Revue d’histoire des mathématiques 19, 43–77. Original historical research separating Alexandre-Théophile Vandermonde's coefficient notation, alternating expressions, difference-products and the history of the Vandermonde determinant name. Cited especially §2.1 and the bibliography.
Alternating polynomial Created 2026-10-07 Updated 2026-10-14
Over a field of characteristic zero, an alternating polynomial changes sign when two variables are interchanged. It vanishes when two coordinates agree, so each factor divides it. These distinct linear factors are relatively prime in the polynomial ring, hence their product, the Vandermonde determinant, divides it. The quotient is a symmetric polynomial.
Beta-set hook-product identity Created 2026-10-07 Updated 2026-10-14
For , the hook lengths in row are , where runs over the non-beta numbers in . Their product is . Multiplying over rows proves the identity and converts the hook-length formula into a Vandermonde determinant divided by factorials. Padding the partition with zero rows changes the beta set but not the hook product.
Complex Wishart matrix 2026-10-07
A complex Wishart matrix is the Gram matrix of an -by- matrix of independent centered complex Gaussian random variables with an indicated variance convention. It is a positive semidefinite matrix. In the standard convention with joint entry density proportional to and , its eigenvalue density contains the weight and a squared Vandermonde determinant.
Determinant formula for Specht module dimension Created 2026-10-06 Updated 2026-10-07
For a partition with positive parts, the number of standard Young tableaux, and hence the dimension of its complex Specht module, is . Negative factorial arguments give zero entries. Setting turns the determinant into by the Vandermonde determinant, matching the hook-length formula.
Gaussian unitary ensemble 2026-10-25
In the unscaled convention with diagonal variance one, a Gaussian unitary ensemble matrix is a Hermitian matrix with independent real diagonal entries and upper off-diagonal entries , where all the and diagonal entries are independent and have the standard normal distribution. Its density on the real coordinates of Hermitian matrices is proportional to . Its exchangeably labelled real eigenvalues have symmetric joint probability density function proportional to . The squared Vandermonde determinant suppresses coincident eigenvalues; orthogonal polynomial projection kernels express the correlation functions of a point process as determinants.
Choose points of such that every of their position vectors are linearly independent. Any equatorial hyperplane then contains at most points. If , at least one of each opposite pair of open hemispheres contains points. Such configurations exist: take distinct real parameters and normalize ; the Vandermonde determinant proves the required independence. This weaker one-of-two guarantee already suffices for the topological lower bound in Lovász theorem on Kneser graphs.
For distinct and , expand the exponential entries in powers of . Nonzero determinant terms first occur at the distinct powers . The coefficient is the product of their two Vandermonde determinants divided by the factorial product. Ratios of such alternants yield the Weyl dimension formula by taking a torus character to the identity.
Imposing vanishing off-diagonal entries with auxiliary integrations and an off-diagonal Grassmann Gaussian integral gives a determinant of the commutator map on the off-diagonal matrix units. Its eigenvalues are , . Up to a constant sign, their product is the squared Vandermonde determinant. It contributes to the eigenvalue action, encoding repulsion between distinct eigenvalues. Diagonal zero modes and constant normalization factors must be treated separately.
For the root-discriminant convention in the requested identity, define
The Vandermonde determinant is . Squaring removes the signs, proving
It is nonzero because the roots are distinct. It lies in , since its root expression is fixed by every Galois automorphism and .
If is not monic and has leading coefficient , the usual polynomial discriminant is . Thus the printed Vandermonde equality uses the discriminant of the monic normalization . The extra factor is itself a nonzero square in , so it does not alter the square-class criterion in the next part.
