Skip to main content
Logo image

Section 22.1 Structure of a Finite Field

Recall that a field F has characteristic p if p is the smallest positive integer such that for every nonzero element α in F, we have pα=0. If no such integer exists, then F has characteristic 0. From Theorem 16.19 we know that p must be prime. Suppose that F is a finite field with n elements. Then nα=0 for all α in F. Consequently, the characteristic of F must be p, where p is a prime dividing n. This discussion is summarized in the following proposition.
Throughout this chapter we will assume that p is a prime number unless otherwise stated.

Proof.

Let ϕ:ZF be the ring homomorphism defined by ϕ(n)=n1. Since the characteristic of F is p, the kernel of ϕ must be pZ and the image of ϕ must be a subfield of F isomorphic to Zp. We will denote this subfield by K. Since F is a finite field, it must be a finite extension of K and, therefore, an algebraic extension of K. Suppose that [F:K]=n is the dimension of F, where F is a K vector space. There must exist elements α1,,αnF such that any element α in F can be written uniquely in the form
α=a1α1++anαn,
where the ai’s are in K. Since there are p elements in K, there are pn possible linear combinations of the αi’s. Therefore, the order of F must be pn.

Proof.

We will prove this lemma using mathematical induction on n. We can use the binomial formula (see Chapter 2, Example 2.4) to verify the case for n=1; that is,
(a+b)p=k=0p(pk)akbpk.
If 0<k<p, then
(pk)=p!k!(pk)!
must be divisible by p, since p cannot divide k!(pk)!. Note that D is an integral domain of characteristic p, so all but the first and last terms in the sum must be zero. Therefore, (a+b)p=ap+bp.
Now suppose that the result holds for all k, where 1kn. By the induction hypothesis,
(a+b)pn+1=((a+b)p)pn=(ap+bp)pn=(ap)pn+(bp)pn=apn+1+bpn+1.
Therefore, the lemma is true for n+1 and the proof is complete.
Let F be a field. A polynomial f(x)F[x] of degree n is separable if it has n distinct roots in the splitting field of f(x); that is, f(x) is separable when it factors into distinct linear factors over the splitting field of f. An extension E of F is a separable extension of F if every element in E is the root of a separable polynomial in F[x].

Example 22.4.

The polynomial x22 is separable over Q since it factors as (x2)(x+2). In fact, Q(2) is a separable extension of Q. Let α=a+b2 be any element in Q(2). If b=0, then α is a root of xa. If b0, then α is the root of the separable polynomial
x22ax+a22b2=(x(a+b2))(x(ab2)).
Fortunately, we have an easy test to determine the separability of any polynomial. Let
f(x)=a0+a1x++anxn
be any polynomial in F[x]. Define the derivative of f(x) to be
f(x)=a1+2a2x++nanxn1.

Proof.

Let f(x) be separable. Then f(x) factors over some extension field of F as f(x)=(xα1)(xα2)(xαn), where αiαj for ij. Taking the derivative of f(x), we see that
f(x)=(xα2)(xαn)+(xα1)(xα3)(xαn)++(xα1)(xαn1).
Hence, f(x) and f(x) can have no common factors.
To prove the converse, we will show that the contrapositive of the statement is true. Suppose that f(x)=(xα)kg(x), where k>1. Differentiating, we have
f(x)=k(xα)k1g(x)+(xα)kg(x).
Therefore, f(x) and f(x) have a common factor.

Proof.

Let f(x)=xpnx and let F be the splitting field of f(x). Then by Lemma 22.5, f(x) has pn distinct zeros in F, since f(x)=pnxpn11=1 is relatively prime to f(x). We claim that the roots of f(x) form a subfield of F. Certainly 0 and 1 are zeros of f(x). If α and β are zeros of f(x), then α+β and αβ are also zeros of f(x), since αpn+βpn=(α+β)pn and αpnβpn=(αβ)pn. We also need to show that the additive inverse and the multiplicative inverse of each root of f(x) are roots of f(x). For any zero α of f(x), we know that α is also a zero of f(x), since
f(α)=(α)pn(α)=αpn+α=(αpnα)=0,
provided p is odd. If p=2, then
f(α)=(α)2n(α)=α+α=0.
If α0, then (α1)pn=(αpn)1=α1. Since the zeros of f(x) form a subfield of F and f(x) splits in this subfield, the subfield must be all of F.
Let E be any other field of order pn. To show that E is isomorphic to F, we must show that every element in E is a root of f(x). Certainly 0 is a root of f(x). Let α be a nonzero element of E. The order of the multiplicative group of nonzero elements of E is pn1; hence, αpn1=1 or αpnα=0. Since E contains pn elements, E must be a splitting field of f(x); however, by Corollary 21.36, the splitting field of any polynomial is unique up to isomorphism.
The unique finite field with pn elements is called the Galois field of order pn. We will denote this field by GF(pn).

Proof.

Let F be a subfield of E=GF(pn). Then F must be a field extension of K that contains pm elements, where K is isomorphic to Zp. Then mn, since [E:K]=[E:F][F:K].
To prove the converse, suppose that mn for some m>0. Then pm1 divides pn1. Consequently, xpm11 divides xpn11. Therefore, xpmx must divide xpnx, and every zero of xpmx is also a zero of xpnx. Thus, GF(pn) contains, as a subfield, a splitting field of xpmx, which must be isomorphic to GF(pm).
A lattice of field inclusions with the top level a Galois field of p^24 elements.  The second level has Galois fields of p^8 and p^12 elements which are included in the top level.  The third level has Galois fields of p^4 (included in the fields of p^8 and p^12 elements) and p^6 elements (included in the field of p^12 elements).  The fourth level has Galois fields of p^2 (included in the fields of p^4 and p^16 elements) and p^3 elements (included in the field of p^6 elements). The bottom level a Galois field of p elements (included in the fields of p^2 and p^3 elements).
Figure 22.9. Subfields of GF(p24)
With each field F we have a multiplicative group of nonzero elements of F which we will denote by F. The multiplicative group of any finite field is cyclic. This result follows from the more general result that we will prove in the next theorem.

Proof.

Let G be a finite subgroup of F of order n. By the Fundamental Theorem of Finite Abelian Groups (Theorem 13.4),
GZp1e1××Zpkek,
where n=p1e1pkek and the p1,,pk are (not necessarily distinct) primes. Let m be the least common multiple of p1e1,,pkek. Then G contains an element of order m. Since every α in G satisfies xr1 for some r dividing m, α must also be a root of xm1. Since xm1 has at most m roots in F, nm. On the other hand, we know that m|G|; therefore, m=n. Thus, G contains an element of order n and must be cyclic.

Proof.

Let α be a generator for the cyclic group E of nonzero elements of E. Then E=F(α).

Example 22.13.

The finite field GF(24) is isomorphic to the field Z2[x]/1+x+x4. Therefore, the elements of GF(24) can be taken to be
{a0+a1α+a2α2+a3α3:aiZ2 and 1+α+α4=0}.
Remembering that 1+α+α4=0, we add and multiply elements of GF(24) exactly as we add and multiply polynomials. The multiplicative group of GF(24) is isomorphic to Z15 with generator α:
α1=αα6=α2+α3α11=α+α2+α3α2=α2α7=1+α+α3α12=1+α+α2+α3α3=α3α8=1+α2α13=1+α2+α3α4=1+αα9=α+α3α14=1+α3α5=α+α2α10=1+α+α2α15=1.