3.4  Ideals, Quotient Rings, and the Integers Modulo n

Sets, Relations, and Cardinality, Section 2.5 turned the school integers into a clock, Z/n, and checked by hand that its sum and product are well defined (Sets, Relations, and Cardinality, Proposition 2.5.5). Chapter 2 made the same kind of check twice more, for Z and for Q, each time through Theorem 2.2.1 and a computation special to the formula. This section makes the check once, for every commutative ring and every subset of the right kind, called an ideal. The integers modulo n, now a ring, are the first example. Chapter 5 builds R in the same shape, from classes of Cauchy sequences of rationals that differ by a null sequence, and checks its operations there directly; Algebraic Preliminaries, Chapter 5 runs division with remainder, gcd and unique factorization again for polynomials over a field.

Throughout, R is a commutative ring (Definition 2.3.1), with a−b:=a+(−b).

3.4.1. What a quotient needs

Let I⊆R, and call a and b related when they differ by an element of I: a∼Ib:⟺a−b∈I. For R=Z and I the multiples of n, this is congruence modulo n. We want two things: ∼I should be an equivalence relation, and the sum and product of classes should be computable on representatives. Each wish makes a demand on I.

  • Reflexivity, a−a∈I, needs 0∈I.
  • Symmetry: b−a=−(a−b), so it needs I to be closed under negatives.
  • Transitivity: a−c=(a−b)+(b−c), so it needs I to be closed under sums.
  • The sum on classes. Changing a to a′ changes a+b to a′+b, and the difference is a−a′ again: no new demand.
  • The product on classes. Changing a to a′ changes ab to a′b, and the difference is (a−a′)b: an element of I multiplied by an arbitrary element of R. So I must swallow such products.

The last demand contains the second: −x=(−1)x. Three clauses remain, and they get a name.

An ideal is a set of allowed errors: it contains 0, it is closed under adding errors, and an error multiplied by anything is still an error.

Definition 3.4.1 (Ideal)

Let R be a commutative ring. A subset I⊆R is an ideal of R if

  • (I1) 0∈I;
  • (I2) for all a,b∈I, a+b∈I;
  • (I3) for all a∈I and all r∈R, ra∈I.

In words: (I1) and (I2) say that I contains 0 and is closed under addition; (I3), absorption, says that multiplying an element of I by any element of the ring, inside I or not, lands in I. The ring element r in (I3) ranges over all of R, and that is what separates (I3) from mere closure under multiplication, where r would have to lie in I.

Two consequences are used constantly. First, an ideal is closed under negatives and differences: for a∈I, −a=(−1)a∈I by (I3), since (−1)a=−(1⋅a)=−a by Proposition 2.3.2 (c) and (F7) with (F6); then a−b=a+(−b)∈I for a,b∈I, by (I2). Second, if 1∈I, then I=R, since every r=r⋅1∈I by (I3).

Examples.

  • The degenerate cases: {0} and R itself are ideals of R. For {0}: 0+0=0 and r⋅0=0 (Proposition 2.3.2 (b)). For R, every clause asks for an element of R. They are the two extremes: “no error allowed” and “everything allowed”.
  • For n∈Z, the multiples nZ={kn:k∈Z} form an ideal of Z (Definition 3.2.1): 0=0⋅n; kn+ln=(k+l)n; r(kn)=(rk)n. In particular the even integers 2Z form an ideal.
  • For a,b∈Z, the combinations aZ+bZ form an ideal of Z, by the closure properties in Definition 3.2.1; Theorem 3.4.2 below records this.

Non-examples by minimal change. N⊆Z satisfies (I1) and (I2), but (I3) fails at a=1, r=−1: (−1)⋅1=−1∉N, since −1<0 (1>0 by Proposition 2.3.5 (e), as 1≠0 in Z by Theorem 2.3.1, then (a)) while N={x∈Z:x≥0} (Theorem 2.3.4 (b)). And Z⊆Q satisfies (I1), (I2) and is even closed under negatives and products, but (I3) fails at a=1, r=1/2: (1/2)⋅1=1/2∉Z. (If 1/2=m∈Z, then 2m=1, but 1=2⋅0+1 is odd and so not of the form 2m, by Corollary 3.1.3 (a).) In both cases the ring element r comes from outside the subset, which is exactly what (I3) allows.

