Write $e(t)=\exp (2\pi it)$ and use $\Vert t\Vert$ for distance to the nearest integer. The Dirichlet approximation theorem, in its pigeonhole form, says that for every real $\alpha$ and integer $Q\ge 1$ there are coprime integers $a,q$ with $1\le q\le Q$ and $|\alpha -a/q|\le 1/(qQ)$. Indeed put the $Q+1$ fractional parts of $0,\alpha ,\dots ,Q\alpha$ into $Q$ equal intervals; two lie in the same interval. Their difference gives $|q\alpha -a|\le 1/Q$, and reducing the fraction preserves the claimed bound. This includes rational $\alpha$.

For $t\ge s$, the finite geometric series has length $L=t-s+1$. When $\theta \notin \mathbb{Z}$,The last inequality uses the concavity of sine on $[0,\pi /2]$. The triangle inequality also gives $L$. At integer $\theta$ the sum has absolute value $L$, interpreting the reciprocal as infinity. Thus the precise exponential geometric sum bound isThe interval must be nonempty; for $t<s$ its sum is zero and its length should be defined as $\max (0,t-s+1)$, rather than using a potentially negative bound.

For the separated points, assume $Q\ge 2$ and $\delta >0$. An arc of length $2r\le 1$ contains at most $1+2r/\delta$ of the points, by ordering them along the arc. Points with $\Vert {\theta }_i\Vert \le 1/Q$ contribute $O(Q+{\delta }^{-1})$. In the dyadic annulus $2^j/Q<\Vert {\theta }_i\Vert \le 2^{j+1}/Q$, each summand is $O(Q{2}^{-j})$ and there are at most $1+2^{j+2}/(Q\delta )$ points. There are $O(\log (2Q))$ nonempty annuli, giving the stronger separated reciprocal-distance sumIf there is only one point the bound is immediate; otherwise $\delta \le 1/2$. The printed $\log Q$ requires a lower bound away from $Q=1$; $\log (2Q)$ avoids that endpoint defect.

A useful version of the quadratic Weyl inequality is the following, with $(a,q)=1$, $1\le q\le Q$ and $|\alpha -a/q|\le 1/(qQ)$:For $N\ge 2$, expand the square of this quadratic exponential sum by $h=n-m$:The exponential geometric sum bound therefore gives $|S{|}^2\ll N+{\sum }_{h\le N}\min (N+1,\Vert 2\alpha h{\Vert }^{-1})$. For $q\ge 8$, partition these $h$ into blocks of length at most $\lfloor q/4\rfloor$. Two different points in one block have difference $d$ with $0<|d|<q/4$. The reduced denominator of $2a/q$ is at least $q/2$, so $\Vert 2ad/q\Vert \ge 1/q$, whileThus the rotations $2\alpha h$ are separated by at least $1/(2q)$ in each block. The separated reciprocal-distance sum bounds each block by $O(N+q\log (2N))$. There are $O(N/q+1)$ blocks, and henceFor $q<8$ or $N<2$, the trivial bound supplies the same assertion with an absolute constant. The same proof applies to ${\sum }_{n=1}^{N}e(\alpha n^2)$, whose difference sums also have interval endpoints.

We finally prove a polynomial rate of quantitative quadratic recurrence, without using the optional finite-group assumption. For $0<\epsilon \le 1/2$, use the periodic triangular bump $b(t)=(1-\Vert t\Vert /\epsilon {)}_{+}$. It is ${\epsilon }^{-1}$ times the periodic convolution of two interval indicators, and therefore has the nonnegative Fourier coefficientsIts Fourier series is absolutely convergent, ${\sum }_r\hat{b}(r)=b(0)=1$, and the coefficient tail is ${\sum }_{|r|>R}\hat{b}(r)\ll 1/(\epsilon R)$. Suppose that $\Vert \alpha n^2\Vert \ge \epsilon$ for every $1\le n\le N$. Then ${\sum }_{n}b(\alpha n^2)=0$. Choose $R=\lceil C{\epsilon }^{-2}\rceil$ with a sufficiently large absolute $C$, so that the contribution of frequencies $|r|>R$ has absolute value at most $N\epsilon /2$. The zero frequency contributes $N\epsilon$. Since all coefficients are nonnegative and their sum is one, some $1\le r\le R$ must satisfyApply the Dirichlet approximation theorem to $r\alpha$ with $Q=N$, obtaining a reduced $a/q$, $q\le N$. The quadratic Weyl inequality then impliesSet $\epsilon =N^{-1/8}$. For sufficiently large $N$, the $N\log (2N)$ term is absorbed on the left, giving $q\ll {\epsilon }^{-2}\log (2N)$. The integer $n=rq$ consequently satisfiesMoreover the approximating integer is $arq$, andThis contradicts the assumed avoidance. Increasing the absolute constant handles the finitely many smaller $N$, uniformly for every real $\alpha$. Thus

