Solvability by Radicals

Can every polynomial equation be solved using only addition, multiplication, and root extraction? For degree two, the quadratic formula says yes. Degree three and four also yield to formulas. These are the formulas of del Ferro, Tartaglia, Cardano, and Ferrari. Each is expressed in terms of nested radicals of the coefficients. The natural question is whether this pattern continues forever. The answer — discovered by Galois — is a resounding no. But the reason is one of the most beautiful pieces of mathematics ever produced. The idea is to translate an analytic question into an algebraic one. The analytic question is "can we write down a formula with radicals?" The algebraic one is "does a certain group have a certain structure?" A polynomial is solvable by radicals precisely when its splitting field sits inside a tower of fields. Each field in the tower is obtained from the last by adjoining an nn-th root of some element. The Galois correspondence turns towers of fields into chains of subgroups. It also turns "adjoining an nn-th root" into "having a cyclic (or abelian) quotient." The entire radical-solvability question thus becomes a purely group-theoretic question. That question is whether the Galois group is solvable in the technical sense already familiar from group theory. This article proves the central bridge theorem. A polynomial's splitting field is contained in a radical extension if and only if its Galois group is a solvable group. This single equivalence explains why the quadratic, cubic, and quartic formulas exist. Their Galois groups, S2S_2, S3S_3, S4S_4, are all solvable. It also sets up the classical punchline that a general quintic cannot be solved by radicals, since S5S_5 is not solvable. That last fact is the subject of its own companion result. Here we build the machine that makes it inevitable. By the end, you will have a complete, self-contained proof of the radical-solvability theorem. It is built from the Fundamental Theorem of Galois Theory, the structure of cyclotomic extensions, and the classification of cyclic Kummer extensions. This is one of the deepest and most satisfying arguments in undergraduate algebra. It rewards a slow, careful reading.

Key takeaways
  • A radical extension is a tower of fields, each formed by adjoining a root of an element of the previous field.
  • A polynomial is solvable by radicals when its splitting field embeds in some radical extension of the base field.
  • The bridge: ff is solvable by radicals   ⟺  \iff Gal(f)\mathrm{Gal}(f) is a solvable group (in characteristic 0).
  • Cyclic extensions of prime degree pp, in the presence of pp-th roots of unity, are exactly the Kummer extensions F(ap)F(\sqrt[p]{a}).
  • Adjoining roots of unity first is a harmless trick: it enlarges the group by an abelian piece without breaking solvability.
  • Key idea: radicals build towers with cyclic Galois quotients, and solvable groups are exactly those built from cyclic quotients — so the correspondence is forced.

Where this lives today

The solvability-by-radicals theorem is the historical origin of the entire theory of solvable groups, and its influence radiates through algebra, number theory, and computation. In Field & Galois Theory itself, it directly powers the proof of the Insolvability of the Quintic, since S5S_5 is not solvable (A5A_5 is simple and nonabelian), giving the first proof that no universal radical formula exists for degree-five polynomials — a question open for centuries before Abel and Galois. The same circle of ideas underlies Kummer theory, which classifies abelian extensions with prescribed roots of unity and is foundational for class field theory and the arithmetic of cyclotomic fields. In computational algebra, algorithms for solving polynomials by radicals (when possible) rely on computing the Galois group and checking its solvable series algorithmically, an active area connecting to computer algebra systems' polynomial-solving routines. In cryptography, the structure of solvable versus non-solvable Galois groups informs the study of which polynomial equations over finite fields admit efficiently describable root structures, tangentially related to the security assumptions behind some algebraic cryptosystems. The broader philosophy — translate an analytic/constructive question into an algebraic invariant (a group), then classify by structural properties (solvability) — became the template for later "correspondence" theorems throughout representation theory and algebraic geometry, including the study of monodromy groups and differential Galois theory (Picard–Vessiot theory), where an analogous solvability criterion governs which differential equations are solvable "by quadratures."

Ask the tutor: Can you show me explicitly how the Lagrange resolvent recovers Cardano's formula for a solvable cubic?

DefinitionRadical extension and solvability by radicals

Let FF be a field of characteristic 00. An extension K/FK/F is a radical extension if there is a tower of fields

F=F0⊆F1⊆F2⊆⋯⊆Fm=KF = F_0 \subseteq F_1 \subseteq F_2 \subseteq \cdots \subseteq F_m = K

and, for each i=1,…,mi = 1, \dots, m, an element αi∈Fi\alpha_i \in F_i and a positive integer nin_i such that

Fi=Fi−1(αi),αini∈Fi−1.F_i = F_{i-1}(\alpha_i), \qquad \alpha_i^{n_i} \in F_{i-1}.

That is, each step adjoins some nin_i-th root of an element already present. Let f(x)∈F[x]f(x) \in F[x] be a nonconstant polynomial with splitting field EE over FF. We say ff is solvable by radicals over FF if there exists a radical extension K/FK/F with E⊆KE \subseteq K (equivalently, with K⊇EK \supseteq E inside some fixed algebraic closure). Equivalently, every root of ff can be expressed using field operations and extraction of nin_i-th roots, starting from elements of FF. The Galois group of ff is Gal(E/F)\mathrm{Gal}(E/F), where EE is the splitting field of ff over FF; since char F=0\mathrm{char}\,F = 0, ff is separable and E/FE/F is Galois, so this group is well-defined.