Why these clauses. Each clause was forced by one of the five wishes above, and dropping one loses its wish: without (I1) or (I2), ∼I is not reflexive or not transitive; without (I3), the product on classes can fail, as the warning after the next theorem shows for Z⊆Q.

3.4.2. The quotient ring

The payoff is a single theorem that builds a ring of classes from any ideal. We write [a], or [a]I when the ideal must be named, for the class of a under ∼I, and R/I for the quotient set R/∼I (Sets, Relations, and Cardinality, Definition 2.5.4).

Theorem 3.4.1 (Quotient Ring by an Ideal)

Let R be a commutative ring and I an ideal of R.

  • (a) Setting a∼Ib⟺a−b∈I defines an equivalence relation ∼I on R, and the class of a is [a]=a+I:={a+x:x∈I}.
  • (b) The rules [a]+[b]:=[a+b], [a]⋅[b]:=[ab] and −[a]:=[−a] are well defined on R/I:=R/∼I.
  • (c) R/I, with these operations, is a commutative ring with zero [0] and one [1]. The quotient map π:R→R/I, π(a):=[a], satisfies π(a+b)=π(a)+π(b), π(ab)=π(a)π(b) and π(1)=[1].
  • (d) [a]=[0] if and only if a∈I. In particular [1]=[0] if and only if I=R.

In words: (a) and (b) say that classes modulo an ideal can be added, multiplied and negated through any representatives; (c) says that the result obeys every ring law, and that passing to classes respects the operations; (d) says that the elements of I are exactly those that become 0, and that the quotient collapses to the zero ring exactly when I is everything.

Idea. A change of representative is an element of I. The equivalence-relation clauses ask that such changes can be reversed and chained, which is closure under negatives and sums. The operations ask that a change in one argument produce a change in the output: for the sum the change is the same element of I, and for the product it is that element multiplied by the other argument, which (I3) keeps in I. The ring laws are then laws of R read on classes.

Before reading on: where is “ra∈I for every r∈R” used, and why does closure under + not suffice for the product?

Proof. (a) Let a,b,c∈R. (Eq1): a−a=0∈I, by (F4) and (I1). (Eq2): if a−b∈I, then b−a=−(a−b)∈I, since I is closed under negatives; here (a−b)+(b−a)=0 by (F1)–(F4), so b−a=−(a−b) by the uniqueness of negatives (Proposition 2.3.2 (a)). (Eq3): if a−b∈I and b−c∈I, then a−c=(a−b)+(b−c)∈I, by (F2)–(F4) and (I2). So ∼I is an equivalence relation (Sets, Relations, and Cardinality, Definition 2.5.1). For the class: if x∼Ia, then x−a∈I and x=a+(x−a)∈a+I; conversely, for y∈I, (a+y)−a=y∈I, so a+y∼Ia. Hence [a]=a+I.

(b) We check the hypotheses of Theorem 2.2.1 (b), with X=R and the relation ∼I, for the maps (a,b)↦a+b and (a,b)↦ab. Let a∼Ia′, so a−a′∈I, and let b∈R. Then (a+b)−(a′+b)=a−a′∈I,ab−a′b=(a−a′)b=b(a−a′)∈I, by (F1)–(F4) in the first line, and by (F9), (F6) and Proposition 2.3.2 (c) in the second, where the membership is (I3) with r=b: the ideal absorbs b. This is the first hypothesis. Since a+b=b+a and ab=ba ((F1), (F6)), the second hypothesis is the first with the two arguments exchanged. For the negative we check the hypothesis of Theorem 2.2.1 (a) for a↦−a: (−a)−(−a′)=−(a−a′)∈I, by Proposition 2.3.2 (a) and closure under negatives. Hence the three rules define functions.

