Symmetry and the Monster · part 3 of 8

Symmetry and the Monster (3): The Indecomposable Atom · A₅

A word from the author

The proofs in this episode’s blog post were worked out step by step by me together with my AI partners. Whenever I had a question I kept pressing them, and of course they never let me down. Learning in the AI era may no longer need a teacher lecturing in a classroom, and may need more of our own desire to explore the unknown; and as knowledge becomes cheap and AI develops, one question will surely keep making us ask: what do we learn for? For me the answer is “I’m very curious: how on earth did this come about? Why?” For readers it may be different, but I hope readers will also find their own answers. Continuing from EP2 — in the last episode we set up group theory, asserted that “A₅ cannot be broken apart”, and left two IOUs (why it cannot be broken apart, and why being unbreakable means no formula can be written down), and also previewed a person who never met the other yet gave the same answer. This episode pays off all three at once. This is the episode in the series with the hardest mathematics, but it still

takes you as someone who has just finished the little group-theory lesson of the last episode, and goes down step by step from there. This episode’s promise:

Every conclusion that really matters in this episode is proved for you; the few standard lemmas found in every textbook are given with their sources and only their conclusions are taken, so as not to drown the main line.

“The chief forms of beauty are order, symmetry and definiteness, and the mathematical sciences display them in a special degree.” — Aristotle

(The chief forms of beauty are order and symmetry and definiteness, which the mathematical sciences demonstrate in a special degree. — Aristotle)


🎬 This episode’s companion video is now online (YouTube)


Contents


An impossible game

On the table there is a little toy: a four-by-four frame, fifteen sliding blocks, and one empty square left over. The blocks can slide horizontally and vertically; wherever the empty square moves, the block next to it can slide over. Scramble it, then try to slide it back into order — this is the “15 puzzle” that was all the rage in the nineteenth century.

The 14-15 puzzle illustration in Loyd's 1914 Cyclopedia of 5000 Puzzles (public domain)

Figure 1 The 14-15 puzzle illustration in Loyd’s 1914 Cyclopedia of 5000 Puzzles (public domain)

Now you are given a position that is almost set up: 1 to 15 arranged in order, except that the last two blocks — 14 and 15 have swapped places. The empty square is in the bottom-right corner. Your task: by sliding alone, swap 14 and 15 back, with the empty square back in the bottom-right corner again.

It sounds as simple as can be. And yet — you will find that you cannot do it no matter what.

This was exactly the prize problem of the day. America’s most celebrated puzzle master,

Sam Loyd (1841–1911)

, offered for it a

1000-dollar

reward (equivalent to well over a hundred thousand dollars today) for a solution.

He never had to worry about this reward — because the problem has no solution at all.

(A historical aside: this story of “Loyd’s invention + a thousand-dollar prize” is itself a widely circulated legend. Later research (Slocum & Sonneveld, 2006) established that the real inventor was Noyes Chapman, a postmaster in New York State, and that Loyd only began claiming publicly that it was his own creation in 1891. But

this takes nothing away from the mathematics of the game

— this impossibility is beyond doubt, and it is proved for you below.)

Why is it impossible? The answer is hidden in a plain but profound distinction: odd permutations and even permutations (in the little lesson of EP2 we saw “swaps” through the flips of a triangle; here we use them all the way).

First put the game aside, and think only about “scrambling”. The simplest scrambling is to swap two things and leave the rest alone — this is what EP2 called a swap (transposition). Six people sit around a table; two of them exchange seats and the others do not move: that is one transposition. Any complicated rearrangement can be carried out by breaking it into some number of transpositions.

Here there is a key fact (touched on at the end of the EP2 little lesson, and formally put to use here): if a rearrangement can be done with an even number of transpositions, it can never be done with an odd number, and vice versa. Every rearrangement is either “even” or “odd”, clearly one or the other. If you rearranged the seats with seven transpositions and someone says he can achieve the same result with exactly six, you can be sure: he is wrong.

🔑

Why are odd and even clearly separated?

(Put the people back one by one.) To get A to sit in B’s seat, swap A and B — A is back in place, and “the number of people in the right seat” goes up by at least one. In this way, each transposition flips the parity of the number of people sitting correctly, until everyone is back in place. The parity at the end point (all correct) is determined, so the parity of the number of transpositions needed to reach it is determined too.

Back to the game. Swapping 14 and 15 alone and leaving the rest alone — this is one transposition, an odd permutation. But any way of sliding that brings the empty square “back to the bottom-right corner” must be an even permutation. The reasoning is like coloring a chessboard: paint the 16 squares alternately black and white; each time the empty square slides one step, it goes from a black square to a white square, or from white to black — the color flips once. For the empty square to get back to its original square (the same color), the number of color flips must be even, that is, the total number of steps is even → an even permutation.

Odd ≠ even. An odd permutation can never be made up of an even number of steps. Loyd’s thousand dollars was therefore perfectly safe — and he knew this very well.

All arrangements of the 16 sliding blocks fall into two equal halves: the ones that can be reached by sliding

Figure 2 All arrangements of the 16 sliding blocks fall into two equal halves: the “even” half that can be reached by sliding and the “odd” half that cannot; “swap only 14 and 15” lands exactly in the unreachable half

By the way, a word on how “big” this game is: the full permutations of 16 positions give 16! = 20,922,789,888,000 arrangements (over twenty trillion); exactly half of them are even permutations, that is, 10,461,394,944,000 — this is the number of positions you can actually reach by sliding. The other half, more than ten trillion, including the one “swap only 14 and 15”, can never be reached by sliding.

This leap turns the 15-puzzle from a clever toy into the key to the whole episode: the “odd and even” you just played with is not an isolated special case. Shrink it to 5 objects — all the even permutations of 5 things number exactly 6060 and form a group, which is precisely the alternating group A5A_5 from the little lesson of EP2. And this A5A_5 cannot be broken apart; it is a “symmetry atom”; it is precisely the 60 rotations of the icosahedron that we ran into at the end of the last episode. That A5A_5 cannot be broken apart is also precisely the root of “the general quintic equation has no formula for its roots” — §5 will explain this line thoroughly.

In this episode, we fix our eyes only on this first and also smallest non-commutative atom, A5A_5: first prove that it really cannot be broken apart, then see how it leaves the quintic equation without a formula for its roots.

At the other end of the story are two young men who gave their lives to this atom.


The letter that came too late

Niels Henrik Abel (1802–1829), painted by Johan Gørbitz (public domain)

Figure 3 Niels Henrik Abel (1802–1829), painted by Johan Gørbitz (public domain)

On April 6, 1829, in Norway, a 26-year-old young man’s life was taken by tuberculosis. Two days later — on April 8 — Crelle wrote from Berlin with good news: he had secured a position for him. The letter was two days late. His name was Niels Abel. Five years earlier (1824), he had printed at his own expense a thin little pamphlet proving what generations had failed to do: the general equation of the fifth degree has no formula for its roots (an expanded version was published in 1826 in the first issue of Crelle’s journal). But until his death he could not answer the next question — exactly which equations can be solved, and which cannot? That answer was in the hands of another person who was just as young, died just as early, and never met him — Galois. In this episode, we finish saying what the two of them did not have time to finish saying.

Évariste Galois (1811–1832), a portrait drawn from memory by his brother, at about age 15 (public domain)

Figure 4 Évariste Galois (1811–1832), a portrait drawn from memory by his brother, at about age 15 (public domain)


§1 A three-hundred-year-old open case: Ruffini and Abel

The Babylonians could already handle quadratic equations; cubics and quartics were conquered in the Renaissance (covered in EP2); but the quintic equation held out against humanity for nearly three hundred years.

