## FIRST-DEGREE PRIME IDEALS OF BIQUADRATIC FIELDS DIVIDING PRESCRIBED PRINCIPAL IDEALS

GIORDANO SANTILLI 1 AND DANIELE TAUFER 1

Abstract. We describe first-degree prime ideals of biquadratic extensions in terms of first-degree prime ideals of two underlying quadratic fields. The identification of the prime divisors is given by numerical conditions involving their ideal norms. The correspondence between these ideals in the larger ring and those in the smaller ones extends to the divisibility of special-shaped principal ideals in their respective rings, with some exceptions that we explicitly characterize.

## 1. Introduction

Biquadratic fields are numerical fields that have been studied extensively [1, 5, 11, 13, 14, 15] and are currently in the spotlight as they provide examples of nonprincipal Euclidean ideal classes [3, 6]. They are defined as numerical fields whose Galois group is the Klein group and they can be obtained by the compositum of two quadratic fields, which is the construction we adopt in the present work.

In a general number field Q ( γ ), the special subring Z [ γ ] of the ring of integers plays an important role in applications, since their elements have a natural representation as integer-valued polynomials. Among its main properties, identifying its first-degree prime ideals is relatively easy as well as deciding whether they divide a given principal ideal [2]. This feature is crucial for the effectiveness of the General Number Field Sieve, which is the most efficient known algorithm to factorize large integers [7, 8, 9].

In this paper, we start from a biquadratic field Q ( γ ) and we investigate the relation between the first-degree prime ideals in Z [ γ ] and the first-degree prime ideals of Z [ α ] and Z [ β ], with Q ( α ) and Q ( β ) two underlying quadratic fields.

![image](https://ac.marcodsn.me/arxiv-markdown-images/1908.00383v3-figure-d76ce6e8-fa2e-4d0f-a937-419ce4db8aab.jpg)

In Section 2, we recall the results we need on the structure of first-degree prime ideals. In Section 3, we provide an explicit relation between such ideals in Z [ γ ] and those in Z [ α ] and Z [ β ], which depends on their ideal norms. In Section 4, we extend this relation to the divisibility of principal ideals in their respective rings, with some

1 University of Trento

E-mail addresses

:

giordano.santilli@unitn.it, daniele.taufer@gmail.it

.

exceptions that we explicitly highlight. In Section 5, we hint at applications and further research.

## 2. Notation and preliminaries

Let Q ( α ) and Q ( β ) be two distinct quadratic fields, i.e. a = α 2 and b = β 2 have distinct non-trivial square-free parts. We may assume these number fields to be generated by the polynomials

$$f _ { a } ( x ) = x ^ { 2 } - a, \quad f _ { b } ( x ) = x ^ { 2 } - b,$$

where a, b ∈ Z . It is well-known [14] that the biquadratic extension they generate is Q ( γ ) with γ = α + β , whose minimal polynomial is

$$f _ { c } ( x ) = x ^ { 4 } - 2 ( a + b ) x ^ { 2 } + ( a - b ) ^ { 2 }.$$

In this setting we focus on ideals in the order Z [ θ ], which has been deeply studied in [2].

Definition 2.1. Let θ be an algebraic integer and a be a non-zero ideal of Z [ θ ]. The norm of a is

$$\mathcal { N } ( \mathfrak { a } ) = [ \mathbb { Z } [ \theta ] \, \colon \mathfrak { a } ].$$

Moreover, a non-zero prime ideal p of Z [ θ ] is called a first-degree prime ideal if N ( p ) is a prime integer.

The following theorem characterizes the first-degree prime ideals of Z [ θ ].

Theorem 2.2. ([2, p.57]) Let f ∈ Z [ θ ] be an irreducible monic polynomial and θ ∈ C one of its roots. Then, for every positive prime p there is a bijection between

$$\{ ( r, p ) \ | \ r \in \mathbb { Z } / p \mathbb { Z } \ s u c h \ t h a t \ f ( r ) \equiv 0 \bmod p \}$$

and

$$\{ \mathfrak { p } \ | \ \mathfrak { p } \in \text{Spec } \mathbb { Z } [ \theta ] \ s u c h \ t h a t \, \mathcal { N } ( \mathfrak { p } ) = p \}.$$

In the above bijections an ideal p corresponds to ( r, p ) if it is the kernel of the evaluation-inr ring morphism

↦

$$\pi _ { \theta } \colon \mathbb { Z } [ \theta ] \to \mathbb { Z } / p \mathbb { Z }, \ \ a + b \theta \mapsto a + b r \bmod p.$$

In the following sections we will use these bijections as identifications.

