A daring escape past y^2=x^3+x+3 over F14641
I was sent a lovely little paper last June about visualizing elliptic curves over finite fields and you just know I had to draw about it. Anyway now itās space and piracy is involved!

seen from Italy
seen from China

seen from Malaysia
seen from China

seen from Malaysia

seen from China

seen from Japan

seen from Malaysia
seen from United States
seen from United States
seen from China

seen from United States
seen from Türkiye

seen from United States
seen from United States

seen from Türkiye

seen from Malaysia
seen from T1

seen from Malaysia
seen from T1
A daring escape past y^2=x^3+x+3 over F14641
I was sent a lovely little paper last June about visualizing elliptic curves over finite fields and you just know I had to draw about it. Anyway now itās space and piracy is involved!

Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch ⢠No registration required ⢠HD streaming
an attempt towards yet another notion of āa derivative for finite fieldsā
I meant to do this as a full write-up thing, with pretty pictures and such, but I decided that Iām just going to start saying what Iāve already got, and re-blog this post with additions to this later, so that I actually ever get any of it posted. So, letās get this post started.
If you have any feedback on the way I have written this (ideally, how to improve my writing for things like this), I would appreciate it!
Part 1 : Preliminaries, the definition, and some basic parts of the results
Part 1, Section 1: Preliminaries
At least two notions of derivatives for functions over finite fields have already been proposed, the Hasse derivative, and the Negacyclic derivative (citation : āIntroducing an Analysis in Finite Fieldsā by de Oliveira and deSouza )
Somewhat like the linked paper, I am partially motivated by the idea of a āunit circleā using finite fields. However, in this case, I am motivated by analogy with complex analysis.
Where q is a prime power (or just a prime) congruent to 3 (mod 4), there is no element x of Fq such that x2=-1 (see ...elsewhere... for a proof of this, or if you just want a citation, not a proof, here or here), and therefore, we can adjoin an element i to the field, such that i2=-1, to produce a field Fq[i] .
Now, for any finite field with characteristic not equal to 2, half of the non-zero elements are the square of some non-zero element, and half are not . The elements which are, are called āquadratic residuesā (for example, in Fq where q is 3 mod 4, -1 is not a quadratic residue. However, in Fq[i], it is a quadratic residue, as i2=-1.). (the reason that exactly half of the (non-zero) elements are quadratic residues is because (-x)2=x2, so 2 non-zero elements get mapped to each (non-zero) quadratic residue, so, there are half as many quadratic residues as there are non-zero elements. This doesnāt work in the fields of characteristic 2, because in those fields, -x=x.)
[for the remainder of this post, and probably any other posts in sequence with this one, q will always be assumed to be congruent to 3, mod 4 (unless possibly if stated otherwise, in a later post)]
In this analogy with the complex numbers, we are treating the field Fq as being analogous to the real numbers, and treating the quadratic residues of Fq as being analogous to the positive numbers. This works nicely, as the non-zero non-quadratic residues are exactly the additive inverses (ānegativesā) of the quadratic residues. However, the analogy doesnāt extend too far, as the āpositive numbersā in this analogy, are not closed under addition (though they are under multiplication and division).
All of what Iāve said in this post so far is definitely things Iāve seen elsewhere, and are well known. In the following I donāt remember exactly which of the things Iāve read elsewhere.
Now, I want a notion of the unit circle in Fq[i] . So, this should be those points z such that |z|2=1 , yeah? So, what is |z|2?
Well, of course, when z=x+y*i for x and y āreal numbersā, (by which, in this context, I actually mean elements of Fq, rather than the actual real numbers), then |z|2=|x+iy|2 is of course x2+y2.