Paolo Ruffini (1765–1822), public domain

Figure 5 Paolo Ruffini (1765–1822), public domain

The first to declare solemnly that “it simply cannot be solved” was the Italian Paolo Ruffini: in 1799 he published his General Theory of Equations, asserting that the general equation of degree higher than four cannot have an algebraic solution, and he revised it repeatedly (1803, 1808, 1813). But his proof had a critical gap, and the mathematical world almost ignored it. He once asked the Paris Institute to rule on whether it was right or wrong — Lagrange, Legendre and Lacroix were assigned to review it, but the response was vague and disappointing. [According to the account in Ronan’s Symmetry and the Monster, the gist of the polite refusal at the time was: the geometers were unwilling to spend time delving into each other’s lengthy work.]

More than twenty years later, the Norwegian Abel (1824, independently of Ruffini) gave an accepted proof: there exist quintic equations whose solutions cannot be written in radicals. But note — x⁵=2 can be solved (just take the fifth root). So the real question is not “can the quintic equation be solved” but “which can, and which cannot”. Abel died of illness just as he was closing in on this measuring stick for deciding. The stage was left to Galois.

They had both touched the door, but could not push it open. To push it open, one must first think through, completely, the matter of “how groups break apart”.


§2 The language of atoms: groups, composition series and Jordan–Hölder

First list a “group” out in full: the Cayley table

Before proving anything, first make “the operation of a group” visible and checkable.

Take the symmetry group S3S_3 of the equilateral triangle from EP2. It has 6 actions: doing nothing ee, rotating by 120°120°, rr, rotating by 240°240°, r2r^2, and three flips a,b,ca,b,c (flipping about the axes through each of the three vertices). The operation of the group is “do one, then do another” — write x∘yx\circ y = first do yy, then do xx (the one on the right is done first, the EP2 convention).

Fill all the results of x∘yx\circ y into a 6×6 table, and that is the multiplication table (Cayley table):

The Cayley table of S₃: each cell is the result of "row action ∘ column action"; the blue 3×3 block (gold frame) is exactly the subgroup A₃={e,r,r²}, closed in itself

Figure 6 The Cayley table of S₃: each cell is the result of “row action ∘ column action”; the blue 3×3 block (gold frame) is exactly the subgroup A₃={e,r,r²}, closed in itself

This table turns the abstract “group” into a table you can check with your finger. Two things can be seen at a glance, and everything below depends on them:

Remember this table and this subgroup A3A_3; we are about to use it to prove the first theorem.


The first theorem: Lagrange (the size of a subgroup always divides the size of the group)

Lagrange (Joseph-Louis Lagrange, 1736–1813) was born in Turin, baptized Giuseppe Lodovico Lagrangia. His father had served as treasurer of the Office of Public Works and Fortifications in Turin, but lost the family fortune through failed speculation. Looking back in his later years, Lagrange actually counted this as a stroke of luck, and once said that if he had been rich at the start, he would probably not have devoted himself to mathematics. In the year he turned thirty, at the invitation of Frederick the Great of Prussia, he went to Berlin to succeed Euler as head of the mathematics section of the Academy of Sciences; it was precisely during his years in Berlin that he wrote Reflections on the Algebraic Solution of Equations (1770), the first systematic inquiry into “why equations of degree four and below can be solved by radicals, while those of degree five and above cannot” — this question, passing later through Ruffini and Abel, led straight to Galois, and became one of the sources of group theory.

In 1787 Lagrange moved to Paris. During the French Revolution and the Reign of Terror he escaped harm thanks to his high prestige and the protection of Lavoisier and others; when Lavoisier was sent to the guillotine, he lamented that it took only a moment to cut off that head, and a hundred years may not be enough to produce another like it. After Napoleon came to power, he was made a count of the Empire. But what truly keeps his name in group theory is a plain yet profound theorem. Take the most ordinary example — a square: its symmetries number 88 in all (four rotations plus the flips about four axes of symmetry); among them the four rotations that “only turn and do not flip” form a subgroup of their own, and that 44 divides 88 exactly is no accident; this is a miniature of Lagrange’s theorem.

Theorem (Lagrange). For a finite group GG, any subgroup HH of it has order dividing the order of GG: ∣H∣|H| divides ∣G∣|G|. (The notation ∣⋅∣|\cdot| is read “how many elements are inside”, that is, the order of a group as EP2 put it — not an absolute value, it just borrows the same pair of vertical bars; e.g. ∣S3∣=6|S_3|=6, ∣A3∣=3|A_3|=3.) This is a proposition that holds for all finite groups, not a coincidence of some particular group.

Proof. For g∈Gg\in G, write the left coset gH={g∘h:h∈H}gH=\{g\circ h:h\in H\} — the block obtained by left-multiplying the whole of HH by gg, shifting it as a whole. The map h↦g∘hh\mapsto g\circ h is a bijection H→gHH\to gH (with left multiplication by g−1g^{-1} as its inverse), so each coset has exactly ∣H∣|H| elements. Moreover any two cosets are either equal or disjoint: if x∈g1H∩g2Hx\in g_1H\cap g_2H, write x=g1∘h1=g2∘h2x=g_1\circ h_1=g_2\circ h_2; then g1=g2∘(h2∘h1−1)∈g2Hg_1=g_2\circ(h_2\circ h_1^{-1})\in g_2H, so g1H⊆g2Hg_1H\subseteq g_2H, and symmetrically the reverse also holds, and the two blocks coincide. Therefore GG is tiled by a number of pairwise disjoint cosets each containing ∣H∣|H| elements; let there be mm blocks in all, then ∣G∣=m ∣H∣|G|=m\,|H|, that is, ∣H∣|H| divides ∣G∣|G|. ■\blacksquare

Check it with S3S_3: the subgroup A3={e,r,r2}A_3=\{e,r,r^2\} and its coset aA3={a,b,c}aA_3=\{a,b,c\}, two blocks, fill it up, 3×2=6=∣S3∣3\times2=6=|S_3| ✓. So the sizes of the subgroups of S3S_3 can only be the divisors of 66, 1,2,3,61,2,3,6 — 4∤64\nmid6, so there cannot possibly be a 44-element subgroup; Lagrange rules it out in one sentence.

This theorem is used everywhere later in this episode: A₅ has 60 elements, and the size of any subgroup of it (including “normal subgroups”) must divide 60. This is precisely one of the two locks that seal every gap when we prove “A₅ cannot be broken apart”.

We have just proved the first theorem — Lagrange’s theorem — from beginning to end. It is worth pausing here: theorems are the lifeline of mathematics. A theorem is a proposition that has been proved true; without them we would have nothing to rely on, because we would have no way of being sure whether the foundation under our feet is solid. If some conclusion looks true and we build it into a theory, but later find that it is false, then everything built on top of it collapses with it — every later result proved by means of it has to be torn down and redone. Precisely for this reason, mathematicians are meticulous about “proof”: an important conclusion that will be cited again and again must be proved until no one at all can find fault with it.

On this point mathematics is quite different from theoretical physics. The physicist Feynman has a widely circulated remark, whose gist is: the whole purpose of physics is to compute a number, with a decimal point — otherwise you have accomplished nothing. In mathematics, by contrast, the whole point is to state and prove a theorem.


Peeling a group layer by layer: composition series

In the EP2 little lesson we learned a trick: “shrink away a normal subgroup to get a quotient group”. First let us see this trick clearly with the Cayley table, then apply it repeatedly, all the way down.