Intuition

Think of solving a polynomial as descending a staircase of ever-simpler fields. At the bottom is the base field FF, where the coefficients live; at the top is the splitting field EE, where all the roots live. A radical tower is a staircase where each step is a single, understandable move: extract an nn-th root. The question "is ff solvable by radicals" asks whether we can build some such staircase — not necessarily the shortest, not necessarily unique — that reaches high enough to contain EE. Galois's insight is that the Galois correspondence turns this staircase of fields upside-down into a staircase of subgroups of Gal(E/F)\mathrm{Gal}(E/F), and it translates "adjoin an nn-th root" (in the presence of enough roots of unity) into "the corresponding subgroup quotient is cyclic." A chain of subgroups

G=G0▹G1▹⋯▹Gr={e}G = G_0 \triangleright G_1 \triangleright \cdots \triangleright G_r = \{e\}

with each Gi/Gi+1G_i/G_{i+1} abelian (equivalently cyclic, after refining) is exactly the definition of a solvable group. So a radical tower for ff corresponds to a solvable series for Gal(f)\mathrm{Gal}(f), and conversely a solvable series can be climbed rung by rung using cyclotomic extensions and Kummer theory to manufacture the actual radicals.

Figure
Field tower on the left corresponds to a subgroup chain on the right via the Galois correspondence
Field tower (radicals) Subgroup chain (Galois) F = F₀ F₁ = F₀(α₁), α₁ⁿ¹∈F₀ F₂ = F₁(α₂), α₂ⁿ²∈F₁ E ⊆ Fₘ = K G = Gal(K/F) G₁, G/G₁ cyclic G₂, G₁/G₂ cyclic {e}
TheoremGalois's Solvability Criterion

Let FF be a field of characteristic 00, let f(x)∈F[x]f(x) \in F[x] be a nonconstant polynomial, and let EE be the splitting field of ff over FF. Then:

f is solvable by radicals over F  ⟺  Gal(E/F) is a solvable group.f \text{ is solvable by radicals over } F \iff \mathrm{Gal}(E/F) \text{ is a solvable group.}
LemmaCyclotomic extensions are abelian, hence solvable

For any field FF of characteristic 00 and any positive integer nn, if ζn\zeta_n is a primitive nn-th root of unity, then F(ζn)/FF(\zeta_n)/F is Galois with abelian Galois group.

Proof

F(ζn)F(\zeta_n) is the splitting field over FF of xn−1x^n - 1, which is separable in characteristic 00 (its derivative nxn−1nx^{n-1} shares no root with xn−1x^n-1 since 00 is not a root of xn−1x^n - 1). Hence F(ζn)/FF(\zeta_n)/F is Galois. Any σ∈Gal(F(ζn)/F)\sigma \in \mathrm{Gal}(F(\zeta_n)/F) is determined by σ(ζn)=ζnaσ\sigma(\zeta_n) = \zeta_n^{a_\sigma} for a unique aσ∈(Z/nZ)×a_\sigma \in (\mathbb{Z}/n\mathbb{Z})^\times (it must send a primitive root to a primitive root, and all primitive nn-th roots of unity are powers ζna\zeta_n^a with gcd⁡(a,n)=1\gcd(a,n)=1). The map σ↦aσ\sigma \mapsto a_\sigma is an injective group homomorphism Gal(F(ζn)/F)→(Z/nZ)×\mathrm{Gal}(F(\zeta_n)/F) \to (\mathbb{Z}/n\mathbb{Z})^\times, since (στ)(ζn)=σ(ζnaτ)=ζnaσaτ(\sigma\tau)(\zeta_n) = \sigma(\zeta_n^{a_\tau}) = \zeta_n^{a_\sigma a_\tau}. As (Z/nZ)×(\mathbb{Z}/n\mathbb{Z})^\times is abelian, Gal(F(ζn)/F)\mathrm{Gal}(F(\zeta_n)/F), being isomorphic to a subgroup of it, is abelian.

∎
LemmaKummer's Lemma: cyclic extensions with roots of unity

Let FF be a field of characteristic 00 containing a primitive nn-th root of unity ζn\zeta_n. 1. (Adjoining a radical gives a cyclic extension.) If a∈Fa \in F and KK is a splitting field over FF of xn−ax^n - a, then K=F(α)K = F(\alpha) for any root α\alpha of xn−ax^n - a, and Gal(K/F)\mathrm{Gal}(K/F) is cyclic of order dividing nn. 2. (Converse.) If K/FK/F is Galois with Gal(K/F)\mathrm{Gal}(K/F) cyclic of order nn, then K=F(α)K = F(\alpha) for some α∈K\alpha \in K with αn∈F\alpha^n \in F.

Proof

(1) If α\alpha is one root of xn−ax^n - a, the full set of roots is {α,ζnα,ζn2α,…,ζnn−1α}\{\alpha, \zeta_n\alpha, \zeta_n^2\alpha, \dots, \zeta_n^{n-1}\alpha\}, since (ζnkα)n=ζnknαn=αn=a(\zeta_n^k\alpha)^n = \zeta_n^{kn}\alpha^n = \alpha^n = a and these nn elements are distinct (as the ζnk\zeta_n^k are distinct and α≠0\alpha \ne 0 — if a=0a = 0 the statement is trivial with K=FK = F). Since ζn∈F\zeta_n \in F already, adjoining α\alpha adjoins all roots: K=F(α)K = F(\alpha). For σ∈Gal(K/F)\sigma \in \mathrm{Gal}(K/F), σ(α)\sigma(\alpha) is again a root of xn−ax^n - a, so σ(α)=ζncσα\sigma(\alpha) = \zeta_n^{c_\sigma}\alpha for some cσ∈Z/nZc_\sigma \in \mathbb{Z}/n\mathbb{Z} (well-defined mod nn since ζnn=1\zeta_n^n = 1). Define χ:Gal(K/F)→Z/nZ\chi: \mathrm{Gal}(K/F) \to \mathbb{Z}/n\mathbb{Z} by χ(σ)=cσ\chi(\sigma) = c_\sigma. This is a homomorphism: (στ)(α)=σ(ζncτα)=ζncτσ(α)=ζncτ+cσα(\sigma\tau)(\alpha) = \sigma(\zeta_n^{c_\tau}\alpha) = \zeta_n^{c_\tau}\sigma(\alpha) = \zeta_n^{c_\tau + c_\sigma}\alpha, using that σ\sigma fixes F∋ζnF \ni \zeta_n. It is injective because σ\sigma is determined by its action on the generator α\alpha of K/FK/F (σ(α)=α⇒σ=id\sigma(\alpha) = \alpha \Rightarrow \sigma = \mathrm{id}). So Gal(K/F)\mathrm{Gal}(K/F) embeds in the cyclic group Z/nZ\mathbb{Z}/n\mathbb{Z}, hence is cyclic of order dividing nn.

