Take two functions on the positive integers, f and g. Ask: what is the "right" way to multiply them? Ordinary pointwise multiplication f(n)g(n) turns out to be arithmetically shallow. It does not interact well with the multiplicative structure of n itself. There is a different multiplication, Dirichlet Convolution. It is defined by summing f(d)g(n/d) over divisors d of n. This operation quietly governs identities like ∑d∣nϕ(d)=n. It also governs the relationship between d(n), σ(n), and the Möbius functionμ. The key structural discovery is due in spirit to Dirichlet. It was made fully rigorous in the twentieth century. Arithmetic functions under addition and convolution form a genuine algebraic ring — in fact an integral domain. This is not a cosmetic observation. Once we know we are working inside a ring, we inherit a vast amount of machinery for free. This includes an identity element, invertibility criteria, and uniqueness of inverses. It also gives a clean framework in which formulas like Möbius inversion become instances of "multiply both sides by the inverse of μ." They are not mysterious combinatorial tricks. The big picture is that number theory constantly produces functions n↦f(n) built from divisor sums. Dirichlet convolution is exactly the operation under which these sums compose. Recognizing the ring structure explains why so many classical identities have the same shape. It also isolates precisely which functions are invertible (those with f(1)=0). This fact will be the engine behind Möbius inversion. This article builds the ring from scratch. We define it rigorously, and prove it is a commutative ring with identity. We characterize its units, and show it has no zero divisors. Along the way we verify every claim with explicit computations. So the abstract statement "arithmetic functions form a ring" is backed by concrete, checkable arithmetic.
Key takeaways
Arithmetic functions are maps f:Z≥1→C; pointwise addition is the obvious group operation.
Dirichlet Convolution(f∗g)(n)=∑d∣nf(d)g(n/d) is the multiplication that respects divisor structure.
The set of arithmetic functions with (+,∗) is a commutative ring with identity ε, where ε(1)=1, ε(n)=0 for n>1.
A function f is a unit (has a convolution inverse) ifff(1)=0; the inverse is computed by a recursive formula.
The ring has no zero divisors: f∗g=0 forces f=0 or g=0, so it is an integral domain.
The Mobius Functionμ is the convolution inverse of the constant function 1, which is the seed for Möbius inversion.
Key idea: Divisor-sum identities in number theory are ring computations in disguise, and this ring's units, zero-divisor-freeness, and identity element are exactly what make inversion techniques like Möbius inversion work.
Where this lives today
The ring (A,+,∗) is the algebraic backbone underlying Möbius inversion: since 1 (the constant function 1(n)=1) satisfies 1(1)=1=0, it is a unit, and its inverse is exactly The Mobius Functionμ, satisfying 1∗μ=ε. This single ring fact — that μ is the convolution inverse of 1 — is the entire content of Möbius inversion, foreshadowing how identities like F=1∗f can be "solved" for f as f=μ∗F. Beyond pure number theory, this convolution structure recurs in analytic number theory via Dirichlet series, where (A,∗) corresponds to formal multiplication of series ∑f(n)n−s; the Riemann zeta function ζ(s)=∑n−s corresponds to 1, and 1/ζ(s)=∑μ(n)n−s is exactly the statement 1−1=μ translated into analytic language. In combinatorics, the same convolution appears as the incidence algebra of the divisor poset, generalized by Rota to arbitrary locally finite posets — the arithmetic-function ring is the special case of the divisibility poset on Z≥1. In cryptography and computational number theory, fast computation of multiplicative functions (Euler's totient, sum-of-divisors) via convolution identities underlies efficient algorithms for RSA-adjacent computations and sieve methods. In algebra, the ring of arithmetic functions is a standard example of an integral domain that is not a field, useful for illustrating unit groups and zero-divisor-free rings in a concrete, computable setting, connecting to the broader theory of Dirichlet Convolution as an instance of convolution algebras.
Ask the tutor: How does the identity 1−1=μ proved here directly yield the Möbius inversion formula?