Alexandre-Théophile Vandermonde presents a programme in elimination theory: remove unknowns from simultaneous polynomial equations in a way that works uniformly as the number of equations and their polynomial degrees vary. The immediate achievement is narrower than that programme: a general construction for linear equations. The academy year 1772 used in the exam is not the printing date of the memoir, which appeared in 1776. Its compact indices distinguished the equation containing a coefficient from the unknown it multiplied; they were not powers. That notational separation is crucial to interpreting the work.[ref][ref]
In modern language take a system of linear equations with unknowns. Its determinant is an alternating expression in the coefficients:
Each product selects one coefficient from each equation and each unknown's column. The sign of a permutation determines whether it is added or subtracted. This makes the number a genuine parameter of a general rule, rather than merely supplying separately memorised formulas for two or three unknowns. The notation here is modern, not a transcription of Alexandre-Théophile Vandermonde's symbols.
For two unknowns, multiply by and by , then subtract. Similarly eliminate . This gives
The same principle in arbitrary size is Cramer's rule. If is obtained by replacing column of by , then
An original verification uses the multilinearity of the determinant: replace by the column combination . Every resulting determinant vanishes through repeated columns except the term, which is . This explains how an elimination expression isolates one unknown.
The condition is substantive. If , multiplying by an expression which vanishes cannot justify division. For instance, and are inconsistent, whereas replacing by gives infinitely many solutions. Thus an elimination formula must distinguish exceptional coefficients and preserve the connection to the original system of linear equations. Nor does the displayed rule solve the much broader problem of arbitrary nonlinear equations.
The passage's importance is the move from particular elimination calculations towards a theory of alternating expressions. It would be misleading to turn this into the claim that the familiar Vandermonde determinant, formed from powers of variables, is what this extract displays. A positional upper index and an exponent have different meanings; the history of that eponym requires separate evidence. Likewise, modern matrix algebra is a useful explanatory language here, not the institutional or conceptual setting of an eighteenth-century memoir.[ref]
In variables, pad to length and set . Define the alternant
The last equality is the Vandermonde determinant with the indicated descending-exponent convention.
We use the Jacobi–Trudi identity proved above and give the determinant step explicitly. Let
Put . The generating-function identity
shows, by extracting the coefficient of , that
When is empty, is upper triangular with diagonal one, and the product matrix is . Thus . Taking determinants for general gives and proves the bialternant formula
The equality before division is polynomial. Consequently the quotient extends at coincident variables as the Schur polynomial.
For the Fourier minors, choose a square submatrix of size , with distinct row residues and column residues. Sort the columns into decreasing exponents in ; this changes a determinant only by sign. Put
Because the are distinct nonnegative integers, , and . Hence is a partition. With , transposition of the submatrix and the bialternant formula give
The are distinct, so the Vandermonde factor does not vanish.
To prove that the Schur factor cannot vanish, work in and reduce modulo . Since the prime cyclotomic polynomial is and ,
All reduce to one, and the Schur factor reduces to . We need its value, not an assumption that the specialization is nonzero. The Schur evaluation at all ones formula is
For completeness, substitute with distinct into the bialternant. In the exponential expansions, the first nonzero determinant coefficient uses exactly the distinct powers and has degree in . The determinant in the and the factorial factors are common to numerator and denominator. The remaining ratio is the Vandermonde product in divided by that in , giving the formula as . Its value is an integer because has integer tableau coefficients.
Every positive difference and is strictly less than . Thus each is a unit modulo , and the displayed product has nonzero residue. A zero Schur factor would have zero residue, a contradiction. This proves the prime Fourier matrix minor theorem:
Finally use the one-row shape , for which . Its numerator determinant has first-row exponents and subsequent exponents . Expanding along the first row gives cofactors equal, up to their signs, to the Vandermonde determinant in all variables except . Since
the cofactor sign cancels the indicated sign in the quotient. Therefore
This rational expression is first computed for pairwise distinct variables; its sum is the polynomial , giving the continuous polynomial extension when variables coincide.
A skew Young diagram is connected when any two of its cells can be joined by a sequence of cells sharing edges; touching only at a corner does not connect them. A nonempty border strip, or rim hook, is a connected skew diagram containing no square. Its height is its number of occupied rows minus one.