(c) Every element of R/I is a class [a] (Sets, Relations, and Cardinality, Definition 2.5.4). Each axiom of Definition 2.3.1 other than (F8) is an equation, and by (b) both of its sides, read on classes, are the classes of the two sides of the same equation in R. For example, for (F9), [a]([b]+[c])=[a][b+c]=[a(b+c)]=[ab+ac]=[ab]+[ac]=[a][b]+[a][c], using (F9) in R in the middle; for (F3), [a]+[0]=[a+0]=[a]; for (F4), [a]+(−[a])=[a]+[−a]=[a+(−a)]=[0]; for (F7), [a][1]=[a⋅1]=[a]. The laws (F1), (F2), (F5) and (F6) go the same way. So R/I is a commutative ring with zero [0] and one [1]. The equations for π are the definitions in (b) read from right to left, and π(1)=[1] by definition of π.

(d) [a]=[0] holds if and only if a∼I0 (Sets, Relations, and Cardinality, Theorem 2.5.1 (b)), that is, a−0∈I; and a−0=a+0=a, since −0=0 (0+0=0 and Proposition 2.3.2 (a)). So [a]=[0]⟺a∈I. In particular [1]=[0]⟺1∈I. If 1∈I, then I=R, since r=r⋅1∈I for every r∈R by (I3); and if I=R, then 1∈I. This proves the theorem.

The answer to the prompt. Absorption with an arbitrary r∈R, the full force of (I3), is used exactly once in the proof of (a) and (b): in the product, at ab−a′b=(a−a′)b, where the change of representative a−a′∈I is multiplied by an arbitrary b∈R. Elsewhere (I3) enters only with r=−1, through closure under negatives (−x=(−1)x), and otherwise the proof uses (I1) and (I2). Closure under + does not suffice for the product because b need not lie in I: the product changes by a multiple of the error, not by a sum of errors.

We call this move compute on representatives; the ideal absorbs the change. It is the move of Chapter 2’s “one argument at a time”, now with the change of representative recorded as one element of I.

Warning. Closure under + and − is not enough for the product. Z⊆Q contains 0 and is closed under sums and negatives, and these are all that the proof of (a) and of the sum and negative in (b) used. So “x−y∈Z” relates rationals by an equivalence relation, and [x]+[y]:=[x+y] is well defined on its classes. But [x][y]:=[xy] is not: [1/2]=[3/2], since 3/2−1/2=1∈Z, while 12⋅12=14,32⋅12=34,34−14=12∉Z. One class, two products in different classes. The missing clause is (I3): Z is not an ideal of Q.

3.4.3. The ideals of the integers

In Z every ideal is as simple as possible: the multiples of one number. The proof is the move that gave the gcd in Section 3.2.

Theorem 3.4.2 (Ideals of the Integers)
  • (a) For all a,b∈Z, aZ+bZ is an ideal of Z. In particular nZ is an ideal of Z for every n∈Z.
  • (b) Every ideal I of Z equals nZ for exactly one n∈N: n=0 if I={0}, and otherwise n is the least positive element of I.

Idea. For (b), take the least positive element n of I. Its multiples lie in I by absorption. Conversely, divide any a∈I by n: the remainder a−qn lies in I and is smaller than n, so it is not positive, and it is 0. This is least positive element, then divide once more.

Proof. (a) 0=a⋅0+b⋅0∈aZ+bZ (Proposition 2.3.2 (b)), and Definition 3.2.1 shows that aZ+bZ is closed under sums and under multiplication by any integer. These are (I1)–(I3). Since nZ=nZ+0Z (Definition 3.2.1), nZ is an ideal.

(b) Existence. If I={0}, then I=0Z, since k⋅0=0 for every k (Proposition 2.3.2 (b)). Otherwise I has an element a≠0, and −a∈I as well; one of a, −a is positive (Proposition 3.1.1 (h)). So I∩Z>0 is non-empty, with lower bound 0, and has a least element n (Proposition 2.3.6). By (I3), kn∈I for every k∈Z, so nZ⊆I. Conversely, let a∈I. By Theorem 3.1.2 (a), a=qn+r with q,r∈Z and 0≤r<n. Then r=a+(−q)n∈I, by (I3) and (I2). If r>0, then r is a positive element of I smaller than n, against the choice of n. So r=0, and a=qn∈nZ. Hence I=nZ.