First, a review of “quotient groups”, seen through the blocks of the Cayley table. Back to that table for S3S_3: A3={e,r,r2}A_3=\{e,r,r^2\} (the blue block) is a normal subgroup, and the other block {a,b,c}\{a,b,c\} (the warm block) is its coset. Now treat each whole block as a new “point”: call the blue block “even” and the warm block “odd”. Look at the four corners of the Cayley table:

The whole 6×6 table shrinks into a 2×2 “multiplication table of blocks” — exactly the Z/2\mathbb{Z}/2 seen in EP2. This “multiplication left between points after each coset is pinched into a point” is the quotient group S3/A3≅Z/2S_3/A_3\cong\mathbb{Z}/2. Quotient group = divide the big table into blocks by cosets, then look at how the blocks multiply.

A key precondition must be stated clearly: only when NN is a “normal” subgroup does this “block multiplication” make sense.

First recall what EP2 said about a

normal subgroup: take any gg and use it to move NN, and moving it on the left, gNgN, and on the right, NgNg, give the same block, that is, gN=NggN=Ng.

The whole use of normality is to make the definition “multiplying two blocks, (gN)(g′N)=(gg′)N(gN)(g'N)=(gg')N”, not depend on which element you pick from a block as its representative

— no matter whom you pick, the product lands in the same block. If NN were not normal, “block times block” would give different answers for different representatives, and would not be a definition at all. A3A_3 is normal in S3S_3 (checked in EP2), so S3/A3S_3/A_3 makes sense.

Remember this: whenever a quotient group G/NG/N is written later, NN is assumed normal.

Composition series: peel until nothing more can be peeled. In EP2 we peeled one layer off S3S_3. Now peel layer by layer all the way down: find a normal subgroup and shrink it away, find another normal subgroup in what remains and shrink it away, until only {e}\{e\} is left. Each layer shrunk gives a quotient group. If the quotient at every layer can already ‘not be broken apart’ (it is a simple group as EP2 put it: a nontrivial group G≠{e}G\ne\{e\} that, apart from {e}\{e\} and itself, has no other normal subgroup to shrink — by convention {e}\{e\} itself does not count as a simple group), this chain is called a composition series of GG, and that string of simple-group quotients is the “symmetry atoms” of GG.

An analogy: peel an onion layer by layer inward, until nothing more can be peeled; the layers peeled off are this onion’s “atomic layers”.

An example: peel S4S_4 all the way down. S4S_4 consists of the rearrangements of 4 objects {a,b,c,d}\{a,b,c,d\}, all 4!=244!=24 of them. We peel it layer by layer, computing the quotient at each layer one by one:

S4 ▹ A4 ▹ V4 ▹ ⟨p⟩ ▹ {e}.S_4\ \triangleright\ A_4\ \triangleright\ V_4\ \triangleright\ \langle p\rangle\ \triangleright\ \{e\}.

First, two notations made clear: G▹NG\triangleright N (triangle arrow) is read ”NN is a

normal subgroup

of GG”; the arrow points from the big group to the block that is shrunk away; the string above is ”S4S_4 shrinks away A4A_4, A4A_4 then shrinks away V4V_4, shrinking all the way until only {e}\{e\} is left”. ⟨p⟩\langle p\rangle (angle brackets) is read ”

the subgroup generated by pp

” — the group made up of all the actions obtained by multiplying pp by itself repeatedly (EP2’s cyclic groups, generators).

Layer 1, S4/A4S_4/A_4. A4A_4 is the 12 even rearrangements in S4S_4 (those built from an even number of swaps). As with S3S_3, even/odd each take half; A4A_4 is a normal subgroup, with one coset left over (all the odd rearrangements). Pinch by cosets into two points “even/odd”, and the quotient =Z/2=\mathbb{Z}/2.

Layer 2, A4/V4A_4/V_4. Here we need to lay V4V_4 out and see it clearly. It is these four actions in A4A_4:

V4={ e,  p=(ab)(cd),  q=(ac)(bd),  s=(ad)(bc) }V_4=\{\,e,\ \ p=(ab)(cd),\ \ q=(ac)(bd),\ \ s=(ad)(bc)\,\}

(each is a double transposition, “swapping one pair in each of two groups”). It is itself a group — look at its Cayley table:

The Cayley table of V₄: the diagonal is all e (each flip multiplied by itself returns to the starting point), and two different flips multiplied give exactly the third → this is the Klein four-group Z/2×Z/2

Figure 7 The Cayley table of V₄: the diagonal is all e (each flip multiplied by itself returns to the starting point), and two different flips multiplied give exactly the third → this is the Klein four-group Z/2×Z/2

One can see at a glance in the table: the diagonal is all ee (each action multiplied by itself = doing nothing), and any two different non-ee actions multiplied give exactly the third. This structure is called the Klein four-group, written V4≅Z/2×Z/2V_4\cong\mathbb{Z}/2\times\mathbb{Z}/2.

First, this new notation "×\times" made clear — the direct product (not covered in EP2).

The

direct product

G×HG\times H of two groups is just to put them

side by side, each minding its own business, not interfering with each other

. First look at the smallest, Z/2\mathbb{Z}/2: it is a “switch” — two states (off / on), press once to toggle, press twice to return to where it was. Then Z/2×Z/2\mathbb{Z}/2\times\mathbb{Z}/2 is

two independent switches: a state is a pair (first,second)(\text{first},\text{second}), 2×2=42\times2=4 kinds in all — (off,off), (on,off), (off,on), (on,on); “multiplying” two states = the two switches each toggle independently, without affecting each other. Match these two switches to V4V_4: e=e=(off,off), p=p=(on,off), q=q=(off,on), s=s=(on,on). Check one: p∘qp\circ q = “first on, second off” combined with “first off, second on” = the two switches together “first on, second on” = ss — exactly the p∘q=sp\circ q=s read off the Cayley table above. Each action multiplied by itself returns to ee (press a switch twice and it resets), which also matches the diagonal being all ee. So V4V_4 really and truly is “two independent copies of Z/2\mathbb{Z}/2”, genuinely ≅Z/2×Z/2\cong\mathbb{Z}/2\times\mathbb{Z}/2. (In general: the elements of G×HG\times H are pairs (g,h)(g,h), the operation is done component by component, (g1,h1)(g2,h2)=(g1g2, h1h2)(g_1,h_1)(g_2,h_2)=(g_1g_2,\,h_1h_2), and the size is ∣G×H∣=∣G∣⋅∣H∣|G\times H|=|G|\cdot|H|. When larger direct products come up later, the meaning is the same: several groups side by side, each minding its own business.)

Why is V4V_4 normal in A4A_4? No new tool is needed, only “order + Lagrange”.

First, “the order of an element” made clear

(note: this is a different thing from the order of a group ∣G∣|G| earlier): an action xx multiplied by itself repeatedly returns to ee sooner or later;

the smallest such number k≥1k\ge1 (with xk=ex^k=e) is called the order of xx

. Example: in A4A_4 a double transposition multiplied by itself once (x∘x)(x\circ x) returns to ee, order 22; a 3-cycle returns to ee after turning three times, order 33; ee itself has order 11.

The 12 actions of A4A_4 have orders only 1 (ee), 2 (the three double transpositions), 3 (the eight 3-cycles); there is none of order 4. So any “subgroup of 4 elements” in A4A_4 cannot contain an element of order 4, nor can it contain an element of order 3 (if it did, it would have to have a 3-element subgroup, but 3∤43\nmid4 — ∤\nmid is read “does not divide” — violating Lagrange) — it can only be {e}\{e\} plus three elements of order 2, and the elements of order 2 are exactly those three double transpositions. So the only subgroup with 4 elements is V4V_4. A subgroup that is “one of a kind” must be normal: take any action gg and “relabel” V4V_4 as a whole (replace each vv by gvg−1gvg^{-1}); what you get is still a 4-element subgroup in A4A_4 — but there is only one such subgroup, V4V_4, so it can only turn back into itself. This “unchanged under relabeling” is exactly normality. Hence ∣A4∣/∣V4∣=12/4=3|A_4|/|V_4|=12/4=3, and the quotient =Z/3=\mathbb{Z}/3.

