Algebraic Number Fields and Rings of Integers

An algebraic number field $K$ is a finite-degree field extension of $Q$ ; its ring of integers $O_{K}$ is the set of elements satisfying monic integer polynomials. Key result: $O_{K}$ is a Dedekind domain — a Noetherian, integrally closed domain of Krull dimension 1 — so every nonzero ideal factors uniquely into prime ideals, restoring "unique factorization" at the level of ideals even when elements fail it. Applies to algebraic number theory, Diophantine equations, class field theory, and cryptography. Foundations laid by Kummer, Dedekind, and Hilbert (1840s–1900s).

A number field is a field $K$ containing $Q$ such that $[K : Q] = dim_{Q} K$ is finite. Inside every such $K$ sits a distinguished subring $O_{K}$ , the integral closure of $Z$ in $K$ , which plays the role that $Z$ plays inside $Q$ . This subject matters because the failure of unique factorization in rings like $Z [- 5]$ — where $6 = 2 \cdot 3 = (1 + - 5) (1 - - 5)$ — is exactly what stalled early attempts at Fermat's Last Theorem, and the resolution (ideal factorization) launched modern algebraic number theory. The surprising fact: although elements may factor non-uniquely, ideals always factor uniquely into primes, and the precise obstruction to unique factorization of elements is captured by a single finite abelian group, the ideal class group.

The Core Insight

Replace numbers by ideals. The multiplicative structure that breaks for elements (non-unique factorization) is repaired by passing to the monoid of nonzero ideals, which becomes a free abelian object on the prime ideals. The two great finiteness theorems — finiteness of the class number and Dirichlet's unit theorem — quantify how far $O_{K}$ is from being a PID and how big its group of units is. Everything in classical algebraic number theory orbits these two invariants.

Formal Statement

Number Field

A number field is a field $K$ with $Q \subseteq K$ and $[K : Q] = n < \infty$ . The integer $n$ is the degree of $K$ . By the primitive element theorem, $K = Q (θ)$ for some $θ$ , and $θ$ is a root of an irreducible monic polynomial $m_{θ} \in Q [x]$ of degree $n$ .

Algebraic Integer and Ring of Integers

An element $α \in K$ is an algebraic integer if it is a root of a monic polynomial with coefficients in $Z$ :

α^{m} + c_{m - 1} α^{m - 1} + \dots + c_{1} α + c_{0} = 0, c_{i} \in Z .

⟳equivalently

α

generates a finitely generated

Z

-module

Z [α]

; integrality is closure under such finite generation.

The set of all algebraic integers in $K$ is the ring of integers $O_{K}$ , equal to the integral closure of $Z$ in $K$ .

The embeddings of $K$ into $C$ partition into $r_{1}$ real embeddings $σ_{1}, \dots, σ_{r_{1}}$ and $r_{2}$ conjugate pairs of complex embeddings, with

n = r_{1} + 2 r_{2} .

⟳the

n

distinct roots of

m_{θ}

over

C

are either real or come in complex-conjugate pairs; counting gives the signature

(r_{1}, r_{2})

For $α \in K$ with embeddings $σ_{i}$ , define the norm and trace as products and sums over all $n$ embeddings:

N_{K / Q} (α) = i = 1 \prod n σ_{i} (α), Tr_{K / Q} (α) = i = 1 \sum n σ_{i} (α) .

⟳these are the determinant and trace of the

Q

-linear multiplication-by-

α

map on

K

; both lie in

Q

, and in

Z

when

α \in O_{K}

The discriminant of an integral basis ${ω_{1}, \dots, ω_{n}}$ of $O_{K}$ is

d_{K} = det (Tr_{K / Q} (ω_{i} ω_{j}))_{i, j = 1}^{n} = det (σ_{i} (ω_{j}))^{2} .