For $\Re s>1$, the Euler products areThe Dirichlet character is completely multiplicative, and unique prime factorization expands each finite product into the terms of the corresponding Dirichlet series supported on those primes. Absolute convergence permits passage to all primes. More strongly, the absolutely convergent Euler product logarithm givessince the sum of absolute values is bounded by ${\sum }_{n\ge 2}{\sum }_{m\ge 1}{n}^{-m\Re s}/m<\infty$.

We prove nonvanishing of a nonprincipal Dirichlet L-function at one, including real Dirichlet characters. If $\chi$ is nonprincipal modulo $q$, periodicity and the given Orthogonality of Dirichlet characters bound $A_{\chi }(x)={\sum }_{n\le x}\chi (n)$ by $q$. Partial summation giveswhich is holomorphic for $\Re s>0$ by locally uniform convergence, including after differentiation. The principal Dirichlet character instead haswith a simple pole at one.

For a nonreal Dirichlet character, consider $P(s)={\prod }_{\chi \mathrm{mod}q}L(s,\chi )$. For real $\sigma >1$, its Euler product logarithm isThe given character inversion with $a=1$ makes each inner sum either $\phi (q)$ or zero, so $P(\sigma )\ge 1$. If $L(1,\chi )=0$ for a nonreal Dirichlet character, then $L(1,\overline{\chi })=0$ as well, since their values at real $s$ are conjugate. These are two distinct factors. All nonprincipal factors are holomorphic at one, and only the principal factor has a simple pole. Their two zeros would force $P(\sigma )\to 0$, a contradiction.

For a real nonprincipal Dirichlet character, suppose $L(1,\chi )=0$. Then $G(s)=\zeta (s)L(s,\chi )$ is holomorphic throughout $\Re s>0$: the supplied continuation of the Riemann zeta function has no other pole there, and the zero cancels the pole at one. On $\Re s>1$ its Dirichlet series has coefficientsTo check the sign explicitly, for a prime power $p^j$ the local sum is $j+1$ if $\chi (p)=1$, is $1$ for even $j$ and $0$ for odd $j$ if $\chi (p)=-1$, and is $1$ if $\chi (p)=0$. Multiplication over prime factors proves nonnegativity and $g_{m^2}\ge 1$. Also $g_n\le \tau (n)$, so termwise derivatives at $s=2$ are justified by absolute convergence:The disc $|s-2|<2$ lies in $\Re s>0$. Its Taylor series therefore converges at $s=1/2$, and Tonelli theorem givesThis contradicts holomorphy at $1/2$. It is the positive-coefficient argument behind the Landau theorem for a Dirichlet series with nonnegative coefficients, proved here rather than invoked. Thus $L(1,\chi )\ne 0$ for every nonprincipal Dirichlet character.

It remains to detect the primes. For real $\sigma >1$, the Euler product logarithm satisfiesuniformly as $\sigma \downarrow 1$: terms with $m\ge 2$ are bounded in absolute value by ${\sum }_{n\ge 2}{\sum }_{m\ge 2}{n}^{-m}/m<\infty$. For a nonprincipal Dirichlet character, a holomorphic logarithm of $L$ exists near one by the nonvanishing just proved. On a short real interval it differs from the Euler product logarithm by a fixed multiple of $2\pi i$, so the prime sum stays bounded. For the principal Dirichlet character, the simple pole instead givesApplying the supplied Orthogonality of Dirichlet characters for a reduced residue class $a$ now yieldsThe right side tends to infinity, whereas a finite set of primes would give a bounded left side. Therefore every residue class coprime to $q$ contains infinitely many primes, proving the Dirichlet theorem on primes in arithmetic progressions.