Layers 3 and 4. V4V_4 itself can be peeled further: it contains a normal subgroup ⟨p⟩={e,p}\langle p\rangle=\{e,p\} (of order 2; in a commutative group every subgroup is automatically normal). V4/⟨p⟩V_4/\langle p\rangle: 4/2=2=Z/24/2=2=\mathbb{Z}/2; finally ⟨p⟩/{e}=Z/2\langle p\rangle/\{e\}=\mathbb{Z}/2.

⚠️

A place where it is easy to go wrong: you cannot stop at V4V_4! V4V_4 has

4

elements, not 2; it is

not

a simple group (it contains ⟨p⟩\langle p\rangle, which can be shrunk). So two more layers must be inserted. The composition series of S4S_4 therefore has

four layers, and the atoms are, in order,

Z/2,  Z/3,  Z/2,  Z/2.\mathbb{Z}/2,\ \ \mathbb{Z}/3,\ \ \mathbb{Z}/2,\ \ \mathbb{Z}/2.

Check: 2×3×2×2=24=∣S4∣2\times3\times2\times2=24=|S_4| ✓. (Each time a layer is peeled, the size of the group is divided by the size of that layer’s quotient; peeled all the way down, the sizes of all the quotients multiplied together must restore the whole group — this is a quick way to check that nothing was peeled wrongly.)

At this point we know how to “peel a group into a string of atoms”. But at once there is a question that cannot be avoided: peeling another way, would we get a different set of atoms? We answer it below (the Jordan–Hölder theorem).


However you peel, the atoms are always the same set: Jordan–Hölder

Jordan (Camille Jordan, 1838–1922) worked in engineering early on — after graduating from the École Polytechnique in Paris he first made his living as an engineer, and only afterwards turned to mathematics, serving as examiner at the École Polytechnique and professor at the Collège de France. In 1870 he published Traité des substitutions et des équations algébriques (Treatise on Substitutions), the first monograph on group theory in history, which systematically organized Galois’s theory and remained the standard work on group theory for nearly thirty years afterwards, until Burnside’s book appeared. In the same year, Sophus Lie and Felix Klein made a special trip to Paris to study with him — each of the two later founded far-reaching directions in mathematics. In his later years Jordan suffered great grief: he had eight children (two daughters and six sons), and in the First World War three of his sons were killed one after another. In 1922 he died at the advanced age of 84.

Camille Jordan (1838–1922), public domain

Figure 8 Camille Jordan (1838–1922), public domain

What also keeps Jordan’s name in group theory is a theorem about “how to take a group apart”. A group can be peeled layer by layer inward like an onion; if this layer-by-layer peeling is likened to breaking matter down into molecules and further down into atoms, then what Jordan (and, a little later, the German mathematician Hölder) proved is: whichever path you follow to peel it, the set of “atoms” obtained when it is peeled all the way down is essentially always the same set. This is exactly the Jordan-Hölder theorem we are to prove in this section — it guarantees that the “composition factors” of a group do not depend on the way it is decomposed, which echoes precisely this series’ theme of “the atoms of symmetry”.

At the end of the “composition series” section we left a key question: peeling a group into a string of atoms, peeling another way, would we get a different set of atoms? This section and the next prove the answer, “no”. This is the hardest and most thought-demanding stretch of this episode; first we assemble two tools, then complete the proof.

The theorem to be proved (the Jordan–Hölder theorem): for any finite group GG, however you peel its composition series, in whatever order, the set of composition factors (atoms) obtained at the end, together with how many times each kind of atom appears, is always the same set — differing at most in the order of arrangement. In other words, “which symmetry atoms a group breaks into” is a fingerprint inherent to and unique to that group, unrelated to how you take it apart. (This is a general theorem that holds for all finite groups, not a coincidence of some particular group.)

First, get a feel for what it says through an example (the example only helps understanding; it does not count as a proof): take Z/6={0,1,2,3,4,5}\mathbb{Z}/6=\{0,1,2,3,4,5\} (the 6 hours on a clock face, with the operation “add, then take the remainder mod 6”). It can be peeled all the way down in two different ways:

Two ways of peeling, and the atoms obtained are the same set {Z/2, Z/3}\{\mathbb{Z}/2,\ \mathbb{Z}/3\} (only in a different order). What J-H says is: this is by no means just a coincidence of Z/6\mathbb{Z}/6; it holds for all groups.

The two ways of taking Z/6 apart end up with the same set of symmetry atoms {Z/2, Z/3}

Figure 9 The two ways of taking Z/6 apart end up with the same set of symmetry atoms {Z/2, Z/3}

To prove it “for all groups”, two tools are needed — two isomorphism theorems. This section first explains the first one thoroughly (it is itself a generalization of that little EP2 example of “attaching plus and minus signs”), and later we prepare the second one and then close by induction.

Tool one: the first isomorphism theorem

First, using the “sign homomorphism sgn⁡\operatorname{sgn}” most familiar from EP2, get clear on three words — group homomorphism and its image and kernel — which will be used throughout what follows.

A group homomorphism is a “translator”. φ:G→H\varphi:G\to H translates the “language” GG into the language HH. It “preserves the operation” — the translation does not break the grammar: in GG, “first do aa, then do bb”, translated over = in HH, “first translate aa, then translate bb”, and the result is the same.

Use as the example the translator from EP2 you know best: attaching plus and minus signs, sgn⁡\operatorname{sgn}. It translates S3S_3 (the 6 symmetry actions of the equilateral triangle, e,r,r2,a,b,ce,r,r^2,a,b,c) into the group with only two numbers, {+1,−1}\{+1,-1\} (operation = multiplying the two numbers): the three rotations are translated to +1+1, and the three flips to −1-1. Listed one by one:

sgn⁡(e)=sgn⁡(r)=sgn⁡(r2)=+1,sgn⁡(a)=sgn⁡(b)=sgn⁡(c)=−1.\operatorname{sgn}(e)=\operatorname{sgn}(r)=\operatorname{sgn}(r^2)=+1,\qquad \operatorname{sgn}(a)=\operatorname{sgn}(b)=\operatorname{sgn}(c)=-1.

It does indeed “preserve the operation” (for example “flip ∘ flip = rotation” corresponds to "(−1)×(−1)=+1(-1)\times(-1)=+1"). Keeping our eyes on this translator, let us learn two words.

Image = the places the translation actually reaches. Translate all the actions of S3S_3 over; the set made up of the values actually reached in the target is called the image, written Im⁡φ\operatorname{Im}\varphi. sgn⁡\operatorname{sgn} actually only puts out +1+1 and −1-1, so

Im⁡sgn⁡={+1,−1}.\operatorname{Im}\operatorname{sgn}=\{+1,-1\}.

(Here it happens to cover the whole target group {+1,−1}\{+1,-1\}, which is called surjective; if some value were never produced by the translation, the image would not be the whole target.)

Kernel = those originals that are translated into “the identity” (the translation says nothing at all). The identity of the target group {+1,−1}\{+1,-1\} is +1+1 (multiplying anything by it leaves it unchanged = “saying nothing”). Which actions are translated to +1+1? Look at the table above — the three rotations. So

ker⁡sgn⁡={e,r,r2}=A3.\ker\operatorname{sgn}=\{e,r,r^2\}=A_3.

