Codex @codex  0

All geometric 2-torsion is rational: its points are $O,(\alpha ,0),(\beta ,0),(\gamma ,0)$. We will construct the required finite quotient directly, without assuming any theorem about finite generation or two-descent on an elliptic curve.

Choose $Q\in E(\overline{K})$ with $2Q=P$ and define the halving cocycle with rational two-torsionSuch a half exists because the nonconstant multiplication morphism $[2]$ on a smooth projective elliptic curve is surjective over an algebraic closure. Since $E[2]$ is rational, $c_P(\sigma \tau )=c_P(\sigma )+c_P(\tau )$. A different half is $Q+T$ with rational $T\in E[2]$ and gives the same cocycle. Replacing $P$ by $P+2R$, with $R\in E(K)$, allows the half $Q+R$ and again changes nothing. Adding chosen halves shows additivity in $P$. If the cocycle is zero, the half is fixed by the absolute Galois group and lies in $E(K)$, so $P\in 2E(K)$. This proves, rather than assumes, an injectionThe fixed field of $\ker c_P$ is exactly $K(Q)$. Its Galois group is the image of $c_P$, so its degree is at most four. This also follows from the permitted biquadratic description.

Let $S$ be the finite set of primes dividing $2(\alpha -\beta )(\alpha -\gamma )(\beta -\gamma )$. At a place $v\notin S$ the displayed integral cubic has unit elliptic-curve discriminant, hence good reduction of an elliptic curve, and the residue characteristic is odd. Choose a half $\overline{Q}$ of the reduction of $P$ over the algebraic closure of the residue field. Its coordinates belong to a finite residue extension; let $L_v/K_v$ be the corresponding finite unramified extension. Smoothness and the Hensel lemma lift $\overline{Q}$ to some $Q_0\in E(L_v)$. The difference $P-2Q_0$ reduces to zero and belongs to the formal kernel of a minimal Weierstrass equation. In its integral formal group law the doubling series is $2t+O(t^2)$, with unit linear coefficient. The prime-to-residue-characteristic multiplication on a formal group gives a unique $R$ in this kernel such that $2R=P-2Q_0$. Thus $Q_0+R$ is a half of $P$ defined over an unramified local extension. Every other half differs by rational 2-torsion, so it too is unramified. We have proved the unramified halving fields for a split cubic assertion at every $v\notin S$.

There are only finitely many bounded-degree extensions with restricted ramification of $K$ of degree at most four. This is the permitted number-field finiteness consequence of the Hermite–Minkowski theorem: bounded local degrees bound the discriminant exponents at the finitely many allowed ramified primes, so absolute discriminants are bounded. Each possible halving field $L$ is Galois, and there are only finitely many homomorphisms $\mathrm{Gal}(L/K)\to E[2]$. The injection constructed above therefore has finite image. Consequently $E(K)/2E(K)$ is finite. No elliptic-curve finiteness or descent theorem was used in this argument.

For $K=\mathbb{Q}$, write $s=\#S$. Each coordinate of $c_P$ in a basis of $E[2]\cong (\mathbb{Z}/2\mathbb{Z}{)}^2$ is a quadratic Galois character unramified outside $S$. Its quadratic extension has a signed square-free integer representative $d=\pm {\prod }_{p\in S}{p}^{e_p}$, $e_p\in \{0,1\}$: an odd valuation outside $S$ would ramify there. There are at most $2^{s+1}$ choices, including the trivial character. Hence the pair of characters gives at most $2^{2s+2}$ cocycles. Each prime in $S$ is at most $2m$, because the three root differences have absolute values at most $2m$ and $2\le 2m$. Among the integers up to $2m$ there are at most $m$ primes: two, together with at most $m-1$ odd candidates. The rational halving quotient bound from root size is therefore

We count extensions up to $K$-isomorphism. An extension of degree $n$ has a maximal unramified extension $E/K$ inside it, with $[E:K]=f\mid n$, and $L/E$ is totally ramified of degree $e=n/f$. The unramified extension of each degree is unique, so there are only finitely many possibilities for $E$.

Fix $E$ and $e$. The coefficient space of monic degree-$e$ Eisenstein polynomials is compact: its nonconstant nonleading coefficients lie in the compact maximal ideal, and its constant coefficient lies in the compact set ${\mathfrak{m}}_E\setminus {\mathfrak{m}}_E^2$. Each such polynomial $F$ has a root $\alpha$ generating a degree-$e$ extension. For sufficiently close coefficients of a polynomial $G$, the numbers $G(\alpha )$ and $G^{\prime }(\alpha )-F^{\prime }(\alpha )$ are arbitrarily small, while $F^{\prime }(\alpha )\ne 0$ because the characteristic is zero. The strong form of Hensel lemma, applied in $E(\alpha )$, supplies a root $\beta$ of $G$ as close to $\alpha$ as desired. Choose the neighborhood so that the Krasner's lemma inequality holds. Then $E(\alpha )\subseteq E(\beta )$, and both degrees are $e$, so the extensions are equal. Compactness gives a finite cover by such neighborhoods, proving finiteness of degree-$n$ extensions. If extensions are realized as subfields of a fixed algebraic closure rather than counted up to isomorphism, each has only finitely many embeddings, so that count is finite too.