DefinitionThe ring of arithmetic functions
An arithmetic function is a function f:Z≥1→C. Let A denote the set of all arithmetic functions. Define two binary operations on A:
Addition. For f,g∈A,
(f+g)(n):=f(n)+g(n)for all n≥1.
Dirichlet convolution. For f,g∈A,
(f∗g)(n):=d∣n∑f(d)g(dn)for all n≥1,
where the sum runs over all positive divisors d of n. Define two special elements of A:
The zero function0, with 0(n)=0 for all n.
The convolution identityε∈A, defined by
ε(n)={10n=1n>1.
The claim of this article is that (A,+,∗) is a commutative ring with additive identity 0 and multiplicative identity ε, and moreover that it is an integral domain whose units are precisely the f with f(1)=0.
Intuition
Think of an arithmetic function f as an infinite table of numbers, one entry f(1),f(2),f(3),… for each positive integer. Addition is entrywise, exactly like adding two vectors or two sequences: nothing about the multiplicative structure of the index n is used. But Dirichlet convolution is different in a crucial way — to compute (f∗g)(n), you must know the factorization structure of n, because you sum over pairs (d,n/d) with dn/d=n. This is why convolution "sees" primes and divisors while pointwise multiplication does not. A good mental picture is a divisor lattice. For n=12, the divisors are 1,2,3,4,6,12, and (f∗g)(12) pairs each divisor d with its complementary divisor 12/d: (1,12),(2,6),(3,4),(4,3),(6,2),(12,1). The sum ∑f(d)g(12/d) walks across this lattice symmetrically. This is exactly why convolution is commutative — swapping f and g just relabels which factor in each pair is "f's divisor" versus "g's divisor," and the same six pairs get hit either way. The identity element ε works like a Kronecker delta sitting at n=1: convolving with ε contributes only the term d=1 (giving f(n)⋅ε(1)⋅ nothing else, since every other term has ε(n/d)=0 unless n/d=1). So ε silently "does nothing," just as 1 does nothing under ordinary multiplication.
Figure
Divisor pairs of n=12 contributing to (f∗g)(12)
The central theorem
TheoremThe ring of arithmetic functions
Let A be the set of arithmetic functions f:Z≥1→C, with addition + and Dirichlet convolution ∗ as defined above. Then: 1. (A,+) is an abelian group with identity 0. 2. ∗ is commutative and associative on A, and distributes over +. 3. ε is a multiplicative identity for ∗: f∗ε=ε∗f=f for all f∈A. 4. Consequently, (A,+,∗) is a commutative ring with unity. 5. (A,+,∗) has no zero divisors: if f,g∈A and f∗g=0, then f=0 or g=0. Hence A is an integral domain. 6. f∈A is a unit of the ring (i.e. has a multiplicative inverse under ∗) if and only if f(1)=0. When f(1)=0, the inverse f−1 is the unique arithmetic function satisfying
We prove each part in turn. Throughout, n,d,e denote positive integers, and all sums over "d∣n" run over the positive divisors of n.
Part 1: (A,+) is an abelian group. This is immediate since A=CZ≥1 as a set, and addition is defined coordinatewise. Coordinatewise addition of complex numbers is associative and commutative because addition in C is. The function 0 is the additive identity since (f+0)(n)=f(n)+0=f(n) for every n. The additive inverse of f is −f, defined by (−f)(n):=−f(n), since (f+(−f))(n)=f(n)−f(n)=0. This establishes (A,+) as an abelian group.