⟳the trace form matrix factors as

M^{T} M

where

M = (σ_{i} (ω_{j}))

, so its determinant is the square of

det M

; nonvanishing follows from separability of

K / Q

Structure of $\mathcal{O}_K$

Let $K$ be a number field of degree $n$ . Then:

$O_{K}$ is a free $Z$ -module of rank $n$ ; it admits an integral basis ${ω_{1}, \dots, ω_{n}}$ with $O_{K} = Z ω_{1} \oplus \dots \oplus Z ω_{n}$ .
$O_{K}$ is a Dedekind domain: Noetherian, integrally closed, and of Krull dimension 1 (every nonzero prime ideal is maximal).
Every nonzero ideal $a \subseteq O_{K}$ factors uniquely as a product of prime ideals,

a = p_{1}^{e_{1}} p_{2}^{e_{2}} \dots p_{g}^{e_{g}},

⟳Dedekind domains are precisely the domains where the monoid of nonzero ideals is free abelian on the prime ideals; uniqueness follows by localizing at each

p_{i}

to a DVR.

Class Number and Unit Theorems

For a number field $K$ of signature $(r_{1}, r_{2})$ :

(Finiteness of class number) The ideal class group

Cl (K) = I_{K} / P_{K}

, the quotient of fractional ideals by principal fractional ideals, is finite. Its order

h_{K}

is the class number. (Dirichlet's unit theorem) The unit group factors as

O_{K}^{\times} ≅ μ_{K} \times Z^{r_{1} + r_{2} - 1},

⟳the logarithmic embedding sends units into a hyperplane of

R^{r_{1} + r_{2}}

; its image is a full lattice (covolume = regulator), and the kernel is the finite group of roots of unity

μ_{K}

where

μ_{K}

is the finite cyclic group of roots of unity in

K

Why It Holds / Derivation

$\mathcal{O}_K$ is a free $\mathbb{Z}$-module of rank $n$

Step 1 — Integers form a ring. If

α, β

are integral, then

Z [α, β]

is a finitely generated

Z

-module. Any element of a ring that is finitely generated as a

Z

-module is integral (Cayley–Hamilton applied to multiplication). Hence

α \pm β

α β

are integral, so

O_{K}

is a ring. Step 2 — $O_{K}$ spans $K$ over $Q$ . For any

α \in K

, clearing denominators of its minimal polynomial gives

m α \in O_{K}

for some

m \in Z_{> 0}

. So

K = Q \otimes_{Z} O_{K}

and

O_{K}

contains a

Q

-basis of

K

. Step 3 — Sandwiching by lattices. Pick a

Q

-basis

{β_{1}, \dots, β_{n}} \subseteq O_{K}

K

. The trace form is nondegenerate (separability), so there is a dual basis

{β_{1}^{*}, \dots, β_{n}^{*}}

with

Tr (β_{i} β_{j}^{*}) = δ_{ij}

. For

α = \sum a_{j} β_{j}^{*} \in O_{K}

, the coefficients are

a_{j} = Tr (α β_{j}) \in Z

. Hence

j ⨁ Z β_{j} \subseteq O_{K} \subseteq j ⨁ Z β_{j}^{*} .

⟳integrality forces traces

Tr (α β_{j})

to be rational integers, locking

O_{K}

between two free modules of rank

n

Step 4 — Conclusion. A subgroup of a free abelian group of rank

n

that contains a free subgroup of rank

n

is itself free of rank

n

(structure theorem for f.g. modules over the PID

Z

). Therefore

O_{K} ≅ Z^{n}

■

Unique factorization of ideals — sketch

Step 1 — Noetherian.

O_{K} ≅ Z^{n}

is a Noetherian

Z

-module, hence Noetherian as a ring. Step 2 — Dimension 1. If

p \neq = 0

is prime, then

p \cap Z = (p)

for a rational prime

p

, and

O_{K} / p

is a finite integral domain, hence a field. So

p

is maximal. Step 3 — Integrally closed.