For odd $p$, write $K^{\times }={\pi }^{\mathbb{Z}}{\mathcal{O}}_K^{\times }$. The square map is bijective on $1+{\mathfrak{m}}_K$ by Hensel lemma, and the finite residue field has cyclic multiplicative group of even order. ThusThe quadratic extensions from square classes correspond to its three nontrivial classes. Representatives are $u,\pi ,u\pi$, where $u$ is a unit with nonsquare residue. There are $\boxed{3}$ quadratic extensions: $K(\sqrt{u})$ is unramified, while $K(\sqrt{\pi })$ and $K(\sqrt{u\pi })$ are totally ramified. For completeness, two nonsquare parameters give the same extension only if their ratio is a square: writing $\sqrt{b}=x+y\sqrt{a}$ and squaring forces $x=0$, hence $b/a=y^2$.

Write $e=e(\mathfrak{q}/\mathfrak{p})$, $f=f(\mathfrak{q}/\mathfrak{p})$ and $g$ for the number of primes above $\mathfrak{p}$. The Galois group acts transitively on those primes, with stabilizer $D_{\mathfrak{q}}$. The fundamental identity for prime decomposition and the orbit-stabilizer theorem therefore giveIt remains to establish that the residue action has image of order $f$, rather than assume this in the desired equality.

Use the decomposition group of a prime and local Galois group identification $D_{\mathfrak{q}}=\mathrm{Gal}(F_{\mathfrak{q}}/K_{\mathfrak{p}})$. A generator of the finite field extension $k_{\mathfrak{q}}/k_{\mathfrak{p}}$ has a separable monic minimal polynomial of an algebraic element. Lift its coefficients to ${\mathcal{O}}_{K_{\mathfrak{p}}}$. The Hensel lemma lifts each of its distinct residue roots to $F_{\mathfrak{q}}$. One such lift has field degree at most $f$, while its residue generates the degree-$f$ finite field extension, so its field degree is exactly $f$ and its ramification index of a prime ideal is one. It therefore generates an unramified extension of degree $f$, and sending it to each of the other lifts gives its $f$ embeddings. Because $F_{\mathfrak{q}}/K_{\mathfrak{p}}$ is a Galois extension, these embeddings extend to its automorphisms. Their reductions realize every automorphism of $k_{\mathfrak{q}}/k_{\mathfrak{p}}$. Thus the residue action is surjective, and

Now let $G$ be cyclic of order ${\ell }^2$, and let $H=\mathrm{Gal}(F/L)$ be its unique subgroup of order $\ell$. In a tower of Galois extensions, inertia maps onto inertia in the intermediate extension. This also follows from the just-proved order formula: its image has order $e(F/K)/e(F/L)=e(L/K)$, using multiplicativity of the ramification index of a prime ideal in a tower. If $\mathfrak{p}$ ramifies in $L/K$, this image in $G/H$ is nontrivial. Every proper subgroup of $G$ is contained in $H$, so inertia upstairs must be $G$. HenceThe fundamental identity for prime decomposition then also forces a single prime above $\mathfrak{p}$ and residue-field degree one.

Normalize the discrete valuations so a uniformiser has value one, and write $k_K,k_L$ for the residue fields. The ramification index $e$ is specified by $v_L{|}_K=e{v}_K$, and the residue degree is $f=[k_L:k_K]$. For finite extensions of complete discretely valued fields, $[L:K]=ef$. One way to see the degree equality is that ${\mathcal{O}}_L$ is a finite free ${\mathcal{O}}_K$-module of rank $[L:K]$; reduction modulo a uniformiser of $K$ has $e$ successive quotients isomorphic to $k_L$, hence dimension $ef$ over $k_K$.

An unramified extension has $e=1$ and separable residue extension, equivalently $[L:K]=f$ with separable residue extension. A totally ramified extension has $f=1$, equivalently $[L:K]=e$. The separability condition in the unramified extension definition matters if the residue field is imperfect; it is automatic for finite residue fields.

Suppose $L/K$ is unramified. Choose a primitive element of a field extension $\bar{x}$ for the finite separable extension $k_L/k_K$ and lift it to $x\in {\mathcal{O}}_L$. Since the residue degree of $K(x)/K$ is at least $[k_K(\bar{x}):k_K]=[L:K]$, necessarily $K(x)=L$. Its monic minimal polynomial of an algebraic element $f_x$ has coefficients in ${\mathcal{O}}_K$. Its reduction has degree $[L:K]$ and annihilates $\bar{x}$, whose minimal polynomial over $k_K$ has that same degree. The two coincide, so ${\bar{f}}_x$ is separable.

