Modular arithmetic

Last updated
Time-keeping on this clock uses arithmetic modulo 12. Adding 4 hours to 9 o'clock gives 1 o'clock, since 13 is congruent to 1 modulo 12. Clock group.svg
Time-keeping on this clock uses arithmetic modulo 12. Adding 4 hours to 9 o'clock gives 1 o'clock, since 13 is congruent to 1 modulo 12.

In mathematics, modular arithmetic is a system of arithmetic for integers, where numbers "wrap around" when reaching a certain value, called the modulus. The modern approach to modular arithmetic was developed by Carl Friedrich Gauss in his book Disquisitiones Arithmeticae , published in 1801.

Contents

A familiar use of modular arithmetic is in the 12-hour clock, in which the day is divided into two 12-hour periods. If the time is 7:00 now, then 8 hours later it will be 3:00. Simple addition would result in 7 + 8 = 15, but 15:00 reads as 3:00 on the clock face because clocks "wrap around" every 12 hours and the hour number starts over at zero when it reaches 12. We say that 15 is congruent to 3 modulo 12, written 15 3 (mod 12), so that 7 + 8 3 (mod 12). Similarly, 8:00 represents a period of 8 hours, and twice this would give 16:00, which reads as 4:00 on the clock face, written as 2 × 8 4 (mod 12).

Congruence

Given an integer m ≥ 1, called a modulus, two integers a and b are said to be congruent modulo m, if m is a divisor of their difference; that is, if there is an integer k such that

ab = k m.

Congruence modulo m is a congruence relation, meaning that it is an equivalence relation that is compatible with the operations of addition, subtraction, and multiplication. Congruence modulo m is denoted

ab (mod m).

The parentheses mean that (mod m) applies to the entire equation, not just to the right-hand side (here, b).

This notation is not to be confused with the notation b mod m (without parentheses), which refers to the modulo operation, the remainder of b when divided by m: that is, b mod m denotes the unique integer r such that 0 ≤ r < m and rb (mod m).

The congruence relation may be rewritten as

a = k m + b,

explicitly showing its relationship with Euclidean division. However, the b here need not be the remainder in the division of a by m. Rather, ab (mod m) asserts that a and b have the same remainder when divided by m. That is,

a = p m + r,
b = q m + r,

where 0 ≤ r < m is the common remainder. We recover the previous relation: ab = k m by subtracting these two expressions and setting k = pq.

Because the congruence modulo m, is defined by the divisibility by m and because -1 is a unit in the ring of integers, a number is divisible by -m exactly if it is divisible by m. This means that every non-zero integer m may be taken as modulus.

Examples

In modulus 12, one can assert that:

38 ≡ 14 (mod 12)

because the difference is 38 − 14 = 24 = 2 × 12, a multiple of 12. Equivalently, 38 and 14 have the same remainder 2 when divided by 12.

The definition of congruence also applies to negative values. For example:

Basic properties

The congruence relation satisfies all the conditions of an equivalence relation:

If a1b1 (mod m) and a2b2 (mod m), or if ab (mod m), then: [1]

If ab (mod m), then it is generally false that kakb (mod m). However, the following is true:

For cancellation of common terms, we have the following rules:

The last rule can be used to move modular arithmetic into division. If b divides a, then (a/b) mod m = (a mod b m) / b.

The modular multiplicative inverse is defined by the following rules:

The multiplicative inverse xa−1 (mod m) may be efficiently computed by solving Bézout's equation a x + m y = 1 for x, y, by using the Extended Euclidean algorithm.

In particular, if p is a prime number, then a is coprime with p for every a such that 0 < a < p; thus a multiplicative inverse exists for all a that is not congruent to zero modulo p.

Advanced properties

Some of the more advanced properties of congruence relations are the following:

Congruence classes

The congruence relation is an equivalence relation. The equivalence class modulo m of an integer a is the set of all integers of the form a + k m, where k is any integer. It is called the congruence class or residue class of a modulo m, and may be denoted as a mod m), or as a or [a] when the modulus m is known from the context.