(2) Let σ\sigma generate G:=Gal(K/F)G := \mathrm{Gal}(K/F), ∣G∣=n|G| = n. Since ζn∈F⊆K\zeta_n \in F \subseteq K, consider the Lagrange resolvent: for β∈K\beta \in K define

(β,ζn):=∑i=0n−1ζn−i σi(β).(\beta, \zeta_n) := \sum_{i=0}^{n-1} \zeta_n^{-i}\, \sigma^i(\beta).

By linear independence of characters (Dedekind/Artin), the distinct automorphisms 1,σ,…,σn−1:K→K1, \sigma, \dots, \sigma^{n-1}: K \to K are linearly independent over KK, so the map β↦∑iζn−iσi(β)\beta \mapsto \sum_i \zeta_n^{-i}\sigma^i(\beta) is not the zero map; choose β∈K\beta \in K with α:=(β,ζn)≠0\alpha := (\beta,\zeta_n) \ne 0. Apply σ\sigma to α\alpha:

σ(α)=∑i=0n−1ζn−iσi+1(β)=ζn∑i=0n−1ζn−(i+1)σi+1(β)=ζnα,\sigma(\alpha) = \sum_{i=0}^{n-1} \zeta_n^{-i} \sigma^{i+1}(\beta) = \zeta_n \sum_{i=0}^{n-1} \zeta_n^{-(i+1)}\sigma^{i+1}(\beta) = \zeta_n \alpha,

reindexing the sum over i+1  ni+1 \bmod n (valid since σn=id\sigma^n = \mathrm{id}). Hence σ(αn)=(σα)n=ζnnαn=αn\sigma(\alpha^n) = (\sigma\alpha)^n = \zeta_n^n \alpha^n = \alpha^n, so αn\alpha^n is fixed by the generator σ\sigma of GG, hence by all of GG; by the Fundamental Theorem of Galois Theory (the fixed field of GG is FF), αn∈F\alpha^n \in F. Finally σk(α)=ζnkα\sigma^k(\alpha) = \zeta_n^k \alpha for k=0,…,n−1k = 0, \dots, n-1 are nn distinct elements (since α≠0\alpha \ne 0 and the ζnk\zeta_n^k are distinct), so the orbit of α\alpha under GG has size n=∣G∣n = |G|, forcing [F(α):F]≥n[F(\alpha):F] \ge n (distinct conjugates give distinct roots of the minimal polynomial, whose degree is at least the orbit size) and since F(α)⊆KF(\alpha) \subseteq K with [K:F]=n[K:F]=n, we get F(α)=KF(\alpha) = K. Thus K=F(α)K = F(\alpha) with αn∈F\alpha^n \in F, as required.

∎
Proof

We now prove the main theorem, in two directions.

Proof technique. (⇐\Leftarrow) is a direct construction: use Kummer's Lemma (2) repeatedly to realize a solvable series as a tower of radical extensions, after first adjoining enough roots of unity via the cyclotomic lemma. (⇒\Rightarrow) is a reduction argument: given a radical tower, adjoin roots of unity to every stage to make each step a genuine Kummer (cyclic) extension, apply Kummer's Lemma (1) to get cyclic Galois quotients at each stage, and use the correspondence between subnormal series of subgroups and subnormal series of fixed fields to build a solvable series for Gal(E/F)\mathrm{Gal}(E/F) from it, invoking closure properties of solvable groups (subgroups and quotients of solvable groups are solvable).

(⇐\Leftarrow) Solvable ⇒\Rightarrow solvable by radicals. Suppose G=Gal(E/F)G = \mathrm{Gal}(E/F) is solvable, so there is a chain

G=G0▹G1▹⋯▹Gr={e}G = G_0 \triangleright G_1 \triangleright \cdots \triangleright G_r = \{e\}

with each Gi/Gi+1G_{i}/G_{i+1} abelian. Every finite abelian group has a composition series with cyclic quotients (refine using cyclic factors from the structure theorem, or simply refine any abelian group's subgroup chain — abelian groups are solvable with cyclic composition factors), so after refining we may assume each quotient Gi/Gi+1G_i/G_{i+1} is cyclic of some order nin_i. Let n=∣G∣=[E:F]n = |G| = [E:F] and let ζn\zeta_n be a primitive nn-th root of unity (working inside a fixed algebraic closure containing EE). Set E′=E(ζn)E' = E(\zeta_n) and F′=F(ζn)F' = F(\zeta_n). We claim F(ζn)F(\zeta_n), and more generally F′F', is a radical extension of FF: indeed F′=F(ζn)F' = F(\zeta_n) with ζnn=1∈F\zeta_n^n = 1 \in F, so this is a single radical step. We must show E′/F′E'/F' is Galois with solvable — in fact, a refinement showing cyclic-step-buildable — Galois group, and that E′E' embeds in a radical tower over F′F'; then since F′/FF'/F is itself radical, composing gives a radical tower over FF containing E⊆E′E \subseteq E'. E/FE/F is Galois (splitting field of a separable polynomial, as charF=0\mathrm{char} F = 0), say EE is the splitting field of ff. Then E′=E(ζn)E'= E(\zeta_n) is the splitting field of f(x)(xn−1)f(x)(x^n-1) over F′F' (it is generated over F′F' by the roots of ff together with ζn\zeta_n, all of which already lie in it, and it is the smallest such field), hence E′/F′E'/F' is Galois. Restriction gives a homomorphism