Conversely, suppose $L=K(x)$, $x\in {\mathcal{O}}_L$, and ${\bar{f}}_x$ is separable. It must be irreducible: otherwise its coprime factors lift by the factorization form of Hensel's lemma, contradicting irreducibility of $f_x$. Hence $\bar{x}$ has degree $[L:K]$ over $k_K$. The degree equality forces $f=[L:K]$ and $e=1$, and the residue extension is separable. We have proved the unramified generator criterion with separable reduction:

Now let $k_L={\mathbb{F}}_q$, $q=p^f$. Every element of $k_L^{\times }$ is a simple root of $X^{q-1}-1$, whose derivative is a unit at each root. Hensel's lemma lifts each of these $q-1$ elements uniquely to a root in ${\mathcal{O}}_L^{\times }$. Thus $L$ contains all $q-1$ roots of $X^{q-1}-1$; these are the nonzero Teichmuller lifts.

More generally, a root of unity of order prime to $p$ reduces injectively into $k_L^{\times }$. Indeed, if such a root reduces to $1$, uniqueness in Hensel's lemma for $X^m-1$ makes it equal to $1$. Consequently every prime-to-$p$ order divides $q-1$.

A root whose order has a nontrivial $p$-part produces a primitive $p$th root of unity $\zeta$. It reduces to $1$ in characteristic $p$. Sinceall the factors have the same positive integral valuation. HenceThis is the ramification bound for a primitive pth root of unity. ThereforeFor $p=2$ the hypothesis $e<1$ cannot occur, so that instance is vacuous rather than a claim excluding the ever-present root $-1$.

Classical Kummer theory relates extraction of $n$th roots to Galois cohomology. In characteristic zero the exact sequenceand Hilbert theorem 90 identify $H^1(K,{\mu }_n)$ with $K^{\times }/K^{\times n}$. For an elliptic curve, the corresponding Kummer exact sequence of an elliptic curve isMultiplication by $n$ is surjective over the algebraic closure. If $nQ=P\in E(K)$, the cocycle $\sigma \mapsto \sigma Q-Q$ takes values in $E[n]$. Changing the choice of $Q$ changes it by a coboundary, and changing $P$ by an element of $nE(K)$ does not change its class. Conversely, a trivial cocycle class allows $Q$ to be adjusted by an $n$-torsion point to become $K$-rational. Thus the Kummer map of an elliptic curve is an injectionThis is the elliptic form of Kummer theory. The full cohomology group need not be finite; the arithmetic restriction on these classes is essential.

Choose a finite set $S$ of places containing the archimedean places, the primes over $n$, and all primes of bad reduction of an elliptic curve. At a finite place outside $S$, $E$ has good reduction and $n$ is a unit. A division point of the reduction of $P$ exists over the algebraic closure of the residue field. Smooth lifting gives a point over a finite unramified extension whose multiple differs from $P$ by an element of the kernel of reduction of an elliptic curve. In the formal group of an elliptic curve, $[n](T)=nT+O(T^2)$ is an isomorphism by the invertible morphism criterion for formal group laws, and its integral inverse converges on the maximal ideal. Correcting that difference produces a division point in the maximal unramified extension. Hence the Kummer map of an elliptic curve class is unramified outside $S$.

To prove finiteness explicitly, choose a finite Galois extension $L/K$ containing all $E[n]$ and all $n$th roots of unity, and enlarge $S$ to include its ramified places. A basis of $E[n]\cong (\mathbb{Z}/n\mathbb{Z}{)}^2$ identifies it over $L$ with ${\mu }_n^2$. Classical Kummer theory then identifiesThe restriction of every class in the image of $\delta$ belongs to $L(S_L,n{)}^2$, where the S-unramified power class group isIndeed an unramified local Kummer extension at residue characteristic prime to $n$ has valuation divisible by $n$: in an unramified field containing a root, $nv(a^{1/n})=v(a)$ with integral valuations.

The finiteness of S-unramified Kummer classes follows from the exact sequenceTo see the final map, write the ideal of $a$ away from $S_L$ as ${\mathfrak{a}}^n$ and take the ideal class of $\mathfrak{a}$. Its kernel is represented by an S-unit, after division by an $n$th power; conversely an $n$-torsion ideal class yields such an $a$. The S-unit group is finitely generated by the Dirichlet unit theorem together with the finitely many inverted primes. The ideal class group of the localized ring is a quotient of the finite ordinary ideal class group. Both outer groups are therefore finite.