Uniqueness. Let nZ=mZ with n,m∈N. Then n=1⋅n∈mZ, so m∣n; likewise n∣m. By Proposition 3.1.1 (f), n=m.

Remark. For I=aZ+bZ with (a,b)≠(0,0), (b) says aZ+bZ=nZ where n is the least positive combination. That is Theorem 3.2.1 (a), (d), (e), with n=gcd(a,b): the theorem of Section 3.2 was this one in disguise.

3.4.4. The ring of integers modulo n

Now the clock of Sets, Relations, and Cardinality, Section 2.5 can be rebuilt on the constructed Z, as an instance of the general theorem.

Definition 3.4.2 (The Integers Modulo n)

Let n∈Z>0. The ring Z/nZ is the quotient ring of Z by the ideal nZ (Theorem 3.4.1, Theorem 3.4.2 (a)).

Its relation is congruence modulo n of Sets, Relations, and Cardinality, Definition 2.5.5, read on the constructed Z: a−b∈nZ means a−b=kn for some k∈Z, that is, n∣a−b, that is, a≡b(modn). Its elements are the classes [a]=a+nZ, written [a]n when two moduli are in play. Its operations, [a]+[b]=[a+b] and [a][b]=[ab], are those of Sets, Relations, and Cardinality, Proposition 2.5.5; there they were checked by hand for the school integers, and here they are a consequence of Theorem 3.4.1 (b). The set Z/n of Sets, Relations, and Cardinality is the same construction on the school Z; from now on we write Z/nZ, to recall the ideal.

Theorem 3.4.3 (The Ring of Integers Modulo n)

Let n∈Z>0.

  • (a) Z/nZ is a commutative ring with zero [0] and one [1].
  • (b) For each a∈Z there is exactly one r∈{0,…,n−1} with [a]=[r], namely the remainder of a on division by n. The map {0,…,n−1}→Z/nZ, r↦[r], is a bijection, so Z/nZ is finite with n elements (Sets, Relations, and Cardinality, Definition 3.1.2).
  • (c) [1]≠[0] if and only if n≥2.
  • (d) k⋅[1]=[k] for every k∈N, where k⋅x is the k-th multiple in the commutative ring Z/nZ; in particular n⋅[1]=[0].
  • (e) If n≥2, no relation < makes Z/nZ an ordered commutative ring.

The multiples in (d) are those of Section 2.3, defined there by recursion for every commutative ring R (0⋅x:=0, (k+1)⋅x:=k⋅x+x), before Proposition 2.3.5; the recursion uses no order, so it applies to Z/nZ, which for n≥2 carries no order compatible with its arithmetic, by (e).

Idea. Most of the work is done: (a) is the general theorem, and (b) is division with remainder read on classes, the remainder naming the class and its uniqueness making the naming one-to-one. Then (c) asks when 1 is a multiple of n, (d) is an induction along the recursion that defines multiples, and (e) puts (c) and (d) against the rule that n⋅1>0 in an ordered ring.

Proof. (a) Theorem 3.4.1 (c), since nZ is an ideal (Theorem 3.4.2 (a)).

(b) Existence. By Theorem 3.1.2 (a), a=qn+r with 0≤r<n. Then a−r=qn∈nZ, so [a]=[r]. Also r∈N by Theorem 2.3.4 (b), and r+1≤n by discreteness (Theorem 2.3.4 (c)), so r≤n−1 by (O3); that is, r∈{0,…,n−1}.

Uniqueness. Let r,s∈{0,…,n−1} with [r]=[s]. Then r−s=kn for some k∈Z, so r=kn+s and r=0⋅n+r are two divisions of r by n, with remainders s and r, each at least 0 and less than n. By the uniqueness in Theorem 3.1.2 (a), s=r.