For a weak composition , a border-strip tableau of shape and type is a chain
whose th difference is a border strip of size . Filling that strip with gives the equivalent weakly increasing row-and-column filling. A zero part corresponds to an empty difference and has height zero. Put . For positive , ; write . Thus zero type parts are ignored: one does not multiply by the finite-variable value .
We first prove the one-strip multiplication formula using alternants. Choose sufficiently large and let be the decreasing beta numbers of a partition. Expanding the determinant by permutations shows
Indeed, in each determinant monomial every variable occurs in exactly one row factor; multiplying that variable by its th power is equivalent to raising that row exponent.
A term vanishes if the new exponent equals another exponent. Otherwise suppose the changed exponent moves from position to position when restored to decreasing order. Its determinant sign is . The resulting partition has
and all other rows unchanged. The new diagram contains , and its size increases by . Between successive added rows, the overlap is exactly the single column . Thus the added cells form a connected strip without a square, of height . Conversely every added border strip has consecutive occupied rows and exactly this single-column overlap, forcing these formulas and the corresponding exponent shift. The correspondence is therefore bijective. Divide by the unchanged Vandermonde determinant and use the bialternant formula to get the power-sum border-strip multiplication identity
Apply this formula successively to each positive part of . Each sequence of choices is exactly a border-strip tableau, and its product of signs is . Therefore
Commutativity of the power sums also shows that the resulting coefficient does not depend on the order of the positive parts of the type.
Take empty and restrict to variables. Multiply by , with :
In an alternant , the exponents are distinct and their decreasing arrangement is . Consequently the monomial occurs only for , and in that determinant its coefficient is one. This proves the Frobenius alternant character formula
To identify these coefficients with symmetric-group characters, recall the Frobenius characteristic map
The representation-theoretic identification can be justified by Young's rule: the permutation character on ordered blocks of sizes is . Its characteristic is , because its fixed block decompositions allocate whole cycles to blocks, and the exponential generating series for those allocations is . On the symmetric-function side, Hall duality and Schur orthonormality give . Inverting the unitriangular Kostka matrix establishes the identification. Thus the coefficient of in is the irreducible character value on cycle type . We have supplied the border-strip computation rather than assuming the character rule.
Grouping border-strip chains by their first removal of a cycle length now yields the Murnaghan–Nakayama rule
One may choose the -cycle to be last in a strip-building chain because the power sums commute. The empty-shape value on the empty type is one, providing the recursion's initial condition.
For the staircase , use beta numbers including its padded zero row. Its beta set is
Removing a rim hook of length lowers one beta number by into an unoccupied nonnegative position, reversing the exponent-shift description above. For a positive even , this move either hits another occupied even position or goes below zero. Therefore there are no removable even-size border strips.
Under the Hall inner product of symmetric functions, the adjoint of multiplication by is : this follows on the power-sum basis from . Taking adjoints of the one-strip multiplication rule expresses this derivative on as the signed sum over removable size- strips. That sum is empty for even , so
The rational symmetric-function algebra is freely generated by the power sums, and its characteristic is zero. Vanishing of each of these derivatives therefore proves the staircase Schur functions use only odd power sums statement:
Finally, the cycle type of an -cycle has one strip of size . A straight diagram is a border strip exactly when its second row has length at most one: otherwise it contains the upper-left square; conversely the first row with a single-column tail is connected and contains none. These diagrams are exactly the hook partitions , of height . There is one strip filling in this case and none otherwise, giving
Write the diagonal maximal torus of as , , and let . Irreducible complex representations are indexed by dominant integer tuples , their highest weights. The Weyl character formula in integer-exponent form is
The ratio initially uses distinct , and extends to repeated eigenvalues by continuity. Every unitary matrix is conjugate to such a diagonal matrix, so this determines the character on the entire group. The shift differs from the usual Weyl vector by a multiple of ; the corresponding determinant factors cancel between numerator and denominator.