O_{K}

is by definition the integral closure of

Z

K

, hence integrally closed in its fraction field

K

. Step 4 — Containment is divisibility. In a Dedekind domain one shows every ideal contains a product of primes, and that for any nonzero ideal

a

there is a fractional ideal

a^{- 1}

with

a a^{- 1} = O_{K}

. Invertibility makes the monoid of nonzero ideals a group modulo cancellation, forcing unique factorization into primes exactly as in

Z

■

Richard Dedekind | 1831–1916

Dedekind, a student of Gauss and Dirichlet at Göttingen, introduced the modern concept of an ideal in his 1871 supplement to Dirichlet's Vorlesungen über Zahlentheorie, generalizing Kummer's "ideal numbers" into actual subsets of a ring. He defined the ring of integers, proved unique factorization of ideals, and effectively created the axiomatic theory of what we now call Dedekind domains. His insistence on set-theoretic, structural definitions — ideals as sets rather than formal symbols — was a decisive step toward abstract algebra. Dedekind also gave the modern definition of infinite sets and constructed the reals via Dedekind cuts.

Building Intuition

Think of $O_{K}$ as a lattice sitting inside the real vector space $K \otimes_{Q} R ≅ R^{r_{1}} \times C^{r_{2}}$ , via the embedding $α \mapsto (σ_{1} (α), \dots)$ . This is the Minkowski embedding, and it turns arithmetic questions into geometry-of-numbers questions: ideals become sublattices, the norm becomes a covolume ratio, and Minkowski's convex-body theorem produces small elements in any ideal — the engine behind class-number finiteness.

For unique factorization, the mental model is: primes of $Z$ can split, stay inert, or ramify when lifted to $O_{K}$ . A prime $p$ becomes $p_{1}^{e_{1}} \dots p_{g}^{e_{g}}$ , and the fundamental identity $\sum e_{i} f_{i} = n$ (with $f_{i}$ the residue degrees) governs the bookkeeping. The class group measures the "twisting" that prevents prime ideals from all being principal: if $h_{K} = 1$ , every ideal is principal and $O_{K}$ is a PID with genuine unique factorization of elements.

Minkowski lattice of $\mathcal{O}_K$ for an imaginary quadratic field, with a fundamental domain and a small ideal element found inside a convex body

Worked Examples

Ring of integers of $\mathbb{Q}(\sqrt{d})$ and a factorization

Given. Let

d

be a squarefree integer,

K = Q (d)

n = 2

. Step 1 — Integral basis. Standard computation: an element

a + b d

(

a, b \in Q

) is integral iff its trace

2 a

and norm

a^{2} - d b^{2}

are in

Z

. Analysis of cases gives:

O_{K} = ⎩ ⎨ ⎧ Z [d], Z [\frac{1 + d}{2}], d \equiv 2, 3 (mod 4), d \equiv 1 (mod 4) .

⟳solve the integrality conditions

2 a \in Z

a^{2} - d b^{2} \in Z

modulo 4; the half-integer basis appears exactly when

d \equiv 1

Step 2 — Discriminant.

d_{K} = d

d \equiv 1 (mod 4)

, else

d_{K} = 4 d

. Step 3 — Take $d = - 5$ . Then

d \equiv 3 (mod 4)

, so

O_{K} = Z [- 5]

d_{K} = - 20

. Here

6 = 2 \cdot 3 = (1 + - 5) (1 - - 5)

— non-unique factorization of elements. As ideals:

(6) = p_{2}^{2} p_{3} p_{3}^{'}, p_{2} = (2, 1 + - 5), p_{3} = (3, 1 + - 5), p_{3}^{'} = (3, 1 - - 5) .

⟳factor

(2), (3)

via reduction of

x^{2} + 5

mod 2 and mod 3, then regroup the principal factorizations.

Boxed answer.

O_{Q (- 5)} = Z [- 5], d_{K} = - 20, h_{K} = 2

— the class number 2 is precisely the obstruction making

6

factor two ways.

Unit group and regulator of $\mathbb{Q}(\sqrt{2})$

Given.