ρ:Gal(E′/F′)→Gal(E/F),ρ(τ)=τ∣E\rho: \mathrm{Gal}(E'/F') \to \mathrm{Gal}(E/F), \qquad \rho(\tau) = \tau|_E

which is well-defined because τ(E)=E\tau(E) = E for τ∈Gal(E′/F′)\tau \in \mathrm{Gal}(E'/F'): indeed E/FE/F is Galois so EE is the splitting field of ff over FF, and τ\tau fixes FF (as F⊆F′F \subseteq F') and permutes the roots of ff among themselves since τ\tau is a field automorphism of E′E' fixing coefficients of ff; hence τ(E)⊆E\tau(E) \subseteq E, and since τ\tau is injective on the finite-dimensional space EE over FF, τ(E)=E\tau(E) = E. The map ρ\rho is injective: if τ∣E=idE\tau|_E = \mathrm{id}_E then, since τ\tau also fixes F′⊇ζnF' \supseteq \zeta_n pointwise and E′=E(ζn)E' = E(\zeta_n), τ=idE′\tau = \mathrm{id}_{E'}. So Gal(E′/F′)\mathrm{Gal}(E'/F') is isomorphic to a subgroup HH of G=Gal(E/F)G = \mathrm{Gal}(E/F). Subgroups of solvable groups are solvable (restrict the given normal series' intersections with HH: H∩Gi▹H∩Gi+1H \cap G_i \triangleright H \cap G_{i+1}, with (H∩Gi)/(H∩Gi+1)(H\cap G_i)/(H \cap G_{i+1}) embedding via the second isomorphism theorem into Gi/Gi+1G_i/G_{i+1}, hence abelian). So H≅Gal(E′/F′)H \cong \mathrm{Gal}(E'/F') has a chain

H=H0▹H1▹⋯▹Hs={e}H = H_0 \triangleright H_1 \triangleright \cdots \triangleright H_s = \{e\}

with cyclic quotients Hi/Hi+1H_i/H_{i+1} of order dividing nn (each is a subquotient of a cyclic group of order ni∣nn_i \mid n... more precisely each Hi/Hi+1H_i/H_{i+1}, being a subquotient of an abelian group appearing in the original series for GG, is a subgroup of a cyclic group of order dividing nn, hence cyclic of order dividing nn). By the Fundamental Theorem of Galois Theory applied to E′/F′E'/F', let LiL_i be the fixed field of HiH_i; this gives a tower

F′=L0⊆L1⊆⋯⊆Ls=E′F' = L_0 \subseteq L_1 \subseteq \cdots \subseteq L_s = E'

with Gal(Li+1/Li)≅Hi/Hi+1\mathrm{Gal}(L_{i+1}/L_i) \cong H_i/H_{i+1} (using that Hi+1◃HiH_{i+1} \triangleleft H_i, so Li+1/LiL_{i+1}/L_i is Galois with group Hi/Hi+1H_i/H_{i+1}), cyclic of order ni∣nn_i \mid n. Since Li⊇F′∋ζnL_i \supseteq F' \ni \zeta_n, and ζn\zeta_n has order nn hence ζni:=ζnn/ni\zeta_{n_i} := \zeta_n^{n/n_i} is a primitive nin_i-th root of unity lying in LiL_i, Kummer's Lemma (2) applies at each stage: Li+1=Li(αi)L_{i+1} = L_i(\alpha_i) with αini∈Li\alpha_i^{n_i} \in L_i. Thus F′=L0⊆L1⊆⋯⊆Ls=E′F' = L_0 \subseteq L_1 \subseteq \cdots \subseteq L_s = E' is a radical tower over F′F'. Composing with the radical step F⊆F′=F(ζn)F \subseteq F' = F(\zeta_n) gives a radical tower

F⊆F(ζn)=L0⊆L1⊆⋯⊆Ls=E′F \subseteq F(\zeta_n) = L_0 \subseteq L_1 \subseteq \cdots \subseteq L_s = E'

over FF, and E⊆E′E \subseteq E'. Hence ff is solvable by radicals.

(⇒\Rightarrow) Solvable by radicals ⇒\Rightarrow solvable. Suppose E⊆KE \subseteq K for some radical extension K/FK/F:

F=F0⊆F1⊆⋯⊆Fm=K,Fi=Fi−1(αi), αini∈Fi−1.F = F_0 \subseteq F_1 \subseteq \cdots \subseteq F_m = K, \qquad F_i = F_{i-1}(\alpha_i),\ \alpha_i^{n_i} \in F_{i-1}.

Let n=n1n2⋯nmn = n_1 n_2 \cdots n_m and let ζn\zeta_n be a primitive nn-th root of unity. Define Fi′=Fi(ζn)F_i' = F_i(\zeta_n) for i=0,…,mi = 0, \dots, m, so we get an enlarged tower

F⊆F0′=F(ζn)⊆F1′⊆⋯⊆Fm′=K(ζn)=:K′.F \subseteq F_0' = F(\zeta_n) \subseteq F_1' \subseteq \cdots \subseteq F_m' = K(\zeta_n) =: K'.