So, for how many elements z of Fq[i] is |z|2=1 ?
for any c in Fq , |cz|2=|-cz|2=c2 * (x2 + y2) = c2 * |z|2. This scales |z|2 by a quadratic residue. So, for any element z of Fq[i], there are 2 elements c, -c of Fq that z can be scaled by, such that, if |z|2 is a quadratic residue of Fq (so, if it is āpositiveā), then |cz|2=1 , and otherwise, such that |cz|2=-1 .
Well, thatās kind of a weird idea, isnāt it. Something having a negative absolute value squared. Nevertheless, we continue.
Oh, one side note : you may be concerned about āhow do we know that the āabsolute value squaredā of one of these elements wonāt be zero?ā. If this were the case, it would be because x2+y2=0, and so x2=-y2, and that therefore 1=-y2/x2=(x/y)2 and that therefore -1 would be a quadratic residue of Fq , which we know never happens when q is congruent to 3 mod 4. Moving on.
So, each āline through the originā (i.e. for each fixed nonzero z in Fq[i], the set {c*z : c in Fq}) contains either 2 points with āsquared magnitude 1ā³ or 2 points with āsquared magnitudeā -1. Because there are q2-1 nonzero elements of Fq[i] , and each of these ālinesā has q-1 non-zero points on it, 2 of which with āsquared magnitudeā 1, or āsquared magnitudeā -1, there are therefore 2*(q2-1)/(q-1)=2*(q+1) points in Fq[i] with āsquared magnitudeā either 1 or -1 .
As might or might not be expected, |z1*z2|2=|z1|2 * |z2|2 . (try proving this yourself if you are not convinced.)
Therefore, these 2*(q+1) points are closed under multiplication.
As the non-zero elements of a finite field form a cyclic group under multiplication, these 2*(q+1) elements also form a group under multiplication.
Exactly half of them have āsquared magnitudeā -1 , and the half that has āsquared magnitudeā 1, is a subgroup of it.
Therefore, what we are calling our āunit circleā is the q+1 elements of Fq[i] with āsquared magnitudeā 1. We will call this set S, and the larger set with 2*(q+1) elements , S+/- . We might occasionally call S āS+ā in order to emphasize that we mean the smaller set, but probably not all that often, because using the superscripts is slightly inconvenient.
Part 1, Section 2 : The motivation for the definitions, and the definitions
Now! Now we have the preliminaries out of the way, letās get on to the actual idea!
The idea is inspired by Cauchyās Differentiation Formula , in particular, applied when integrating around the unit circle.
Cauchyās Differentiation Formula states that when f(z) is a complex differentiable function on some simply connected open region of the complex plane, and c is a point in that region, then a contour integral in the counterclockwise direction around c of f(z)/((z-c)(n+1)) , times n!/(2*pi*i), is equal to the n-th derivative of f evaluated at c.
Ā Or, to steal a picture from Wikipedia
(except they called the variable āaā instead of ācā).
My idea was to, unlike in the complex analysis case where this result is a theorem that comes after defining what complex differentiation means, to instead use this formula as a basis for defining a type of derivative for functions over certain finite fields (specifically, those finite fields for which the notion of the unit circle described above, works).
So, to use something analogous to
to define the derivative of f at c, where the contour integral is the unit circle, except translated to be centered at c,.
That is,
when
. Which is,
(Not sure why tumblr scaled up this image more than the other ones. Oh well.)
now, because we are trying to do this in our finite field thing, we of course do not actually have an actual integral, so we just treat it as a sum. Similarly, instead of eiĪø for different theta in order to produce the different points on the unit circle, we just make the sum be over the points in the unit circle directly, as we havenāt defined a notion of ez in our finite field.
So, remembering that S is the set we are treating as analogous to the unit circle, we get
And, because the number of elements in our āunit circleā is q+1, and this seems the most natural analogy to the value of 2*pi , and, in addition, q+1 is congruent to 1 mod p (where p is the characteristic of the field), it seems reasonable, in the analogy, to replace the 2*pi term in the denominator there, with 1.