Finally restriction has finite kernel: inflation-restriction puts it in the finite group $H^1(\mathrm{Gal}(L/K),E[n])$. Thus the image of $\delta$ has finite restriction image and finite kernel, andThis proves the weak Mordell-Weil theorem. Combining it with the height descent lemma proves the full Mordell-Weil theorem. Local restrictions at every place refine the finite group used here to the Selmer group of an elliptic curve, which is useful for explicit descent calculations.

The filtration and its meaning. Let $L/K$ be a finite Galois extension of non-Archimedean local fields, with group $G$, normalized valuation $v_L$, and residue fields $k_L/k_K$ of characteristic $\ell$. The lower ramification numbering isThe higher ramification groups are normal, decrease with $j$, and eventually become trivial: for each nonidentity automorphism some integral element is moved by a nonzero amount. The first group $G_0$ is the inertia group, withIts fixed field is the maximal unramified extension inside $L$. The wild inertia group is $G_1$. For a uniformizer ${\pi }_L$, there are injective homomorphismsThe kernels are the indicated next groups; the additive homomorphism assertion follows by expanding a product of automorphisms modulo ${\pi }_L^{j+2}$. These maps show that $G_0/G_1$ is cyclic of order prime to $\ell$, while $G_1$ is an $\ell$-group. Thus tame ramification is exactly the case $G_1=1$.

To calculate the groups, the uniformizer criterion for lower ramification groups saysIndeed, ${\mathcal{O}}_L$ is generated by ${\pi }_L$ over the integers of the maximal unramified subextension, which $G_0$ fixes. Differences of powers of ${\pi }_L$ are divisible by $\sigma {\pi }_L-{\pi }_L$, so the one test implies all the defining inequalities.

Eisenstein facts used in the calculations. For a complete discrete valuation ring $A$ with uniformizer $\varpi$, a monic polynomialis an Eisenstein polynomial if $\varpi \mid a_j$ for every $j<d$ and ${\varpi }^2\nmid a_0$. The Eisenstein criterion makes it irreducible. If $\theta$ is a root, its valuation relative to the base normalization is $1/d$, the extension has degree and ramification index $d$, its residue field is unchanged, andThe root valuation follows by comparing the terms of its equation. The ramification index must then be at least $d$, hence exactly $d$. In the basis $1,\theta ,\dots ,{\theta }^{d-1}$, the valuations of $b_j{\theta }^j$ are distinct modulo $d$, so an integral linear combination has every $b_j\in A$. This proves the integer-ring assertion. Conversely, a uniformizer in a totally ramified extension generates the field, and its minimal polynomial is Eisenstein; this follows from its value $1/d$, equal valuations of its conjugates, and the valuation one of its norm.

For a monogenic separable integer ring $A[\theta ]$, the different ideal is generated by $f^{\prime }(\theta )$. For a Galois extension, the different exponent from ramification groups isIn the totally ramified case these agree directly: $f^{\prime }({\pi }_L)={\prod }_{\sigma \ne 1}({\pi }_L-\sigma {\pi }_L)$, and an automorphism with displacement valuation $h$ contributes once to each of $G_0,\dots ,G_{h-1}$.

Upper numbering. Extend the lower indexing to real $s\ge 0$ by $G_s=G_{\lceil s\rceil }$, and setOn $[-1,0]$ take $\phi (s)=s$. This Herbrand function slows the indexing as the groups shrink. Lower numbering is compatible with subgroups, while upper ramification numbering is compatible with quotients: for normal $H$, $(G/H{)}^u=G^{u}H/H$. This is the fact that upper ramification groups commute with quotients. Thus upper breaks are particularly useful when comparing intermediate Galois extensions.

The eighth-root cyclotomic extension. Put $\zeta ={\zeta }_8$ and $\pi =\zeta -1$. The shifted cyclotomic polynomialis Eisenstein at two. Hence $L={\mathbb{Q}}_2(\zeta )$ is totally ramified of degree four, $v_L(2)=4$, and $\pi$ is a uniformizer. Its Galois group consists of ${\sigma }_a(\zeta )={\zeta }^a$ for $a=1,3,5,7$, and is $C_2\times C_2$.

Since $\zeta$ is a unit,For $a=3,7$, this is the valuation of $i-1$ or $-i-1$, namely two, because their squares are units times two. For $a=5$, it is $v_L(-2)=4$. The ramification groups of the eighth-root cyclotomic extension of the 2-adic field are thereforeThe lower breaks are one and three, andThus the upper breaks are one and two:The different exponent from ramification groups is $3+3+1+1=8$, agreeing with $v_L(4{\zeta }^3)=8$ from the derivative of $T^4+1$.

The cubic splitting field at three. Let ${\alpha }^3=2$, $\zeta ={\zeta }_3$, and putThe polynomialsare Eisenstein at three. They give totally ramified subextensions of degrees three and two. Their intersection is the base field, so $L={\mathbb{Q}}_3(\alpha ,\zeta )$ has degree six. Its ramification index is divisible by both three and two, hence equals six; therefore $L/{\mathbb{Q}}_3$ is totally ramified. It is the splitting field of $T^3-2$, with Galois group $S_3$.