Each Fi′/FF_i'/F still forms a radical extension: F0′=F(ζn)F_0' = F(\zeta_n) with ζnn=1∈F\zeta_n^n = 1 \in F; and Fi′=Fi(ζn)=Fi−1(αi,ζn)=Fi−1′(αi)F_i' = F_i(\zeta_n) = F_{i-1}(\alpha_i,\zeta_n) = F_{i-1}'(\alpha_i) with αini∈Fi−1⊆Fi−1′\alpha_i^{n_i}\in F_{i-1} \subseteq F_{i-1}', so each step Fi−1′⊆Fi′F_{i-1}' \subseteq F_i' is again a radical step with the same exponent nin_i, and now — crucially — Fi−1′F_{i-1}' contains a primitive nin_i-th root of unity ζni=ζnn/ni\zeta_{n_i} = \zeta_n^{n/n_i} since ni∣nn_i \mid n. We claim K′/FK'/F is Galois. First F0′/FF_0'/F is Galois with abelian group, by the cyclotomic Lemma. Next, Fi′/Fi−1′F_i'/F_{i-1}' need not individually be Galois (the other roots ζnikαi\zeta_{n_i}^k \alpha_i might not lie in Fi−1′F_{i-1}' yet if we only adjoined one root), but we remedy this by further enlarging: replace Fi′F_i' by the splitting field Fi~\widetilde{F_i} over FF of ∏j≤i(xnj−aj)\prod_{j \le i}(x^{n_j} - a_j) where aj=αjnj∈Fj−1⊆Fj−1~a_j = \alpha_j^{n_j} \in F_{j-1} \subseteq \widetilde{F_{j-1}}, together with ζn\zeta_n, adjoined successively. Concretely, set

F~0=F(ζn),F~i=F~i−1(all roots of xni−ai) where ai=αini.\widetilde F_0 = F(\zeta_n), \qquad \widetilde F_i = \widetilde F_{i-1}\big(\text{all roots of } x^{n_i} - a_i\big) \text{ where } a_i = \alpha_i^{n_i}.

Since F~i−1\widetilde F_{i-1} contains a primitive nin_i-th root of unity, adjoining one root αi\alpha_i of xni−aix^{n_i}-a_i already adjoins all of them (as in Kummer's Lemma (1): all roots are ζnikαi\zeta_{n_i}^k\alpha_i), so in fact F~i=F~i−1(αi)\widetilde F_i = \widetilde F_{i-1}(\alpha_i) and this tower is radical over FF, with F~m⊇Fm′=K′⊇K⊇E\widetilde F_m \supseteq F_m' = K' \supseteq K \supseteq E (each Fi⊆F~iF_i \subseteq \widetilde F_i by induction, since αi∈Fi\alpha_i \in F_i and Fi−1⊆F~i−1F_{i-1}\subseteq \widetilde F_{i-1}). Rename F~i=:Ni\widetilde F_i =: N_i. By construction N0/FN_0/F is Galois with abelian group, and Ni/Ni−1N_i/N_{i-1} is a splitting field over Ni−1N_{i-1} of the separable polynomial xni−aix^{n_i} - a_i (separable since ni≠0n_i \ne 0 in characteristic 00 and roots of unity of order nin_i are already present, so xni−aix^{n_i}-a_i has nin_i distinct roots), hence Galois; by Kummer's Lemma (1), Gal(Ni/Ni−1)\mathrm{Gal}(N_i/N_{i-1}) is cyclic. We now show Nm/FN_m/F is Galois by induction: N0/FN_0/F is Galois. Suppose Ni−1/FN_{i-1}/F is Galois. Then Ni−1N_{i-1} is the splitting field over FF of some separable polynomial gi−1g_{i-1}, and NiN_i is generated over FF by the roots of gi−1g_{i-1} together with the roots of xni−aix^{n_i}-a_i (as Ni=Ni−1(roots of xni−ai)N_i = N_{i-1}(\text{roots of }x^{n_i}-a_i) and Ni−1=F(roots of gi−1)N_{i-1} = F(\text{roots of } g_{i-1})); hence NiN_i is the splitting field over FF of gi−1⋅(xni−ai)g_{i-1}\cdot(x^{n_i}-a_i), a separable polynomial (product of separable polynomials in characteristic 00; distinct irreducible factors are automatically coprime hence contribute no repeated roots collectively beyond what each contributes individually — more directly, in characteristic 0 every polynomial is separable up to repeated irreducible factors, and we may replace gi−1(xni−ai)g_{i-1}(x^{n_i}-a_i) by its radical/squarefree part without changing the splitting field). So Ni/FN_i/F is Galois. By induction, Nm/FN_m/F is Galois. Let Γ=Gal(Nm/F)\Gamma = \mathrm{Gal}(N_m/F). Restriction gives a normal subgroup chain: let Γi=Gal(Nm/Ni)\Gamma_i = \mathrm{Gal}(N_m/N_i) for i=0,…,mi = 0, \dots, m (with Nm=NmN_m = N_m, so Γm={e}\Gamma_m = \{e\}). Since each Ni/FN_i/F is Galois for the specific tower built (each NiN_i is itself a splitting field over FF as shown above, by the same inductive argument truncated at stage ii), each Γi\Gamma_i is normal in Γ\Gamma (subgroups fixing a field that is Galois over FF are normal, by the Fundamental Theorem of Galois Theory), and

Γ/Γi≅Gal(Ni/F),Γi−1/Γi≅Gal(Ni/Ni−1),\Gamma/\Gamma_i \cong \mathrm{Gal}(N_i/F), \qquad \Gamma_{i-1}/\Gamma_i \cong \mathrm{Gal}(N_i/N_{i-1}),

the latter isomorphism because Ni−1/FN_{i-1}/F Galois and Γi◃Γi−1\Gamma_i \triangleleft \Gamma_{i-1} correspond under the correspondence to Ni/Ni−1N_i/N_{i-1} Galois with that quotient group (this is the standard "tower" consequence of the Fundamental Theorem: if Ni−1⊆NiN_{i-1} \subseteq N_i are both Galois over FF, then Gal(Ni/Ni−1)≅Γi−1/Γi\mathrm{Gal}(N_i/N_{i-1}) \cong \Gamma_{i-1}/\Gamma_i). So we obtain a chain