Use the Fourier transform convention $\hat{m}(t)=\int e^{-itx}dm(x)$. The complex measure is finite because ${\sum }_n|f(n)|n^{-\sigma }<\infty$. The Möbius divisor-sum identity, proved in the preceding solution, allows multiplication of absolutely convergent Dirichlet series and givesHere $\zeta$ is the Riemann zeta function. We prove the estimates in the intended range $1<\sigma \le 2$. A uniform estimate of the printed form for all $\sigma >1$ would be false: at $t=0$, $F(\sigma )\to 1$ as $\sigma \to \infty$, while its proposed upper bound tends to zero. A version valid for every $\sigma >1$ replaces $(\sigma -1{)}^{-3/4}$ by $1+(\sigma -1{)}^{-3/4}$.

For completeness, unique prime factorization and absolute convergence give $\zeta (s)={\prod }_p(1-p^{-s}{)}^{-1}$ andas the logarithm defined by that Euler product. The elementary nonnegative trigonometric polynomialtherefore proves the three-four-one inequality for Euler productsWe also need elementary uniform bounds for derivatives of the Riemann zeta function. For an integer $H\ge 1$, summation by parts givesThis continues the function to $\Re s>0$ with just the pole at one. For $1\le \sigma \le 2$, $|t|\ge 1$, choose $H=\lceil 2+|t|\rceil$. Differentiating $j$ times, the finite Dirichlet polynomial is bounded by ${\sum }_{n\le H}(\log n{)}^j/n{\ll }_j{\log }^{j+1}(2+|t|)$. Derivatives of the second term have the same bound, since $|s-1|\ge 1$. In the last term, differentiated integrands are bounded by $u^{-\sigma -1}(\log u{)}^j$, whose integral is $O_j(H^{-\sigma }{\log }^j(2H))$; multiplication by $|s|\ll H$ is harmless. It follows thatAs $\zeta (\sigma )\le 1+(\sigma -1{)}^{-1}$, the three-four-one inequality for Euler products gives, for $|t|\ge 1$,To handle bounded $t$, first note that $\zeta$ cannot vanish at $1+i{t}_0$ for $t_0\ne 0$: a zero of order $m\ge 1$ would make the three-four-one product $O((\sigma -1{)}^{4m-3})\to 0$, contradicting its lower bound one. At $s=1$, the reciprocal $F$ extends holomorphically with a simple zero, since the pole of $\zeta$ has residue one. Thus $F$ and all its derivatives are bounded on the compact rectangle $1\le \sigma \le 2$, $|t|\le 1$. This proves the requested reciprocal zeta bounds near the line one:

For the derivative estimate, repeatedly differentiate $F=1/\zeta$. Every term of $F^{(k)}$ is a constant timesThe preceding derivative bounds and reciprocal estimate bound this by $O_k((\sigma -1{)}^{-3(k+1)/4}{\log }^{3k+1}(2+|t|))$. Compact-height bounds supply the remaining range. Since ${\partial }_t^{k}F(\sigma +it)=i^k{F}^{(k)}(\sigma +it)$, this has exactly the requested dependence, with an explicit logarithmic exponent linear in $k$ for $k\ge 1$.

Here is the unsmoothing a logarithmically weighted sum argument with the normalization repaired. For real $v$,Indeed the Fourier transform of $u{e}^{-\sigma u}{1}_{u\ge 0}$ is $(\sigma +it{)}^{-2}$, so Fourier inversion gives the identity, also at $v=0$ by continuity. In a vertical contour integral the coefficient is $1/(2\pi i)$ and the differential is $ds=idt$. The printed real-$t$ integral has $dt$ with $1/(2\pi i)$ and is missing this factor of $i$.