It is a standard fact [4] that non-zero ideals factor uniquely into primes in the whole ring of integers, however such a decomposition has been generalized even inside non-maximal orders Z [ θ ] in [2, Proposition 7.1]. The relation between these two types of factorization has been precisely characterized in [2, Proposition 7.2], and it founds a relevant employment for factoring in Z [ θ ] special principal ideals [2, Corollary 5.5], whose factorization only consists of first-degree prime ideals in the same order.

FIRST-DEGREE PRIME IDEALS OF BIQUADRATIC FIELDS DIVIDING PRESCRIBED PRINCIPAL IDEALS 3

## 3. First-degree prime ideals of biquadratic extensions

The following theorem exhibits how to construct first-degree prime ideals of a given norm in a biquadratic field by knowing first-degree prime ideals of the same norm in two of its quadratic subfields.

Theorem 3.1. Let ( r, p ) be a first-degree prime ideal of Z [ α ] and ( s, p ) a first-degree prime ideal of Z [ β ] . Then ( r + s, p ) is a first-degree prime ideal of Z [ γ ] .

Proof. By hypothesis we have

$$2$$

$$f _ { a } ( r ) & = r ^ { 2 } - a \equiv 0 \bmod p, \\ f _ { b } ( s ) & = s ^ { 2 } - b \equiv 0 \bmod p.$$

By plugging r + s into f c we get

$$f _ { c } ( r + s ) & = ( r + s ) ^ { 4 } - 2 ( a + b ) ( r + s ) ^ { 2 } + ( a - b ) ^ { 2 } \\ & \equiv ( r + s ) ^ { 4 } - 2 ( r ^ { 2 } + s ^ { 2 } ) ( r + s ) ^ { 2 } + ( r ^ { 2 } - s ^ { 2 } ) ^ { 2 } \bmod p \\ & \equiv ( r + s ) ^ { 2 } \left ( ( r + s ) ^ { 2 } - 2 ( r ^ { 2 } + s ^ { 2 } ) + ( r - s ) ^ { 2 } \right ) \bmod p \\ & \equiv 0 \bmod p. \\ \intertext { h o w e n d } \Psi _ { \lambda + \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda } \lambda _ { \lambda }$$

Therefore, ( r + s, p ) is a first-degree prime ideal of Z [ γ

]. /square

We will refer to ( r + s, p ) ⊆ Z [ γ ] as the combination of the ideals ( r, p ) ⊆ Z [ α ] and ( s, p ) ⊆ Z [ β ]. Now we prove that the ideals constructed as combinations are almost all the first-degree prime ideals of Z [ γ ].

/negationslash

Theorem 3.2. Let ( t, p ) be a first-degree prime ideal of Z [ γ ] . If either p = 2 or t ≡ 0 mod p then there exists a unique pair r, s ∈ Z /p Z such that t ≡ r + s mod p and ( r, p ) , ( s, p ) are first-degree prime ideals of Z [ α ] and Z [ β ] , respectively.

Proof. We treat separately the cases p = 2 and p odd, explicitly exhibiting such a pair ( r, s ) in both cases.

- · Case: p = 2.

Since in Z / 2 Z every element is equal to its square, the only choice of r, s ∈ Z / 2 Z satisfying

$$\begin{cases} r ^ { 2 } - a \equiv 0 \bmod 2, \\ s ^ { 2 } - b \equiv 0 \bmod 2, \end{cases}$$

is ( r, s ) = ( a, b ), which also satisfies t = r + s because

$$0 \equiv f _ { c } ( t ) \equiv t ^ { 4 } - 2 ( a + b ) t ^ { 2 } + ( a - b ) ^ { 2 } \equiv t + a + b \bmod 2.$$

- · Case: p = 2 and t = 0.