So the map φ:{0,…,n−1}→Z/nZ, r↦[r], is surjective (existence: every class is some [a], Sets, Relations, and Cardinality, Definition 2.5.4) and injective (uniqueness), hence a bijection (Sets, Relations, and Cardinality, Definition 1.4.5). Since n≥1, adding −1 gives n−1≥0 (O3), so n−1∈N by Theorem 2.3.4 (b), and the third example after Sets, Relations, and Cardinality, Definition 3.1.2, with n−1 in place of its n, gives the bijection ψ:{1,…,n}→{0,…,n−1}, k↦k−1. The composite φ∘ψ:{1,…,n}→Z/nZ is a bijection (Sets, Relations, and Cardinality, Theorem 1.4.4 (c)), so Z/nZ has n elements.

(c) By Theorem 3.4.1 (d), [1]=[0] if and only if 1∈nZ, that is, n∣1. By Proposition 3.1.1 (g) and n>0, this happens exactly when n=1. As n≥1 by discreteness, n≠1 means n≥2.

(d) By Logic and Proof, Axiom 4.2.1 (through Corollary 1.7.3 (b)) on k. Base: 0⋅[1]=[0], by the recursion. Step: if k⋅[1]=[k], then (k+1)⋅[1]=k⋅[1]+[1]=[k]+[1]=[k+1], by the recursion, the hypothesis, and the definition of + in Theorem 3.4.1 (b) (the sum k+1 is the same in N and in Z, Proposition 2.2.3 (a)). Finally [n]=[0], since n−0=1⋅n∈nZ.

(e) Let n≥2, and suppose < made Z/nZ an ordered commutative ring. By (c), [1]≠[0], so Proposition 2.3.5 (h), applied with n≥1, gives n⋅[1]>[0]. By (d), n⋅[1]=[0], and [0]>[0] contradicts (O1). This proves the theorem.

Part (e) is the general clause after Example (A field with two elements that cannot be ordered), now applied to a ring that this volume has built: Z/2Z has the tables of that example, with [0], [1] for 0, 1. Part (b) says that the elements of Z/nZ can be listed as [0],[1],…,[n−1], and that to compute with classes we may always reduce to remainders.

Example (Multiplication modulo six and modulo five)

Write out the multiplication table of Z/6Z. Find the pairs of non-zero classes whose product is [0], and the classes [a] for which some [b] has [a][b]=[1]. Then do the same for Z/5Z.

Solution. By Theorem 3.4.3 (b), the classes of Z/6Z are [0],…,[5], and [a][b]=[ab]=[r], where r is the remainder of ab on division by 6. For instance [4][5]=[20]=[2], since 20=3⋅6+2. Writing r for [r], the table is ⋅012345000000010123452024024303030340420425054321 The non-zero classes with product [0] are [2][3]=[6]=[0] and [3][4]=[12]=[0], with their mirror images [3][2], [4][3]. So Z/6Z has zero divisors, unlike Z (Proposition 2.3.5 (f)). Also [4][4]=[16]=[4]: a class can equal its own square without being [0] or [1]. The entry 1 occurs only in the rows of [1] and [5]: [1][1]=[1] and [5][5]=[25]=[1]. So exactly [1] and [5] have a partner with product [1].

For Z/5Z the same method gives ⋅01234000000101234202413303142404321 No product of non-zero classes is [0], and every non-zero class has a partner with product [1]: [1][1]=[1], [2][3]=[6]=[1], [4][4]=[16]=[1]. Moreover 5⋅[1]=[0] by Theorem 3.4.3 (d), so Z/5Z cannot be ordered, by (e).

The classes with a partner of product [1] are the units of Section 3.5, which finds them for every n and shows that for a prime n, as for 5, every non-zero class is one. Chapter 6 uses the ring Z/5Z, with 5⋅[1]=[0], as a field that no order can fit.

Quick check. In Z/12Z, compute [7]+[8] and [7][8], each as [r] with 0≤r≤11. How many elements has Z/1Z?

Solution. [7]+[8]=[15]=[3], since 15=1⋅12+3; and [7][8]=[56]=[8], since 56=4⋅12+8. The ring Z/1Z has one element, by Theorem 3.4.3 (b): every integer is congruent to 0 modulo 1, so [0]=[1], and it is a zero ring, like the ring {0} of Section 2.3.