We first justify the highest-weight information needed in the proof. Restriction to the torus splits a representation into integer weight spaces. In an irreducible representation choose a lexicographically largest weight and a nonzero vector of that weight. A matrix unit with raises the weight by , so it annihilates . The character is invariant under permutations of diagonal coordinates, because permutation matrices conjugate the torus. Hence permutations of are also weights, and lexical maximality forces .
Irreducibility implies that generates the representation under the complexified Lie algebra. Indeed, a Lie-algebra invariant subspace is preserved by exponentials of skew-Hermitian matrices, which generate . Reorder any product of matrix units into lower-triangular units, diagonal units and upper-triangular units, using
Induction on length and on the number of out-of-order pairs gives the required spanning version of the Poincaré-Birkhoff-Witt theorem. Upper-triangular units kill , and diagonal units act by scalars. Every nonempty product of lower-triangular units lowers its weight by a nonzero sum of positive roots. Therefore the top weight space is exactly , and its multiplicity is one. This supplies the leading coefficient without assuming a character formula.
For completeness, every dominant integer tuple occurs. Put and form the representation
Its lexicographically highest weight is , with one-dimensional highest space, represented by the tensor products of . A negative determinant exponent is a legitimate one-dimensional unitary-group character. Averaging an inner product over normalized Haar measure gives invariant orthogonal complements, so the tensor representation splits into irreducible summands. One of them has highest weight . Uniqueness will also follow from the formula and Schur orthogonality relations.
Define the alternant for a strictly decreasing integer tuple . The denominator
is the Vandermonde determinant, and its modulus is the denominator modulus in the Weyl integration formula. The Laurent polynomial is alternating. Any alternating Laurent polynomial decomposes as a finite sum
monomials with repeated exponents have zero coefficient, and the remaining permutation orbits are indexed uniquely by strictly decreasing tuples.
The lexicographically highest monomial in the product is with coefficient one. Indeed, the highest monomial of the character is with coefficient one, and the unique lexical maximum among permutations of is itself. It follows that .
Fourier orthogonality on the torus, whose probability measure is , gives alternant orthogonality on a unitary torus:
Expand both determinants: an integral survives exactly when the two exponent tuples are identical up to permutation. Strict decreasing order then forces , and its matching terms each contribute one.
Finally, Schur orthogonality relations give . Applying the allowed Weyl integration formula to this class function gives
Since the coefficient already equals one, every other coefficient vanishes. Thus , proving the formula. If two irreducible representations had the same highest weight, their characters would now coincide; the Schur orthogonality relations imply that they are isomorphic. Apparent singularities at repeated diagonal eigenvalues are removable because the quotient equals the actual finite Laurent-polynomial character. No dimension formula has been assumed.
Use with . The given primitive polynomial over a finite field makes have order . For a binary cyclic code, squaring a zero preserves the zero condition: for . Thus the binary cyclotomic cosets modulo an odd integer governing the four specified zeros are
The two displayed orbits are disjoint, each has size five, and together contain . Therefore specifying and already forces all four consecutive defining zeros of a cyclic code.
The minimal polynomial of an algebraic element of is . For , the orbit size shows that its algebraic minimal polynomial has degree five. The candidate vanishes there, since
For example, the five-bit representations of these terms are , whose sum is zero in . As is a monic polynomial of degree five and annihilates , it is precisely its algebraic minimal polynomial; no assumption that the provided polynomial list is exhaustive is necessary.
The narrow-sense primitive BCH code is
Both algebraic minimal polynomials divide each such , and they are coprime polynomials. Their product is a divisor of . Hence the generator polynomial is their product. Direct multiplication with field characteristic two gives
The designed distance is five, because vanishes at the four consecutive powers .
Here is an explicit BCH bound proof for these zeros. If a nonzero codeword had support of a vector of size , with distinct positions and nonzero coefficients , put . Evaluating at the first defining powers gives
The coefficient matrix has determinant , a nonzero Vandermonde determinant because the are distinct and nonzero. It therefore forces every , a contradiction. Thus the minimum Hamming distance is at least five.