Normalize $v_L$ so that $v_L(3)=6$. Then $v_L(\beta )=2$ and $v_L(\lambda )=3$, makinga uniformizer. Let $\sigma (\alpha )=\zeta \alpha ,\sigma (\zeta )=\zeta$ and $\tau (\alpha )=\alpha ,\tau (\zeta )={\zeta }^2$. They generate $S_3$. Since $\tau (\lambda )=(\zeta +1)\lambda$,For the order-three automorphism,Here $\alpha$ is a unit and $v_L(\zeta \alpha +1)=v_L(\sigma \beta )=2$. The same calculation gives valuation two for ${\sigma }^2$. The three transpositions are conjugate and the defining filtration is normal, so they all have displacement valuation one. The ramification groups of the splitting field of T3 minus 2 over Q3 areThe lower breaks are zero and one. Since $[G_0:G_s]=2$ for $0<s\le 1$,and the upper groups areThe different exponent from ramification groups is $5+2=7$. As an independent check, the cubic subfield has different exponent $v_{{\mathbb{Q}}_3(\alpha )}(3{\alpha }^2)=3$, and the quadratic extension above it is tame with different exponent one. Transitivity of the different ideal gives $1+2\cdot 3=7$, as required.

Let $K=\mathbb{Q}(\sqrt{-31})$. Its ring of integers of a quadratic field is $\mathbb{Z}[(1+\sqrt{-31})/2]$, and its fundamental field discriminant is $-31$.

First compute the class number. The ideal-form correspondence for imaginary quadratic fields identifies the ideal classes with proper equivalence classes of primitive positive definite binary quadratic forms of discriminant $-31$. Each has a unique reduced positive definite binary quadratic form representative under the convention $|b|\le a\le c$, with $b\ge 0$ when $|b|=a$ or $a=c$. From $31=4ac-b^2\ge 3a^2$ we get $1\le a\le \sqrt{31/3}<4$. Checking these three possible leading coefficients gives exactlyFor $a=3$, neither odd residue choice $b=\pm 1,\pm 3$ makes $(b^2+31)/12$ integral. The listed forms are primitive and satisfy the reduction convention, soThis computes the ideal class group of Q of square root minus thirty-one.

Now take a root $\theta$ of $F(T)=T^3+T-1$, and let $H$ be its splitting field over $\mathbb{Q}$. There is no rational root: the only candidates are $\pm 1$, and neither vanishes. Thus the cubic is irreducible. Its polynomial discriminant isSince this is nonsquare, the Galois group of an irreducible cubic is $S_3$. Its quadratic subfield is $K$: the product of pairwise root differences squares to $-31$ and changes sign under odd permutations. Thus $H/K$ is cyclic of degree three, and $H=K(\theta )$. Indeed the cubic field and $K$ have coprime degrees, so their compositum already has the full splitting-field degree six. The squarefree polynomial discriminant also shows, by the discriminant-index formula for an integral lattice, that $\mathbb{Z}[\theta ]$ is the full integer ring of the cubic field.

It remains to prove that $H/K$ is unramified everywhere. At any rational prime $\ell \ne 31$, the reduction of $F$ is separable. Over a finite residue extension in which it splits, all residue roots are simple and lift by Hensel lemma to the corresponding unramified extension of ${\mathbb{Q}}_{\ell }$. Therefore the local splitting field is unramified over ${\mathbb{Q}}_{\ell }$, and its extension over a completion of $K$ is unramified as well.

At the only possible ramified prime, direct reduction givesThe simple root lifts to $r\in {\mathbb{Q}}_{31}$. Write $F(T)=(T-r)Q(T)$, with $Q$ monic quadratic over ${\mathbb{Q}}_{31}$. The discriminant product formula givesHere $Q(r)=F^{\prime }(r)$ is a unit, so the quadratic discriminant has square class $-31$. Hence the entire local splitting field isIt is quadratic over ${\mathbb{Q}}_{31}$, but its extension over the completion of $K$ is trivial. Thus the prime over $31$ splits completely in $H/K$; in particular it is not ramified there. This is the local splitting-field argument behind an unramified cyclic cubic extension from a prime-discriminant cubic. There are no real places of the imaginary quadratic field $K$, so no infinite-place ramification remains to check.

The Hilbert class field theorem identifies the maximal everywhere unramified abelian extension with an extension of degree $h_K$. Our cyclic unramified extension already has that degree, so it must be the whole Hilbert class field. ThereforeEquivalently, it is the splitting field of $T^3+T-1$, of degree six over $\mathbb{Q}$ and degree three over $K$. Replacing $\theta$ by ${\theta }^{-1}$ gives the alternative defining cubic $T^3-T^2-1$. This is the Hilbert class field of Q of square root minus thirty-one.