Each residue class modulo m contains exactly one integer in the range . Thus, these integers are representatives of their respective residue classes.

It is generally easier to work with integers than sets of integers; that is, the representatives most often considered, rather than their residue classes.

Consequently, (a mod m) denotes generally the unique integer k such that 0 ≤ k < m and ka (mod m); it is called the residue of a modulo m.

In particular, (a mod m) = (b mod m) is equivalent to ab (mod m), and this explains why "=" is often used instead of "" in this context.

Residue systems

Each residue class modulo m may be represented by any one of its members, although we usually represent each residue class by the smallest nonnegative integer which belongs to that class [2] (since this is the proper remainder which results from division). Any two members of different residue classes modulo m are incongruent modulo m. Furthermore, every integer belongs to one and only one residue class modulo m. [3]

The set of integers {0, 1, 2, ..., m − 1} is called the least residue system modulo m. Any set of m integers, no two of which are congruent modulo m, is called a complete residue system modulo m.

The least residue system is a complete residue system, and a complete residue system is simply a set containing precisely one representative of each residue class modulo m. [4] For example, the least residue system modulo 4 is {0, 1, 2, 3}. Some other complete residue systems modulo 4 include:

Some sets that are not complete residue systems modulo 4 are:

Reduced residue systems

Given the Euler's totient function φ(m), any set of φ(m) integers that are relatively prime to m and mutually incongruent under modulus m is called a reduced residue system modulo m. [5] The set {5, 15} from above, for example, is an instance of a reduced residue system modulo 4.

Covering systems

Covering systems represent yet another type of residue system that may contain residues with varying moduli.

Integers modulo m

Remark: In the context of this paragraph, the modulus m is almost always taken as positive.

The set of all congruence classes modulo m is called the ring of integers modulo m, [6] and is denoted , , or . [7] The notation is, however, not recommended because it can be confused with the set of m-adic integers. The ring is fundamental to various branches of mathematics (see § Applications below).

For m > 0 one has

When m = 1, is the zero ring; when m = 0, is not an empty set; rather, it is isomorphic to , since a0 = {a}.

Addition, subtraction, and multiplication are defined on by the following rules:

The properties given before imply that, with these operations, is a commutative ring. For example, in the ring , one has

as in the arithmetic for the 24-hour clock.

The notation is used because this ring is the quotient ring of by the ideal , the set formed by all k m with

Considered as a group under addition, is a cyclic group, and all cyclic groups are isomorphic with for some m. [8]

The ring of integers modulo m is a field if and only if m is prime (this ensures that every nonzero element has a multiplicative inverse). If m = pk is a prime power with k > 1, there exists a unique (up to isomorphism) finite field with m elements, which is not isomorphic to , which fails to be a field because it has zero-divisors.

If m > 1, denotes the multiplicative group of the integers modulo m that are invertible. It consists of the congruence classes am, where a is coprime to m; these are precisely the classes possessing a multiplicative inverse. They form an abelian group under multiplication; its order is φ(m), where φ is Euler's totient function

Extension to real numbers

Applications

In pure mathematics, modular arithmetic is one of the foundations of number theory, touching on almost every aspect of its study, and it is also used extensively in group theory, ring theory, knot theory, and abstract algebra. In applied mathematics, it is used in computer algebra, cryptography, computer science, chemistry and the visual and musical arts.

A very practical application is to calculate checksums within serial number identifiers. For example, International Standard Book Number (ISBN) uses modulo 11 (for 10-digit ISBN) or modulo 10 (for 13-digit ISBN) arithmetic for error detection. Likewise, International Bank Account Numbers (IBANs), for example, make use of modulo 97 arithmetic to spot user input errors in bank account numbers. In chemistry, the last digit of the CAS registry number (a unique identifying number for each chemical compound) is a check digit, which is calculated by taking the last digit of the first two parts of the CAS registry number times 1, the previous digit times 2, the previous digit times 3 etc., adding all these up and computing the sum modulo 10.