K = Q (2)

, real quadratic, signature

(r_{1}, r_{2}) = (2, 0)

, so unit rank

= r_{1} + r_{2} - 1 = 1

. Step 1 — Roots of unity. A real field has

μ_{K} = {\pm 1}

. Step 2 — Fundamental unit. Solve Pell:

x^{2} - 2 y^{2} = \pm 1

. Smallest nontrivial solution

(x, y) = (1, 1)

gives the fundamental unit

ε = 1 + 2, N_{K / Q} (ε) = (1 + 2) (1 - 2) = - 1.

⟳units have norm

\pm 1

; the minimal Pell solution generates all units modulo

\pm 1

by Dirichlet's theorem with rank 1.

Step 3 — Structure and regulator.

O_{K}^{\times} = {\pm (1 + 2)^{k} : k \in Z} ≅ {\pm 1} \times Z

. The regulator is

R_{K} = lo g ∣ σ_{1} (ε) ∣ = lo g (1 + 2) \approx 0.8814.

⟳with unit rank 1 the regulator is the single entry

∣ lo g ∣ ε ∣∣

of the

1 \times 1

logarithmic-embedding matrix.

Boxed answer.

O_{K}^{\times} ≅ {\pm 1} \times ⟨ 1 + 2 ⟩, R_{K} = lo g (1 + 2) \approx 0.8814

Common Misconceptions

$O_{K} \neq = Z [θ]$ in general. Even when

K = Q (θ)

, the ring of integers can be strictly larger than

Z [θ]

. The index

[O_{K} : Z [θ]]^{2} = disc (m_{θ}) / d_{K}

measures the gap. The classic failure:

θ = - 3

gives

Z [- 3] ⊊ O_{K} = Z [\frac{1 + - 3}{2}]

, index 2. A field is called monogenic when some generator gives

O_{K} = Z [θ]

— not all are. Unique factorization of ideals is NOT unique factorization of elements.

O_{K}

always has unique ideal factorization, but is a UFD iff it is a PID iff

h_{K} = 1

. Conflating these is the single most common error. Likewise,

a ∣ b ⟺ a \supseteq b

— "to divide is to contain," which reverses the naive intuition. A non-monogenic ring of integers. Dedekind's own example:

K = Q (θ)

with

θ^{3} - θ^{2} - 2 θ - 8 = 0

. Here

O_{K}

is not of the form

Z [α]

for any single

α

; the prime

2

splits completely as

(2) = p_{1} p_{2} p_{3}

with three distinct primes of residue degree 1, which is impossible for

Z [α] / (2)

to realize since a cubic over

F_{2}

cannot have three distinct linear factors (only two monic linear polynomials exist mod 2). This "common index divisor" obstruction shows monogenicity genuinely fails.

Connections

The theory threads through much of algebra and number theory. The factorization of primes connects to Galois Theory: for $K / Q$ Galois, the Galois group acts transitively on primes above each $p$ , and the decomposition/inertia groups encode splitting. Class Field Theory generalizes the class group into a description of all abelian extensions of $K$ via the idele class group. The Minkowski embedding ties the subject to Geometry of Numbers and lattice theory. The analytic side — the Dedekind Zeta Function $ζ_{K} (s)$ — packages $h_{K}$ , $R_{K}$ , $d_{K}$ , and $∣ μ_{K} ∣$ into the class number formula as its residue at $s = 1$ . Finally, Dedekind Domains abstract the purely algebraic content, and Valuation Theory / $p$ -adic completions give the local-global perspective via Adeles and Ideles.

