Skip to main content
1 of 2
Post Made Community Wiki
darij grinberg
  • 33.8k
  • 4
  • 118
  • 253

I think the fundamentals of the theory of quadratic residues modulo a prime qualify.

It is easy to explain what residue classes modulo a prime $p$ are, and to formulate statements of this kind:

1. The product of two quadratic residues modulo $p$ is a quadratic residue.

2. The product of a quadratic residue and a quadratic nonresidue modulo $p$ is a quadratic nonresidue.

3. The product of two quadratic nonresidues modulo $p$ is a quadratic residue.

(Note that I am not counting $0$ as a quadratic residue, nor as a quadratic nonresidue.)

Now 1 and 2 are very easy to show. 3 is not. What do we do?

First, it is easy to see that every quadratic residue is the square of exactly $2$ distinct residues modulo $p$. Thus there are exactly $\frac{p-1}{2}$ quadratic residues modulo $p$. Hence, there are exactly $\left(p-1\right)-\frac{p-1}{2}=\frac{p-1}{2}$ quadratic nonresidues modulo $p$. Now let $a$ and $b$ be two quadratic nonresidues. If $ab$ is a quadratic nonresidue, then there are at least $\frac{p-1}{2}+1$ different residues $x$ modulo $p$ for which $ax$ is a quadratic nonresidue (namely, each of the $\frac{p-1}{2}$ quadratic residues qualifies as such $x$ (by statement 2), but the quadratic nonresidue $b$ also qualifies), which leads to at least $\frac{p-1}{2}+1$ different quadratic nonresidues (since distinct $x$'es lead to distinct $ax$'es), contradicting the fact that there are only $\frac{p-1}{2}$ quadratic nonresidues modulo $p$. Thus, $ab$ must be a quadratic residue, and 3 is proven.

This indirect argument is, I believe, understandable to high school students. The only two theorems we used are:

A. Every quadratic residue is the square of exactly $2$ distinct residues modulo $p$.

B. If $a$ is a nonzero residue modulo $p$, then distinct $x$'es lead to distinct $ax$'es.

Both of these theorems follow from the fact that if a prime divides a product of two integers, then it divides one of these two integers. (In fact, to prove A, assume that $a^2 \equiv b^2 \equiv c^2 \mod p$ for three integers $a$, $b$, $c$ pairwise incongruent modulo $p$. Then, $a^2 \equiv b^2 \mod p$ rewrites as $p\mid \left(a+b\right)\left(a-b\right)$. Hence, at least one of $a+b$ and $a-b$ is divisible by $p$. Since $a$ and $b$ are incongruent modulo $p$, this can only mean that $a+b$ is divisible by $p$. Similarly, $b+c$ and $c+a$ are divisible by $p$. But therefore $2a=\left(a+b\right)+\left(c+a\right)-\left(b+c\right)$ must also be divisible by $p$. Since $p$ cannot be $2$ (as there are no three integers pairwise incongruent modulo $2$), this yields that $a$ is divisible by $p$. Similarly, $b$ and $c$ are divisible by $p$, which contradicts with their being incongruent.)

The hard part is to tell students what is interesting about quadratic residues. Maybe cryptography?

darij grinberg
  • 33.8k
  • 4
  • 118
  • 253