Warning. A class is not its remainder. [3] in Z/12Z is the set 3+12Z={…,−9,3,15,…}, not the integer 3, and the same symbol [3] in Z/5Z is a different set. A comparison such as “[3]<[8]” cannot be read off the remainders and respect the arithmetic: by Theorem 3.4.3 (e) no order makes Z/12Z an ordered ring. Reducing to remainders is a way of naming classes, not a way of turning them back into integers.

3.4.5. Exercises

A. Check your understanding

Exercise (A1)

These questions are about the proof of Theorem 3.4.1.

  • (a) Where is the clause “ra∈I for every r∈R” used?
  • (b) Run the product check of (b) with R=Z, I=6Z, a=2, a′=8 and b=5: verify a∼Ia′, compute ab−a′b, and say why it lies in I.
  • (c) For Z⊆Q, which step of the proof fails, and which clause of Definition 3.4.1 is missing?
  • (d) Give the idea of the proof in two sentences.

Solution.

  • (a) In (b), for the product in the first argument: ab−a′b=(a−a′)b∈I, with a−a′∈I and r=b. (It also gives closure under negatives, which (a) and (b) use through −x=(−1)x; and it is used in (d), to get I=R from 1∈I.)

  • (b) a−a′=2−8=−6=(−1)⋅6∈6Z, so 2∼I8. Then ab−a′b=10−40=−30, which is (a−a′)b=(−6)⋅5, and −30=(−5)⋅6∈6Z. It lies in I because I absorbs the factor 5.

  • (c) The product step of (b): (a−a′)b need not lie in Z, as with a=3/2, a′=1/2, b=1/2, where it is 1/2. The missing clause is (I3): (1/2)⋅1∉Z.

  • (d) A change of representative is an element of I; for the sum it passes through unchanged, and for the product it gets multiplied by the other argument, which absorption keeps inside I. The ring laws then hold in R/I because both sides of each are classes of the two sides of the same law in R.

B. Practice

Exercise (B1: The ring with four elements)

Write the addition and multiplication tables of Z/4Z. Find its zero divisors (non-zero x with xy=[0] for some non-zero y) and the classes [a] with [a][b]=[1] for some [b].

Solution. By Theorem 3.4.3 (b) the elements are [0],[1],[2],[3], and each entry is the class of the remainder of the sum or product on division by 4. Writing r for [r]: +012300123112302230133012⋅012300000101232020230321 For instance [3]+[3]=[6]=[2] and [3][3]=[9]=[1], since 6=1⋅4+2 and 9=2⋅4+1. The only zero divisor is [2]: [2][2]=[4]=[0], and in the rows of [1] and [3] the entry 0 occurs only in the column of [0]. The classes with a partner of product [1] are [1] ([1][1]=[1]) and [3] ([3][3]=[1]); the rows of [0] and [2] contain no 1.

Exercise (B2: Determine which)

For each subset of Z below, decide whether it is an ideal of Z. Justify your answer.

  • (a) N.
  • (b) 2Z∪3Z.
  • (c) 4Z+6Z.
  • (d) {0}.
  • (e) {n∈Z:6∣n2}, where n2:=nn.

Solution.

  • (a) No. (I3) fails: 1∈N, but (−1)⋅1=−1∉N, since −1<0 (1>0 by Proposition 2.3.5 (e), as 1≠0 in Z by Theorem 2.3.1, then (a)) while N={x∈Z:x≥0} (Theorem 2.3.4 (b)).

  • (b) No. (I2) fails: 2∈2Z and 3∈3Z, but 5 is in neither, since 5=2⋅2+1 and 5=1⋅3+2 leave non-zero remainders (uniqueness in Theorem 3.1.2 (a)).

  • (c) Yes, by Theorem 3.4.2 (a). In fact 4Z+6Z=2Z: every 4x+6y=2(2x+3y) is even, and every 2k=4(−k)+6k is a combination.

