2.2  Euclid’s Lemma and the Fundamental Theorem of Arithmetic

Section 2.1 gave every pair of integers, not both zero, a greatest common divisor, and wrote it as a combination ax+by (Theorem 2.1.1). This section spends that identity. Take 60. It splits as 2⋅30, as 6⋅10, as 4⋅15, and every way of splitting it further, until no factor splits again, ends with the same primes 2,2,3,5. Sets and Functions, Section 3.2 proved, for the school integers, that every integer at least 2 has a prime factor, and set the uniqueness of the full splitting aside. Here we prove both, for the integers of Number Systems, Chapter 2. The key is a property of primes that the definition (“no positive divisors except 1 and itself”) does not obviously give: a prime that divides a product divides one of the factors.

As in Number Systems, Section 2.5, numerals are the natural numbers of those names, and their sums and products may be computed in N (Number Systems: From N to R, Proposition 2.2.3 (a)).

2.2.1. Euclid’s lemma

The definition of a prime p speaks about the divisors of p. The property we want speaks about the numbers that p divides. Something has to connect the two, and the connection is the Bézout identity of Section 2.1. We first prove a version for any divisor that shares no factor with one of the two numbers multiplied.

Theorem 2.2.1 (Euclid’s Lemma)

Let a,b,c∈Z. If a∣bc and gcd(a,b)=1, then a∣c.

Idea. The hypothesis gcd(a,b)=1 is a statement about common divisors, which is hard to use directly. By Corollary 2.1.2 it is the same as an equation 1=ax+by, and an equation can be multiplied. Multiplying it by c writes c as acx+bcy. The first term is a multiple of a on sight, and the second is one because bc is.

Proof. Suppose a∣bc and gcd(a,b)=1. By Corollary 2.1.2 there are x,y∈Z with ax+by=1. Since a∣bc, there is k∈Z with bc=ka (Sets and Functions, Definition 1.1.2). Multiplying the identity by c, with (F7), (F9), (F5) and (F6), c=c(ax+by)=a(cx)+(bc)y=a(cx)+a(ky)=a(cx+ky). Since cx+ky∈Z, this shows a∣c.

We call the method of this proof multiply the Bézout identity: from 1=ax+by, multiply by c and read off what divides c. It turns a statement about divisors into an equation, which is where the work can be done.

Each hypothesis has a job. Without gcd(a,b)=1 the conclusion fails: 4∣2⋅6=12, but 4∤6, since 6=1⋅4+2 leaves a non-zero remainder (uniqueness in Number Systems: From N to R, Theorem 2.5.2 (a)); here gcd(4,2)=2. The common factor 2 of 4 and 2 let 4 divide the product without dividing 6.

2.2.2. Lists, products and prime factorizations

To say that a factorization is unique, we must first say what a factorization is. The products 2⋅2⋅3⋅5 and 3⋅2⋅5⋅2 are equal and use the same primes, and we want to count them as one. We do so by writing the primes in order, smallest first. A factorization also has a length, and the length may be 0: the number 1 is the product of no primes at all.

Products of lists are defined by the recursion of Sets and Functions, Definition 3.3.1. That definition was made for sequences of real numbers, and we use it as a pattern, as Number Systems, Section 1.4 allows for definitions read on a new number system, with the ordered field Q (Number Systems: From N to R, Theorem 3.2.1) in place of R. A product of integers is an integer (Number Systems: From N to R, Proposition 3.1.4), so the products of lists below lie in Z; the paragraph “Why the product exists” below checks directly that the recursion runs in Z.

2.2.3. Small primes

Later arguments need to know that a few small integers are prime in the constructed Z. Sets and Functions, Section 1.1 checked some of these after Sets and Functions, Definition 1.1.3, for the school integers; that check is not a proof about the ring of Number Systems, Chapter 2, so we redo it here.

Remark. The small-primes remark. The integers 2, 3, 5 and 7 are prime in Z. Let p∈{2,3,5,7}. Then p≥2. Let d be a positive divisor of p. Then 1≤d by discreteness (Number Systems: From N to R, Theorem 2.4.2 (c)) and d≤p by Number Systems: From N to R, Proposition 2.5.1 (e), so d is one of 1,2,…,p: applying discreteness repeatedly (if d≠1 then 2≤d; if d≠2 then 3≤d; and so on up to p) leaves no other value. Each d with 1<d<p leaves a non-zero remainder: 3=1⋅2+1,5=2⋅2+1=1⋅3+2=1⋅4+1,7=3⋅2+1=2⋅3+1=1⋅4+3=1⋅5+2=1⋅6+1. (For p=2 there is no such d.) So d∤p for these d, by the divisibility test after Number Systems: From N to R, Theorem 2.5.2: p=kd would give p=kd+0, a second division of p by d, with remainder 0, against the uniqueness in Number Systems: From N to R, Theorem 2.5.2 (a). Hence the positive divisors of p are 1 and p, and p is prime.