Γ=Γ0▹Γ1▹⋯▹Γm={e}\Gamma = \Gamma_0 \triangleright \Gamma_1 \triangleright \cdots \triangleright \Gamma_m = \{e\}

where Γ0/Γ1≅Gal(N1/N0)\Gamma_0/\Gamma_1 \cong \mathrm{Gal}(N_1/N_0) — wait, we index so that Γi−1/Γi≅Gal(Ni/Ni−1)\Gamma_{i-1}/\Gamma_i \cong \mathrm{Gal}(N_i/N_{i-1}), cyclic for i≥1i \ge 1, and we still must handle N0/FN_0/F: but N0=F(ζn)N_0 = F(\zeta_n) is itself Galois over FF with abelian (not necessarily cyclic) group; refine the trivial subgroup chain of this abelian group's corresponding piece to cyclic quotients as before. Concretely, Γ/Γ0≅Gal(N0/F)\Gamma/\Gamma_0 \cong \mathrm{Gal}(N_0/F) is abelian, hence solvable with a further refinement into cyclic quotients; splice this refinement in front of the chain Γ0▹⋯▹Γm={e}\Gamma_0 \triangleright \cdots \triangleright \Gamma_m = \{e\}. This exhibits Γ\Gamma as solvable (a chain of normal subgroups with each successive quotient cyclic, in particular abelian). Finally, Gal(E/F)\mathrm{Gal}(E/F) is a quotient of Γ=Gal(Nm/F)\Gamma = \mathrm{Gal}(N_m/F): since E/FE/F is Galois and E⊆NmE \subseteq N_m, restriction Γ→Gal(E/F)\Gamma \to \mathrm{Gal}(E/F), τ↦τ∣E\tau \mapsto \tau|_E, is a well-defined surjective homomorphism (well-defined because E/FE/F Galois means EE is stable under all automorphisms of Nm/FN_m/F fixing FF — same argument as before showing τ(E)=E\tau(E)=E — and surjective by the Fundamental Theorem of Galois Theory, since every automorphism of E/FE/F extends to NmN_m using that Nm/FN_m/F is a normal, in fact Galois, extension containing EE). Quotients of solvable groups are solvable (images of a normal chain with abelian quotients remain a normal chain with abelian quotients, by the third isomorphism theorem applied termwise). Hence Gal(E/F)\mathrm{Gal}(E/F) is solvable. ■\blacksquare

∎

Worked examples

Example 1: A solvable quartic, built by radicals. Let F=QF = \mathbb{Q} and consider

f(x)=x4−10x2+1.f(x) = x^4 - 10x^2 + 1.

Its roots are ±2±3\pm\sqrt{2}\pm\sqrt{3} (check: (2+3)2=5+26(\sqrt2+\sqrt3)^2 = 5+2\sqrt6, and (5+26)2−10(5+26)+1=25+206+24−50−206+1=0(5+2\sqrt6)^2 -10(5+2\sqrt6)+1 = 25+20\sqrt6+24 -50-20\sqrt6+1 = 0; the same computation with sign changes covers the other three roots by symmetry of the argument). The splitting field is E=Q(2,3)E = \mathbb{Q}(\sqrt2,\sqrt3), since EE contains 2+3\sqrt2+\sqrt3 and its conjugates, and conversely (2+3)(2−3)=−1(\sqrt2+\sqrt3)(\sqrt2-\sqrt3) = -1 combined with 2+3∈E\sqrt2+\sqrt3 \in E shows 2−3∈E\sqrt2-\sqrt3\in E, hence 2,3∈E\sqrt2,\sqrt3 \in E. [E:Q]=4[E:\mathbb{Q}] = 4: Q(2)\mathbb{Q}(\sqrt2) has degree 22, and 3∉Q(2)\sqrt3 \notin \mathbb{Q}(\sqrt2) (if 3=a+b2\sqrt3 = a+b\sqrt2 with a,b∈Qa,b\in\mathbb{Q}, squaring gives 3=a2+2b2+2ab23 = a^2+2b^2 + 2ab\sqrt2, forcing ab=0ab=0; a=0a=0 gives 3=2b23=2b^2, impossible for rational bb; b=0b=0 gives 3=a23=a^2, impossible), so [Q(2,3):Q(2)]=2[\mathbb{Q}(\sqrt2,\sqrt3):\mathbb{Q}(\sqrt2)] = 2 and the tower multiplies to 44. Gal(E/Q)\mathrm{Gal}(E/\mathbb{Q}) has order 44; its elements are determined by σ(2)=±2\sigma(\sqrt2) = \pm\sqrt2, σ(3)=±3\sigma(\sqrt3)=\pm\sqrt3 independently, giving G≅Z/2Z×Z/2ZG \cong \mathbb{Z}/2\mathbb{Z}\times \mathbb{Z}/2\mathbb{Z} (the Klein four-group), which is abelian, hence solvable (trivially: G▹{e}G \triangleright \{e\} already has abelian quotient GG). By the theorem's constructive direction, ff must be solvable by radicals — and indeed manifestly is, since the roots ±2±3\pm\sqrt2 \pm\sqrt3 are literally built from a radical tower Q⊆Q(2)⊆Q(2,3)\mathbb{Q} \subseteq \mathbb{Q}(\sqrt2) \subseteq \mathbb{Q}(\sqrt2,\sqrt3), each step adjoining a square root. This confirms the theorem in a case where we can see both sides directly: solvable group, and manifestly radical solution.