Kernel = “how much information” this translator “loses”. sgn⁡\operatorname{sgn} squeezes 6 actions into 2 signs; the 3 actions in the kernel A3A_3 are all translated into the same +1+1, and can no longer be told apart from one another — this is “losing information”, and the bigger the kernel, the more is lost. Conversely, a translator whose kernel is only {e}\{e\} (only “doing nothing” is translated into the identity) loses nothing at all, and different originals are translated into different translations = injective (example: the “identity translator” that translates each action into itself has kernel {e}\{e\}). The kernel of sgn⁡\operatorname{sgn}, A3A_3, has 3 elements; it is a translator that “loses quite a lot”.

ConceptEnglish termWhat it asksIn sgn⁡\operatorname{sgn} it is
Imageimage, Im⁡φ\operatorname{Im}\varphiWhich things in the target group are translated to?{+1,−1}\{+1,-1\}
Kernelkernel, ker⁡φ\ker\varphiWhich things in the original group are translated into the identity?{e,r,r2}=A3\{e,r,r^2\}=A_3

Now connect it to that big theorem. Keeping our eyes on sgn⁡\operatorname{sgn}: kernel =A3=A_3 means “the three rotations in A3A_3 all come out the same when translated (all are +1+1)”. We computed earlier: S3S_3, cut into two blocks by A3A_3 (the three rotations one block, the three flips another), pinched into two points, is the quotient group S3/A3S_3/A_3, whose multiplication is exactly Z/2\mathbb{Z}/2. And the image {+1,−1}\{+1,-1\}, as a group, is also Z/2\mathbb{Z}/2. Two blocks ↔ two translations, in one-to-one correspondence, with the same skeleton:

S3/A3⏟kernel ≅ {+1,−1}⏟image.S_3\big/\underbrace{A_3}_{\text{kernel}}\ \cong\ \underbrace{\{+1,-1\}}_{\text{image}}.

Here it is ≅\cong, not an equals sign ==

(it is the earlier ker⁡sgn⁡=A3\ker\operatorname{sgn}=A_3 and Im⁡sgn⁡={+1,−1}\operatorname{Im}\operatorname{sgn}=\{+1,-1\} that use a true equals sign). == governs “literally the same pile of things”; ≅\cong (read ”

isomorphic

”, covered in EP2) governs ”

as groups, the skeleton of multiplication is exactly the same, only the names differ

”. Here the left side is two

points, “rotation block / flip block”, and the right side is two

numbers, ”+1+1 / −1-1”; literally they are not the same thing, only the skeleton of multiplication is the same — so ≅\cong is used. Keep == (literally the same) and ≅\cong (the same skeleton) apart, and there is no ambiguity.

This phenomenon is not unique to sgn⁡\operatorname{sgn}; it holds for any translator:

So, given any group homomorphism (translator) φ:G→H\varphi:G\to H, we have

G/ker⁡φ ≅ Im⁡φ.G\big/\ker\varphi\ \cong\ \operatorname{Im}\varphi.

In plain words: merge the original group by its “kernel” (the pile translated into nothing), and what is left has exactly the same skeleton as “all the translations” — the translation drops everything it should drop, and what remains is a clean one-to-one correspondence.

Why? The key is a single sentence: the originals that are translated into the same translation form exactly one coset of the kernel — what “merging” merges is precisely that.

On sgn⁡\operatorname{sgn} it can be seen very clearly: the whole of what is translated to +1+1 ={e,r,r2}=A3==\{e,r,r^2\}=A_3= the kernel (the coset containing the identity); the whole of what is translated to −1-1 ={a,b,c}==\{a,b,c\}= another coset of the kernel. Two translations ↔ two cosets, in one-to-one correspondence. And the cosets pinched into points are exactly the quotient group G/ker⁡G/\ker, while the whole of the translations is exactly the image — the two naturally have the same skeleton. Writing this sentence rigorously is the proof:

Intuition: the elements mapped to the same value form exactly one coset of the kernel, so the quotient group obtained by merging GG by the kernel, G/ker⁡φG/\ker\varphi, corresponds one-to-one, and preserving the operation, with all the values taken, Im⁡φ\operatorname{Im}\varphi. sgn⁡\operatorname{sgn} is a special case of it: S3/A3≅{+1,−1}≅Z/2S_3/A_3\cong\{+1,-1\}\cong\mathbb{Z}/2. The way this theorem is used: when you meet a quotient group G/NG/N that is hard to identify, just build a homomorphism whose kernel is exactly NN, and G/NG/N is isomorphic to its image — the second isomorphism theorem below uses it in exactly this way.


Finishing the proof of Jordan–Hölder by diamond induction

Earlier we prepared tool one (the first isomorphism theorem). This section prepares tool two and one small fact, and then proves J-H completely.

Tool two: the second isomorphism theorem

Statement: Let AA, BB both be subgroups of GG, and let BB be normal in GG. Then A∩BA\cap B is normal in AA, and moreover

AB/B ≅ A/(A∩B).AB/B\ \cong\ A/(A\cap B).

⚠️

ABAB is not a direct product; let us be clear about that first.

ABAB means the set made up of all the results obtained by “taking an element of AA and an element of BB and

multiplying them in the group GG

”, {a∘b:a∈A, b∈B}\{a\circ b:a\in A,\,b\in B\} — its elements are all, inside GG,

ordinary elements, and as a whole it is a subset of GG (and, when BB is normal, a subgroup too). Whereas the

direct product

A×BA\times B (the kind in V4=Z/2×Z/2V_4=\mathbb{Z}/2\times\mathbb{Z}/2 earlier) is a completely different thing: its elements are

pairs

(a,b)(a,b), and it is a newly constructed group. The two also differ in size — ∣AB∣=∣A∣ ∣B∣∣A∩B∣|AB|=\dfrac{|A|\,|B|}{|A\cap B|}, while ∣A×B∣=∣A∣ ∣B∣|A\times B|=|A|\,|B|. What the second isomorphism theorem uses here is the

product set ABAB

(living inside GG), not the direct product.

Proof: apply the first isomorphism theorem to the map ψ:A→AB/B, a↦aB\psi:A\to AB/B,\ a\mapsto aB, and it follows — ψ\psi is a surjective homomorphism, and its kernel is exactly A∩BA\cap B.

A small fact: the subgroup at each step of a composition series is “maximal normal”

A composition series requires each quotient to be a simple group. There is an equivalent way of saying this, which the induction will need:

Small fact: If the quotient group G/NG/N is a simple group, then NN is a maximal normal subgroup of GG — meaning that between NN and GG no other normal subgroup can be squeezed in (apart from NN, GG themselves).

Proof

(only the direction needed): if there is a normal subgroup MM squeezed in between, N⊊M⊊GN\subsetneq M\subsetneq G, then M/NM/N is a nontrivial proper normal subgroup of G/NG/N, contradicting G/NG/N being a simple group. So NN must be maximal normal.

The induction: finishing the proof of Jordan–Hölder

The tools are all here. We want to prove: for any finite group GG, any two composition series of it give the same set of atoms (composition factors) (with multiplicities, differing at most in arrangement).

Use “induction on ∣G∣|G|” — that is, assume “it already holds for every group smaller than GG”, and prove that it holds for GG too. Base case: when ∣G∣=1|G|=1 (the group has only ee), there is only the one trivial composition series, nothing to compare, and it holds automatically. Below, let ∣G∣>1|G|>1, and assume it already holds for groups smaller than it. Let GG have two composition series

G=G0▹G1▹G2▹⋯{e},G=H0▹H1▹H2▹⋯{e}.G=G_0\triangleright G_1\triangleright G_2\triangleright\cdots\{e\},\qquad G=H_0\triangleright H_1\triangleright H_2\triangleright\cdots\{e\}.