/negationslash

/negationslash

In this case 2 t is invertible in Z /p Z , then we can define r 1 = t 2 + a -b 2 t . We notice that from f c ( ) t ≡ 0 mod p we have

$$r _ { 1 } ^ { 2 } = \left ( \frac { t ^ { 2 } + a - b } { 2 t } \right ) ^ { 2 } & = \frac { t ^ { 4 } + 2 a t ^ { 2 } - 2 b t ^ { 2 } + a ^ { 2 } - 2 a b + b ^ { 2 } } { 4 t ^ { 2 } } \\ & = \frac { f _ { c } ( t ) + 4 a t ^ { 2 } } { 4 t ^ { 2 } } \equiv a \bmod p.$$

$$= \frac { f _ { c } ( t ) + 4 a t ^ { 2 } } { 4 t ^ { 2 } } \equiv a \bmod p.$$

Thus, r 1 is a square root of a modulo p and since Z /p Z is a finite field there are at most two solutions to r 2 -a ≡ 0 mod p , hence these are

$$r _ { 1 } = \frac { t ^ { 2 } + a - b } { 2 t }, \ \ r _ { 2 } = - r _ { 1 } = - \frac { t ^ { 2 } + a - b } { 2 t }.$$

Similarly, there are only two possible values for s , which are

$$s _ { 1 } = \frac { t ^ { 2 } - a + b } { 2 t }, \ \ s _ { 2 } = - s _ { 1 } = - \frac { t ^ { 2 } - a + b } { 2 t }. \ \ s _ { 2 }.$$

It is easy to verify that r 1 + s 1 = t and we now prove that ( r 1 , s 1 ) is in fact the unique choice for such a pair ( r, s ) in order to satisfy r + s = . t

/negationslash

First, we notice that ( r, s ) = ( r 2 , s 2 ) is not a possible option, since in this case r 2 + s 2 = -t but - /negationslash≡ t t mod p since p = 2 and t ≡ 0 mod p .

/negationslash

To conclude the proof we show that ( r 1 , s 2 ) may be a suitable choice only when s 1 = s 2 = 0, therefore ( r 1 , s 2 ) = ( r 1 , s 1 ). Suppose that r 1 + s 2 = , t which means a -b = t 2 . Then

$$0 \equiv f _ { c } ( t ) \equiv 2 t ^ { 2 } ( t ^ { 2 } - a - b ) \bmod p.$$

/negationslash

Since 2 t 2 ≡ 0 mod p we get a + b ≡ t 2 mod p , then a ≡ t 2 mod p and b ≡ 0 mod p . This proves that s 1 = s 2 = 0.

The same argument shows that ( r 2 , s 1 ) is a valid pair only if r 1 = r 2 = 0 so ( r 2 , s 1 ) = ( r 1 , s 1 ). In conclusion, there is only one working pair, that is ( r, s ) = ( r 1 , s 1 ). /square

/negationslash

/negationslash

The uniqueness part of Theorem 3.2 states that any ideal ( t, p ) of Z [ γ ] with t = 0 may be determined without repetitions from first-degree prime ideals of two underlying quadratic fields. The only ideals left are those of the form (0 , p ) for p = 2, which are examined in the following proposition.

Proposition 3.3. Let (0 , p ) be a first-degree prime ideal of Z [ γ ] and r ∈ Z /p Z , then the following are equivalent:

- · f a ( r ) ≡ 0 mod p ,
- · f b ( r ) ≡ 0 mod p ,
- · ( r, p ) and ( -r, p ) are first-degree prime ideals of Z [ α ] ,
- · ( r, p ) and ( -r, p ) are first-degree prime ideals of Z [ β ] .

Proof. From f c (0) ≡ 0 mod p we get

$$( a - b ) ^ { 2 } \equiv 0 \bmod p \implies a \equiv b \bmod p.$$

Hence, f a ≡ f b mod p , therefore r is a root of f a modulo p if and only if the same holds for f b . Moreover, if f a ( r ) ≡ 0 mod p also f a ( -r ) ≡ 0 mod p , implying that ( ± r, p ) are first-degree prime ideals of Z [ α ], while the converse is trivial. /square

Remark 3.4. The above proposition is trivial for p = 2 . In fact, by Theorem 3.2 if (0 , 2) is a first-degree prime ideal of Z [ γ ] then all the above equivalent conditions are satisfied for r = a .