Set $a_m=\mu (m)(\log m{)}^k$, taking $(\log 1{)}^0=1$ when $k=0$. Its Dirichlet series is $(-1{)}^k{F}^{(k)}(s)$. The logarithmically smoothed Perron formula, justified by absolute convergence, givesFor $x\ge 3$ choose $\sigma =1+1/\log x$. The integral of ${\log }^{3k+1}(2+|t|)/|\sigma +it{|}^2$ is finite, with a constant depending only on $k$, and $x^{\sigma }=ex$. Thus, with $\beta =3(k+1)/4$,For $0<h\le 1$, subtraction gives the exact finite-difference identityThe last sum is $O_k((x{h}^2+h)(\log x{)}^k)$, since there are $O(xh+1)$ terms. ConsequentlyFor $k\ge 3$, choose $h=(\log x{)}^{(\beta -k)/2}$ to get exponent $(\beta +k)/2=7k/8+3/8$. For $0\le k<3$, the trivial bound $O_k(x(\log x{)}^k)$ is already no larger than that estimate. The extra $(\log x{)}^k$ term is absorbed for fixed $k$. HenceThis also yields the cancellation needed for the Prime number theorem. Choose a fixed $k>3$, discard $m\le \sqrt{x}$ at cost $O(\sqrt{x})$ for the unweighted sum, and use partial summation with $(\log m{)}^{-k}$ on the rest. The displayed bound gives $M(x)=O_k(x(\log x{)}^{-k/8+3/8})=o(x)$; the preceding solution then gives $\psi (x)\sim x$.

Write $1(n)=1$ and let $\epsilon$ be the Identity for Dirichlet convolution. The Möbius function uses the empty-product convention $\mu (1)=1$; the Von Mangoldt function has $\Lambda (1)=0$. We first establish all the arithmetic function identities needed below. Every integer divisor of $n$ contributes one to $\tau (n)$, so $\tau =1\ast 1$. If $n>1$ has $r$ distinct prime factors, the squarefree divisors correspond to their subsets andAt $n=1$ the sum is one. Thus $\mu \ast 1=\epsilon$. Writing $n={\prod }_p{p}^{v_p(n)}$, the only divisors with nonzero Von Mangoldt function are $p,p^2,\dots ,p^{v_p(n)}$, and henceThe Dirichlet convolution is commutative by replacing $d$ with $n/d$, and associative because either bracketing sums $f(a)g(b)h(c)$ over $abc=n$. ConsequentlyThese are consequences of the definitions, rather than unproved invocations of Möbius inversion.

To identify the constant, integrate on each interval $[j,j+1)$:The tail is $O(1/J)$, since the integrand is at most $2/x^2$ for $x\ge 2$. Summation therefore gives $\gamma ={\lim }_{J\to \infty }(H_J-\log (J+1))$, where $H_J$ is the harmonic number, and $H_J=\log J+\gamma +O(1/J)$. Thus this is Euler's constant.

Put $r=\lfloor \sqrt{N}\rfloor$. Counting pairs of positive integers whose product is at most $N$, and subtracting the square counted twice, gives the Dirichlet hyperbola method identitySince $r=\sqrt{N}+O(1)$, the harmonic number estimate yieldsThe increasing natural logarithm also satisfies ${\sum }_{n\le N}\log n=N\log N-N+O(\log (2N))$ by comparison with its integral. Subtracting proves

For the second implication, denote the Mertens function by $M(x)$ and the Second Chebyshev function by $\psi (x)$. Apply the proved Dirichlet convolution identities to $b(n)=\tau (n)-\log n-2\gamma 1(n)$:Summing this identity over integers up to $N$ gives the exact relationFix an integer $K\ge 2$. The contribution to $E(N)$ from $d\le N/K$ has absolute value at mostFor $d>N/K$, group by $j=\lfloor N/d\rfloor$. This gives exactlyunder the assumed cancellation $M(x)=o(x)$; extending that assumption from integers to real $x$ uses $M(x)=M(\lfloor x\rfloor )$. Therefore ${\mathrm{limsup}}_{N\to \infty }|E(N)|/N\ll K^{-1/2}$. Letting $K\to \infty$ proves the prime number asymptotic from Mertens cancellation:

A one-variable main conjecture for CM elliptic curves compares a torsion arithmetic Iwasawa module with a measure interpolating special Hecke L-function values. The classical bounded-measure formulation uses a prime of good reduction which splits in the CM field, hence gives ordinary reduction. We first describe the one-prime division-tower formulation, including the analytic construction, and then explain its cyclotomic Selmer counterpart and the change at supersingular primes.