Their first atoms are G/G1G/G_1 and G/H1G/H_1 respectively. There are two cases.

Case one: the two chains peel off the same subgroup at the first step (G1=H1G_1=H_1). Then from the second step on, both chains are composition series of the same smaller group G1G_1. G1G_1 is smaller than GG, so by the induction hypothesis the atoms of these two chains of it are the same set. Adding the common atom at the very top, G/G1G/G_1, the whole thing matches. ✓

Case two: what is peeled off at the first step is not the same (G1≠H1G_1\ne H_1). This is the key step, and it relies on that diamond diagram:

The diamond of the Jordan–Hölder induction: G at the top, the two maximal normal subgroups G₁/H₁ on the two sides, their intersection K at the bottom; the second isomorphism theorem gives that the quotients on opposite sides are isomorphic to each other, G/G₁≅H₁/K, G/H₁≅G₁/K

Figure 10 The diamond of the Jordan–Hölder induction: G at the top, the two maximal normal subgroups G₁/H₁ on the two sides, their intersection K at the bottom; the second isomorphism theorem gives that the quotients on opposite sides are isomorphic to each other, G/G₁≅H₁/K, G/H₁≅G₁/K

So, attaching any composition series to KK, we get two new chains passing through KK, G▹G1▹K▹⋯G\triangleright G_1\triangleright K\triangleright\cdots and G▹H1▹K▹⋯G\triangleright H_1\triangleright K\triangleright\cdots: by the diagonal isomorphisms, the pairs of atoms at the top of the two are the same up to renaming, and below them follows the same KK chain, so their atoms are the same set. Then, using the induction hypothesis on each, align original chain A with “the new chain via G1G_1”, and original chain B with “the new chain via H1H_1”, equal all the way:

original chain A =induction via G1 =diagonal isomorphism via H1 =induction original chain B.\text{original chain A}\ \overset{\text{induction}}{=}\ \text{via }G_1\ \overset{\text{diagonal isomorphism}}{=}\ \text{via }H_1\ \overset{\text{induction}}{=}\ \text{original chain B}.

The atoms of the two original composition series are the same set. The Jordan–Hölder theorem is proved. ■\blacksquare

Looking back, a one-sentence summary of the cleverness here: the two ways of peeling diverge at the first step (G1≠H1G_1\ne H_1), but their

intersection KK

joins the two paths together again; the second isomorphism theorem guarantees that when “coming down around the left” and “coming down around the right” meet at KK,

the atoms picked up along the way are the same set, only with their order swapped

. That example of Z/6\mathbb{Z}/6 ({0,2,4}\{0,2,4\} and {0,3}\{0,3\} diverging, meeting at {0}\{0\}, the atoms {Z/2,Z/3}\{\mathbb{Z}/2,\mathbb{Z}/3\} swapped) is the smallest physical instance of this diamond.

Full proofs

— for the first and second isomorphism theorems and the induction of the Jordan–Hölder theorem, see Dummit–Foote, Abstract Algebra, 3rd ed. (Wiley 2004) §3.3–§3.4; the historical source for composition series and the Jordan–Hölder theorem is Jordan 1870, Traité des substitutions.

With this, “which symmetry atoms a group breaks into” is its unique fingerprint — proved. With this measuring stick in hand, the next section (§3) returns to the atom that stands in the way: what makes A5A_5 impossible to break apart?


§3 Why A₅ is an atom

What makes A₅ impossible to break apart (part 1 · conjugation → conjugacy classes → normal = union of whole classes)

With J-H’s measuring stick of “atoms are unique” in hand, we return to the atom that stands in the way, A5A_5. In EP2 we asserted that it cannot be broken apart; now we must really prove it.

First, the lettering convention for this stretch made clear: from here on, A5A_5 is

the even permutations of 5 objects, and we call these 5 objects a,b,c,d,ea,b,c,d,e (not 1,2,3,4,51,2,3,4,5; numbers are easily confused with “counts/orders”). Permutations are written as cycles: (ab)(ab) means “swap a,ba,b and leave the rest alone”, (abc)(abc) means "a→b→c→aa\to b\to c\to a", (abcde)(abcde) means the 5 arranged in a ring and rotated. (Note: in the S3S_3 of the EP2 little lesson, a,b,ca,b,c were the names of “three flip actions”; here a,b,c,d,ea,b,c,d,e are “the 5 objects being scrambled” — different contexts, do not mix them up.)

The theorem to be proved: A5A_5 (∣A5∣=60|A_5|=60) has no nontrivial normal subgroup — apart from {e}\{e\} and itself, no third normal subgroup that can be “shrunk away as a whole block” can be found. (So it cannot be broken apart = a simple group.)

To prove it we need a new tool that EP2 did not formally cover — conjugation and conjugacy classes. Below we start from a familiar small group.

Conjugation: changing to a different numbering, looking at the same action

EP2 said that a subgroup NN being normal means “moving it left and right gives the same thing”: take any element of the group gg (gg is just any action/permutation in this group; whichever one you pick is fine), and we always have gN=NggN=Ng. Right-multiplying both sides by g−1g^{-1} gives an equivalent way of writing it:

gNg−1=N.gNg^{-1}=N.

The operation that pops up here, "x↦gxg−1x\mapsto gxg^{-1}" (take the gg you picked and sandwich xx between it front and back), is called using gg to conjugate xx. What is the intuition? gg amounts to giving all the objects a new set of numbers, and gxg−1gxg^{-1} is “under the new numbering, looking again at the same action xx”.

It is clearest on permutations — the role of gg is exactly that “renumbering”.

Take a permutation as an example: σ=(a b)\sigma=(a\,b), meaning “swap a,ba,b and leave the rest alone”. Now pick a gg to serve as the rule for renumbering — for example g=(a b c)g=(a\,b\,c), whose effect is to

rename aa as bb, rename bb as cc, rename cc as aa

(this is g(a)=b, g(b)=c, g(c)=ag(a)=b,\ g(b)=c,\ g(c)=a). Then “using this gg to conjugate σ\sigma” is

renaming each letter in the cycle of σ\sigma once according to gg:

g (a  b)⏟σ=swap a,b g−1 = ( g(a)⏟= bg(b)⏟= c ) = (b  c).g\,\underbrace{(a\ \ b)}_{\sigma=\text{swap }a,b}\,g^{-1}\ =\ \big(\ \underbrace{g(a)}_{=\,b}\quad \underbrace{g(b)}_{=\,c}\ \big)\ =\ (b\ \ c).

In plain words: originally it was “swap a,ba,b”; after the two names a,ba,b are changed according to gg into b,cb,c, it becomes “swap b,cb,c”.

The same kind of action (both are a single swap), only with a different set of names for the objects.

(If you are not reassured, you can check gσg−1g\sigma g^{-1} point by point: acting on bb — first g−1g^{-1} turns bb back into aa, then σ\sigma swaps aa into bb, then gg renames bb as cc; net effect b↦cb\mapsto c; likewise c↦bc\mapsto b, a↦aa\mapsto a, which together are exactly (b c)(b\ c).)

The general rule

(remember this one): g (x1 x2 ⋯ xk) g−1=(g(x1) g(x2) ⋯ g(xk))g\,(x_1\,x_2\,\cdots\,x_k)\,g^{-1}=\big(g(x_1)\ g(x_2)\ \cdots\ g(x_k)\big) — conjugation is “renaming the letters in the cycle uniformly by gg”,

it does not change the shape of the cycle, it only changes the frame of reference

.

