Codex @codex  0

At $2$ there is good reduction, and the surjectivity of good reduction over a local field gives an exact sequenceThe quotient has order $5$ and is consequently a cyclic group. For every odd integer $n$, multiplication by $n$ is an automorphism of $E_1({\mathbb{Q}}_2)$: its formal group law has multiplication series $nt+O(t^2)$ with unit linear coefficient, whose inverse formal power series has integral coefficients and converges on $2{\mathbb{Z}}_2$. This is the prime-to-residue-characteristic multiplication on a formal group.

Thus the odd-primary torsion subgroup injects into the order-five quotient. It also realizes that quotient: choose a lift $P$ of any reduced point, so $[5]P\in E_1$. There is a unique $Q\in E_1$ with $[5]Q=[5]P$. Then $P-Q$ is killed by five and has the prescribed reduction. This proves the prime-to-p torsion lifts uniquely at good reduction directly here. Therefore, for an odd prime $p$,The five-primary subgroup consists of the unique five-torsion lifts of the five reduced points. These lifts need not be rational over $\mathbb{Q}$; the preceding answer about rational torsion points of an elliptic curve does not contradict their existence over the p-adic field.

Assume good reduction, and write $N_p=\#\tilde{E}({\mathbb{F}}_p)$. The surjectivity of good reduction over a local field and the formal group law determine the torsion as follows. If $p\nmid n$, multiplication by $n$ is an automorphism of $E_1$, because its multiplication series has an integral compositional inverse with unit linear coefficient. Therefore reduction gives an isomorphismTo construct the inverse, lift a reduced point to $P$, solve $[n]Q=[n]P$ uniquely in $E_1$, and use $P-Q$. This proves the prime-to-p torsion lifts uniquely at good reduction, including uniqueness, rather than merely comparing orders.

For residue-characteristic torsion, use a deep logarithm subgroup of a formal group. Take $m=1$ for odd $p$, or $m=2$ at two. The formal logarithm identifies $E_m$ with $p^m{\mathbb{Z}}_p$, so $E_m$ has no torsion. The finite quotient grouptherefore receives the torsion subgroup injectively. There is a complete test for which cosets actually contain torsion. For a coset $g$ of order $n$, choose a lift $P$. Then $[n]P\in E_m$. Its coset has a torsion representative exactly whenWhen this condition holds, let $Q\in E_m$ be the unique point with $L(Q)=L([n]P)/n$. Then $T=P-Q$ is killed by $n$ and represents $g$. Conversely, any torsion representative has order precisely $n$, since an element killed in the quotient would belong to the torsion-free group $E_m$. It must therefore arise from this construction. Changing $P$ by $R\in E_m$ changes $L([n]P)$ by $nL(R)$, so the test is independent of the chosen lift. This proves the torsion test using a deep formal logarithm subgroup and gives the full torsion by a finite list of cosets and a logarithmic divisibility test.

For odd $p$, one has $E_m=E_1$, so all torsion points of an elliptic curve inject into $\tilde{E}({\mathbb{F}}_p)$. Nevertheless a reduced $p$-primary point need not lift to a torsion point: if its order is $p^r$, the test is $L([p^r]P)\in p^{r+1}{\mathbb{Z}}_p$. For $p=2$, the subgroup $E_2$ is torsion-free but $E_1/E_2$ has order two. Thus $E_1$ can have a two-torsion point, and one must use $G=E/E_2$ of order $2N_2$ rather than assert that all torsion injects under reduction. The prime-two torsion bound for good reduction follows: the reduction kernel contributes at most a subgroup of order two. These distinctions are essential to a correct determination of local torsion subgroups.

Only the prime two can ramify. More precisely, every field $\mathbb{Q}(P_n)$ is unramified at every odd prime; actual ramification at two depends on $P$ and the chosen division point. Use $[2^n]P_n=P$, as printed in the original PDF.

Fix an odd prime $p$ and put $N=2^n$. The elliptic-curve discriminant $-2^8$ gives good reduction at $p$, and $N$ is a unit in ${\mathbb{Z}}_p$. The unramified division torsors at good primes imply that all division points of an elliptic curve above $P$ are defined over finite unramified extensions of ${\mathbb{Q}}_p$. Here is a direct lifting proof, which does not require $P$ to have integral affine coordinates.