Part 2: ∗ is commutative, associative, and distributes over +.Commutativity. Fix f,g∈A and n≥1. As d ranges over all divisors of n, so does n/d, and the map d↦n/d is a bijection from the divisor set of n to itself (it is its own inverse). Hence
where the middle equality is the substitution d↦n/d applied to the index of summation (a relabeling of a finite sum, valid since the map is a bijection of the index set to itself). Since n was arbitrary, f∗g=g∗f. Associativity. Fix f,g,h∈A and n≥1. We show both (f∗g)∗h and f∗(g∗h) evaluated at n equal the triple sum
S(n):=a,b,c≥1abc=n∑f(a)g(b)h(c),
where the sum is over all ordered triples of positive integers with product n (there are finitely many, since each of a,b,c divides n). Compute directly:
For fixed c∣n, as a ranges over divisors of n/c, set b=(n/c)/a, so abc=n and a,b,c range exactly over the triples with abc=n and this particular c. Hence the double sum over (a,c) with c∣n, a∣(n/c) equals the sum over all triples (a,b,c) with abc=n. Thus ((f∗g)∗h)(n)=S(n). By an entirely symmetric computation,
using linearity of finite sums and distributivity in C. Hence f∗(g+h)=f∗g+f∗h; by commutativity of ∗, also (g+h)∗f=g∗f+h∗f.
Part 3: ε is the multiplicative identity. Fix f∈A and n≥1. Then
(f∗ε)(n)=d∣n∑f(d)ε(n/d).
The term ε(n/d) vanishes unless n/d=1, i.e. unless d=n; and when d=n, ε(n/d)=ε(1)=1. So the sum collapses to the single term d=n:
(f∗ε)(n)=f(n)⋅1=f(n).
Since n was arbitrary, f∗ε=f. By commutativity (Part 2), ε∗f=f∗ε=f as well.
Part 4: (A,+,∗) is a commutative ring with unity. By Part 1, (A,+) is an abelian group. By Part 2, ∗ is associative, commutative, and distributes over + (both left and right, since ∗ is commutative and left-distributivity was shown). By Part 3, ε∈A is a two-sided multiplicative identity. These are exactly the ring axioms, so (A,+,∗) is a commutative ring with unity ε.
Part 5: A has no zero divisors. Suppose f,g∈A with f=0 and g=0; we show f∗g=0. Since f=0, the set {n:f(n)=0} is nonempty; let n0 be its least element. Likewise let m0 be the least positive integer with g(m0)=0. Consider N:=n0m0. We compute
(f∗g)(N)=d∣N∑f(d)g(N/d).
We claim every term with d=n0 vanishes. Indeed, take any divisor d of N=n0m0 with d=n0.
If d<n0: since d is a positive integer less than n0, minimality of n0 gives f(d)=0, so the term f(d)g(N/d)=0.
If d>n0: since d∣N, write N/d; because d>n0 and d∣n0m0, we have N/d<m0. (Indeed N/d=n0m0/d<n0m0/n0=m0.) Since N/d is a positive integer strictly less than m0, minimality of m0 gives g(N/d)=0, so again f(d)g(N/d)=0.
Thus every term with d=n0 vanishes, and only the term d=n0 (for which N/d=m0) can be nonzero:
(f∗g)(N)=f(n0)g(m0).
By choice of n0,m0, both f(n0)=0 and g(m0)=0, and since C has no zero divisors, f(n0)g(m0)=0. Hence (f∗g)(N)=0, so f∗g=0. Contrapositively, if f∗g=0 then f=0 or g=0. Combined with Part 4 and the fact that ε=0 (since ε(1)=1=0, so A is not the zero ring), (A,+,∗) is an integral domain.
Part 6: characterization of units. (⇒) Suppose f is a unit, so there exists g∈A with f∗g=ε. Evaluating at n=1: the only divisor of 1 is d=1, so
(f∗g)(1)=f(1)g(1)=ε(1)=1.
Hence f(1)g(1)=1 in C, which forces f(1)=0 (and also g(1)=1/f(1)). (⇐) Suppose f(1)=0. We construct g=f−1∈A satisfying f∗g=ε, by explicit recursive definition, and simultaneously prove existence, the stated formula, and (separately) uniqueness. Existence and the formula. Define g(1):=1/f(1). For n>1, suppose g(d) has already been defined for all divisors d<n of n (this is well-founded recursion on n, since all such d are smaller positive integers). Define
g(n):=f(1)−1d∣nd<n∑f(dn)g(d).