For the matching upper bound, multiplication gives the actual codeword
which has Hamming weight five and degree below . Hence
This proves the actual distance without needing the optional theorem. Its numerical hypothesis is also satisfied: with and the error parameter , , whereas .
Now calculate the root-evaluation syndrome for a cyclic code from the received polynomial. Reduction modulo gives , so . Substitution followed by the same reduction gives , whose five-bit representation is . Thus
The single-error test from two binary BCH syndromes identifies coordinate , since a one-bit error has syndromes . Flip that coordinate to obtain
Both defining evaluations vanish: and . More directly,
so it is certainly a codeword of . It is at Hamming distance one from . Since the minimum Hamming distance is five, no other codeword can be within two errors of : such a word would be at distance at most three from , contradicting the proved distance. Thus this is the unique bounded-distance decoding under the linear code's two-error guarantee.
The decoded polynomial printed in the original PDF is incorrect. It instead adds to , giving a polynomial . Its defining evaluations are
Therefore it is not a codeword, and the request to verify that it belongs to is a false premise. The field table and the printed syndromes agree with correction at ; the correction at does not. The boxed corrected polynomial resolves this source error and supplies the intended decoding and membership proof.
Let be the -uniform hypergraph and use strong saturation of a uniform hypergraph in its immediate-completion sense: each missing edge lies in an -set whose other -subsets are already edges of . The argument allows existing hypergraph cliques. Take , the usual parameter range; if , strong saturation forces every possible edge to be present, and the inequality is immediate whenever its binomial terms are defined. The case has the trivial lower bound zero.
For , choose distinct real numbers and form the Vandermonde matrix whose th column is . Every columns are linearly independent by the Vandermonde determinant. Set , so , and work in the quotient vector space
Here the inclusion of is injective: extend a basis of to a basis of and use the resulting wedge bases of the exterior powers. Write for the image in of the coordinate wedge indexed by an -set . All these images span .
For any -set , let be its coordinate subspace. The restriction of has rank , so has dimension . Wedge a basis of this intersection to obtain a nonzero element
Every coefficient is nonzero. Indeed, projection of onto the coordinates is an isomorphism: a vector in its kernel is supported on , whose columns of are independent. The coefficient is the determinant of that projection in the chosen bases. Passing to therefore gives a linear dependence
If is missing from , take its strong-saturation witness . The dependence expresses in the span of the for the other edges , all of which are present. Thus the vectors indexed by the present edges span all of . The exterior-power quotient bound for strong hypergraph saturation follows:
The bound is sharp: include precisely the -sets meeting one fixed -set . A missing edge is disjoint from , and every other -subset of meets , so adding immediately completes a hypergraph clique of order . The number of included edges is exactly the displayed bound.
The standard simplicial decomposition of a sphere is the boundary of the cross-polytope with vertices , identified radially with . A face chooses distinct coordinate indices and one sign for each; it never contains an antipodal pair.
A regular antipodal triangulation of a sphere is invariant under the antipodal map and has the nested coordinate equators as subcomplexes. In particular each equator separates its sphere into two triangulated hemispheres. These conditions are preserved by barycentric subdivision.
For a simplicial map , a positive alternating simplex of dimension has distinct image labels
The opposite alternating pattern is negative; all other simplices, including collapsed images, are neutral.
To prove the antipodal alternating-simplex parity lemma, let count positive -simplices in the equatorial . There is exactly one positive vertex in , so . A -simplex has an odd number of positive alternating facets precisely when it is positive or negative alternating. Indeed an alternating sequence has exactly one positive alternating deletion; a nonalternating sequence has either zero or two. For a collapsed image, a positive facet can occur only when exactly one label is repeated; deleting either copy gives two such facets.
Count incidences of positive -faces with -simplices in one closed hemisphere. Interior faces contribute twice and equatorial faces once. The count modulo two is therefore . It is also the number of positive or negative -simplices in that hemisphere modulo two. Because is antipodal, each alternating pair has one positive and one negative member, with one member in each hemisphere. Thus
Induction gives odd , proving the existence of a positive -simplex. In particular, an antipodal simplicial map is impossible: a positive -simplex would require distinct coordinate labels but only are available.