Example 2: A cyclic cubic and Kummer's Lemma in action. Let F=Q(ζ3)F = \mathbb{Q}(\zeta_3) where ζ3=−1+−32\zeta_3 = \frac{-1+\sqrt{-3}}{2} is a primitive cube root of unity, and let a=2∈Fa = 2 \in F. Consider g(x)=x3−2∈F[x]g(x) = x^3 - 2 \in F[x]. Let α=23\alpha = \sqrt[3]{2} (real cube root) and let K=F(α)K = F(\alpha). The roots of x3−2x^3-2 are α,ζ3α,ζ32α\alpha, \zeta_3\alpha, \zeta_3^2\alpha, all of which lie in K=F(α)K = F(\alpha) since ζ3∈F\zeta_3 \in F already. So KK is the splitting field of gg over FF, and by Kummer's Lemma (1), Gal(K/F)\mathrm{Gal}(K/F) is cyclic of order dividing 33. It is nontrivial since α∉F\alpha \notin F (degree count: [F:Q]=2[F:\mathbb{Q}]=2, and if α∈F\alpha \in F then [Q(α):Q]∣2[\mathbb{Q}(\alpha):\mathbb{Q}] \mid 2, but x3−2x^3-2 is irreducible over Q\mathbb{Q} by Eisenstein at p=2p=2, giving [Q(α):Q]=3∤2[\mathbb{Q}(\alpha):\mathbb{Q}]=3 \nmid 2, contradiction), so ∣Gal(K/F)∣=3|\mathrm{Gal}(K/F)| = 3, cyclic of order 33. Now run Kummer's Lemma (2) in reverse to find the Lagrange resolvent explicitly. Let σ\sigma generate Gal(K/F)\mathrm{Gal}(K/F) via σ(α)=ζ3α\sigma(\alpha) = \zeta_3\alpha. Take β=α\beta = \alpha and compute the resolvent with respect to ζ3\zeta_3:

(α,ζ3)=∑i=02ζ3−iσi(α)=α+ζ3−1(ζ3α)+ζ3−2(ζ32α)=α+α+α=3α.(\alpha,\zeta_3) = \sum_{i=0}^{2}\zeta_3^{-i}\sigma^i(\alpha) = \alpha + \zeta_3^{-1}(\zeta_3\alpha) + \zeta_3^{-2}(\zeta_3^2\alpha) = \alpha+\alpha+\alpha = 3\alpha.

Indeed σ(3α)=3ζ3α=ζ3(3α)\sigma(3\alpha) = 3\zeta_3\alpha = \zeta_3(3\alpha) as predicted, and (3α)3=27⋅2=54∈F(3\alpha)^3 = 27\cdot 2 = 54 \in F — confirming the general machinery on a case we already understood directly. This example shows precisely how the abstract resolvent construction in the proof recovers the concrete radical 23\sqrt[3]{2} (up to the harmless rescaling by 33), and why the hypothesis ζ3∈F\zeta_3 \in F was essential: it is what makes σ(α)\sigma(\alpha) a root-of-unity multiple of α\alpha rather than something unrelated.

CounterexampleWhy characteristic 0 (or: why roots of unity must be adjoined) matters

The theorem is stated for characteristic 00; one might hope Kummer's Lemma (1)'s converse-free direction survives verbatim without primitive roots of unity present, but it does not, and this is the crux of why the proof adjoins ζn\zeta_n before applying the cyclic-extension analysis. Consider F=QF = \mathbb{Q} and g(x)=x3−2g(x) = x^3 - 2 directly over Q\mathbb{Q} (no cube root of unity adjoined). Its splitting field is L=Q(23,ζ3)L = \mathbb{Q}(\sqrt[3]2, \zeta_3), of degree 66 over Q\mathbb{Q} (degree 33 for 23\sqrt[3]2 times degree 22 for ζ3\zeta_3, using that Q(23)\mathbb{Q}(\sqrt[3]2) is real hence does not contain ζ3\zeta_3). One computes Gal(L/Q)≅S3\mathrm{Gal}(L/\mathbb{Q}) \cong S_3, nonabelian, acting on the three roots 23,ζ323,ζ3223\sqrt[3]2, \zeta_3\sqrt[3]2,\zeta_3^2\sqrt[3]2 as the full symmetric group. Here F(α)=Q(23)F(\alpha) = \mathbb{Q}(\sqrt[3]2) for α=23\alpha = \sqrt[3]2 is not Galois over Q\mathbb{Q} at all (it doesn't contain the other two roots, since it's a real field and the other roots are non-real), so Kummer's Lemma (1) — which asserts F(α)F(\alpha) is the full splitting field and computes its Galois group as cyclic — simply fails to apply, because its hypothesis (ζn∈F\zeta_n \in F) fails. If one incorrectly tried to conclude "Gal(Q(23)/Q)\mathrm{Gal}(\mathbb{Q}(\sqrt[3]2)/\mathbb{Q}) is cyclic of order 3" by naive analogy, this is not even meaningful since the extension isn't normal, hence has no Galois group in the usual sense; the actual Galois group of the splitting field L/QL/\mathbb{Q} is S3S_3, which is still solvable (as S3▹A3▹{e}S_3 \triangleright A_3 \triangleright \{e\} has abelian quotients Z/2\mathbb{Z}/2 and Z/3\mathbb{Z}/3), so gg is still solvable by radicals — but the direct single-radical-adjunction step is not itself a Galois extension, and one genuinely needs the intermediate step of adjoining ζ3\zeta_3 first (as the theorem's proof does) to see the cyclic structure explicitly. This shows why the theorem's proof cannot skip the cyclotomic-extension lemma: without it, the correspondence between "radical step" and "cyclic Galois quotient" breaks down entirely.