Also, the i term inside the sum cancels with the 1/i as the coeffecient of the entire sum,
and the ((c+s)-c) is of course just s, and (f(c+s)/s2)*s is, of course, just (f(c+s)/s) , this all simplifies down to:
Which is nice and simple.
But, what does this operation actually act like? Is there any good reason that it should deserve the name ādifferentiationā?
You may want to try computing it out for some simple functions, like 3z , or z2 - 1 or the like, to check that it indeed does produce the values that one would expect for the derivative of such functions.
One can also plainly see that this operation is linear on the vector space over Fq[i] which is the set of functions from Fq[i] to Fq[i] ( so, deriv(a*f + b*g)=a*deriv(f)+b*deriv(g) ) , and also that it is translation invariant, which are both appropriate properties for differentiation.
Now, this operation can be applied to any of these functions from the field to itself, but there are many functions from the complex plane to the complex plane that are not differentiable. As such, I thought to look for a definition ofĀ ādifferentiableā which would be appropriate.
So, for this, I thought to base it on the Cauchyās Integral Formula
and, by going through the same sort of analogy, we arrive at
as a proposed equation which should hold whenever the function is ādifferentiableā. I suggest taking this equation as the definition of a function f from Fq[i] to Fq[i] being ādifferentiableā.
Part 1, Section 3 : Some results
Note that, for the same linearity reasons as with the ādifferentiationā definition above, the ādifferentiableā functions form a linear subspace of the full space of functions (as they should).
I have also shown (but donāt include the proof here right now, because Iād like to get this post out tonight, and it is almost midnight) that if a function is ādifferentiableā in this sense, then the āderivativeā of that function is also differentiable in this sense. So, any function which is once differentiable is infinitely differentiable, just like in the actual complex numbers! I think thatās pretty cool.
I have also shown that any polynomial of degree up to q is ādifferentiableā in this sense, and also that the āderivativeā is what one would expect for polynomials for when the degree is at most q. (zq+1 is not ādifferentiableā in this sense, and zq+2 , if you go through with the definition of the ādifferentiationā despite it not being ādifferentiableā results in like, 1 + [the derivative you would expect] , iirc. I might be remembering with an off by one error. Anyway, it has to do with the binomial expansion of stuff having a power of s which is divisible by q+1 . I intend to explain why later. )
I suspect that the ādifferentiableā functions turn out to be exactly the polynomials of degree at most q, but I have not proven this to be the case. (yes, unfortunately this means that there are no sine and cosine functions here which have sineā(x)=cos(x), cosā(x)=-sine(x) . However, I think this can maybe be recovered in a slightly different context. More on this later when I figure it out maybe?)
I think Iāve shown that, if that is the case, then a ādifferentiableā function is uniquely determined by its value on the unit circle (or any translate of it), which matches with actual complex analysis quite nicely!
Generally, these definitions appears to give results that mirror complex analysis results quite nicely!
Part 1, Section 4 : etc.
Thank you very much for reading.
Please let me know if you would like clarification on any part of this post, or if you have any advice for how I could improve it, or how I could improve future math things I write.
Thank you!
Finite Fields
Modular Arithmetic
For integers $m$, $n$ and $k$ ($k>1$) we say that $m\equiv{}n\pmod{k}$ if k divides $m-n$.
$6\equiv{}1\pmod{5}$ because $6-1=5=1*5$
$11\equiv{}1\pmod{5}$ because $11-1=10=2*5$
$17\equiv{}2\pmod{5}$ because $17-2=15=3*5$
$3\not\equiv{}1\pmod{5}$ because $3-1=2$ and $5$ does not divide 2