The later sections of this chapter cite this paragraph as “the small-primes remark”. The same procedure decides, for any given p≥2, whether p is prime; the remark after Lemma 2.2.4 shortens it.

Definition 2.2.1 (List, Product of a List, Prime Factorization)

Let k∈N. A list of length k in Z is a function p:{1,…,k}→Z, written (p1,…,pk) with pi:=p(i); for k=0 it is the empty list. Its product ∏i=1kpi∈Z is given by the recursion ∏i=10pi=1,∏i=1j+1pi=(∏i=1jpi)pj+1for j<k, where ∏i=1jpi is the product of the shortened list (p1,…,pj).

A prime factorization of n∈Z>0 is a list (p1,…,pk) such that every entry pi is prime (Sets and Functions, Definition 1.1.3), the list is non-decreasing (i≤j implies pi≤pj), and ∏i=1kpi=n.

In words: a list is a finite sequence of integers, possibly empty; its product starts at 1 and multiplies by one more entry at each stage; and a prime factorization lists primes in non-decreasing order with the right product.

Why the product exists. Extend the list to a sequence p¯ on Z>0 by p¯i:=pi for i≤k and p¯i:=1 for i>k. Then Sets and Functions, Theorem 3.3.1, read on N=ω through Number Systems: From N to R, Corollary 1.4.3 (b), with X=Z, starting value 1 and step g(j,x):=xp¯j+1, gives exactly one function P:N→Z with P0=1 and Pj+1=Pjp¯j+1; we set ∏i=1jpi:=Pj for j≤k. The “Finite lists” remark after Sets and Functions, Definition 3.3.1 shows that Pj depends only on p1,…,pj, not on how the list was extended. Its proof is an induction on j that uses only the recursion and the multiplication of the target set, so it runs unchanged in Q, and, since Z is closed under multiplication, with target set Z. In particular Pj is also the product of the shortened list (p1,…,pj), which is the displayed recursion. We cite it as the recursion of Definition 2.2.1: it peels the last entry off a product.

Examples.

  • (2,2,3,5) is a prime factorization of 60. Its entries are prime by the small-primes remark above; it is non-decreasing; and the recursion gives the products 1,2,4,12,60.
  • (5) is a prime factorization of 5, with products 1,5. A prime p has the one-entry factorization (p).
  • The case of the empty list: the empty list is a prime factorization of 1. Its product is 1 by the first clause of the recursion, and the conditions “every entry is prime” and “non-decreasing” hold vacuously. Without this case the number 1 would have no factorization, and the theorem below would fail for n=1; its existence proof uses this case to rule out n=1.

Order and primality. Exchange two entries of the first example: (2,3,2,5) has prime entries and product 60, but it is not non-decreasing, since positions 2≤3 carry 3>2. Merge two entries: (2,2,15) is non-decreasing with product 60, but 15=3⋅5 is not prime.

Why these clauses. Without “non-decreasing”, 60 would have twelve factorizations, its four primes in every order, and uniqueness could only be stated up to rearrangement, which needs a theory of permutations. Without “prime”, splitting would stop anywhere. And the requirement p≥2 in Sets and Functions, Definition 1.1.3 is what keeps (1,2,2,3,5) out: if 1 counted as a prime, every factorization could be padded with as many 1s as we like.

Quick check. Find the prime factorization of 360, and check each clause of Definition 2.2.1.

Solution. (2,2,2,3,3,5). Its entries are prime by the small-primes remark above. It is non-decreasing. Its products, by the recursion, are 1,2,4,8,24,72,360. By the theorem below there is no other.

2.2.4. Primes dividing products

For a prime, the coprimality that Euclid’s lemma asks for comes almost free: a prime shares no factor with a number unless it divides that number.

Corollary 2.2.2 (A Prime Dividing a Product)

Let p be prime.

  • (a) For every a∈Z: p∣a or gcd(p,a)=1.
  • (b) For all b,c∈Z: if p∣bc, then p∣b or p∣c.
  • (c) If (q1,…,ql) is a list of primes, with l∈N, and p∣∏j=1lqj, then p=qj for some j∈{1,…,l}.

Idea. For (a), the gcd of p and a is a positive divisor of p, so it is 1 or p, and the second case says p∣a. Then (b) is Euclid’s lemma in the case gcd(p,b)=1 of (a). For (c), peel the last prime off the product and apply (b) to the two factors; an induction on the length handles the rest, and a prime that divides a prime is equal to it.

Proof. (a) Since p≥2, (p,a)≠(0,0), so g:=gcd(p,a)≥1 (Definition 2.1.2). As a common divisor, g∣p and g∣a. So g is a positive divisor of the prime p, and g=1 or g=p (Sets and Functions, Definition 1.1.3). If g=p, then p∣a.

(b) Let p∣bc. By (a), p∣b or gcd(p,b)=1. In the second case Theorem 2.2.1, with a=p, gives p∣c.

(c) We use Logic and Proof, Axiom 4.2.1 (through Number Systems: From N to R, Corollary 1.4.3 (b)) on l, for P(l): “for every list of primes (q1,…,ql), if p∣∏j=1lqj, then p=qj for some j≤l”.