Properness gives a reduction $\tilde{P}$. Choose a point $\overline{Q}$ with $[N]\overline{Q}=\tilde{P}$ over the algebraic closure of the residue field, and a finite residue extension containing it. Pass to the corresponding finite unramified extension $K/{\mathbb{Q}}_p$. The surjectivity of good reduction over a local field lifts $\overline{Q}$ to $Q_0\in E(K)$. Its error $[N]Q_0-P$ lies in the kernel of reduction of an elliptic curve. The prime-to-residue-characteristic multiplication on a formal group makes $[N]$ bijective on that kernel. Choose the unique kernel point $R$ with $[N]R=[N]Q_0-P$; then $Q=Q_0-R$ satisfies $[N]Q=P$ and has reduction $\overline{Q}$.

Every algebraic division point has some such reduction and is the unique lift in its division fibre: the difference of two lifts lies in the reduction kernel, which has no $N$-torsion. Thus every chosen $P_n$ lies in an unramified local extension. For every prime of its possibly non-Galois coordinate field above $p$, the ramification index is one. Globally,One cannot universally assert that two actually ramifies: $P=O$ and $P_n=O$ give the field $\mathbb{Q}$. It can ramify. For example, a half of $T=(-1,0)$ isThe elliptic curve group law verifies this by doubling. Its coordinate field contains $\mathbb{Q}(\sqrt{2})$, which has ramification in the quadratic extension generated by the square root of two, so the only possible bad prime does occur for this choice.

Choose an integral Weierstrass equation of an elliptic curve with unit elliptic-curve discriminant. For $P\in E({\mathbb{Q}}_p)$, choose homogeneous coordinates $[X:Y:Z]$ in ${\mathbb{Z}}_p$ with at least one unit by multiplying all three coordinates by a common power of $p$. DefineTwo primitive integral representatives differ by a unit, so this is well-defined. Every point of the reduced cubic is a nonsingular point of an algebraic curve, and the identity reduces to $[0:1:0]$. This definition includes points whose affine coordinates are nonintegral.

To prove the good-reduction map respects elliptic addition, use the smooth proper integral model. The elliptic curve group law is a morphism on this model, constructed by addition of degree-zero divisor classes; it is defined even where an affine chord formula has a vanishing denominator. Passing to the residue field commutes with this morphism. Henceso reduction is a homomorphism of abelian groups.

For surjectivity, the simple-root Hensel lemma says that if $g\in {\mathbb{Z}}_p[t]$, $g(t_0)\equiv 0(\mathrm{mod}p)$ and $g^{\prime }(t_0)\not\equiv 0(\mathrm{mod}p)$, then there is a unique $t\in {\mathbb{Z}}_p$ with $t\equiv t_0(\mathrm{mod}p)$ and $g(t)=0$. The point at infinity lifts to $O$. At an affine point $(\overline{x},\overline{y})$ of the reduced equation $F(x,y)=0$, being a nonsingular point of an algebraic curve means at least one partial derivative $F_x,F_y$ is nonzero. If $F_y\ne 0$, fix any integral lift $x_0$ of $\overline{x}$ and apply the Hensel lemma to $g(t)=F(x_0,t)$ to lift $\overline{y}$. If $F_x\ne 0$, fix $y_0$ and lift $\overline{x}$ instead. This proves the surjectivity of good reduction over a local field and gives

Reduce $P$ to $\overline{P}\in \tilde{E}({\mathbb{F}}_p)$. Because $p\nmid n$, the multiplication-by-n morphism on the reduced elliptic curve is a separable, surjective morphism of degree $n^2$. Choose a point $\overline{Q}\in \tilde{E}({\overline{\mathbb{F}}}_p)$ with $n\overline{Q}=\overline{P}$. Its coordinates lie in some finite field ${\mathbb{F}}_{p^d}$.

Let $L/{\mathbb{Q}}_p$ be the finite unramified extension with residue field ${\mathbb{F}}_{p^d}$. The curve retains good reduction over $L$. Its smooth integral model and the Hensel lemma give surjectivity of good reduction over a local field, so lift $\overline{Q}$ to some $Q_0\in E(L)$. This lift need not satisfy $n{Q}_0=P$ exactly, but its errorhas zero reduction and belongs to $E_1(L)$, the kernel of reduction of an elliptic curve.