Scope, edge cases & common traps

SituationWhat holdsWhat can fail
char F=0\mathrm{char}\,F = 0Full equivalence: solvable by radicals   ⟺  \iff Galois group solvable—
char F=p>0\mathrm{char}\,F = p > 0Theorem requires modification (Artin–Schreier extensions replace some Kummer steps for degree-pp extensions)Naive statement can fail; radical extensions of degree divisible by pp are not automatically separable
Radical tower without roots of unity presentff may still be solvable by radicalsIndividual steps Fi−1(αi)F_{i-1}(\alpha_i) need not be Galois; only the composite with roots of unity recovers cyclic quotients
Non-Galois subfield F(α)F(\alpha), αn∈F\alpha^n \in Fα\alpha still gives a valid radical extensionIt has no "Galois group" to speak of on its own; do not apply Kummer's Lemma directly to it
Infinite-degree or non-algebraic radical towersExcluded by definition (finite tower, finite nin_i)Statement implicitly assumes finitely many finite steps

The mathematician behind it

Origins · 1 minÉvariste Galois and how this was discovered
ÉG
Évariste Galois
1811–1832 · Paris, final years of the Bourbon Restoration and July Monarchy

Galois developed the theory of what are now called Galois groups while still a teenager, submitting memoirs to the French Academy of Sciences that were lost or dismissed by referees including Cauchy and Poisson. He was expelled from the École Normale, imprisoned for republican political activity, and killed in a duel at age twenty, reportedly over a romantic dispute. The night before the duel, he wrote a long letter to his friend Auguste Chevalier outlining his results, including the criterion connecting solvability by radicals to what he called "l'indice de décomposition" of the associated group — the beginnings of the theory of solvable groups. His manuscripts were only properly published and understood over a decade later, principally through Joseph Liouville's 1846 edition.

History
- 1770–1771: Lagrange studies permutations of roots of cubics and quartics, laying groundwork without a group concept.
- 1799, 1824: Ruffini, then Abel (1824), give arguments (Ruffini's incomplete, Abel's rigorous) that the general quintic has no radical solution.
- 1830–1831: Galois submits memoirs on solvability of equations by radicals; rejected or lost by the Academy.
- 1832: Galois dies after a duel; his final testamentary letter sketches the group-theoretic criterion.
- 1846: Liouville publishes Galois's papers in the Journal de Mathématiques Pures et Appliquées, making the theory accessible.
- 1870: Camille Jordan's Traité des substitutions systematizes Galois theory and solvable groups in modern form.
Why does solvability by radicals depend on the Galois group being solvable, rather than, say, abelian?

Because radical towers correspond to chains of subgroups with abelian (equivalently, refinable to cyclic) successive quotients, not to a single abelian group. A solvable group can be highly nonabelian overall — for instance S4S_4 is solvable but not abelian — as long as it admits a normal series where each layer's quotient is abelian. Each layer of the series corresponds to one "radical step" in the tower: you don't need the whole group abelian, just each step of the descent. This is exactly why the quartic is solvable by radicals (its Galois group, at most S4S_4, is solvable) even though S4S_4 itself is nonabelian and quite intricate.

Does every solvable-by-radicals polynomial have a "nice closed-form" formula like the quadratic formula?

In principle, yes: the proof is constructive, using Lagrange resolvents to build the radicals explicitly at each stage of a solvable series. In practice, the formulas can become extremely unwieldy as degree grows, even for degree-3 and degree-4 (Cardano's and Ferrari's formulas already involve nested radicals and auxiliary resolvent cubics/quadratics). The theorem guarantees existence of a radical expression, not that it is simple, and for higher solvable-degree polynomials the explicit formula can be practically useless despite being theoretically guaranteed.

Is the radical tower in the theorem's proof unique?

No. Many different radical towers can contain the same splitting field EE; the theorem only asserts existence of at least one. Even the choice of primitive root of unity ζn\zeta_n, the specific resolvents β\beta, and the order of the composition series are all non-canonical choices made during the proof. Uniqueness is not needed for the equivalence and generally fails.

Why must we adjoin roots of unity for all the exponents nin_i at once, rather than one at a time as needed?

Adjoining them all at once (via a single primitive nn-th root of unity where nn is a common multiple, e.g. n=n1n2⋯nmn = n_1n_2\cdots n_m) simplifies bookkeeping and guarantees every subsequent stage already has the roots of unity it needs, so Kummer's Lemma (1) applies uniformly at each step without re-adjoining more roots of unity partway through and disturbing the tower's Galois property. It is possible to adjoin them incrementally, but the single-adjunction-up-front approach, as used in the proof, avoids repeatedly checking normality at each stage.

Does the theorem say anything about how to compute the Galois group of a given polynomial?

Not directly — the theorem assumes the Galois group is known or given, and relates its abstract structure (solvable or not) to radical solvability. Computing Galois groups explicitly (e.g., via resolvent polynomials, discriminants, or reduction mod primes) is a separate and substantial computational problem, addressed by other techniques in Field & Galois Theory and computational algebra. The theorem is the bridge between structure and solvability, not a black-box Galois-group calculator.

How does this theorem set up the Insolvability of the Quintic?

It reduces the analytic question "can we solve a general degree-5 polynomial by radicals" to the purely group-theoretic question "is S5S_5 (or the relevant Galois group) solvable." Since one can exhibit specific quintics over Q\mathbb{Q} with Galois group S5S_5, and S5S_5 is not solvable (its only proper nontrivial normal subgroup is A5A_5, which is simple and nonabelian, so no further refinement into abelian quotients is possible), the theorem immediately implies such quintics are not solvable by radicals. This is the direct sequel result built on exactly the machinery proven here.

What is the analogue of this theorem in characteristic pp?

In characteristic pp, Kummer theory for degree-pp cyclic extensions is replaced by Artin–Schreier theory: cyclic extensions of degree pp arise as splitting fields of xp−x−ax^p - x - a rather than xp−ax^p - a, since xp−ax^p-a is inseparable (its derivative is 00) in characteristic pp. A full characteristic-pp solvability theorem exists but requires patching together Kummer theory for degrees coprime to pp with Artin–Schreier theory for the pp-part, making the clean single statement given here specific to characteristic 00 (or more generally, to nn coprime to the characteristic).

Before this

Where this leads