Base case P(0). The empty product is 1 (the recursion of Definition 2.2.1). If p∣1, then p=1 or p=−1 (Number Systems: From N to R, Proposition 2.5.1 (g)), and both contradict p≥2. So the hypothesis of P(0) never holds, and P(0) is true.

Step. Assume P(l), and let (q1,…,ql+1) be a list of primes with p∣∏j=1l+1qj. By the recursion of Definition 2.2.1, ∏j=1l+1qj=(∏j=1lqj)ql+1, where the first factor is the product of the list of primes (q1,…,ql). By (b), p divides that first factor or p∣ql+1. In the first case P(l) gives j≤l with p=qj. In the second, p≥2>0 is a positive divisor of the prime ql+1, so p∈{1,ql+1}, and p≠1; hence p=ql+1. This proves P(l+1), and with it the corollary.

Part (b) is the property promised at the start of the section, and it is what makes primes the right atoms for multiplication. It fails for 6, which is not prime: 6∣2⋅3, but 6∤2 and 6∤3, since 0<2<6 and 0<3<6 rule both out by Number Systems: From N to R, Proposition 2.5.1 (e).

The second application of Euclid’s lemma combines two coprime divisors into one.

Proposition 2.2.3 (Coprime Divisors of a Number)

Let m,n,c∈Z with m∣c, n∣c and gcd(m,n)=1. Then mn∣c.

Proof. Write c=km with k∈Z. Then n∣km, and gcd(n,m)=gcd(m,n)=1 (Definition 2.1.2), so Theorem 2.2.1 gives n∣k, say k=ln with l∈Z. Hence c=(ln)m=l(mn), by (F5) and (F6), and mn∣c.

The coprimality is needed: 4∣12 and 6∣12, but 24∤12, since a positive divisor of 12 is at most 12 (Number Systems: From N to R, Proposition 2.5.1 (e)); here gcd(4,6)=2.

2.2.5. The least divisor is prime

The existence half of unique factorization needs a supply of primes: every integer n≥2 must have a prime factor. Sets and Functions, Section 3.2 proved this for the school integers by strong induction (Sets and Functions, Theorem 3.2.5). On the constructed Z the least-element property gives a shorter route: the least divisor bigger than 1 is already prime.

Lemma 2.2.4 (The Least Divisor Is Prime)

Let n∈Z with n≥2. The set D:={d∈Z:d≥2 and d∣n} has a least element, and that element is prime. In particular, n has a prime factor.

Proof. Since n≥2 and n∣n (Number Systems: From N to R, Proposition 2.5.1 (a)), n∈D, so D is non-empty; and 2 is a lower bound of D by its definition. By Number Systems: From N to R, Proposition 2.4.4, D has a least element p.

Suppose p were not prime. Since p≥2, the clause of Sets and Functions, Definition 1.1.3 that fails is the one about divisors: p has a positive divisor e with e≠1 and e≠p. Then e≥1 by discreteness (Number Systems: From N to R, Theorem 2.4.2 (c)), and e≤p by Number Systems: From N to R, Proposition 2.5.1 (e). So 1<e<p, and e≥2 by discreteness again. Also e∣p and p∣n give e∣n (Number Systems: From N to R, Proposition 2.5.1 (b)). So e∈D and e<p, against the choice of p. Hence p is prime, and p∣n because p∈D.

Remark. This is Sets and Functions, Theorem 3.2.5 on the constructed Z, proved by a least element instead of strong induction. It also shortens the primality test of the small-primes remark above. If p≥2 is not prime, its least divisor e≥2 is prime by the lemma, so it is not p itself, and p=ef with f∈Z; then f>0 (as e,p>0), f≠1, so f≥2 and f∣p, and therefore e≤f by the choice of e. Multiplying by e>0 gives e⋅e≤ef=p (Number Systems: From N to R, Proposition 2.4.3 (c), or equality if e=f). So to prove p≥2 prime it is enough to check that no d with d≥2 and d⋅d≤p divides p. For 11 only d=2,3 need checking, since 4⋅4=16>11.

2.2.6. The fundamental theorem

Everything is now in place for the main result of the chapter’s first half.

Theorem 2.2.5 (Fundamental Theorem of Arithmetic)

Every n∈Z>0 has exactly one prime factorization.

Idea. Existence. Take the least n with no factorization. It is at least 2, so it has prime factors, and a largest one, p. Then n=pm with m<n, so m has a factorization. Every entry of it divides n, so it is at most p, and appending p at the end keeps the list non-decreasing.

Uniqueness. Take two factorizations with the same product, (p1,…,pk) and (q1,…,ql). The largest entry pk divides the product of the q’s, so by Corollary 2.2.2 (c) it is one of the qj, and that is at most the largest, ql. By symmetry ql≤pk. So the two last entries are equal; cancel them and induct on the length.

Before reading on: why compare the largest primes, pk and ql, and not the first ones?