According to Proposition 3.3, one of the following situations takes place, depending on the number ν of roots of f a modulo p :

- ν = 0: (0 , p ) ⊆ Z [ γ ] cannot be found as a combination of first-degree prime ideals of Z [ α ] and Z [ β ].
- ν = 1: (0 , p ) ⊆ Z [ γ ] is the combination of (0 , p ) ⊆ Z [ α ] and (0 , p ) ⊆ Z [ β ].
- ν = 2: (0 , p ) ⊆ Z [ γ ] is determined by two different combinations of first-degree prime ideals of Z [ α ] and Z [ β ].

In the following example, we see that all the above cases may actually occur.

Example 1. Let f a = x 2 -50 and f b = x 2 -155 generate the quadratic fields Q ( α ) and Q ( β ) , so that the composite biquadratic field Q ( γ ) is generated by the polynomial f c = x 4 -410 x 2 +11025 .

The unique first-degree prime ideal in Z [ γ ] with norm p = 3 is (0 , 3) , but there are no such ideals neither in Z [ α ] nor in Z [ β ] , then (0 , 3) cannot be a combination of any of them.

The unique first-degree prime ideal of norm p = 5 in Z [ γ ] is (0 , 5) , which is determined uniquely as a combination of the ideals (0 , 5) in Z [ α ] and (0 , 5) in Z [ β ] . There are three first-degree prime ideals of norm p = 7 in Z [ γ ] : (0 , 7) (2 , , 7) and (5 , 7) . The first-degree prime ideals of the same norm for both Z [ α ] and Z [ β ] are (1 , 7) and (6 , 7) . As prescribed by Theorem 3.2 we observe that (2 , 7) and (5 , 7) are uniquely determined by the combinations of ( (1 , 7) (1 , , 7) ) and ( (6 , 7) (6 , , 7) ) , whereas (0 , 7) arises from both the combinations of ( (1 , 7) (6 , , 7) ) and ( (6 , 7) (1 , , 7) ) .

## 4. Division of prescribed principal ideals

In this section we consider a special family of principal ideals of Z [ γ ] and we study its first-degree prime divisors in terms of first-degree prime ideals dividing its intersections with Z [ α ] and Z [ β ]. This particular class of ideals is of great interest, since they are the ones usually employed in applications [2]. We begin by characterizing these intersections, as in the following proposition.

/negationslash

Proposition 4.1. Let n and m = 0 be coprime integers and let I = 〈 n + mγ 〉 ⊆ Z [ γ ] . Then I ∩ Z [ α ] is a principal ideal of Z [ α ] generated by

$$I \cap \mathbb { Z } [ \alpha ] = \langle ( n + m \alpha + m \beta ) ( n + m \alpha - m \beta ) \rangle \,.$$

Proof. ⊇ ) The generator ( n + mα + mβ )( n + mα -mβ ) is an element of I and is equal to ( n + mα ) 2 -( mβ ) 2 = n 2 + m a 2 ( -b ) + 2 nmα , which belongs to Z [ α ]. ⊆ ) Any element x ∈ I may be written as x = ( n + mα + mβ )( λ 0 + λ α 1 + λ β 2 + λ αβ , 3 )

for some λ , . . . , λ 0 3 ∈ Z . Since { 1 , α, β, αβ } is a Q -basis of Z [ γ ] [14], then x ∈ Z [ α ] if and only if its coefficients of β and αβ are zero, which amounts to

- (1) mλ 0 + nλ 2 + maλ 3 = 0 , mλ 1 + mλ 2 + nλ 3 = 0 .

From Equation (1) we get

$$\lambda _ { 0 } + \lambda _ { 1 } \alpha + \lambda _ { 2 } \beta + \lambda _ { 3 } \alpha \beta & = - \left ( \frac { n } { m } \lambda _ { 2 } + a \lambda _ { 3 } \right ) - \alpha \left ( \lambda _ { 2 } + \frac { n } { m } \lambda _ { 3 } \right ) + m \beta \left ( \frac { \lambda _ { 2 } + \lambda _ { 3 } \alpha } { m } \right ) \\ & = ( n + m \alpha - m \beta ) \left ( - \frac { \lambda _ { 2 } + \lambda _ { 3 } \alpha } { m } \right ). \\ \text{Moreover since } ( m, n ) = 1, \text{ then Equation } ( 1 ) \text{ also implies that } m \text{ divides both } \lambda _ { 2 }$$

Moreover since ( m,n ) = 1, then Equation (1) also implies that m divides both λ 2 and λ 3 . Hence, we conclude that any x ∈ I ∩ Z [ α ] belongs to the ideal generated in Z [ α ] by ( n + mα + mβ )( n + mα -mβ ). /square

With the following theorems we prove that divisibility is stable under combination except for an exceptional case.