This is a valid recursive definition of g(n) for every n≥1: the base case n=1 has empty divisor set {d:d∣1,d<1}=∅ (consistent with treating g(1) as the separately-specified base case), and for n>1 the right side only references g(d) for d<n, which are already defined. By strong induction on n, g(n) is well-defined for every n≥1, giving g∈A. We now verify f∗g=ε. For n=1: (f∗g)(1)=f(1)g(1)=f(1)⋅f(1)1=1=ε(1). For n>1: split the divisor sum by isolating d=n (equivalently, the term where the "other factor" is 1):
Hence f∗g=ε, so (by commutativity, Part 2, and Part 3) g∗f=f∗g=ε and g is a genuine two-sided inverse. Thus f is a unit whenever f(1)=0, proving the converse direction and simultaneously exhibiting the formula. Uniqueness. Suppose g,h∈A both satisfy f∗g=ε=f∗h. Using associativity and commutativity (Part 2) and the identity property of ε (Part 3):
g=g∗ε=g∗(f∗h)=(g∗f)∗h=(f∗g)∗h=ε∗h=h.
So the inverse is unique whenever it exists, justifying the notation f−1. This completes the proof of all six parts. ■
∎
Worked examples
Example 1: Inverting f(n)=n (i.e. computing Id−1) at n=12. Let Id(n)=n. Since Id(1)=1=0, Part 6 guarantees an inverse g:=Id−1 exists and is computed recursively:
g(1)=Id(1)1=1.
We build up g on the divisors of 12: 1,2,3,4,6,12. g(2): divisors d<2 of 2 are {1}. Recursion: g(2)=−∑d∣2,d<2Id(2/d)g(d)=−Id(2)g(1)=−2⋅1=−2. g(3): divisors d<3 of 3: {1}. g(3)=−Id(3)g(1)=−3. g(4): divisors d<4 of 4: {1,2}. g(4)=−[Id(4)g(1)+Id(2)g(2)]=−[4⋅1+2⋅(−2)]=−(4−4)=0. g(6): divisors d<6 of 6: {1,2,3}. g(6)=−[Id(6)g(1)+Id(3)g(2)+Id(2)g(3)]=−[6(1)+3(−2)+2(−3)]=−(6−6−6)=6. g(12): divisors d<12 of 12: {1,2,3,4,6}. We need Id(12/d) for each:
Check. In fact one can recognize g=μ⋅Id pointwise — i.e. g(n)=nμ(n) — because Id=1∗ϕ (Euler's identity ∑d∣nϕ(d)=n) is closely related to known convolution facts, but let us verify g(n)=nμ(n) directly from our computed values: g(1)=1=1⋅μ(1), g(2)=−2=2μ(2)=2(−1), g(3)=−3=3μ(3)=3(−1), g(4)=0=4μ(4)=4⋅0 (since 4=22 is not squarefree), g(6)=6=6μ(6)=6⋅1 (since 6=2⋅3, μ(6)=1), g(12)=0=12μ(12)=12⋅0 (since 12=22⋅3 is not squarefree). Every value matches, confirming Id−1(n)=nμ(n) and giving a fully independent numerical check of our recursive computation via The Mobius Function.
Example 2: Verifying associativity numerically for f(n)=d(n) (number of divisors), g=μ, h(n)=n, at n=6. We check ((f∗g)∗h)(6)=(f∗(g∗h))(6) directly, to see the associativity proof "in action" rather than trust it abstractly. Data.d(1)=1,d(2)=2,d(3)=2,d(6)=4. μ(1)=1,μ(2)=−1,μ(3)=−1,μ(6)=1. Id(n)=n. Step A: compute (f∗g)(n)=(d∗μ)(n) for n=1,2,3,6.