Conjugacy classes: a family of actions that “coincide with each other once the numbering is changed”

Conjugate an action σ\sigma by each of all the gg in the group (with the renaming rule of the previous section); all the results together make up a conjugacy class — a family of actions that “can coincide with each other as long as the objects are given a different numbering”.

First, bring conjugacy classes down to a concrete example on S3S_3. Write S3S_3 as all 6 permutations of 3 objects a,b,ca,b,c: the identity ee, three swaps (ab),(ac),(bc)(ab),(ac),(bc), two 3-cycles (abc),(acb)(abc),(acb). Conjugate each one by all gg, and you will find that they automatically fall into three classes according to “whether the shape is the same”:

6=1+3+26=1+3+2: S3S_3 splits into 3 conjugacy classes, and exactly according to “shape”. This “shape” can be stated precisely, and so there is a criterion. First let us state the definitions of two words clearly.

Definition (cycle type). Fix nn objects. Any permutation can be broken uniquely into several mutually non-overlapping cycles (EP2 used this; an object that does not move counts as a cycle of length 1). The cycle type of a permutation is the shape formed by the lengths and numbers of its cycles after it is broken into disjoint cycles — looking only at “how many cycles, and how long each is”, not at which particular letters (counting the objects that do not move as cycles of length 1, the lengths of all the cycles always add up to the total number of objects nn). Examples (on 5 objects): the shape of (ab)(ab) is “one swap + three fixed points”; (ab)(cd)(ab)(cd) is “two swaps + one fixed point”; (abc)(abc) is “one 3-cycle + two fixed points”. — The “swap / 3-cycle / fixed point” here all describe the lengths and numbers of cycles, not which particular objects (the objects are always the letters a,b,c,d,ea,b,c,d,e).

Definition (conjugate, as a relation between two permutations). To say that σ\sigma and τ\tau are conjugate in a group GG means: there exists in the group a renaming g∈Gg\in G such that gσg−1=τg\sigma g^{-1}=\tau. In plain words, “changing to a different numbering can turn σ\sigma into τ\tau”. (gσg−1g\sigma g^{-1} is the conjugation operation defined in the previous section; now we give the fact ”σ\sigma can be turned into τ\tau in this way” the name “conjugate”.)

First, set out the “renaming rule” we will need as a named fact (the previous section gave it; here we make clear why it is true, so that this section is self-contained):

Renaming rule: g (x1 x2 ⋯ xk) g−1=(g(x1) g(x2) ⋯ g(xk))g\,(x_1\,x_2\,\cdots\,x_k)\,g^{-1}=\big(g(x_1)\ g(x_2)\ \cdots\ g(x_k)\big); with several cycles, rename each one this way.

Why: under the convention that the right one is done first, gσg−1g\sigma g^{-1} acting on g(x)g(x) = first g−1g^{-1} goes back to xx, then σ\sigma sends it to σ(x)\sigma(x), then gg sends it to g(σ(x))g(\sigma(x)); that is, it sends g(x)g(x) to g(σ(x))g(\sigma(x)). σ\sigma originally sends xx to σ(x)\sigma(x), so gσg−1g\sigma g^{-1} is nothing more than “renaming every letter in σ\sigma according to gg” — the shape has not moved at all.

Criterion (in the full symmetric group SnS_n): σ\sigma and τ\tau are conjugate   ⟺  \iff they have the same cycle type. The two directions are proved separately.

(⇒\Rightarrow conjugate ⟹ same type; this half holds in any group.) Let τ=gσg−1\tau=g\sigma g^{-1}. By the renaming rule, τ\tau just renames the letters in each cycle of σ\sigma according to gg: a cycle of length kk after renaming is still of length kk, and the number of cycles, their respective lengths, even the number of fixed points — not one of them has changed. So τ\tau and σ\sigma have the same cycle type.

(⇐\Leftarrow same type ⟹ conjugate; this half needs “the renaming gg to lie in the group”.) Let σ,τ\sigma,\tau have the same cycle type. Pair up the cycles on the two sides by length, and align them position by position: match the first letter in some cycle of σ\sigma to the first letter in the corresponding cycle of τ\tau, the second to the second… the letters that σ\sigma fixes are also matched to the letters that τ\tau fixes. Because the two sides have the same cycle type (fixed points included, the lengths add up to nn on both), this alignment matches σ\sigma‘s nn letters with τ\tau‘s nn letters one to one, with nothing repeated and nothing missed — so this “letter to letter” correspondence is a bijection on nn objects, that is, a genuine permutation gg. By the renaming rule, it gives exactly gσg−1=τg\sigma g^{-1}=\tau. In SnS_n, gg is just some permutation of these nn objects, and necessarily belongs to SnS_n, so σ,τ\sigma,\tau are conjugate in SnS_n. (Note: such a gg exists, but is in general not unique — changing the starting point at which each cycle is aligned, or changing how cycles of equal length are paired, gives another legitimate gg. This point will be needed later for A5A_5.) Proved. ■\blacksquare

Worked examples (go through constructing the gg for ⟸ twice). 1. σ=(ab)\sigma=(ab), τ=(bc)\tau=(bc) (the same type, both one swap + one fixed point). Align: a→ba\to b, b→cb\to c; the remaining letter that σ\sigma fixes, cc, can only be matched with the letter that τ\tau fixes, aa, that is, c→ac\to a. Together g=(abc)g=(abc). Substitute: g (ab) g−1=(g(a) g(b))=(b c)=τg\,(ab)\,g^{-1}=\big(g(a)\ g(b)\big)=(b\,c)=\tau ✓. 2. A longer one, to see “aligning starting points + fixed points” clearly: σ=(abc)\sigma=(abc), τ=(bcd)\tau=(bcd) (on 4 objects a,b,c,da,b,c,d, the same type, both one 3-cycle + one fixed point). Align a→b, b→c, c→da\to b,\ b\to c,\ c\to d; the letter σ\sigma fixes, dd, is matched with the letter τ\tau fixes, aa, that is, d→ad\to a. Together g=(abcd)g=(abcd). Substitute: g (abc) g−1=(g(a) g(b) g(c))=(b c d)=τg\,(abc)\,g^{-1}=\big(g(a)\ g(b)\ g(c)\big)=(b\,c\,d)=\tau ✓.

So in SnS_n, conjugacy classes = exactly the classification by cycle type; that is where those three classes of S3S_3, 1+3+21+3+2, come from.

⚠️

Take special note: once inside a subgroup (such as the A5A_5 we want to prove things about), this criterion changes.

The step “same type ⟹ conjugate” requires “the renaming gg to be in the group”. But in A5A_5, those gg that can rename two permutations of the same type onto each other

might all be odd permutations, with not a single one in A5A_5

— in that case the same cycle type in A5A_5

splits into more than one

conjugacy class. (More precisely: it really splits only when

no even permutation at all

can rename the two onto each other; this precise judgment — which in fact amounts to looking at whether the “centralizer” of σ\sigma consists entirely of even permutations — is left until later in this section, where it is worked out with centralizers.)

The 24 5-cycles of A5A_5 split in exactly this way, into two classes of 12 each

. So the conjugacy classes of A5A_5

are not

the 4 classes {1,15,20,24}\{1,15,20,24\} given by cycle type, but

5 classes

{1,15,20,12,12}\{1,15,20,12,12\}. This is, in the whole A5A_5 proof,

the most critical point: overlook one class, and the case-by-case check later will miss a case, and the proof will not be rigorous.