For a precise basic setting, take $E/K$ with complex multiplication by ${\mathcal{O}}_K$, $K$ of class number one, and a split prime $p>3$ of good reduction, prime to the Hecke conductor $\mathfrak{f}$. Write $p{\mathcal{O}}_K=\mathfrak{p}\bar{\mathfrak{p}}$, choose the $p$-adic embedding corresponding to $\mathfrak{p}$, and let $\pi ={\psi }_E(\mathfrak{p})$. Its formal group of an elliptic curve has height one, with $[\pi ](t)\equiv t^p(\mathrm{mod}\mathfrak{p})$. The one-prime division towerhas $\Delta$ of order prime to $p$ and $\Gamma \simeq {\mathbb{Z}}_p$. Its CM character $\kappa :G\to {\mathbb{Z}}_p^{\times }$ describes the action on the prime-primary Tate module. Let $F=F_{\infty }^{\Gamma }$ and $\Lambda =I[[\Gamma ]]\simeq I[[T]]$. We extend coefficients to the complete unramified ring $I$ to include character values and a CM period.

Let $X$ be the Galois group over $F_{\infty }$ of the maximal abelian pro-$p$ extension unramified outside primes above $\mathfrak{p}$. Let $A$ be the analogous everywhere-unramified group, equivalently the norm inverse limit of the $p$-parts of the ideal class groups. Write $U$ for the norm limit of principal local units at $\mathfrak{p}$, $\mathcal{E}$ for the closures of global units in $U$, and $\mathcal{C}$ for the closures of elliptic units. Roots of unity and finite initial-layer errors are retained when formulating integral statements; after passage to a finite-character component they do not change a characteristic ideal.

The class-field unit sequence, obtained by taking norm limits in global Artin reciprocity, givesIn this ordinary one-prime tower, the unit and global-unit terms have the same Iwasawa rank, and the displayed quotients and $X,A$ are torsion on their character components. The equalityis the global-units/class-groups form of the CM main theorem. Multiplicativity of characteristic ideals in the sequence then givesThe analytic construction must identify the latter ideal with a genuinely interpolating p-adic L-function; it is not enough to rename an arbitrary characteristic power series as an L-function.

Here is that construction. For an auxiliary ideal $\mathfrak{a}$ prime to $6p\mathfrak{f}$, a suitably normalized rational elliptic function has divisor a multiple ofTranslate by a generator of the conductor torsion and take the product over its ray-class orbit. This produces a rational function $f_{\mathfrak{a}}(t)$ defined over $K$ which is a unit series at the identity. Evaluating it on compatible ${\mathfrak{p}}^n$-division points gives elliptic units. The reason for the norm relations is geometric: multiplication by $\pi$ groups the translated zeros and poles into fibers, so the product over $E[\mathfrak{p}]$ has the divisor of $f_{\mathfrak{a}}([\pi ]t)$. The normalization fixes the constant, giving the local identityThis is also the norm relation of the Coleman power series for a CM formal group interpolating the resulting local units.

An integral logarithmic correction makes the passage from those units to a bounded measure explicit. In the chosen split completion $K_{\mathfrak{p}}={\mathbb{Q}}_p$, putSince $[\pi ]t\equiv t^p(\mathrm{mod}p)$ and the coefficients of $f$ reduce to ${\mathbb{F}}_p$, the ratio is in $1+p{\mathbb{Z}}_p[[t]]$. For $p>2$, its logarithm divided by $p$ is integral. Constants are treated using the usual $p$-adic logarithm on units. This proves the integrality needed for the Frobenius-corrected logarithm; applying an uncorrected logarithm alone would not prove boundedness.