Proof. Existence. Let B:={n∈Z>0:n has no prime factorization}, and suppose B≠∅. It has the lower bound 0, so it has a least element n (Number Systems: From N to R, Proposition 2.4.4). The empty list is a prime factorization of 1, so n≠1; as n≥1 (discreteness, Number Systems: From N to R, Theorem 2.4.2 (c)), n>1, and so n≥2 by discreteness.

The set F of prime factors of n is non-empty by Lemma 2.2.4. Each q∈F is positive and divides n>0, so q≤n (Number Systems: From N to R, Proposition 2.5.1 (e)). By Number Systems: From N to R, Proposition 2.4.4, F has a greatest element p. Write n=mp with m∈Z. If m≤0, then mp≤0 (m=0: Number Systems: From N to R, Proposition 2.3.2 (b); m<0: mp<0⋅p=0 by Number Systems: From N to R, Proposition 2.4.3 (c)), against n>0. So m>0, that is, m∈Z>0 (Number Systems: From N to R, Theorem 2.4.2 (b)). Moreover m<n: since p≥2 and m>0, n=pm≥2m=m+m>m, by Number Systems: From N to R, Proposition 2.4.3 (c) (or equality if p=2), (F9) with (F7), and (O3).

By the minimality of n, m∉B: let (q1,…,ql) be a prime factorization of m. If l≥1, the recursion of Definition 2.2.1 gives m=(∏j=1l−1qj)ql, so ql∣m; with m∣n this gives ql∣n (Number Systems: From N to R, Proposition 2.5.1 (b)), so ql∈F and ql≤p. As the list is non-decreasing, qi≤ql≤p for every i≤l. Now let (q1,…,ql,p) be the list of length l+1 whose first l entries are those of (q1,…,ql) and whose last entry is p. Its entries are prime. It is non-decreasing: two positions among the first l compare as before, and every entry is at most p (for l=0 it is the one-entry list (p), and there is nothing to check). By the recursion its product is (∏j=1lqj)p=mp=n. So n has a prime factorization, against n∈B. Hence B=∅.

Uniqueness. We prove, by Logic and Proof, Axiom 4.2.1 (through Number Systems: From N to R, Corollary 1.4.3 (b)) on k, the statement P(k): “for every l∈N, if (p1,…,pk) and (q1,…,ql) are non-decreasing lists of primes with ∏i=1kpi=∏j=1lqj, then l=k and pi=qi for every i≤k”. Two prime factorizations of the same n are such lists, so P(k) for every k gives the uniqueness.

First, a non-empty list of primes (r1,…,rh) does not have product 1: by the recursion its product is (∏i=1h−1ri)rh, so rh would divide 1, and rh=±1 (Number Systems: From N to R, Proposition 2.5.1 (g)) contradicts rh≥2.

Base case P(0). If k=0, then ∏j=1lqj=1, so l=0 by the previous paragraph, and both lists are empty.

Step. Assume P(k). Let (p1,…,pk+1) and (q1,…,ql) be non-decreasing lists of primes with the same product N. Since k+1≥1, N≠1, so l≥1. By the recursion, pk+1∣N=∏j=1lqj, so Corollary 2.2.2 (c) gives pk+1=qj for some j≤l, and qj≤ql because the q-list is non-decreasing. In the same way ql∣N=∏i=1k+1pi gives ql=pi≤pk+1 for some i≤k+1. So pk+1≤ql≤pk+1, and pk+1=ql (Number Systems: From N to R, Proposition 2.4.3 (i)). By the recursion, (∏i=1kpi)pk+1=N=(∏j=1l−1qj)pk+1. Subtracting, (∏i=1kpi−∏j=1l−1qj)pk+1=0 by (F9) and Number Systems: From N to R, Proposition 2.3.2 (c), and pk+1≠0, so the bracket is 0 (Number Systems: From N to R, Proposition 2.4.3 (f)). The shortened lists (p1,…,pk) and (q1,…,ql−1) are non-decreasing lists of primes with equal products, so P(k), applied with l−1∈N, gives l−1=k and pi=qi for i≤k. With pk+1=ql=qk+1, the two lists have the same length k+1 and the same entries, so they are equal (Sets and Functions, Proposition 2.1.1). This proves P(k+1), and the theorem.

Why compare the largest primes? The recursion of Definition 2.2.1 peels off the last factor, so once the two last entries are known to be equal they can be canceled at once, leaving two shortened lists to which P(k) applies. And the comparison “largest with largest” needs only that both lists are non-decreasing. Comparing the first entries would also show p1=q1, but removing a first entry shifts every index, and the recursion says nothing directly about that.

Remark. Sets and Functions, Section 3.2 named unique factorization as a fact it did not prove or use, and Sets and Functions, Exercise (B2: Putting a proof in order) lists, as line (vii), a step that cites it and is therefore not available there. On the constructed Z the fact is now proved, and Exercise R2 of Section 2.4 uses it.