/negationslash

Theorem 4.2. Let n and m = 0 be coprime integers and I = 〈 n + mγ 〉 be a principal ideal of Z [ γ ] . Let us assume that there are ( r, p ) first-degree prime ideal of Z [ α ] dividing I a = I ∩ Z [ α ] and ( s, p ) first-degree prime ideal of Z [ β ] dividing I b = I ∩ Z [ β ] . Then ( r + s, p ) is a first-degree prime ideal of Z [ γ ] dividing I unless the following conditions simultaneously hold:

$$p \neq 2, \ \ n \equiv 0 \bmod p, \ \ r + s \not \equiv 0 \bmod p.$$

/negationslash

/negationslash

Proof. By Theorem 3.1 ( r + s, p ) is a first-degree prime ideal of Z [ γ ], then it is sufficient to show that under the aforementioned conditions we obtain

$$n + m ( r + s ) \equiv 0 \bmod p,$$

which proves that I = 〈 n + mγ 〉 ⊆ ker π γ = ( r + s, p ), hence ( r + s, p ) | I .

- · Case: p = 2.

By Proposition 4.1 a generator of I a in Z [ α ] is g = n 2 + m a 2 ( -b )+2 nmα , therefore

$$\pi _ { \alpha } ( g ) = n ^ { 2 } + m ^ { 2 } ( a - b ) + 2 n m r \equiv n + m ( a ^ { 2 } + b ^ { 2 } ) \equiv n + m ( r + s ) \bmod 2.$$

Thus, either (2) is satisfied or π α ( g ) ≡ 1 mod 2, which implies that there are no first-degree prime ideals ( r, 2) dividing I a .

- · Case : p = 2 and n ≡ 0 mod p .

/negationslash

/negationslash

By Proposition 4.1 we have

$$\begin{cases} I _ { a } = \langle n ^ { 2 } + m ^ { 2 } ( a - b ) + 2 n m \alpha \rangle \subseteq \mathbb { Z } [ \alpha ], \\ I _ { b } = \langle n ^ { 2 } + m ^ { 2 } ( b - a ) + 2 n m \beta \rangle \subseteq \mathbb { Z } [ \beta ]. \\ \ell \quad \cdot \cdot \cdot \cdot \cdot \end{cases}.$$

Since ker π α = ( r, p ) | I a and ker π β = ( s, p ) | I b , then

$$\begin{cases} n ^ { 2 } + m ^ { 2 } ( a - b ) + 2 n m r \equiv 0 \bmod p, \\ n ^ { 2 } + m ^ { 2 } ( b - a ) + 2 n m s \equiv 0 \bmod p. \\ \vdots \cdots \cdots \cdots \cdots \end{cases}$$

Summing the above relations we get

$$2 n [ n + m ( r + s ) ] \equiv 0 \bmod p.$$

Since 2 n ≡ 0 mod p this implies (2).

/negationslash

/negationslash

- · Case : p = 2, n ≡ 0 mod p and r + s ≡ 0 mod p . In this case (2) is trivially satisfied.

Thus, we conclude that ( r + s, p ) is a first-degree prime ideal of Z [ γ ] dividing I except for the case p = 2, n ≡ 0 mod p and r + s ≡ 0 mod p . /square

/negationslash

/negationslash

The next example shows that in the exceptional case mentioned above ideal combination may not maintain divisibility.

Example 2. Let f a = x 2 +4 and f b = x 2 -6 generate the quadratic fields Q ( α ) and Q ( β ) , so that the composite biquadratic field Q ( γ ) is generated by the polynomial f c = x 4 -4 x 2 +100 .

The first-degree prime ideals of Z [ γ ] with norm p = 5 are (0 , 5) (2 , , 5) and (3 , 5) , while those of Z [ α ] and Z [ β ] are (1 , 5) and (4 , 5) .