Choose an isomorphism $\eta :{\hat{\mathbb{G}}}_m\to \hat{E}$ over $I$, and normalize the CM period byThen $A_f(T)={\mathcal{L}}_f(\eta (T))\in I[[T]]$ is the Amice transform of a unique $I$-valued p-adic measure on ${\mathbb{Z}}_p$. The norm relation above givesthe first logarithmic sum is $\log f([\pi ]t)$ and the second is the same sum, because $[\pi ]Q=0$ and there are $p$ points. On the measure side the sum selects $p{\mathbb{Z}}_p$ and multiplies by $p$, so this identity says that the measure is supported on ${\mathbb{Z}}_p^{\times }$. Transport it to $G$ by the CM character and project to the desired component.

The moments can now be calculated rather than postulated. With $D=(1+T)d/dT$,The factor ${\pi }^k$ appears because $[\pi ]$ is multiplication by $\pi$ in the additive formal-logarithm coordinate. The remaining derivative is a Coates–Wiles homomorphism. The complex product for the elliptic function makes it a sum of shifted inverse powers of lattice elements. Grouping these lattice elements by ray-class ideals identifies that sum with $(k-1)!L_{\mathfrak{f}}({\bar{\psi }}_E^k,k)/{\Omega }_{\infty }^k$, multiplied by the auxiliary factor $N\mathfrak{a}-{\psi }_E(\mathfrak{a}{)}^k$. Here $L_{\mathfrak{f}}$ omits primes dividing the original conductor, including when the conductor of the power character becomes smaller.

Normalize the rational functions and matching complex and $p$-adic periods consistently, and remove the auxiliary factors by the distribution relations. They are evaluations of $N\mathfrak{a}-[\mathfrak{a}]$ in the Iwasawa algebra. On each finite-character component an auxiliary ideal can be chosen making this element a unit: its residues at $\mathfrak{p}$ and $\bar{\mathfrak{p}}$ can be prescribed independently by the Chinese remainder theorem. The resulting integral measure ${\mu }_E$ satisfies, on its branch and with $k$ in the corresponding residue class,The exact normalization of periods matters for this equality; multiplication by an integral unit does not affect the ideal in the main conjecture. Finite-order twists are obtained by inserting a character in the ray-class sums, with its local Gauss sum. The lattice calculation proves algebraicity of the normalized complex values, while the integral series construction proves their $p$-adic interpolation. These are different steps.

The Coleman measure map identifies $U_{\chi }$ with a rank-one Iwasawa algebra lattice, up to finite errors, and takes ${\mathcal{C}}_{\chi }$ to the ideal generated by the corresponding power series ${\mathcal{L}}_{\chi }$. The conjecture therefore has the concrete formIts proof uses the Euler system of elliptic units. Adjoining auxiliary ray moduli supplies norm relations with factors $1-{\mathrm{Frob}}_{\mathfrak{q}}^{-1}$. Derivative operators in the auxiliary cyclic groups produce Kolyvagin classes; their controlled valuations relate a new auxiliary prime to its ideal class. Chebotarev density theorem permits the required Frobenius choices. Successively choosing these primes bounds the class-group elementary divisors by the elliptic-unit index, giving the difficult characteristic-ideal divisibility. The opposite comparison comes from the class-number/unit-index formula and passage through the tower. Their equality, combined with the exact sequence above and the logarithmic computation, is the proof mechanism. The ordinary split-prime setting of this formulation is specified in Rubin's one-variable main-conjecture paper.

For completeness, the familiar cyclotomic formulation concerns a different tower. If $E/\mathbb{Q}$ has complex multiplication and good ordinary reduction at $p$, put ${\Gamma }_{\mathrm{cyc}}=\mathrm{Gal}({\mathbb{Q}}_{\infty }/\mathbb{Q})$ andFor a finite layer $L$, its Selmer group of an elliptic curve iswhere $S$ contains the bad primes and primes above $p$; at infinite level take the direct limit. Thus it imposes the local Kummer conditions and sits between rational points tensored with ${\mathbb{Q}}_p/{\mathbb{Z}}_p$ and the $p$-primary Tate–Shafarevich group. Its dual ${\mathcal{X}}_E$ is a torsion Iwasawa module, and the cyclotomic main conjecture isWith compatible reciprocity conventions, the ordinary function has the finite-character interpolationwhere $\alpha$ is the $p$-adic unit root of $X^2-a_{p}X+p$ and $\tau (\chi )={\sum }_{a\mathrm{mod}{p}^n}\chi (a)e^{2\pi ia/p^n}$; characters of this cyclotomic ${\mathbb{Z}}_p$-extension are even. The two-variable CM measure specializes to this line after the CM-character twist. Kummer theory, class-field descriptions of the prime-primary local conditions and control of finite-layer errors identify its algebraic counterpart with the displayed Selmer dual. The one-prime division tower is not itself the cyclotomic tower, so this requires the twist and specialization argument, not just changing its name.