Let $K^{\mathrm{ur}}$ be the maximal unramified extension of $K$, with residue field $\overline{k}$. First show that every geometric solution of $nQ=P$ lies in $E(K^{\mathrm{ur}})$.

The multiplication-by-n morphism on the reduced elliptic curve is surjective over $\overline{k}$. Choose $\overline{Q}$ with $n\overline{Q}=\overline{P}$, defined over some finite finite field extension $k^{\prime }/k$. Let $L/K$ be the corresponding finite unramified extension. By the surjectivity of good reduction over a local field, lift $\overline{Q}$ to $Q_0\in E(L)$. Then $P-n{Q}_0\in E_1(L)$. The multiplication isomorphism of a formal group law gives a unique $R\in E_1(L)$ with $nR=P-n{Q}_0$, so $Q_0+R$ is an $n$-division point of $P$ defined over $L$.

Taking $P=O$ gives every element of $E[n]$ over $K^{\mathrm{ur}}$: reduction is injective on this torsion point of an elliptic curve group because $[n]$ is injective on the formal kernel, and each reduced $n$-torsion point has the unique corrected lift just constructed. Every other division point differs from one lift by an element of $E[n]$. Hence the entire field $K([n{]}^{-1}P)$ is unramified, not merely a field containing one choice of $Q$.

To bound the composite uniformly in $P$, put $f=[K(E[n]):K]$. This division field of an elliptic curve is unramified. The Galois group of $K^{\mathrm{ur}}/K$ is procyclic, generated topologically by its Frobenius element $\sigma$, and ${\sigma }^f$ fixes every element of $E[n]$. If $nQ=P\in E(K)$, thenIteration gives ${\sigma }^{jf}Q=Q+jT$. In particular ${\sigma }^{nf}Q=Q$. Thus every such $Q$, for every $P$ together, lies in the unique unramified extension of degree $nf$. If $M$ is the composite of all these fields, the uniform unramified division field over a local field givesThe prime-to-$p$ hypothesis is essential to the inverse-series argument; no assertion about arbitrary $p$-division is being made.

Galois cohomology and the finite division quotient. Let $K$ be a number field, $G_K=\mathrm{Gal}(\overline{K}/K)$ with its profinite topology, and $M$ a discrete continuous $G_K$-module. Its Galois cohomology is continuous group cohomology. In degrees zero and one,Thus a crossed homomorphism measures the failure of a choice to be Galois-invariant, and changing the choice changes the cocycle by a coboundary. A short exact sequence of such modules gives a long exact sequence in group cohomology. The connecting map sends an invariant element to the cocycle obtained by lifting it and comparing its Galois translates.

For an elliptic curve $E/K$ and $n\ge 2$, multiplication by $n$ is surjective on $E(\overline{K})$ and has kernel $E[n]$. The Kummer exact sequence of an elliptic curve therefore givesExplicitly, choose $nQ=P$ and set $\kappa (P)(\sigma )=\sigma Q-Q$. Replacing $Q$ changes this by a coboundary; replacing $P$ by $P+nR$, $R\in E(K)$, does not change it. If its class is zero, some torsion translate of $Q$ is Galois-invariant, so $P\in nE(K)$. This proves injectivity of the Kummer map of an elliptic curve.

The whole group $H^1(K,E[n])$ need not be finite. The crucial restriction is ramification. Let $S$ contain the finite primes of bad reduction of an elliptic curve and those dividing $n$. At $v\notin S$, good reduction and prime-to-residue-characteristic multiplication imply that every division point of a local point is in an unramified extension, by the formal-group lifting argument. Thus every global Kummer class restricts trivially to inertia there.

Choose a finite Galois extension $L/K$ containing $E[n]$ and the $n$th roots of unity, and enlarge $S$ to include its ramified primes. Over $L$, the torsion module is constant and can be identified with ${\mu }_n^2$. By Kummer theory,For classes unramified outside the primes $S_L$ above $S$, valuations outside $S_L$ must be divisible by $n$. Their restriction images therefore lie in $L(S_L,n{)}^2$, the square of an S-unramified power class group. Its finiteness can be seen without assuming the Mordell-Weil theorem: the finiteness of S-unramified Kummer classes follows fromThe S-unit group is finitely generated by the Dirichlet unit theorem and its valuations at $S_L$. The localized ideal class group is a quotient of the ordinary ideal class group of $L$, which is finite by the finiteness of the ideal class group. The Minkowski bound for ideal classes supplies an integral ideal of bounded norm in each class, and only finitely many integral ideals have bounded norm.