In cryptography, modular arithmetic directly underpins public key systems such as RSA and Diffie–Hellman, and provides finite fields which underlie elliptic curves, and is used in a variety of symmetric key algorithms including Advanced Encryption Standard (AES), International Data Encryption Algorithm (IDEA), and RC4. RSA and Diffie–Hellman use modular exponentiation.

In computer algebra, modular arithmetic is commonly used to limit the size of integer coefficients in intermediate calculations and data. It is used in polynomial factorization, a problem for which all known efficient algorithms use modular arithmetic. It is used by the most efficient implementations of polynomial greatest common divisor, exact linear algebra and Gröbner basis algorithms over the integers and the rational numbers. As posted on Fidonet in the 1980s and archived at Rosetta Code, modular arithmetic was used to disprove Euler's sum of powers conjecture on a Sinclair QL microcomputer using just one-fourth of the integer precision used by a CDC 6600 supercomputer to disprove it two decades earlier via a brute force search. [9]

In computer science, modular arithmetic is often applied in bitwise operations and other operations involving fixed-width, cyclic data structures. The modulo operation, as implemented in many programming languages and calculators, is an application of modular arithmetic that is often used in this context. The logical operator XOR sums 2 bits, modulo 2.

The use of long division to turn a fraction into a repeating decimal in any base b is equivalent to modular multiplication of b modulo the denominator. For example, for decimal, b = 10.

In music, arithmetic modulo 12 is used in the consideration of the system of twelve-tone equal temperament, where octave and enharmonic equivalency occurs (that is, pitches in a 1:2 or 2:1 ratio are equivalent, and C-sharp is considered the same as D-flat).

The method of casting out nines offers a quick check of decimal arithmetic computations performed by hand. It is based on modular arithmetic modulo 9, and specifically on the crucial property that 10 ≡ 1 (mod 9).

Arithmetic modulo 7 is used in algorithms that determine the day of the week for a given date. In particular, Zeller's congruence and the Doomsday algorithm make heavy use of modulo-7 arithmetic.

More generally, modular arithmetic also has application in disciplines such as law (e.g., apportionment), economics (e.g., game theory) and other areas of the social sciences, where proportional division and allocation of resources plays a central part of the analysis.

Computational complexity

Since modular arithmetic has such a wide range of applications, it is important to know how hard it is to solve a system of congruences. A linear system of congruences can be solved in polynomial time with a form of Gaussian elimination, for details see linear congruence theorem. Algorithms, such as Montgomery reduction, also exist to allow simple arithmetic operations, such as multiplication and exponentiation modulo m, to be performed efficiently on large numbers.

Some operations, like finding a discrete logarithm or a quadratic congruence appear to be as hard as integer factorization and thus are a starting point for cryptographic algorithms and encryption. These problems might be NP-intermediate.

Solving a system of non-linear modular arithmetic equations is NP-complete. [10]

Example implementations

Below are three reasonably fast C functions, two for performing modular multiplication and one for modular exponentiation on unsigned integers not larger than 63 bits, without overflow of the transient operations.

An algorithm to compute ab (mod m): [11]

uint64_tmul_mod(uint64_ta,uint64_tb,uint64_tm){if(!((a|b)&(0xFFFFFFFFULL<<32)))returna*b%m;uint64_td=0,mp2=m>>1;inti;if(a>=m)a%=m;if(b>=m)b%=m;for(i=0;i<64;++i){d=(d>mp2)?(d<<1)-m:d<<1;if(a&0x8000000000000000ULL)d+=b;if(d>=m)d-=m;a<<=1;}returnd;}

On computer architectures where an extended precision format with at least 64 bits of mantissa is available (such as the long double type of most x86 C compilers), the following routine is faster than a solution using a loop, by employing the trick that, by hardware, floating-point multiplication results in the most significant bits of the product kept, while integer multiplication results in the least significant bits kept:[ citation needed ]

uint64_tmul_mod(uint64_ta,uint64_tb,uint64_tm){longdoublex;uint64_tc;int64_tr;if(a>=m)a%=m;if(b>=m)b%=m;x=a;c=x*b/m;r=(int64_t)(a*b-c*m)%(int64_t)m;returnr<0?r+m:r;}

Below is a C function for performing modular exponentiation, that uses the mul_mod function implemented above.