Let I be the principal ideal 〈 5 + γ 〉 ⊆ Z [ γ ] . By Proposition 4.1 we have

$$I _ { a } = \langle 1 5 + 1 0 \alpha \rangle \subseteq \mathbb { Z } [ \alpha ], \ \ I _ { b } = \langle 3 5 + 1 0 \beta \rangle \subseteq \mathbb { Z } [ \beta ].$$

It is easy to see that both (1 , 5) and (4 , 5) divide I a and I b . Besides, the combination of (1 , 5) with (4 , 5) is (0 , 5) , which divides I . However, the other options are exceptional, since the combination between (1 , 5) and (1 , 5) is (2 , 5) , which does not divide I . The same holds for (3 , 5) , which is the combination of (4 , 5) with (4 , 5) .

On the other hand, whenever a first-degree prime ideal of Z [ γ ] dividing a given principal ideal I is obtained as a combination of two first-degree prime ideals, they divide the intersections of I with Z [ α ] and Z [ β ].

/negationslash

Theorem 4.3. Let n and m = 0 be coprime integers, I = 〈 n + mγ 〉 ⊆ Z [ γ ] and let ( t, p ) be a first-degree prime ideal dividing I . If there exist first-degree prime ideals ( r, p ) ⊆ Z [ α ] and ( s, p ) ⊆ Z [ β ] such that r + s ≡ t mod p , then ( r, p ) divides I a = I ∩ Z [ α ] and ( s, p ) divides I b = I ∩ Z [ β ] .

Proof. If these ideals exist, from ( t, p ) | I we get

$$0 \equiv n + m t \equiv n + m r + m s \bmod p.$$

Let g a = n 2 + m a 2 ( -b ) + 2 nmα a generator of I a and g b = n 2 + m b 2 ( -a ) + 2 nmβ a generator of I b . From the above equation we have

$$\pi _ { \alpha } ( g _ { a } ) & = n ^ { 2 } + m ^ { 2 } ( a - b ) + 2 n m r \equiv n ^ { 2 } + m ^ { 2 } ( a - b ) + 2 n ( - n - m s ) \bmod p \\ & \equiv - n ^ { 2 } - m ^ { 2 } ( - a + b ) - 2 n m s \equiv - \pi _ { \beta } ( g _ { b } ) \bmod p.$$

Hence, since π α ( g a ) vanishes if and only if π β ( g b ) does, it is sufficient to show that ( r, p ) | I a . Substituting n = -mr -ms r , 2 ≡ a mod p and s 2 ≡ b mod p we get

$$\pi _ { \alpha } ( g _ { a } ) \equiv ( - m r - m s ) ^ { 2 } + m ^ { 2 } ( r ^ { 2 } - s ^ { 2 } ) + 2 ( - m r - m s ) m r \equiv 0 \bmod p, \\ \text{therefore $(r,p)$ | $ I_{a}$.}$$

The following corollary enhances the previous result in the generic case.

/negationslash

/negationslash

Corollary 4.4. Let n and m = 0 be coprime integers, I = 〈 n + mγ 〉 ⊆ Z [ γ ] and let ( t, p ) be a first-degree prime ideal dividing I , with t = 0 if p = 2 . Then there exist two unique first-degree prime ideals ( r, p ) ⊆ Z [ α ] and ( s, p ) ⊆ Z [ β ] such that ( r, p ) divides I ∩ Z [ α ] , ( s, p ) divides I ∩ Z [ β ] and r + s ≡ t mod p .

/negationslash

Proof. It follows immediately from Theorem 4.3 and Theorem 3.2.

/square

Remark 4.5. For completeness, we comment on a case we have not discussed, which is m = 0 so that I = 〈 n 〉 ⊆ Z [ γ ] . Both the intersections of this principal ideal with Z [ α ] and Z [ β ] are equal to 〈 n 〉 and for every t ∈ Z /p Z we have

$$( t, p ) | \langle n \rangle \quad \Longleftrightarrow \quad n \equiv 0 \bmod p.$$

Thus, all or none the pairs { ( t, p ) | f c ( ) t ≡ 0 mod p } divide 〈 n 〉 ⊂ Z [ γ ] , so it is still true that the combination preserves divisibility, but in general not uniquely.

## 5. Applications and further work

In this work we show how two first-degree prime ideals in quadratic extensions may be combined to obtain a first-degree prime ideal in the corresponding biquadratic extension lying over them. In addition, this correspondence is proved to preserve the division of prescribed first-degree prime ideals, except for some sporadic, though well-determined, cases.