When working mod $k$ we say that $n$, $n+k$ and $n+2k$ are all equivalent. So every integer $n$ is equivalent to one of $\{0,1,2,...,k-1\}$. We find this value by dividing $n$ by $k$ and taking the remainder. We'll denote this by $n\%k$.
We define the group $\mathbb{Z}/k\mathbb{Z}$ as $(\{0,1,2,...,k-1\},\cdot,0)$ where $a\cdot{}b=(a+b)\%k$. Here is an addition table for $k=6$:
$$\begin{array}{c|cccccc} \texttt{+} & 0 & 1 & 2 & 3 & 4 & 5 \\\ \hline 0 & 0 & 1 & 2 & 3 & 4 & 5 \\\ 1 & 1 & 2 & 3 & 4 & 5 & 0 \\\ 2 & 2 & 3 & 4 & 5 & 0 & 1 \\\ 3 & 3 & 4 & 5 & 0 & 1 & 2 \\\ 4 & 4 & 5 & 0 & 1 & 2 & 3 \\\ 5 & 5 & 0 & 1 & 2 & 3 & 4 \end{array}$$
We can also define the monoid $M_{k}=(\{1,2,...,k-1\},\cdot,1)$ where $a\cdot{}b=(ab)\%k$. Here's the multiplication table for the non-zero elements of $\mathbb{Z}/6\mathbb{Z}$
$$\begin{array}{c|ccccc} \times & 1 & 2 & 3 & 4 & 5 \\\ \hline 1 & 1 & 2 & 3 & 4 & 5\\\ 2 & 2 & 4 & 0 & 2 & 4\\\ 3 & 3 & 0 & 3 & 0 & 3\\\ 4 & 4 & 2 & 0 & 4 & 2\\\ 5 & 5 & 4 & 3 & 2 & 1 \end{array}$$
Multiplication by this monoid's elements distributes across addition and thus $\mathbb{Z}_{k}=(\{0,1,2,...,k-1\},+,\times{},0,1)$ is a ring. It's also commutative because integer multiplication is commutative.
In the above table we can see that there's an inverse element for 5 and 1 but not 2, 3, and 4. In general an element a of the monoid $\mathbb{Z}/k\mathbb{Z}$ will have an inverse iff (if and only if) $gcd(a,k)=1$. If $gcd(a,k)>1$ then we say that a is a zero divisor because there exists a $b\neq{}0$ in $\mathbb{Z}/k\mathbb{Z}$ for which $ab=0$. For $\mathbb{Z}_{k}$ to be a field it is necessary and sufficient for every element to have an inverse. This happens if and only if $k$ is prime.
For every prime $p$ there we say that there is only one field of order $p$ up to isomorphism. This means that given any two fields $A$ and $B$ of order $p$ I can construct a bijective function $f:A\rightarrow{}B$ such that for any $a,b\in{}A$ $f(a\times{}b)=f(a)\times{}f(b)$ and $f(a+b)=f(a)+f(b)$. Therefore $B$ is just $A$ with the elements renamed by the function $f$. Since there is only one field of order $p$ up to isomorphism we can talk about the field of order $p$, which we denote GF(p).
Next time we will discuss literally all of the other finite fields.
Finite fields are as basic to mathematics as the telescope is to astronomy.
Mark Ronan, _symmetry and the monster_
another odd thing with finite fields
[EDIT: I think Iāve now basically figured out how to show why this is true. It all comes down to the sum of x^n over all x in F_p being -1 if n is a positive multiple of p-1 and 0 otherwise, some algebra, and an alternating sum of binomial coefficients.... I think.] [EDIT2: Yeah, I had made a small error in showing why, but I fixed it, and it is fairly straightforwards, and the description in the first edit is basically correct.]
it seems (though I havenāt proven it) that if one takes the polynomial which is the first p terms of the taylor series for exp(x), and evaluates it at n*i in Fp[i] for n from 0 to p-1 (if p is congruent to 1 mod 4 instead of to 3, then instead of getting a field when adjoining an element i to Fp such that i2=-1, one gets a ring which has a zero divisor, but this does not impede doing this calculation, and the result appears to be the same) and then takes the ānorm squaredā of each of these (the sum of the squares of the real and imaginary parts), and then adds all of these up over each n from 0 to p-1, it appears that one always gets -1 (or if you prefer, p-1 ).
(this pseudo-exp function canāt give what Iāve been calling the unit circle for Fp[i] , like the actual exp function does for i*x for real x, because there are one too few values in Fp to fit all of them, and so it couldnāt possibly be that the values are exactly the ones with ānorm squaredā equal to 1, and indeed I havenāt seen them have that as the ānorm squaredā except at n = 0 )
This seems odd to me, and I have no real explanation for why this should be the case.
Note again that I havenāt proven this, so possibly Iām wrong and it doesnāt always hold. Iāve only tested this for primes up to 19.
I am partially writing this post so I donāt forget about it.