Warning. Uniqueness is not automatic. Let H:={4k+1:k∈N}={1,5,9,13,17,21,…}. It is closed under multiplication, since (4k+1)(4l+1)=4(4kl+k+l)+1. Call h∈H with h>1 an H-prime if it is not a product of two elements of H both greater than 1. Then 9, 21 and 49 are H-primes, and 441=9⋅49=21⋅21 gives two different factorizations into H-primes. What breaks is Euclid’s lemma: 9 divides 21⋅21 inside H, but 9∤21. The proof of Theorem 2.2.1 wrote 1=ax+by, with sums and with negative coefficients, and H is closed under neither. The proof of uniqueness above is only as good as Euclid’s lemma.

2.2.7. Lowest terms

Every rational number is a fraction in many ways: 6/4=3/2=9/6. Number Systems, Section 3.1 found, in its Exercise C1, a least positive denominator by the least-element property, and Sets and Functions, Section 3.2 removed common factors of 2 only (Sets and Functions, Lemma 3.2.4). With the gcd we can remove every common factor at once, and Euclid’s lemma shows that the result is unique. Recall that after the identification of Number Systems, Section 3.1, p/q:=pq−1 in Q for p∈Z and q∈Z>0, and p/q=r/s holds if and only if ps=rq (Number Systems: From N to R, Proposition 3.1.4 (b)).

Proposition 2.2.6 (Lowest Terms)

Let x∈Q.

  • (a) There are p∈Z and q∈Z>0 with x=p/q and gcd(p,q)=1, and the pair (p,q) is unique.
  • (b) If x=r/s with r∈Z and s∈Z>0, then r=tp and s=tq for some t∈Z>0. In particular q∣s and q≤s: q is the least positive denominator of x.

Idea. For existence, divide numerator and denominator by their gcd d; the Bézout identity for d, divided by d, is a Bézout identity 1=px0+qy0 for the new pair. For (b), cross-multiplying gives ps=rq, so q∣ps, and Euclid’s lemma removes p. Uniqueness is (b) applied to a second coprime pair.

Proof. Existence in (a). By Number Systems: From N to R, Proposition 3.1.4 (b), x=r/s for some r∈Z, s∈Z>0. Since s≠0, d:=gcd(r,s)≥1, and by Theorem 2.1.1 (d) there are x0,y0∈Z with d=rx0+sy0. As d∣r and d∣s, write r=dp and s=dq with p,q∈Z. If q≤0, then dq≤0 (as in the existence proof of Theorem 2.2.5), against s>0; so q∈Z>0. Now d⋅1=d=(dp)x0+(dq)y0=d(px0+qy0), so d(px0+qy0−1)=0, and since d≠0, px0+qy0=1 (Number Systems: From N to R, Proposition 2.4.3 (f)). Hence gcd(p,q)=1 by Corollary 2.1.2. Finally rq=dpq=p(dq)=ps, so r/s=p/q by Number Systems: From N to R, Proposition 3.1.4 (b), and x=p/q.

(b), for any such pair. Let x=p/q with gcd(p,q)=1, and x=r/s with s>0. By Number Systems: From N to R, Proposition 3.1.4 (b), ps=rq. So q∣ps, and gcd(q,p)=1, hence q∣s by Theorem 2.2.1; write s=tq with t∈Z. Since s>0 and q>0, t>0, by the sign argument used for q above. Then q(pt)=ps=rq, so q(pt−r)=0, and r=tp because q≠0 (Number Systems: From N to R, Proposition 2.4.3 (f)). As q and s are positive, q∣s gives q≤s (Number Systems: From N to R, Proposition 2.5.1 (e)).

Uniqueness in (a). Let (r,s) be a second pair with x=r/s, s>0 and gcd(r,s)=1. By (b), r=tp and s=tq with t>0. So t is a common divisor of r and s, and it divides gcd(r,s)=1 (Theorem 2.1.1 (c), (d)). Hence t=1 (Number Systems: From N to R, Proposition 2.5.1 (g), with t>0), and (r,s)=(p,q).

So the least denominator N(x) of Number Systems, Section 3.1’s Exercise C1 is the q of (a), and every other denominator of x is a multiple of it. For example 252/198 has gcd(252,198)=18 (Example (Two runs of the algorithm)), and 252=18⋅14, 198=18⋅11, so its lowest terms are 14/11.

Remark. The twins in Sets and Functions, Section 3.2 are Sets and Functions, Lemma 3.2.4, which removes only factors of 2, and Sets and Functions, Exercise (C2: Lowest terms, used later), which asks for lowest terms in the full sense, for the school Q. Proposition 2.2.6 is the full statement, with uniqueness, for the constructed Q.

2.2.8. Exercises

A. Check your understanding

Exercise (A1)

These questions are about the uniqueness half of the proof of Theorem 2.2.5.