Nonetheless, further computations suggest that our results might also be extended to more general number fields, possibly requiring additional hypotheses. Such a generalization could be repeatedly applied in order to characterize firstdegree prime ideals of a given norm in large extensions: the (at most) d d 1 2 firstdegree prime ideals of a composite extension may be seen as combinations of d 1 + d 2 such ideals into smaller subrings, which are much more convenient to be stored and managed.

Among other applications, first-degree prime ideals are employed in the General Number Field Sieve, where a large number of them is needed to factorize some principal ideals. Even if biquadratic extensions may not be optimal for this algorithm [10, 12], a more general form of our results on ideal combination could lead to better computational performance.

Finally, from a theoretical point of view, it may be worthy to investigate which algebraic properties are preserved, as happens for divisibility, by first-degree prime ideals combination.

## acknowledgments

The authors want to thank professors Massimiliano Sala and Michele Elia for their useful comments and suggestions.

## References

- [1] S. Bae and Q. Yue, Hilbert genus fields of real biquadratic fields, Ramanujan J. , 24 (2011), 161-181.
- [2] J. P. Buhler, H. W. Lenstra and C. Pomerance, Factoring integers with the number field sieve, in The Development of the number field sieve (Springer, 1993), pp. 50-94.
- [3] J. Chattopadhyay and S. Muthukrishnan, Biquadratic fields having a non-principal euclidean ideal class, J. Number Theory , Vol. 204 (2019), pp. 99-112.
- [4] R. Dedekind, Theory of algebraic integers. Cambridge University Press , 1996.
- [5] R. Dwilewicz, J. Min´ˇ c, a A. Schultz and J. Swallow, Hilbert 90 for Biquadratic Extensions, Amer. Math. Monthly , 114 (7) (2007), 577-587.
- [6] S. Hu and L. Yan, A new family of biquadratic fields having a non-principal euclidean ideal class, arXiv:1907.10850 (2019).
- [7] A. K. Lenstra and W. H. J. Lenstra, The development of the number field sieve (Springer Science &amp; Business Media, 1993).

FIRST-DEGREE PRIME IDEALS OF BIQUADRATIC FIELDS DIVIDING PRESCRIBED PRINCIPAL IDEALS 9

- [8] A. K. Lenstra, W. H. J. Lenstra, M. S. Manasse, and J. M. Pollard, The number field sieve, in Proceedings of the twenty-second annual ACM symposium on Theory of computing , (ACM, 1990), pp. 564-572.
- [9] T. Kleinjung et al., Factorization of a 768-bit RSA modulus, in Annual Cryptology Conference (Springer, 2010), pp. 333-350.
- [10] T. Kleinjung, On polynomial selection for the general number field sieve, Math. Comp. 75 (256) (2006), pp. 2037-2047.
- [11] Mamoona S., Yoshifumi K. and Toru N., Monogenity of Biquadratic Fields Related to Dedekind-Hasse's Problem, Punjab Univ. J. Math. (Lahore) , Vol.47 (2) (2015), pp. 77-82.
- [12] B. Murphy, Modelling the yield of number field sieve polynomials, in International Algorithmic Number Theory Symposium (Springer, 1998), pp. 137-150.
- [13] Y. Ouyang and Z. Zhang, Hilbert genus fields of biquadratic fields Ramanujan J. , 37 (2015), pp. 345-363.
- A brief guide to algebraic number theory (Cambridge University Press, 2001), pp. 63-65.
- [14] K. S. Williams, Integers of biquadratic fields, Canad. Math. Bull. , 13 (4), (1970), 519-526.
- [15] Q. Yue, Genus fields of real biquadratic fields, Ramanujan J. , 21 (2010), 17-25.
Giordano Santilli Daniele Taufer
First-Degree Prime Ideals of Biquadratic Fields dividing prescribed Principal Ideals
We describe first-degree prime ideals of biquadratic extensions in terms of
first-degree prime ideals of two underlying quadratic fields. The
identification of the prime divisors is given by numerical conditions involving
their ideal norms. Interestingly, the correspondence between these ideals in
the larger ring and those in the smaller ones extends to the divisibility of
principal ideals in their respective rings, with some exceptions that we
explicitly provide. Finally, we hint at possible applications of this
correspondence.