The Borsuk-Ulam theorem states that every continuous map has some with . First rule out a continuous antipodal map for . By uniform continuity, take a sufficiently fine regular barycentric subdivision so that endpoints of each edge have images less than apart. Label a vertex by , where is the smallest index maximizing . Since is unit length, this maximum is at least ; two adjacent vertices cannot have opposite labels. The labels therefore define an antipodal simplicial map to , contradicting the preceding result.
If the stated Borsuk-Ulam theorem failed, the map
would be just such a continuous antipodal map. This proves the required version; is immediate.
For the Kneser conjecture, equivalently Lovász theorem on Kneser graphs, the claim is
The Kneser graph joins disjoint -subsets of . Let . Colour each -set by its least element in when it has one, and otherwise by one final colour. A colour class indexed by is an intersecting family because all its members contain ; the final class lies in a -set and is also intersecting. This proves the upper bound .
For the lower bound, first deduce the open-cover Lusternik-Schnirelmann-Borsuk theorem. An open cover of admits a continuous partition of unity subordinate to it. Apply the Borsuk-Ulam theorem to . Equal values at and make all values equal. At least one common value is positive, so some contains an antipodal pair.
Now suppose the -sets could be coloured with only colours, each an intersecting family. Choose points such that every of their vectors are linearly independent. For example, normalize for distinct real ; the Vandermonde determinant proves this property. The general-position hemisphere count says that at most points lie on any equator. Since , at least one of the opposite open hemispheres determined by contains an -set of the labelled points.
Let be the open set of directions whose positive open hemisphere contains an -set of colour . It contains no antipodal pair, as such a pair would give two disjoint sets of that colour. The compact set also contains no antipodal pair: otherwise each of the two opposite hemispheres would have at most points, contradicting the count .
If is nonempty, compactness gives a positive set distance between and ; an open neighbourhood of radius less than half that set distance still has no antipodal pair. If is empty, take . In either case is an open cover with no member containing an antipodal pair, contradicting the Lusternik-Schnirelmann-Borsuk theorem. Hence at least colours are required.
An -uniform hypergraph is strongly saturated with respect to a complete uniform hypergraph of order if adding any missing edge creates a new complete uniform hypergraph on vertices containing that edge. Equivalently, for every missing -set , there is an -set for which all other -subsets are edges. Existing complete subhypergraphs are allowed in this strong-saturation definition.
We prove the bound by an exterior-power quotient bound for strong hypergraph saturation. Assume and . Let with basis . Choose distinct real numbers and let be the kernel of the matrix whose column is
Every columns are linearly independent by the Vandermonde determinant, so . Form the quotient vector space
For each -set , let be the image in of the exterior product . These images span .
For an -set , let be its coordinate subspace. The matrix restricted to has rank , so has dimension . The wedge of a basis of this intersection is a nonzero vector
Every coefficient is nonzero. Indeed, projection from onto the coordinates in is an isomorphism: a vector in its kernel would be supported on , where the columns are independent, and hence would be zero. That projection's determinant is precisely the corresponding wedge coefficient. Thus, in the quotient vector space,
For a missing edge, choose its strong-saturation witness . All other vectors in this relation come from present edges, so the missing edge's vector is in their span. Consequently the present-edge vectors already span all of . Their number is at least its dimension:
This is sharp. Take all -sets that meet a fixed -set . A missing edge is disjoint from , and on every other -set meets ; adding completes the required clique. The number of edges is exactly the boxed difference. If , no missing edge could have a witness, so a strongly saturated hypergraph must be complete; the substantive construction above is for the usual range .
For the set-pair problem, write and choose . If , the cross-disjointness implies that is in neither nor . In particular, the witnesses are distinct. Let ; each and contains exactly its own witness from .