Finally, at a good inert prime the curve has supersingular reduction. The ordinary unit root is absent, the unmodified cyclotomic Selmer dual is not torsion, and the ordinary bounded-function argument does not apply. For CM curves over $\mathbb{Q}$ and odd supersingular $p$, signed local trace conditions and signed functions give instead $\mathrm{char}{\mathcal{X}}_E^{\pm }=(L_p^{\pm }(E))$, as proved in Pollack and Rubin's supersingular main-conjecture theorem. Thus the ordinary hypotheses and the analytic local correction are essential parts of the essay's main-conjecture statement.

The construction must first specify the field of definition of the complex multiplication. Let $E/F$ be a CM elliptic curve and let $K$ be its geometric CM field, embedded by its action on an invariant differential. In characteristic zero this action is injective. Consequently every geometric endomorphism is defined over $F^{\prime }=FK$: a Galois automorphism fixing $FK$ fixes its differential scalar and therefore fixes the endomorphism itself. Initially assume $F$ already contains $K$; we return to the other case below.

Choose a complex embedding and an analytic complex uniformization of an elliptic curvewhere $\mathfrak{a}$ is a lattice in $K$, stable under the CM order $R$. It need not be the maximal order or a principal ideal. Its torsion is described by the finite adelic quotients of this lattice.

The input from the CM reciprocity theorem is precise: if $s$ is an idele of $F$, $n=N_{F/K}s$, and $\sigma ={\mathrm{Art}}_F(s)$, then $\sigma$ takes the CM torus to the torus with lattice $n_f^{-1}L$; on torsion the comparison is induced by multiplication by $n_f^{-1}$. This reciprocity statement comes from the ideal action on CM lattices: an ideal $\mathfrak{b}$ gives the isogeny to ${\mathfrak{b}}^{-1}L$, composition multiplies ideals, and adding torsion level structure removes automorphism ambiguity. The resulting action on algebraic CM points is the ray-class Artin action. This is the deep CM input, not an assertion that an arbitrary abelian Galois representation automatically comes from an algebraic Hecke character.

Because $\sigma$ fixes $F$, the algebraic curve $E^{\sigma }$ is $E$. Comparing the reciprocity uniformization with the original one therefore gives multiplication by a scalarThe scalar belongs to $K$: a complex scalar carrying one lattice contained in $K$ to another is the quotient of two nonzero lattice elements. Its torsion action isThe uniqueness of the torsion-compatible comparison is important: two possible scalars would induce the same action on all torsion, hence their difference would annihilate torsion of arbitrarily large order and be zero. Multiplying the torsion-action formulas for $s_f$ and $t_f$ now proves $a(s_f{t}_f)=a(s_f)a(t_f)$.

For $b\in F^{\times }$, Artin reciprocity sends its principal idele to the identity. The archimedean factors are complex and connected, so its finite part also has trivial Artin image. The preceding formula therefore givesIt follows thatis trivial on principal ideles and defines a character of the idèle class group of $F$. This establishes the multiplicativity and principal-idele condition, rather than merely prescribing Frobenius values and hoping that they extend.