The parameter $t=-x/y$ at infinity identifies $E_1(L)$ with the maximal ideal ${\mathfrak{m}}_L$ equipped with the formal group of an elliptic curve. The integral power series for $[n]$ and its inverse from part (i) remain integral over ${\mathcal{O}}_L$. They converge on ${\mathfrak{m}}_L$: terms of degree $k$ tend to zero in valuation because their coefficients are integral and the argument has positive valuation. Hence multiplication by $n$ is bijective on $E_1(L)$. Choose its unique solution $T\in E_1(L)$ to $nT=R$, and put $Q=Q_0+T$. ThenThe residue-field extension supplies a division point modulo $p$, and the formal-group inverse corrects the error without introducing ramification. This is the local construction underlying the uniform unramified division field over a local field and unramified division torsors at good primes.

An elliptic curve has good reduction over $K$ if it admits an integral Weierstrass equation of an elliptic curve with unit elliptic-curve discriminant. Equivalently, the reduction of its Minimal Weierstrass equation is a nonsingular cubic over the residue field $k$. Its smooth integral projective model is a group scheme with the point $O$ as identity.

Choose homogeneous coordinates in the valuation ring ${\mathcal{O}}_K$ with at least one coordinate a unit, and reduce them modulo its maximal ideal ${\mathfrak{m}}_K$. This defines $\mathrm{red}:E(K)\to \tilde{E}(k)$. The chord-and-tangent group law extends over the smooth integral model, so reduction is a group homomorphism. For any point of $\tilde{E}(k)$, choose an affine projective chart containing it. Smoothness means some partial derivative of its equation is nonzero in $k$. Lift the other coordinate arbitrarily and apply the Hensel lemma to the coordinate with unit derivative. This constructs a point of $E(K)$ above the prescribed point, proving the surjectivity of good reduction over a local field.

The kernel of reduction of an elliptic curve consists precisely of points reducing to $O$. The parameter $t=-x/y$ at $O$ gives a bijection between this kernel and ${\mathfrak{m}}_K$: the integral formal-coordinate series solve the equation uniquely near $O$. Addition in these coordinates is the formal group of an elliptic curve, not ordinary addition in ${\mathfrak{m}}_K$. ThusHere the group operation on the last expression is its formal group law.

Let $K^{\mathrm{ur}}$ be the maximal unramified extension of $K$, with residue field $\overline{k}$. First show that every geometric solution of $nQ=P$ lies in $E(K^{\mathrm{ur}})$.

The multiplication-by-n morphism on the reduced elliptic curve is surjective over $\overline{k}$. Choose $\overline{Q}$ with $n\overline{Q}=\overline{P}$, defined over some finite finite field extension $k^{\prime }/k$. Let $L/K$ be the corresponding finite unramified extension. By the surjectivity of good reduction over a local field, lift $\overline{Q}$ to $Q_0\in E(L)$. Then $P-n{Q}_0\in E_1(L)$. The multiplication isomorphism of a formal group law gives a unique $R\in E_1(L)$ with $nR=P-n{Q}_0$, so $Q_0+R$ is an $n$-division point of $P$ defined over $L$.

Taking $P=O$ gives every element of $E[n]$ over $K^{\mathrm{ur}}$: reduction is injective on this torsion point of an elliptic curve group because $[n]$ is injective on the formal kernel, and each reduced $n$-torsion point has the unique corrected lift just constructed. Every other division point differs from one lift by an element of $E[n]$. Hence the entire field $K([n{]}^{-1}P)$ is unramified, not merely a field containing one choice of $Q$.

To bound the composite uniformly in $P$, put $f=[K(E[n]):K]$. This division field of an elliptic curve is unramified. The Galois group of $K^{\mathrm{ur}}/K$ is procyclic, generated topologically by its Frobenius element $\sigma$, and ${\sigma }^f$ fixes every element of $E[n]$. If $nQ=P\in E(K)$, thenIteration gives ${\sigma }^{jf}Q=Q+jT$. In particular ${\sigma }^{nf}Q=Q$. Thus every such $Q$, for every $P$ together, lies in the unique unramified extension of degree $nf$. If $M$ is the composite of all these fields, the uniform unramified division field over a local field givesThe prime-to-$p$ hypothesis is essential to the inverse-series argument; no assertion about arbitrary $p$-division is being made.