An algorithmic way to compute ab (mod m):

uint64_tpow_mod(uint64_ta,uint64_tb,uint64_tm){uint64_tr=m==1?0:1;while(b>0){if(b&1)r=mul_mod(r,a,m);b=b>>1;a=mul_mod(a,a,m);}returnr;}

However, for all above routines to work, m must not exceed 63 bits.

See also

Notes

  1. Sandor Lehoczky; Richard Rusczky (2006). David Patrick (ed.). the Art of Problem Solving. Vol. 1 (7 ed.). AoPS Incorporated. p. 44. ISBN   0977304566.
  2. Weisstein, Eric W. "Modular Arithmetic". Wolfram MathWorld. Retrieved 2020-08-12.
  3. Pettofrezzo & Byrkit (1970 , p. 90)
  4. Long (1972 , p. 78)
  5. Long (1972 , p. 85)
  6. It is a ring, as shown below.
  7. "2.3: Integers Modulo n". Mathematics LibreTexts. 2013-11-16. Retrieved 2020-08-12.
  8. Sengadir T., Discrete Mathematics and Combinatorics , p. 293, at Google Books
  9. "Euler's sum of powers conjecture". rosettacode.org. Retrieved 2020-11-11.
  10. Garey, M. R.; Johnson, D. S. (1979). Computers and Intractability, a Guide to the Theory of NP-Completeness . W. H. Freeman. ISBN   0716710447.
  11. This code uses the C literal notation for unsigned long long hexadecimal numbers, which end with ULL. See also section 6.4.4 of the language specification n1570.

Related Research Articles

In number theory, two integers a and b are coprime, relatively prime or mutually prime if the only positive integer that is a divisor of both of them is 1. Consequently, any prime number that divides a does not divide b, and vice versa. This is equivalent to their greatest common divisor (GCD) being 1. One says also ais prime tob or ais coprime withb.

<span class="mw-page-title-main">Chinese remainder theorem</span> Theorem for solving simultaneous congruences

In mathematics, the Chinese remainder theorem states that if one knows the remainders of the Euclidean division of an integer n by several integers, then one can determine uniquely the remainder of the division of n by the product of these integers, under the condition that the divisors are pairwise coprime.

In mathematics, a finite field or Galois field is a field that contains a finite number of elements. As with any field, a finite field is a set on which the operations of multiplication, addition, subtraction and division are defined and satisfy certain basic rules. The most common examples of finite fields are given by the integers mod p when p is a prime number.

<span class="mw-page-title-main">Quadratic reciprocity</span> Gives conditions for the solvability of quadratic equations modulo prime numbers

In number theory, the law of quadratic reciprocity is a theorem about modular arithmetic that gives conditions for the solvability of quadratic equations modulo prime numbers. Due to its subtlety, it has many formulations, but the most standard statement is:

<span class="mw-page-title-main">Gaussian integer</span> Complex number whose real and imaginary parts are both integers

In number theory, a Gaussian integer is a complex number whose real and imaginary parts are both integers. The Gaussian integers, with ordinary addition and multiplication of complex numbers, form an integral domain, usually written as or

<i>p</i>-adic number Number system extending the rational numbers

In number theory, given a prime number p, the p-adic numbers form an extension of the rational numbers which is distinct from the real numbers, though with some similar properties; p-adic numbers can be written in a form similar to decimals, but with digits based on a prime number p rather than ten, and extending to the left rather than to the right.