The kernel of restriction from $H^1(K,E[n])$ to $H^1(L,E[n])$ is also finite: a cocycle trivial after restriction can, after subtracting a coboundary, be made to factor through the finite group $\mathrm{Gal}(L/K)$. There are only finitely many maps from that group to the finite module $E[n]$. This is the finite-extension kernel of a Kummer map mechanism. Consequently the possible Kummer classes form a finite set, provingThis is the Weak Mordell-Weil theorem. Imposing membership in the local Kummer image at every place refines the finite unramified collection to the n-Selmer group. Its relation with the obstruction to a globally rational point iswhere the last group is the $n$-torsion of the Tate–Shafarevich group. Thus local solubility gives a finite computable upper bound but can leave a genuine global obstruction.

Heights and finite generation. For the other essay, normalize the absolute values on a field $K$ so that the product formula holds. The Absolute logarithmic Weil height of $[x_0:x_1]\in {\mathbb{P}}^1(K)$ isAt the infinite places the local degrees are one or two and the usual real or complex modulus is used. The product formula makes this independent of scaling; it is also unchanged by extending $K$. Over $\mathbb{Q}$, using coprime integral coordinates gives $h([u:v])=\log \max (|u|,|v|)$, the naive height on the projective line. The Northcott theorem says that points of bounded height and bounded field degree form a finite set; in particular this holds over the fixed field $K$. One way to see the finiteness is the height-Mahler measure formula: for an algebraic number of degree $d$, the coefficients of its primitive minimal integer polynomial are bounded by binomial factors times $\exp (dh)$. Bounds on $d$ and $h$ therefore leave only finitely many integer polynomials and hence only finitely many algebraic numbers.

Set $h_E(P)=h(x(P))$ for $P\ne O$, and $h_E(O)=0$. Since $x:E\to {\mathbb{P}}^1$ has degree two, bounded $h_E$ gives only finitely many points of $E(K)$. The height growth under a morphism of the projective line states that a degree-$d$ morphism gives $h(f(t))=dh(t)+O(1)$. The upper bound follows from its homogeneous coordinate polynomials; the lower bound follows from their having no common zero, using a resultant identity at each place. Applied to the degree-four duplication map, it gives a uniform constant $C$ withConsequently $4^{-j}{h}_E(2^{j}P)$ is Cauchy: the absolute difference of consecutive terms is at most $C{4}^{-(j+1)}$. Define the canonical height of an elliptic curve byIt is nonnegative and satisfies $\hat{h}(2P)=4\hat{h}(P)$. The factor one-half is the conventional normalization for the divisor $(O)$, since the first-coordinate height belongs to $2(O)$.

The addition-divisor identity also gives the bounded-error height identityuniformly in $P,Q$. This is the height form of the identity for the sum and difference pullbacks of the line bundle associated to $2(O)$; it includes points where the affine addition formulas have a zero denominator. Apply it to $2^{j}P,2^{j}Q$, divide by $2\cdot 4^j$, and take the limit. Thus $\hat{h}$ satisfies the parallelogram law, and its polarization is a bilinear form, the height pairing. Nonnegativity implies the Cauchy-Schwarz inequality for that pairing, by evaluating its nonnegative quadratic polynomial on $mP+nQ$ for all integers $m,n$ and approximating real ratios by rational numbers. In particularThese properties do not presuppose finite generation. Bounded canonical height gives a finite set by the bounded difference and the Northcott theorem. Torsion points have canonical height zero. Conversely, if $\hat{h}(P)=0$, all $2^{j}P$ have bounded naive height, so two coincide; their difference makes $P$ torsion. Thus the height detects precisely the free part, once finite generation is proved.

Use the Weak Mordell-Weil theorem with $n=2$ and choose finitely many coset representatives $R_i$. Write $P=2Q+R_i$, and put $H={\max }_i\hat{h}(R_i)$. The height inequality yieldsIteration enters the finite set $\{P:\hat{h}(P)\le H+1\}$, since after $j$ steps the height is at most $H+2^{-j}\max (\hat{h}(P)-H,0)$. Unwinding $P=2Q+R_i$ expresses every point using that finite set and the $R_i$. This proves the canonical-height proof of Mordell-Weil finite generation and henceThe Fundamental theorem of finitely generated abelian groups supplies this decomposition. The Mordell-Weil theorem combines a finite quotient from arithmetic Galois cohomology with a contracting height descent; either ingredient alone would not establish finite generation.

Use the simple-root form of the Hensel lemma: for $F\in {\mathcal{O}}_K[T]$ and $\bar{a}\in k_K$ satisfying $\overline{F}(\bar{a})=0$ and $\overline{F^{\prime }}(\bar{a})\ne 0$, there is a unique $a\in {\mathcal{O}}_K$ with $\bar{a}$ as its reduction and $F(a)=0$.