(This matches the classical identity d∗μ=1... actually let's not assert unproven identities; we simply use these as raw numbers.) Step B: compute ((f∗g)∗h)(6)=((d∗μ)∗Id)(6).
Both computations give 12, confirming ((d∗μ)∗Id)(6)=(d∗(μ∗Id))(6)=12, exactly as the associativity theorem (Part 2) predicts — and this matches the triple-sum formula S(6)=∑abc=6d(a)μ(b)c, which the reader may check directly enumerates the eight ordered triples (a,b,c) with abc=6 (namely permutations arising from 6=1⋅1⋅6,1⋅2⋅3,1⋅3⋅2,1⋅6⋅1,2⋅1⋅3,2⋅3⋅1,3⋅1⋅2,3⋅2⋅1,6⋅1⋅1, ten triples in total since 6 has three distinct prime-power patterns) and sums to 12.
The unit characterization (Part 6) requires f(1)=0. Drop this hypothesis and consider f∈A defined by
f(n)={01n=1n>1.
Here f(1)=0. We show no g∈A satisfies f∗g=ε, so f is not a unit, exactly as Part 6 predicts. Suppose toward contradiction g∈A satisfies f∗g=ε. Evaluate at n=1: the only divisor of 1 is 1, so
(f∗g)(1)=f(1)g(1)=0⋅g(1)=0.
But ε(1)=1. So (f∗g)(1)=0=1=ε(1), contradicting f∗g=ε. Hence f has no convolution inverse. This shows the hypothesis f(1)=0 in Part 6 is not a technical artifact of the proof — it is a genuine obstruction: whenever f(1)=0, evaluating f∗g at n=1 always gives f(1)g(1)=0, which can never equal ε(1)=1, no matter how g is chosen. This also illustrates why the ring (A,+,∗), while an integral domain, is not a field: it has plenty of nonzero non-units, e.g. this very f.
Scope, edge cases & common traps
Situation
What holds
What fails / must be checked
f(1)=0
f is a unit; unique inverse exists via the recursion
—
f(1)=0, f=0
f is a nonzero non-unit (zero divisor status still fails: A has none)
f has no convolution inverse, even though f=0
f=0
f is the additive identity
f trivially fails to be a unit (as ε=0)
Pointwise product f(n)g(n)
Also forms a commutative ring under +
This is a different ring from (A,+,∗); it is not the one appearing in Möbius-type identities
Domain of f
Must be all of Z≥1
Restricting to squarefree n, or to a finite set, breaks associativity proofs relying on all divisors existing
The mathematician behind it
Origins · 1 minJohann Peter Gustav Lejeune Dirichlet and how this was discovered
JP
Johann Peter Gustav Lejeune Dirichlet
1805–1859 · Prussia, analytic number theory
Dirichlet is best known for introducing analytic methods — L-functions and Dirichlet series — into the study of primes in arithmetic progressions, and for the pigeonhole principle that bears his name. The convolution now named after him arose naturally from his study of Dirichlet series: if F(s)=∑f(n)n−s and G(s)=∑g(n)n−s are two such series, their product F(s)G(s) formally expands to the Dirichlet series of f∗g. This analytic origin is why the convolution respects divisor structure — it is exactly the multiplication rule that makes formal power-series-like manipulation of ∑f(n)n−s consistent.
History
- 1837: Dirichlet proves his theorem on primes in arithmetic progressions, introducing what become Dirichlet series and characters.
- 1832: Möbius introduces the function μ(n) in the context of inversion formulas for number-theoretic sums.
- Late 1800s: The convolution structure (f∗g)(n)=∑d∣nf(d)g(n/d) is systematically used by number theorists (Mertens, and later formalized) to manipulate multiplicative identities.
- 1915–1930s: The abstract ring-theoretic viewpoint (arithmetic functions as a commutative ring, unit criterion) is crystallized, notably influenced by E. T. Bell's and others' work relating arithmetic functions to formal algebraic structures.