We must still prove continuity and a finite conductor. For a finite place $v$ and a prime $\ell$ different from its residue characteristic, an idele supported on the units at $v$ has trivial $\ell$-component of its norm. Thus its action on the Tate module is exactly multiplication by $a(u)$. At a place of good reduction, inertia acts trivially, so $a(u)=1$. At a bad place, a CM curve has potentially good reduction, and inertia on the prime-to-residue-characteristic Tate module has finite image. Hence $a$ is trivial on an open subgroup of the local units there. There are only finitely many bad places. Together these facts give an open finite-congruence kernel on the unit ideles and prove continuity. The archimedean norm factor is already continuous. The potentially-good-reduction and inertia facts are the reduction-theoretic inputs in Serre and Tate's treatment of CM abelian varieties.

Consequently ${\psi }_E$ is a Hecke character. In ideal notation, for $b\equiv 1(\mathrm{mod}\mathfrak{f})$,so its infinity type of a Hecke character is the type determined by the chosen CM embedding, with the inverse archimedean norm in the idele convention. Nonmaximal orders merely contribute additional finite-level conditions; the proof retains their lattice and does not replace it by the maximal-order lattice without justification.

At a good prime $v$, choose a uniformizer idele and a prime $\ell$ different from the residue characteristic. Its norm has trivial $\ell$-component, so arithmetic Frobenius acts on the Tate module by ${\psi }_E(v)$. Specialization of prime-to-residue-characteristic torsion identifies this with the reduced Frobenius isogeny. ThusThe corresponding Hasse-Weil L-function factors as $L(E/F,s)=L({\psi }_E,s)L({\bar{\psi }}_E,s)$, including the local factors determined by inertia. This explains why the Hecke character encodes both the torsion representations and the Euler factors.

If $F$ does not contain $K$, apply the construction over $FK$. The two conjugate CM characters are exchanged by the nontrivial automorphism of $FK/F$, and the two-dimensional Galois representation over $F$ is their induced representation. In that case the natural description is $L(E/F,s)=L({\psi }_E/FK,s)$ by induction, rather than a pair of one-dimensional characters over $F$. Question 3 supplies a concrete example: $\mathbb{Q}$ does not define $[i]$, whereas $\mathbb{Q}(i)$ does. This completes the existence argument for an arbitrary CM curve over a number field, with its field of definition correctly accounted for.

The mapis an automorphism of the elliptic curve over $K$, fixes its identity point, and squares to $[-1]$. For the invariant differential on an elliptic curve $\omega =dx/(2y)$, it satisfies $[i{]}^{\ast }\omega =i\omega$. Thus $\mathbb{Z}[i]\subseteq {\mathrm{End}}_K(E)$, with the indicated embedding of $K$.

Under analytic complex uniformization of an elliptic curve $E(\mathbb{C})\simeq \mathbb{C}/L$, this automorphism acts as multiplication by $i$, so $L$ is stable under $\mathbb{Z}[i]$. It is a rank-one torsion-free module over the Gaussian integers. Since that ring is a principal ideal domain, $L=\Omega \mathbb{Z}[i]$. Every analytic endomorphism is multiplication by an $a\in \mathbb{C}$ with $aL\subseteq L$, which here says exactly $a\in \mathbb{Z}[i]$. Therefore the geometric endomorphism ring of an elliptic curve is $\mathbb{Z}[i]$, and all its elements are generated over $\mathbb{Z}$ by the displayed $K$-defined automorphism. Thus ${\mathrm{End}}_K(E)=\mathbb{Z}[i]$.

If an endomorphism is defined over $\mathbb{Q}$, its pullback on the rational differential $\omega$ has scalar in $\mathbb{Q}$. The differential action is injective in characteristic zero, because a nonzero isogeny of elliptic curves is separable and has nonzero differential. Its scalar must therefore lie in $\mathbb{Q}\cap \mathbb{Z}[i]=\mathbb{Z}$. Conversely integer multiplication is defined over $\mathbb{Q}$. Hence

Put $\lambda =1+i$. The valuations of the differences of the three nonidentity fourth roots of unity from $1$ areFor instance $2=-i{\lambda }^2$, and the other two differences are associates of $\lambda$. None is divisible by ${\lambda }^3$. The group $(\mathbb{Z}[i]/{\lambda }^3{)}^{\times }$ has $8-4=4$ elements, so the four units map bijectively to it. Every ideal prime to $\lambda$ consequently has a unique primary Gaussian integer generator.