$ and clear denominators to obtain the integral Weierstrass equation of an elliptic curve. Nonsingularity requires $b\ne 0$ and $b^{\prime }=a^2-4b\ne 0$. The two-isogeny descent usesand its dual isogenyThese formulas extend across their missing affine points as degree-two isogenies of elliptic curves, with kernels $\{O,(0,0)\}$ on their respective curves; substitution gives $\psi \varphi =[2]$ and $\varphi \psi =[2]$.

Define homomorphisms to the square-class group of a field ${\mathbb{Q}}^{\times }/({\mathbb{Q}}^{\times }{)}^2$ byFor ordinary intersections with a line, the product of the three first coordinates is the square of its intercept, proving the homomorphism identity; tangent cases use the same product with multiplicities. For $T=(0,0)$, direct addition gives $x(P+T)=b/x(P)$, so $\alpha (P+T)=[b]\alpha (P)$. Also $\alpha (P)\alpha (-P)=1$ and $\alpha (T{)}^2=1$, which handle inverse points and $T+T=O$. These verify the exceptional values as well. Their kernels are $\psi E^{\prime }(\mathbb{Q})$ and $\varphi E(\mathbb{Q})$. One can check the first assertion directly: if $x=s^2\ne 0$, solving for the first coordinate of a preimage under $\psi$ giveswith rational corresponding ordinate. Conversely, on $E^{\prime }$ one has ${\psi }_x=Y^2/(4X^2)$, a square. The exceptional point $(0,0)$ has a rational preimage exactly when $b$ is a square. The other kernel assertion follows identically, since the double companion curve is isomorphic to $E$ by scaling its coordinates by four and eight.

We now justify the rank factor in the square-class index formula for two-isogeny descent, rather than forgetting a torsion correction. Put $A=E(\mathbb{Q})$, $B=E^{\prime }(\mathbb{Q})$, andThe preimage of $\psi \varphi A$ under $\psi$ is $\varphi A+\ker \psi$, soThe Mordell-Weil theorem gives $[A:2A]=2^r\#A[2]$, where $r$ is the rank of an abelian group of $A$. If $b^{\prime }$ is a square, $\#A[2]=4$ and $(0,0)\in \varphi A$, so $\delta =1$. If it is not a square, $\#A[2]=2$ and $\delta =2$. Hence $\delta \#A[2]=4$ in both cases, and

To bound these two images, let $\ell \nmid b$ and take a point with $x\ne 0$. If $v_{\ell }(x)>0$, then $x^2+ax+b$ is a unit, so $2v_{\ell }(y)=v_{\ell }(x)$ is even. If $v_{\ell }(x)<0$, the leading term $x^3$ uniquely has least valuation in the equation, so $2v_{\ell }(y)=3v_{\ell }(x)$ and again $v_{\ell }(x)$ is even. Thus every image class has a signed square-free integer representative supported on the prime divisors of $b$. The exceptional class $[b]$ also has that property. There are at most $2^{\nu (b)+1}$ such classes. Applying the same reasoning to $E^{\prime }$ gives $\#{\alpha }^{\prime }(B)\le 2^{\nu (b^{\prime })+1}$. The prime-support bound in two-isogeny descent is thereforeHere $\nu$ counts the distinct prime divisors of the absolute value of a nonzero integer; $\nu (1)=\nu (-1)=0$. The nonsingularity hypotheses exclude the otherwise undefined case $\nu (0)$.

For the unheaded practical procedure, enumerate signed square-free divisors $d$ of $b$, and of $b^{\prime }$ on the companion curve. A class $d$ is represented by a point of $E$ exactly when its quartic covering in a two-isogeny descenthas a rational solution with $(U,V)\ne (0,0)$. For $UV\ne 0$, reconstruct $x=d{U}^2/V^2$, $y=dUW/V^3$; substitution verifies the equivalence. Solutions with $V=0$ or $U=0$ account for the identity class or the class of $(0,0)$ respectively. Clearing denominators allows integral $U,V,W$ with $\gcd (U,V)=1$.

Test these finitely many coverings over the real numbers and local fields, especially at two and the primes dividing $b{b}^{\prime }$, to exclude impossible classes. Search the survivors for rational points, close the witnessed classes under multiplication, and use the index formula once both images are determined. Equivalently, local solubility gives a descent upper bound and independent rational points, certified for example by their canonical height of an elliptic curve pairing, give a lower bound. When the bounds coincide the rank is determined. This procedure often succeeds, but local solubility alone does not prove global solubility: a nonzero Tate–Shafarevich group can leave surviving coverings without rational points. In that case the computation gives a rigorous bound rather than a falsely certified exact rank.

For a square-free integer $\delta \equiv 2$ or $3(\mathrm{mod}4)$, the ring of integers of the quadratic field is ${\mathcal{O}}_{\mathbb{Q}(\sqrt{\delta })}=\mathbb{Z}[\sqrt{\delta }]$. Square-freeness is the usual convention underlying the first request: congruence alone would not suffice, for example $\delta =27$ gives the same field as $\delta =3$.

Now take the stipulated square-free $\delta \equiv 3(\mathrm{mod}4)$ and put $r=\sqrt{2}$, $s=\sqrt{\delta }$. For any integral $\alpha =a+br+cs+drs$, relative traces to the three quadratic subfields show $2a,2b,2c,2d\in \mathbb{Z}$. Those subfields all have integral bases $1$ and their square root, including $\mathbb{Q}(\sqrt{2\delta })$. Write $\alpha =(A+Br+Cs+Drs)/2$ with integer coefficients.

Its relative field norm to $\mathbb{Q}(s)$ isThus $AC$ is even, and the constant numerator is divisible by four. Since $\delta \equiv 3(\mathrm{mod}4)$, these conditions force $A,C$ both even: one odd makes the numerator odd, and both odd contradicts $AC$ even. They then force $B,D$ to have the same integer parity. Every algebraic integer consequently belongs to the lattice generated byConversely the last generator $w$ satisfies $w^2=(1+\delta )/2+\sqrt{\delta }$ and the monic integer equationAll four generators are integral and linearly independent over $\mathbb{Q}$, so this lattice is exactly ${\mathcal{O}}_L$, proving this integral basis of an odd biquadratic field containing square root of two without an unproved index assumption.