- Mid-20th century: The ring-theoretic framework becomes standard textbook material, appearing in treatments such as Apostol's Introduction to Analytic Number Theory and Ireland–Rosen's A Classical Introduction to Modern Number Theory.
Is (A,+,∗) the same ring as functions under pointwise multiplication?
No. Both (A,+,⋅pointwise) and (A,+,∗) are commutative rings on the same underlying set A, but they are different rings with different unit groups and different identities. Under pointwise multiplication the identity is the constant function 1, and units are exactly the nowhere-vanishing functions. Under Dirichlet convolution the identity is ε (supported only at n=1), and units are those with f(1)=0, a much weaker condition. The convolution ring is the one relevant to divisor-sum identities and Möbius inversion; the pointwise ring rarely appears in classical number-theoretic identities.
Why does convolution require summing over all divisor pairs (d,n/d) instead of some other pairing?
Because Dirichlet convolution is designed to mirror multiplication of Dirichlet series ∑f(n)n−s. When you multiply two such series formally, the coefficient of n−s in the product is exactly ∑d∣nf(d)g(n/d), since a term f(d)d−s from the first series times g(e)e−s from the second contributes to n−s precisely when de=n. This is the deep reason the divisor-sum structure appears: it is the unique bilinear operation compatible with multiplying formal Dirichlet series coefficientwise in the exponent.
Does the ring structure require f and g to be multiplicative functions?
No, not at all. The ring (A,+,∗) is defined on all arithmetic functions, with no multiplicativity assumption whatsoever. Multiplicative functions (those with f(1)=1 and f(mn)=f(m)f(n) for coprime m,n) form an important subset that is closed under convolution — the convolution of two multiplicative functions is again multiplicative — but this is a separate, additional fact, not a requirement for the ring axioms to hold. The ring structure itself is purely about the operations + and ∗ on the full set A.
How is the inverse formula in Part 6 actually used in practice?
It gives an algorithm: to invert f with f(1)=0, first set f−1(1)=1/f(1), then compute f−1(n) for increasing n using only previously computed smaller values, exactly as in Worked Example 1. This recursive structure is also how one proves specific inverse identities, such as showing μ is the inverse of 1: one can verify 1∗μ=ε directly (which is a standard fact about The Mobius Function), and uniqueness of inverses (proved in Part 6) then guarantees μ is the inverse, with no other candidate possible.
Why is associativity of Dirichlet convolution not completely obvious?
Because unwinding (f∗g)∗h and f∗(g∗h) directly gives nested sums indexed differently — one groups divisors of n/c inside divisors of n, the other groups divisors of n/a inside divisors of n — and it is not immediately visible that these nested sums range over the same index set. The proof resolves this by showing both nested sums are reindexations of the same triple sum ∑abc=nf(a)g(b)h(c), which requires an explicit bijection argument between the two ways of iterating over divisor chains, exactly as carried out in the proof of Part 2.
What role does ε=0 play in the ring being nontrivial?
If ε were equal to 0, the ring would be the trivial "zero ring" {0}, in which 1=0 and every statement about units becomes vacuous or degenerate. We explicitly check ε(1)=1=0, so ε=0 in A, ruling this out. This small check matters because the zero ring technically satisfies the ring axioms but is excluded from being called an integral domain by convention (integral domains are required to have 1=0), so verifying ε=0 is a genuine, necessary step in Part 5's conclusion.
Does every arithmetic function that's a unit under convolution also have an inverse under Dirichlet series /analytic continuation?
When the associated Dirichlet series F(s)=∑f(n)n−s converges and is nonzero at some point, the algebraic inverse f−1 constructed here corresponds to the Dirichlet series 1/F(s) in regions of convergence, matching coefficients. However, this analytic correspondence requires convergence hypotheses (e.g. absolute convergence in some half-plane) that are entirely separate from the purely algebraic, always-valid construction in Part 6, which needs only f(1)=0 and works with no reference to convergence at all.