Anya is live and ready to show you everything. Watch her strip, dance, and perform exclusive shows just for you. Interact in real-time and make your fantasies come true.
Free to watch ⢠No registration required ⢠HD streaming
Conjecture: the space of functions in the fields Fq[i] which Iāve discussed which are ādifferentiableā in the way Iāve defined, is, rather than being q dimensional, is instead p-1 + p*((q^2 - 1)/(p^2 - 1)) dimensional .
Iāve checked programmatically that this works for q=3,7,11, and 27. For q=3,7,11, and in general whenever q = p a prime,Ā this expression simplifies to 2p-1 .
However, to check this programmatically for the next smallest prime power which is not a prime, well, that would be for q=3^5 , and would involve doing row reduction mod 3 on a 3^10 by 3^10 matrix, which, as it would have a little over 3 billion entries, I think might take like 2-5 days to run with the not-optimized code I wrote. Or, possibly be entirely infeasible, depending on how the algorithm scales, which I havenāt checked carefully. The algorithm is an entirely naive algorithm, and might have bad runtime complexity. Actually, yeah, I think it might have runtime complexity of, best case around q^2 * (q^2 * (q^2 - 1))/2 , so, O(q^6) , but probably a bit worse. so, with q=3^5, that has 3^30 . Comparing that to the q=3^3 case, which has 3^18 . Ok, so it should probably take around 3^12 times as long? And, it took less than a minute to run, probably close to half a minute. 1 minute * 3^12 / (60 (minute/hour) * 24(hour/day)) is about 369 days. Ah. Thatās more than 5. Well, this is only an estimate. Maybe I will try partially running it to see fast it gets through parts of the task.
The ((q^2 - 1)/(p^2 - 1))Ā part of the expression is nice. It feels promising. Where q = p^r , it is [r]_{p^2} . If we take Fq[i] as a vector space over Fp[i], ((q^2 - 1)/(p^2 - 1)) is the number of 1d subspaces of it.
ok, I've shown that for any finite vector space V (with dimension at least 1) over the field Z/pZ with p an odd prime, and any set S ā V s.t. |S| ā” 1 (mod p), and where S doesn't contain 0, and is closed under negation, the matrix M indexed by elements of V such that M(x,y) =( -1 if x-y=0, 1 if x-y ā S, 0 otherwise) has determinant ā” 0 (mod p)
In the way I definedĀ ādifferentiableā for certain functions in certain finite fields earlier, a function being ādifferentiableā ends up being equivalent to it being in the kernel of a matrix that has these properties. So, I already knew that these matrices had determinant 0 in that case, but Iām hoping that this alternate way of showing it will be helpful for showing things about the rank of these matrices, by pointing to a way of finding the invariant factors of the matrices, by finding the determinants of their minors.
The way I showed this is by the definition of the determinant of a matrix as: āĻsign(Ļ)ā(v ā V)M(v,Ļ(v)) . I split this into 2 cases, those for which Ļ is invariant under translation all elements of V, and those for which it is not.
For M with the properties described above, translating Ļ by an element c of V does not change the value ofĀ r(Ļ) := sign(Ļ)ā(v ā V)M(v,Ļ(v))
(To clarify, what I mean by ātranslationā is that, the translation of Ļ by c in V is Ļc such that for all x in V, Ļc(x)=Ļ(x-c)+c, equivalently, Ļc(x+c)=Ļ(x)+c . By āarenāt changed byā I mean that Ļc = Ļ . )
āpermutation Ļ1 is a translation of Ļ2 ā is an equivalence relation, and the elements of each equivalence class can be put into correspondence with a subspace of V (or, better, a quotient of V by the subspace of V under which Ļ1 (or, equivalently, Ļ2) is invariant under translation).
For the permutations Ļ of V which are not left unchanged by all translations, these equivalence classes will each have a number of elements divisible by p.
and, again, r(Ļ) is constant on each of these equivalence classes. So, summing r(Ļ) over all the Ļ which arenāt invariant under all translations, has a sum of 0 (mod p) .
Now, the other Ļ, which arenāt changed by any translation, are such that for all v in V, Ļ(v)=v+Ļ(0). (this should be a fairly simple exercise for the reader to show. Just apply the definition I give of ātranslationā above.) And, the only ones such that r(Ļ)ā 0 are the ones where either Ļ(0)=0, or Ļ(0)āS . Because for the product ā(v ā V)M(v,Ļ(v)) to be non-zero, must have M(v,Ļ(v)) non-zero for all v in V, and so much have v-Ļ(v) either 0 or in S, and in particular, must have 0-Ļ(0)=-Ļ(0) be either 0 or in S, and so, as S is closed under negation, Ļ(0) must be either 0 or in S.