Real-World Applications

Cryptography (lattice-based & ideal-lattice). Ring-LWE and NTRU build post-quantum cryptosystems on $O_{K}$ for cyclotomic $K = Q (ζ_{2^{k}})$ ; security rests on hardness of finding short vectors in ideal lattices.
Diophantine equations. Solving $y^{2} = x^{3} + k$ (Mordell) and Pell's equation directly uses unit groups and class numbers of quadratic and cubic fields.
Fermat's Last Theorem (regular primes). Kummer proved FLT for all regular primes $p$ (those not dividing $h_{Q (ζ_{p})}$ ) — the original motivation for ideal theory.
Coding theory. Algebraic number fields and their integers underlie certain wiretap and space-time codes via ideal lattices with good diversity.
Computational number theory. Software like PARI/GP, Magma, and SageMath compute $d_{K}$ , $h_{K}$ , $O_{K}^{\times}$ , and prime factorizations as core primitives.
Elliptic curves with complex multiplication. CM theory uses orders in imaginary quadratic fields; class numbers determine the number of CM curves and feed into point-counting and the construction of Hilbert class fields.
Quadratic forms. The classification of binary quadratic forms of discriminant $d$ is equivalent to the class group of $Q (d)$ — Gauss's composition reborn.

Historical Development

1801 — Gauss's Disquisitiones Arithmeticae studies binary quadratic forms and composition, implicitly the class group of quadratic fields.
1832 — Gauss introduces the Gaussian integers $Z [i]$ , the first ring of integers studied as such, and proves it is a UFD.
1844–1847 — Kummer, attacking Fermat's Last Theorem, discovers that cyclotomic integers $Z [ζ_{p}]$ fail unique factorization and invents "ideal numbers" to restore it; proves FLT for regular primes.
1871 — Dedekind defines ideals as sets, the ring of integers, and proves unique factorization of ideals in his supplement to Dirichlet's lectures.
1882 — Kronecker develops a parallel divisor-theoretic foundation; Dedekind's set-theoretic approach ultimately prevails.
1846 / 1871 — Dirichlet's unit theorem established and refined; the regulator emerges as a key invariant.
1896 — Minkowski's geometry of numbers gives clean proofs of class-number finiteness and bounds on discriminants (no unramified extensions of $Q$ ).
1897 — Hilbert's Zahlbericht unifies and systematizes the field, setting the agenda (ramification, Hilbert class field) for the 20th century.
1920s–1930s — Artin, Hasse, Chevalley, and Takagi build class field theory; Chevalley introduces ideles, completing the local-global synthesis.

Subtleties & Limits

Gauss's class number problem (imaginary quadratic). Determining all imaginary quadratic fields with a given class number was hard: the complete list of the nine fields with

h_{K} = 1

(

d = - 1, - 2, - 3, - 7, - 11, - 19, - 43, - 67, - 163

) was only settled by Heegner (1952, with gaps), Baker, and Stark (1960s). For each fixed

h

, effective determination came from Goldfeld–Gross–Zagier. Real quadratic class number 1. Conjecturally infinitely many real quadratic fields have

h_{K} = 1

(Gauss), but this is open — we cannot even prove infinitely many number fields are PIDs. The Cohen–Lenstra heuristics predict densities of class-group structures, yet remain conjectural. Monogenicity. Deciding whether a given field is monogenic, and counting power-integral bases, is a deep and largely open problem (Gaál, Győry). Most number fields of degree

\geq 4

are conjecturally non-monogenic in a density sense (Bhargava–Shankar–Wang). Vandiver's conjecture. Whether

p ∤ h_{Q (ζ_{p})}^{+}

(the plus-part class number) holds for all primes is open and has consequences in Iwasawa theory and FLT-style arguments.

Algebraic Number Fields and Rings of Integers

The Core Insight

Formal Statement

Number Field

Algebraic Integer and Ring of Integers

Structure of $\mathcal{O}_K$

Class Number and Unit Theorems

Why It Holds / Derivation

$\mathcal{O}_K$ is a free $\mathbb{Z}$-module of rank $n$

Unique factorization of ideals — sketch

Richard Dedekind | 1831–1916

Building Intuition

Minkowski lattice of $\mathcal{O}_K$ for an imaginary quadratic field, with a fundamental domain and a small ideal element found inside a convex body

Worked Examples

Ring of integers of $\mathbb{Q}(\sqrt{d})$ and a factorization

Unit group and regulator of $\mathbb{Q}(\sqrt{2})$

Common Misconceptions

Connections

Real-World Applications

Historical Development

Subtleties & Limits

See Also

Before this

Where this leads