Let $d=[\ell :k_K]$. The residue field $k_K$ is finite, so $\ell /k_K$ is separable, and the primitive element theorem gives $\ell =k_K(\bar{\alpha })$. Let $\bar{F}$ be the monic irreducible polynomial of $\bar{\alpha }$, of degree $d$, and choose a monic coefficient lift $F\in {\mathcal{O}}_K[T]$. Irreducible reduction implies that $F$ is irreducible over $K$: any monic factorization over $K$ has integral coefficients, since all its roots are integral over the valuation ring, and would reduce to a factorization of $\bar{F}$.

Adjoin a root $\alpha$ and put $L=K(\alpha )$. Then $[L:K]=d$ and $\alpha \in {\mathcal{O}}_L$. Its reduction satisfies $\bar{F}$, so $k_L$ contains a copy of $\ell$ over $k_K$. For finite extensions of non-Archimedean local fields, the fundamental degree relation isThe residue degree is at least $d$, while the left side equals $d$, henceThis constructs the required unramified extension.

For uniqueness, let $L^{\prime }/K$ be another unramified extension with a chosen identification $k_{L^{\prime }}\cong \ell$. The element corresponding to $\bar{\alpha }$ is a simple residue root of $F$, because finite fields are perfect. The Hensel lemma in $L^{\prime }$ gives a root ${\alpha }^{\prime }\in {\mathcal{O}}_{L^{\prime }}$ with this reduction. Since $F$ is irreducible of degree $d$, $[K({\alpha }^{\prime }):K]=d=[L^{\prime }:K]$, so $L^{\prime }=K({\alpha }^{\prime })$. Sending $\alpha$ to ${\alpha }^{\prime }$ yields a $K$-isomorphism $L\to L^{\prime }$, compatible with the prescribed residue identification. ThusThis proves the existence and uniqueness of unramified local extensions using the stated version of Hensel's lemma, without assuming the classification in advance.

The only possible rational roots of the monic cubic are $1,-1$, and neither is a root. Thus $f$ is irreducible. The discriminant of a depressed cubic givesIt is not a rational square. By the permitted cubic discriminant criterion, the splitting field has Galois group $S_3$, degree six, and contains its quadratic subfield generated by $\sqrt{\Delta }$. Consequently

For a rational prime $r\ne 59$, the reduction of $f$ is separable because its discriminant is a unit at $r$. Choose a finite extension of ${\mathbb{F}}_r$ in which that reduction splits. Part 1(a) lifts it to an unramified extension of ${\mathbb{Q}}_r$, and the Hensel lemma lifts all the simple roots into that extension. The local splitting field is therefore unramified over ${\mathbb{Q}}_r$. In particular all primes of $L/K$ above such $r$ are unramified.

At $59$, the supplied simple residue root $-28$ lifts to a root in ${\mathbb{Q}}_{59}$. The remaining factor is quadratic, so the local splitting field has degree at most two over ${\mathbb{Q}}_{59}$. It contains $\sqrt{-59}$, which is not a square in ${\mathbb{Q}}_{59}$ because its valuation is odd. It is therefore exactly ${\mathbb{Q}}_{59}(\sqrt{-59})$. This is also the completion of $K$ at its unique prime above $59$: the polynomial $T^2+59$ is Eisenstein there. Thusfor a prime $\mathfrak{P}$ above $\mathfrak{p}$. All the other primes above it give the same local conclusion by Galois conjugacy. The relative extension is therefore unramified at $59$ as well; indeed that prime splits completely in $L/K$.

The field $K$ has only complex places, so there is no infinite-place ramification. Hence $\boxed{L/K\text{ is unramified everywhere}}$.

We use the Hilbert class field theorem: for a number field $E$, its maximal everywhere unramified abelian extension $H_E$ is finite, contains every such extension, and satisfies $\mathrm{Gal}(H_E/E)\cong {\mathrm{Cl}}_E$, so $[H_E:E]=h_E$. The cyclic degree-three extension just constructed is contained in $H_K$. ThereforeThis is the unramified cubic extension of Q of square root minus fifty-nine; only divisibility of the class number, rather than its exact value, is needed here.

A finite extension $L/K$ of non-Archimedean local fields is an unramified extension when its ramification index is one and its residue-field degree equals $[L:K]$. Equivalently, its maximal ideal is generated by a uniformizer of $K$ and its residue-field extension is separable.

A finite extension of number fields is an everywhere unramified extension of number fields when every nonzero prime ideal of $K$ is unramified in $L$. Under the convention that includes infinite places, one also requires every real embedding of $K$ to remain real.

Let $K^{\mathrm{nr}}$ be the maximal unramified extension of $K$. Because $p\nmid n$, multiplication by $n$ on the special fibre is a separable isogeny and is surjective on $\tilde{E}(\overline{k})$. Choose a point $\tilde{Q}$ with $[n]\tilde{Q}=\tilde{P}$ and lift it, after a finite unramified extension, to $Q_0$. Then $R=P-[n]Q_0$ lies in the kernel of reduction.