  • (d) Yes: the ideal 0Z, or directly as in the examples after Definition 3.4.1.

  • (e) Yes: the set is 6Z. If n=6k, then n2=6(6k2). Conversely, let 6∣n2, say n2=6m. Then n⋅n=2(3m)=3(2m), so 2∣nn and 3∣nn. Since 2 and 3 are prime (the small-primes remark of Section 3.1), Corollary 3.3.2 (b) gives 2∣n and 3∣n. As 1=(−1)⋅2+1⋅3, gcd(2,3)=1 (Corollary 3.2.2), so 6=2⋅3∣n by Proposition 3.3.3. Hence the set equals 6Z, an ideal by Theorem 3.4.2 (a).

C. Going deeper

Exercise (C1: Changing the modulus)

Let m,n∈Z>0. Prove that there is a function F:Z/nZ→Z/mZ with F([a]n)=[a]m for every a∈Z if and only if m∣n. Show that, when it exists, F preserves sums, products and the one.

Solution. (⇐) Let n=lm. Then nZ⊆mZ, since kn=(kl)m. We apply Theorem 2.2.1 (a) with X=Y=Z, congruence modulo n on X, congruence modulo m on Y, and f(a):=a: if a−a′∈nZ, then a−a′∈mZ. So F exists (and is unique).

(⇒) Suppose F exists. Since n−0=1⋅n, [n]n=[0]n, so [n]m=F([n]n)=F([0]n)=[0]m, so n∈mZ by Theorem 3.4.1 (d), that is, m∣n.

Operations. F([a]n+[b]n)=F([a+b]n)=[a+b]m=[a]m+[b]m, by the definition of + in Theorem 3.4.1 (b) on both sides; likewise for products, and F([1]n)=[1]m.

This is the general form of Sets, Relations, and Cardinality, Example (A rule on classes that is not a function): [a]6↦[a]4 fails because 4∤6, and [a]6↦[a]3 works because 3∣6.

Marking scheme. (10 points) - 3: (⇐) writes n=lm, shows nZ⊆mZ, and invokes Theorem 2.2.1 (a) with f(a)=a. - 3: (⇒) uses [n]n=[0]n and applies F to get [n]m=[0]m, hence m∣n. - 3: computes F of a sum and of a product on representatives, citing the definition of the operations on both quotient rings. - 1: F([1]n)=[1]m. Fatal errors (0 for the step): defining F by a formula on representatives without checking that it does not depend on the representative; in (⇒), assuming nZ⊆mZ (circular).

Exercise (C2: Closed under subtraction)

Let S⊆Z be non-empty, with a−b∈S for all a,b∈S. Prove that S=nZ for some n∈N.

The first half of a proof is given.

Pick a∈S; then 0=a−a∈S. If S={0}, then S=0Z. Otherwise S contains some a≠0, and −a=0−a∈S; one of a, −a is positive (Proposition 3.1.1 (h)). By Proposition 2.3.6, S has a least positive element n.

The second half is blank. Name the move, then complete it.

Solution. The move is least positive element, then divide.

nZ⊆S. First, kn∈S for every k∈N, by Logic and Proof, Axiom 4.2.1 on k. Base: 0⋅n=0∈S. Step: −n=0−n∈S, and if kn∈S, then (k+1)n=kn+n=kn−(−n)∈S, using (F9), (F7) and −(−n)=n (Proposition 2.3.2 (a)). Next, every k∈Z is j or −j for some j∈N (Proposition 2.2.3 (c)), and (−j)n=−(jn)=0−jn∈S (Proposition 2.3.2 (c)).

S⊆nZ. Let a∈S. By Theorem 3.1.2 (a), a=qn+r with 0≤r<n. Since qn∈S, r=a−qn∈S. If r>0, it is a positive element of S smaller than n, against the choice of n. So r=0 and a=qn.

Hence S=nZ. No multiplication hypothesis was needed: closure under subtraction alone forces the multiples of n, and so S is automatically an ideal. The sets S of this exercise are the subgroups of (Z,+), which Algebraic Preliminaries, Chapter 3 studies.