<span class="mw-page-title-main">Euler's totient function</span> Number of integers coprime to and not exceeding n

In number theory, Euler's totient function counts the positive integers up to a given integer n that are relatively prime to n. It is written using the Greek letter phi as or , and may also be called Euler's phi function. In other words, it is the number of integers k in the range 1 ≤ kn for which the greatest common divisor gcd(n, k) is equal to 1. The integers k of this form are sometimes referred to as totatives of n.

In number theory, Fermat's little theorem states that if p is a prime number, then for any integer a, the number apa is an integer multiple of p. In the notation of modular arithmetic, this is expressed as

In number theory, Euler's theorem states that, if n and a are coprime positive integers, then is congruent to modulo n, where denotes Euler's totient function; that is

In modular arithmetic, a number g is a primitive root modulo n if every number a coprime to n is congruent to a power of g modulo n. That is, g is a primitive root modulo n if for every integer a coprime to n, there is some integer k for which gka. Such a value k is called the index or discrete logarithm of a to the base g modulo n. So g is a primitive root modulo n if and only if g is a generator of the multiplicative group of integers modulo n.

In number theory, an integer q is called a quadratic residue modulo n if it is congruent to a perfect square modulo n; i.e., if there exists an integer x such that:

In number theory, given a positive integer n and an integer a coprime to n, the multiplicative order of a modulo n is the smallest positive integer k such that .

The AKS primality test is a deterministic primality-proving algorithm created and published by Manindra Agrawal, Neeraj Kayal, and Nitin Saxena, computer scientists at the Indian Institute of Technology Kanpur, on August 6, 2002, in an article titled "PRIMES is in P". The algorithm was the first one which is able to determine in polynomial time, whether a given number is prime or composite and this without relying on mathematical conjectures such as the generalized Riemann hypothesis. The proof is also notable for not relying on the field of analysis. In 2006 the authors received both the Gödel Prize and Fulkerson Prize for their work.

In modular arithmetic computation, Montgomery modular multiplication, more commonly referred to as Montgomery multiplication, is a method for performing fast modular multiplication. It was introduced in 1985 by the American mathematician Peter L. Montgomery.

A residue numeral system (RNS) is a numeral system representing integers by their values modulo several pairwise coprime integers called the moduli. This representation is allowed by the Chinese remainder theorem, which asserts that, if M is the product of the moduli, there is, in an interval of length M, exactly one integer having any given set of modular values. The arithmetic of a residue numeral system is also called multi-modular arithmetic.

<span class="mw-page-title-main">Carmichael function</span> Function in mathematical number theory

In number theory, a branch of mathematics, the Carmichael functionλ(n) of a positive integer n is the smallest member of the set of positive integers m having the property that

Multiplicative group of integers modulo <i>n</i> Group of units of the ring of integers modulo n

In modular arithmetic, the integers coprime to n from the set of n non-negative integers form a group under multiplication modulo n, called the multiplicative group of integers modulo n. Equivalently, the elements of this group can be thought of as the congruence classes, also known as residues modulo n, that are coprime to n. Hence another name is the group of primitive residue classes modulo n. In the theory of rings, a branch of abstract algebra, it is described as the group of units of the ring of integers modulo n. Here units refers to elements with a multiplicative inverse, which, in this ring, are exactly those coprime to n.

Cubic reciprocity is a collection of theorems in elementary and algebraic number theory that state conditions under which the congruence x3 ≡ p (mod q) is solvable; the word "reciprocity" comes from the form of the main theorem, which states that if p and q are primary numbers in the ring of Eisenstein integers, both coprime to 3, the congruence x3p is solvable if and only if x3q is solvable.

In mathematics, particularly in the area of arithmetic, a modular multiplicative inverse of an integer a is an integer x such that the product ax is congruent to 1 with respect to the modulus m. In the standard notation of modular arithmetic this congruence is written as

In number theory, a kth root of unity modulo n for positive integers k, n ≥ 2, is a root of unity in the ring of integers modulo n; that is, a solution x to the equation . If k is the smallest such exponent for x, then x is called a primitive kth root of unity modulo n. See modular arithmetic for notation and terminology.

References