  • (a) Why must the empty list count as a prime factorization?
  • (b) Run the induction step on (p1,p2,p3,p4)=(2,2,3,5) and a second prime factorization (q1,…,ql) of 60. Which equalities does the proof derive, and to which two lists is P(3) applied?
  • (c) Which line of the proof uses Euclid’s lemma, and through which result?
  • (d) Where is “non-decreasing” used?
  • (e) Give the idea of the uniqueness proof in two sentences.

Solution.

  • (a) Otherwise the number 1 would have no prime factorization, and the theorem would be false for n=1. The existence proof uses it to exclude n=1 from B. (The base case P(0) of the uniqueness proof concerns the empty list as a list of primes with product 1, which it is in any case.)

  • (b) The step first gets l≥1, since the product is 60≠1. Then p4=5 divides ∏qj, so 5=qj≤ql for some j; and ql divides 60=2⋅2⋅3⋅5, so ql=pi≤5 for some i. Hence ql=5. Canceling 5 gives ∏j=1l−1qj=2⋅2⋅3=12, and P(3) is applied to (2,2,3) and (q1,…,ql−1), which gives l−1=3 and (q1,q2,q3)=(2,2,3).

  • (c) The lines “pk+1=qj for some j” and “ql=pi for some i”. They cite Corollary 2.2.2 (c), whose step uses (b), which is Theorem 2.2.1 applied with a=p.

  • (d) In qj≤ql and in pi≤pk+1: the entry found in the other list is at most that list’s last entry.

  • (e) The largest prime of one factorization divides the other product, so by Euclid’s lemma it is an entry there, hence at most the other’s largest; by symmetry the two largest entries are equal. Canceling them leaves two shorter factorizations with equal products, and induction on the length finishes.

B. Practice

Exercise (B1: Put the proof in order)

The following lines contain a proof of Theorem 2.2.1, shuffled, together with two lines that do not belong. Write the seven correct lines in an order that makes a proof, say which other orders are also admissible, and say why each of the other two lines fails.

  • (i) Suppose a∣bc and gcd(a,b)=1.

  • (ii) There are x,y∈Z with ax+by=1.

    (ii′) Since gcd(a,b)=1 and a∣bc, we have a∣b or a∣c.

  • (iii) Multiplying by c: c=acx+bcy.

    (iii′) Dividing 1=ax+by by a: 1/a=x+(b/a)y.

  • (iv) a∣acx, since acx=a(cx).

  • (v) Write bc=ak; then bcy=a(ky), so a∣bcy.

  • (vi) Hence a∣acx+bcy.

  • (vii) So a∣c.

Solution. An admissible order is (i), (ii), (iii), (iv), (v), (vi), (vii):

Suppose a∣bc and gcd(a,b)=1. There are x,y∈Z with ax+by=1 (Corollary 2.1.2). Multiplying by c: c=acx+bcy. Then a∣acx, since acx=a(cx). Write bc=ak; then bcy=a(ky), so a∣bcy. Hence a∣acx+bcy (Number Systems: From N to R, Proposition 2.5.1 (c)). So a∣c.

Line (i) comes first, and (ii) needs its hypothesis gcd(a,b)=1. Lines (iii), (iv) and (v) each need only (ii): (iii) multiplies its equation, and (iv) and (v) mention its x and y; (v) also uses the hypothesis a∣bc of (i). None of these three uses another of them. Line (vi) needs both (iv) and (v), but not (iii), since acx+bcy is just an expression in a,b,c,x,y. Line (vii) rewrites (vi) through the equation of (iii), so it needs both and comes last. The admissible orders are therefore those that start (i), (ii), end with (vii), and place (vi) after (iv) and (v); there are eight. For example, (i), (ii), (iv), (v), (vi), (iii), (vii) is admissible: (iii) may come anywhere before (vii).

The distractor (ii′) cites a “fact” that is not available as a step for arbitrary a. For a prime a it is Corollary 2.2.2 (b), which is proved from this lemma, so citing it here is circular. For a general integer a the line is the lemma itself in a weaker form, so citing it is circular again; only special cases are available (for a=±1, a∣b by Number Systems: From N to R, Proposition 2.5.1 (a), with (d) for −1), and the proof must work for every a. Either way the line uses what has not been established, which is (N9) of Logic and Proof, Example (What is not allowed).

The distractor (iii′) divides in Z, where there is no division: a may be 0 (gcd(0,1)=1), and then the line divides by 0; for a≠0, 1/a is not an integer unless a=±1. Divisibility is defined by multiplication (Sets and Functions, Definition 1.1.2), not by fractions.

Exercise (B2: The least common multiple)

Let a,b∈Z>0, and let M:={m∈Z>0:a∣m and b∣m}. Prove that M has a least element L, and that L∣c for every c∈Z with a∣c and b∣c.

The first part of a proof is given.

ab>0 by (O4), and a∣ab, b∣ab, so ab∈M; and 0 is a lower bound of M. By Number Systems: From N to R, Proposition 2.4.4, M has a least element L. Let c∈Z with a∣c and b∣c. By Number Systems: From N to R, Theorem 2.5.2 (a), c=qL+r with q,r∈Z and 0≤r<L. Since r=c+(−q)L, and a divides c and L, a∣r (Number Systems: From N to R, Proposition 2.5.1 (c)); likewise b∣r.

