I feel like taking a break from elliptic curves and talking about something completely different. For motivation, let’s take a look at solutions of the equation for different values of
For
we have two solutions:
For
still two solutions:
For
we get
And so on, and so forth.
Notice something interesting. Reduce 91 modulo 25, and you get 16. Reduce 16 modulo 5, and you get 1. Similarly, reduce 33 modulo 25 to get 8, which reduces to 3 modulo 5. It seems like a solution modulo 5 begets a solution modulo 25, which then yields a solution modulo 125, etc. No surprise there, since all we are doing is reducing the equation modulo
The question is this. Can we go in the opposite direction and keep this string of solutions going ad infimum? Given a solution modulo 125, can we find one modulo 625?
To make things more general, let us denote polynomial by
and
by
Futher, we will always assume that
is prime. We know that there exists a solution
to equation
Let us for a second suppose that there exists a number
such that
and
Then
for some
Plug this equality into the given equation to get
Since is a polynomial, we can multiply things out, reduce modulo
where possible, to obtain
(Do this for to see that this is precisely what you get when the dust settles.) Move things around, to get
If is not zero modulo
then it is also invertible modulo
and we can divide both sides of this congruence by it to get
Finally, add to both sides, and remember the definition of
to see that
This formula looks precisely like Newton’s Method in Calculus.
One can also quickly check that if is another integer satisfying the defining conditions of
then
Note that the only requirement for us to be able to build this chain of solutions is that
But
Hence the sole condition for using Newton’s Method to build a chain of solutions modulo
for
starting with
is that
be a simple root of
modulo
So, we are now dealing with sequences of integer numbers
such that
So far as we only care about the congruence class of each modulo
we identify two sequences
and
if
for all
Check for yourself that this identification is an equivalence relation. The equivalence classes are called the
-adic integers.
Alternative and much more suggestive notation is also available. If we let then we can write a
-adic integer as a formal infinite sum
The from the previous paragraph are equal to truncations (reductions modulo
) of this sum. To make our lives easier, we choose
from the set
of representatives of congruence classes modulo
The set of -adic integers contains the set of rational integers
via the map
In other words, the “usual” integers are represented by constant sequences/finite series.
Going back to our original equation, we find that it has two solutions in
and