For the translation-invariant permutations Ļ such that Ļ(0)āS , r(Ļ)=1 , because the product part ā(v ā V)M(v,Ļ(v)) is a product of all 1s, and the sign(Ļ) part, well, Ļ is comprised of |V|/p cycles, each of length p, and a cycle with an odd length has sign 1, and so the whole permutation also has sign 1.
The identity permutation has sign 1 as well, but has ā(v ā V)M(v,Ļ(v)) = ā(v ā V)M(v,id(v)) = ā(v ā V)M(v,v) = ā(v ā V)(-1) = (-1)|V| = -1 . So, r(id)=-1 .
For the translation invariant permutations for which Ļ(0) is neither 0 nor in S, r(Ļ)=0. So, the sum over the translation-invariant permutations Ļ of r(Ļ) is 1*|S| + (-1)*1. And, |S| ā” 1 (mod p), and so this sum is ā”Ā 1 + (-1) = 0 (mod p). So, adding this part together with the parts that arenāt translation invariant, which was also ā” 0 (mod p) therefore, āĻ r(Ļ) = āĻsign(Ļ)ā(v ā V)M(v,Ļ(v)) ā” 0 (mod p) i.e. the determinant of M is ā” 0 (mod p) , as claimed.
I skipped describing some of the steps of the argument in this post, but the argument above is the gist of it.
Will a similar method allow me to show anything about the minors of such a matrix M? I guess I will find out.
More complex analysis over finite fields
So, Iāve been looking a bit more at the āwhat if you try to do complex analysis-y stuff but with finite fieldsā. (for most recent previous post on this topic, see [here] , and for all my posts on the topic, see :Ā https://tilde-he.tumblr.com/tagged/Finite-Fields , and especially https://tilde-he.tumblr.com/tagged/finite-field-derivative ) As part of trying to see what happens if we have the ācurveā we āintegrate overā be something other than āthe unit circle centered about the point we are concerned withā, as one of the simpler possible cases, I thought to try this with just, a circle centered around a different point.
This led to me attempting to evaluate this sum:
and, as part of that, finding that
. Unless Iāve made an error, this actually holds whenever S is the set of all powers of a (q+1)-th root of unity in some field, for any odd q > 0, not just in the fields relevant to this context.
But, in our context of q a prime power congruent to 3 mod 4, and working in the field Fq[i], we can use that to find that
.
So, if we wanted to evaluate the analogy of
for gamma the unit circle around 0, and c0 some point not on the unit circle, we end up with
.
If we plug in 0 for c0 in this, we get 1, as expected. If we plug in a point on the unit circle, we get an undefined result, also as expected.
If we plug in a point in S+/- which is not in S, i.e. a point with āsquared magnitude -1ā, then we get an amusing result. The set S+/- , which we might call āthe extended unit circleā, is, like the unit circle S, a cyclic group under multiplication, and it has 2*(q+1) elements. Every element of it which is not an element of S is a generator, and so has multiplicative order 2*(q+1). Raising such an element to the power q+1 results in an element with multiplicative order 2, i.e. results in -1 .
So, if we pick c0 to be on the extended unit circle, but not on the unit circle, this sum gives a result of 1/(1 - (-1)) = 1/2 .
Amusing!
With the actual integral, in the actual complex numbers, if we picked a c0 inside the unit circle, we would get a result of 1, and if it was outside the unit circle, we would get a result of 0. Here, we picked an element which isnāt quite on the unit circle, but is kind of as if it was, and we get a result of 1/2.
It is as if we get an answer of āwell, it is right in the middle of being inside and being outside of the unit circleā.
Now, Iām not sure that that interpretation should be considered ātrueā exactly, seeing as putting in other values of c0 donāt all give either 0,1, or 1/2, and, in fact, the result is never 0, so interpreting it this way seems a bit questionable.
But personally, I find this interpretation to be rather funny, and kinda cool.
Oh, also, remembering that xq+1 is like |x|2 , notice that this says that that, the result of that āintegrationā is 1/(1 - |x|2) . This seems to sort of suggest that the only point that is definitively āinsideā the unit circle is 0, and that all the other points in the field are perhaps, different levels of intermediate between being inside and outside of it, where the levels correspond to the different values of the ānorm squaredā of the different elements.
This weirdness, while pretty cool imo, seems to me to suggest that, unfortunately, the analogies with complex analysis probably donāt carry quite as far as Iām hoping. But I still think I can push them a bit further still.
As always, comments, feedback, and requests for clarification, are all welcome.