Choose two different indices . The sets and are disjoint, lie outside , and have sizes and . Hence
For equality, partition the ground set into disjoint sets with sizes , respectively, and enumerate as . Set
Then is for and empty otherwise. This realizes equality whenever the bound permits . The argument is a diagonal-intersection set-pair bound, with no additional assumptions on intersections among the or among the .
Use the standard orientations on the three spheres and the complex orientation on Complex projective space. Let satisfy . The cohomology ring of complex projective space is . The Künneth theorem gives
Write the induced map on cohomology as with integers . Naturality and graded commutativity of the cup product give
The mapping degree is therefore . This is the factorial degree obstruction for products of two-spheres. Every positive value is a positive multiple of six, so the least possible positive degree is at least .
To attain it, identify each oriented sphere with . Send three projective linear forms to the coefficients of their product:
where
No product of nonzero linear forms is the zero polynomial. Rescaling any factor rescales all coefficients by the same nonzero scalar. The map is therefore well-defined and is a holomorphic map on the products of projective charts.
Choose a homogeneous cubic with three distinct roots, all in an affine chart. Its preimages are exactly the orderings of its three projective linear factors. In root coordinates, the derivative of the elementary-symmetric coefficient map has determinant equal, up to sign, to the Vandermonde determinant, the product of the three pairwise root differences. This is nonzero for distinct roots, so all six preimages are regular. A nonsingular complex-linear derivative preserves the underlying real orientation, since its real determinant is the squared absolute value of its complex determinant. Each preimage consequently contributes to the mapping degree. Hence
This polynomial multiplication map to complex projective space provides the requested example without assuming that a prescribed cohomology homomorphism is realizable by a continuous map.
The Vandermonde determinant is
Indeed, the determinant is an alternating polynomial, hence divisible by every . Both sides have degree , and comparison of the coefficient of gives constant one. This is an identity over the integers, so reducing its coefficients modulo a prime number preserves it. For , two residues coincide and the determinant vanishes. For , choose all elements of once to obtain a nonzero determinant.
For the ordering , this determinant is . If is odd, put . Wilson theorem gives . Pairing the factors with indices and , and leaving unpaired, gives
Every distinct ordering changes the determinant by its permutation sign; repeated residues give zero. Thus the possible values are for odd , and for .
Use Shamir's secret sharing: choose independent uniform , and engrave the shares , where and the are distinct nonzero field elements. We may take ; otherwise use a sufficiently large finite field extension and an agreed integer encoding. Any shares determine by polynomial interpolation and hence . Given any shares and any proposed , their equations in the coefficients have a unique solution: the coefficient matrix has determinant times a nonzero Vandermonde determinant. Since the coefficients were uniform, the observed shares have the same distribution for every . Thus they give no information about the secret.
For the fake, reduce its integers to field elements and first check that its abscissa is distinct and nonzero. Random collisions or a zero abscissa are immediately detectable and have probability ; the following conclusions concern the overwhelmingly likely distinct-abscissa case.
With shares, there is always a unique degree-at-most- interpolating polynomial. If all shares are genuine it gives the correct secret. If one is fake, it normally gives the wrong secret, with probability conditional on a uniform fake ordinate, but the inconsistency is undetectable from those shares. The data do not certify which case has occurred.
With shares, genuine shares are consistent with one such polynomial. A fake is inconsistent with probability , so it is usually detected as an inconsistency. However, omitting each of the shares in turn gives possible polynomials. If the data are inconsistent, their constant terms are distinct: two candidate polynomials with the same constant term agree at zero and at their common abscissae, hence agree identically, which would make all the data consistent. The secret is narrowed to possibilities, but the fake is not identified.
With shares, at least are genuine. There is a unique degree-at-most- polynomial agreeing with at least shares: two candidates would agree on at least abscissae and hence coincide. Find it by deleting each share and checking consistency. The secret is recovered uniquely, and the fake is identified unless it happens to lie on the genuine polynomial, in which case it is harmless.