The last step is blank. Say which method this is, then complete it.

Solution. The method is least positive element, then divide: the remainder lies in the set and is smaller than its least positive element, so it is not positive.

Completion: if r>0, then r∈Z>0 is a common multiple of a and b, so r∈M, and r<L, against the choice of L. Hence r=0 (as r≥0), and c=qL, that is, L∣c.

The same argument proved Theorem 2.1.1 (b), with the set of positive combinations in place of M. This is the twin of Sets and Functions, Example (The supremum under divisibility is the least common multiple), now on the constructed Z.

Exercise (B3: Two factorizations and a gcd)

Find the prime factorizations of 1001 and of 210−1, proving that each entry is prime. Then show that gcd(1001,1023)=11 in two ways. First, use the factorizations to write 1001=11⋅91 and 1023=11⋅93: show gcd(91,93)=1, and deduce gcd(1001,1023)=11 from a Bézout identity for 91 and 93 (Corollary 2.1.2). Second, use the Euclidean algorithm.

Hint: the remark after Lemma 2.2.4 shortens each primality check. Do not use the school rule “the gcd is the product of the shared primes”: this chapter does not prove it.

Solution. Factorizations. 1001=7⋅143=7⋅11⋅13, and 210−1=1024−1=1023=3⋅341=3⋅11⋅31. So the prime factorizations are (7,11,13) and (3,11,31), both non-decreasing, once the entries are known to be prime. The primes 3 and 7 are covered by the small-primes remark above. For 11, 13 and 31 we use the remark after Lemma 2.2.4: it suffices that no d≥2 with d⋅d≤p divides p.

  • p=11 and p=13: d∈{2,3}, since d≥4 gives d⋅d≥16. The divisions 11=5⋅2+1=3⋅3+2 and 13=6⋅2+1=4⋅3+1 leave non-zero remainders.
  • p=31: d∈{2,3,4,5}, since d≥6 gives d⋅d≥36. The divisions 31=15⋅2+1=10⋅3+1=7⋅4+3=6⋅5+1 leave non-zero remainders.

A non-zero remainder means d∤p, by the uniqueness in Number Systems: From N to R, Theorem 2.5.2 (a). By Theorem 2.2.5 these are the only prime factorizations.

The gcd from the factorizations. We have 1001=11⋅91 and 1023=11⋅93. First, gcd(91,93)=1: a common divisor of 91 and 93 divides 93−91=2, so a positive one is 1 or 2 (discreteness), and 2∤91=45⋅2+1. By Corollary 2.1.2, 91x+93y=1 for some x,y∈Z; indeed 91⋅46−93⋅45=4186−4185=1. Multiplying by 11, 1001⋅46−1023⋅45=11. So every common divisor of 1001 and 1023 divides 11, and a positive one is at most 11. Since 11 is itself a common divisor, gcd(1001,1023)=11.

The gcd by the algorithm (Theorem 2.1.4): 1023=1⋅1001+22, 1001=45⋅22+11, 22=2⋅11+0. The last non-zero remainder is 11.

Uses: Number Systems: From N to R, Proposition 2.5.1 (c) (divides every combination); Number Systems: From N to R, Proposition 2.5.1 (e) (positive divisor is smaller); Definition 2.1.2.

C. Going deeper

Exercise (C1: Chapter check: unique factorization)

Prove that two prime factorizations of the same positive integer are equal: the uniqueness half of Theorem 2.2.5. You may cite Theorem 2.2.1 and Corollary 2.2.2.

Solution. The proof of uniqueness in Theorem 2.2.5 is a complete answer. Its steps, in order: set up P(k) for non-decreasing lists of primes of length k and arbitrary length l, with equal products; base case k=0, where a non-empty list of primes cannot have product 1; in the step, l≥1, then pk+1=qj≤ql and ql=pi≤pk+1 by Corollary 2.2.2 (c) (proved from Euclid’s lemma by induction on the length of the product) and the order of the lists; so pk+1=ql; cancel this non-zero factor (Number Systems: From N to R, Proposition 2.4.3 (f)); apply P(k) to the shortened lists.

What a complete answer needs. (10 points) - 2: sets up an induction on the length of one list (or a least counterexample), with the statement quantified over all lengths of the other list, and proves the base case. - 3: shows that the largest (or any chosen) prime of one list divides the other product, and identifies it with an entry of the other list by Euclid’s lemma for products of several factors (cited as Corollary 2.2.2 (c), or proved by induction from Euclid’s lemma). - 2: uses the symmetric step and the non-decreasing order to get equality of the two chosen extreme entries (both largest, or both smallest). - 1: justifies the cancellation by the absence of zero divisors. - 2: applies the induction hypothesis (or minimality) to the shortened lists and concludes equality of length and entries. Slips that lose the step: using the uniqueness of the factorization of a smaller number without an induction or a least counterexample set up; applying Euclid’s lemma for two factors to a product of many with no induction. Canceling a prime without noting that it is non-zero costs 1 point and does not lose the step. A least-counterexample proof on n (the least positive integer with two different factorizations) maps to the same points: its set-up and the case n=1 take the first 2, and “the cofactor m in n=mpk has only one factorization” takes the last 2. A proof that compares the smallest entries p1=q1 earns the same points, provided it proves (for example by induction on the length) that a product equals its first entry times the product of the re-indexed list (p2,…,pk+1), and states the re-indexing of the shortened lists (p2,…,pk+1) and (q2,…,ql) before applying the induction hypothesis; asserting that identity without proof costs the 1 cancellation point.

Exercise (C2: Find the error)

Here is a statement and an argument for it.

Claim. Let m,n,c∈Z. If m∣c, n∣c and gcd(m,n)=1, then mn∣c.

Argument. (1) Write c=mk and c=nl with k,l∈Z. (2) Then c2=c⋅c=(mk)(nl)=mn⋅kl. (3) So mn∣c2. (4) Hence mn∣c.

Is the claim true? Does the argument prove it? If not, name the line that fails, explain why, and give a counterexample to the step.

Solution. The claim is true: it is Proposition 2.2.3. The argument does not prove it.

Lines (1)–(3) are correct. The failing line is (4). It rests on a general “fact”: x∣c2 implies x∣c. That has not been proved, and it is false, so the line cites nothing: entry (N9) of Logic and Proof, Example (What is not allowed). A counterexample to the step: x=4, c=2, with 4∣4=c2 and 4∤2 (a positive divisor of 2 is at most 2, Number Systems: From N to R, Proposition 2.5.1 (e)). There is no counterexample to the conclusion, which is true.

A sign that something is wrong: the argument never uses gcd(m,n)=1, and without that hypothesis the claim is false (4∣12, 6∣12, 24∤12). The repair is the proof of Proposition 2.2.3, which spends the coprimality in Euclid’s lemma.

Exercise (C3: There is no last prime)

Prove that no finite list contains every prime: for every list of primes (p1,…,pk), with k∈N, there is a prime that is not an entry of the list.

Solution (Hint 1). Consider N:=∏i=1kpi+1, and ask which primes can divide it.

Solution (Hint 2). First prove, by induction on k, that every entry of a list of primes divides its product, and that the product is at least 1.

Solution. A lemma on products. For a list of primes (p1,…,pk), write Pj:=∏i=1jpi for j≤k. We prove, by Logic and Proof, Axiom 4.2.1 (through Number Systems: From N to R, Corollary 1.4.3 (b)) on j, the statement “if j≤k, then Pj≥1 and pi∣Pj for every i≤j”. Base j=0: P0=1 (the recursion of Definition 2.2.1), and there are no entries to check. Step: let j+1≤k; then j≤k, so the statement holds for j, and Pj+1=Pjpj+1 by the recursion. Each pi with i≤j divides Pj, which divides Pj+1, so pi∣Pj+1 (Number Systems: From N to R, Proposition 2.5.1 (b)); and pj+1∣Pj+1 by Sets and Functions, Definition 1.1.2. Since Pj≥1>0 and pj+1≥2>0, Pj+1>0⋅pj+1=0 (Number Systems: From N to R, Proposition 2.4.3 (c), Number Systems: From N to R, Proposition 2.3.2 (b)), so Pj+1≥1 by discreteness (Number Systems: From N to R, Theorem 2.4.2 (c)).

The new prime. Let N:=Pk+1. Then N≥2, so its least divisor q≥2 is prime (Lemma 2.2.4), and q∣N. If q=pi for some i, then q∣Pk by the lemma, so q divides N−Pk=1 (Number Systems: From N to R, Proposition 2.5.1 (c)), and q=±1 (Number Systems: From N to R, Proposition 2.5.1 (g)), against q≥2. So q is a prime that is not an entry of the list.

For the empty list, N=2 and q=2. For (2,3,5,7), N=211, which happens to be prime; for (2,3,5,7,11,13), N=30031=59⋅509 is not, and the new prime is 59. The proof promises a new prime factor of N, not that N itself is prime.

This is the direct proof asked for in part (c) of Logic and Proof, Exercise (C1: Euclid without the contradiction), now on the constructed Z and including the empty list. Its two school facts are replaced by Lemma 2.2.4 and Number Systems: From N to R, Proposition 2.5.1 (c).

What a complete answer needs. (10 points) - 2: defines N as the product plus 1 and shows N≥2, with a reason that the product is positive. - 2: shows that each pi divides the product, by an induction or a cited result. - 2: produces a prime factor q of N, citing Lemma 2.2.4 or an equivalent. - 3: shows q is not any pi, since it would divide 1. - 1: concludes with the quantifiers in order: for every list there is a prime outside it. Slips that lose the step: claiming that N is prime; assuming “the set of primes is finite” and taking its product without a list (no list, no product).