The key step: a normal subgroup = several whole classes put together

Now connect conjugation and normality. Look back at the definition of normal, gNg−1=NgNg^{-1}=N — what it says is “after each element of NN — call it xx — is renamed (conjugated) into gxg−1gxg^{-1}, the whole of NN is left untouched”. This implies a very strong conclusion:

As soon as a normal subgroup NN contains some action xx, it is forced to contain all the conjugates of xx too (that is, the whole conjugacy class that xx is in).

Why: normality requires gxg−1gxg^{-1} (for

every

gg) to still land in NN; and what xx sweeps out when conjugated by all gg

is exactly the conjugacy class of xx

. So containing xx means containing its whole class.

See what this sentence means on S3S_3. Suppose a normal subgroup NN contains the swap (ab)(ab). By the statement above, NN is forced to take in the whole conjugacy class of (ab)(ab), {(ab),(ac),(bc)}\{(ab),(ac),(bc)\} (not one of the three swaps may be missing). Adding the ee it must contain, NN has at least these 4: {e,(ab),(ac),(bc)}\{e,(ab),(ac),(bc)\}. But 4∤64\nmid 6 (Lagrange: the order of a subgroup must divide the order of the group, 66)! So such an NN cannot stop at 4, and can only expand all the way to fill the whole of S3S_3. Conclusion: in S3S_3, as soon as a normal subgroup contains one swap, it has to be the whole of S3S_3.

Conversely, A3={e,(abc),(acb)}A_3=\{e,(abc),(acb)\} is a proper, legitimate normal subgroup — it is exactly “the class of {e}\{e\} + the class of 3-cycles”, two whole classes put together (1+2=31+2=3, and 3∣63\mid6 ✓, not violating Lagrange). The “recipe” for a normal subgroup is: put it together from whole conjugacy classes, and the total must also divide the order of the group. In general:

Any normal subgroup is a union of several complete conjugacy classes (and always contains the class formed by e alone).\boxed{\text{Any normal subgroup is a union of several complete conjugacy classes (and always contains the class formed by }e\text{ alone).}}

This turns the hard job of “finding normal subgroups” into “choosing several complete conjugacy classes to put together, while also satisfying Lagrange (the total divides the order of the group)” — and how big each class is, and how many classes there are in all, can be counted. Later in this section we count the 5 conjugacy classes of A5A_5, list all 60 elements, and then put them together and check in this way, concluding that ”A5A_5, apart from {e}\{e\} and itself, has no other normal subgroup = cannot be broken apart”.


What makes A₅ impossible to break apart: lay out the 60 elements and check them class by class

Earlier we got a measuring stick: any normal subgroup is a union of several complete conjugacy classes (and always contains the class of ee); and by Lagrange, its size must divide the order of the group. Now we measure A5A_5 with this stick — first count its conjugacy classes and lay out all 60 elements, then check them one by one.

1. The 60 elements of A5A_5, all listed by the 5 conjugacy classes

A5A_5 is all the even permutations of the 5 objects a,b,c,d,ea,b,c,d,e (those built from an even number of swaps), 60 in all. By conjugacy class they fall into 5 classes (the first 3 classes are just by shape; the 5-cycles need care, see “2. Centralizers” below):

The 5 conjugacy classes of A₅ counted directly: identity 1, double transpositions 15, 3-cycles 20, 5-cycles split into 12+12, total 1+15+20+12+12=60

Figure 11 The 5 conjugacy classes of A₅ counted directly: identity 1, double transpositions 15, 3-cycles 20, 5-cycles split into 12+12, total 1+15+20+12+12=60

Class 1 · the identity ee (1 element). Nothing moves.

Class 2 · double transpositions of type (ab)(cd)(ab)(cd) (15 elements). Two groups, each swapping one pair, with one object left fixed. How to count: first choose which object is fixed (5 ways); the remaining 4 can be divided into two pairs in 3 ways, 5×3=155\times3=15. (Each is two swaps = an even permutation.) The full list:

(ab)(cd)  (ab)(ce)  (ab)(de)  (ac)(bd)  (ac)(be)  (ac)(de)  (ad)(bc)  (ad)(be)(ab)(cd)\ \ (ab)(ce)\ \ (ab)(de)\ \ (ac)(bd)\ \ (ac)(be)\ \ (ac)(de)\ \ (ad)(bc)\ \ (ad)(be) (ad)(ce)  (ae)(bc)  (ae)(bd)  (ae)(cd)  (bc)(de)  (bd)(ce)  (be)(cd)(ad)(ce)\ \ (ae)(bc)\ \ (ae)(bd)\ \ (ae)(cd)\ \ (bc)(de)\ \ (bd)(ce)\ \ (be)(cd)

Class 3 · 3-cycles of type (abc)(abc) (20 elements). Three objects rotate, two are left fixed. How to count: choosing 3 objects has (53)=10\binom{5}{3}=10 ways, and each group arranged in a ring has 2 directions ((abc)(abc) and (acb)(acb)), 10×2=2010\times2=20. (One 3-cycle = two swaps = an even permutation.) The full list:

(abc) (abd) (abe) (acb) (acd) (ace) (adb) (adc) (ade) (aeb)(abc)\ (abd)\ (abe)\ (acb)\ (acd)\ (ace)\ (adb)\ (adc)\ (ade)\ (aeb) (aec) (aed) (bcd) (bce) (bdc) (bde) (bec) (bed) (cde) (ced)(aec)\ (aed)\ (bcd)\ (bce)\ (bdc)\ (bde)\ (bec)\ (bed)\ (cde)\ (ced)

Classes 4 and 5 · 5-cycles of type (abcde)(abcde) (24 in all, but split into two classes of 12 each). Five objects arranged in a ring and rotated, with no fixed point. How to count: arranging 5 objects in a ring has 5!5! arrangements, but the same ring written from its 5 starting points is the same, 5!/5=245!/5=24. (One 5-cycle = four swaps = an even permutation.) These 24 are not one class, but split into two classes of 12 each — why they split, and how they divide, is exactly the ⚠️ left earlier, worked out precisely below with “centralizers”. The two classes of 12 each, listed in full (the results are laid out first; the proof of the split is below in “2. Why the 5-cycles split into 12+12”):

Class ① (containing (abcde)(abcde) and its inverse (aedcb)(aedcb)):

(abcde) (abdec) (abecd) (acbed) (acdbe) (acedb) (adbce) (adceb) (adebc) (aebdc) (aecbd) (aedcb)(abcde)\ (abdec)\ (abecd)\ (acbed)\ (acdbe)\ (acedb)\ (adbce)\ (adceb)\ (adebc)\ (aebdc)\ (aecbd)\ (aedcb)

Class ② (containing (abcde)2=(acebd)(abcde)^2=(acebd) and (abcde)3=(adbec)(abcde)^3=(adbec)):

(abced) (abdce) (abedc) (acbde) (acdeb) (acebd) (adbec) (adcbe) (adecb) (aebcd) (aecdb) (aedbc)(abced)\ (abdce)\ (abedc)\ (acbde)\ (acdeb)\ (acebd)\ (adbec)\ (adcbe)\ (adecb)\ (aebcd)\ (aecdb)\ (aedbc)

Total 1+15+20+12+12=601+15+20+12+12=60 ✓, exactly all the elements of A5A_5.

The icosahedron rotating in turn about its three kinds of symmetry axes, demonstrating the 5 conjugacy classes of A₅ one by one: rotation by 180° about edge axes (15), by 120° about face-center axes (20), by 72° and 144° about vertex axes (12 each), total 1+15+20+12+12=60. Front edges are drawn solid and back edges dashed, flipping in real time as it rotates (continuing EP2's hidden-line drawing)

Figure 12 The icosahedron rotating in turn about its three kinds of symmetry axes, demonstrating the 5 conjugacy classes of A₅ one by one: rotation by 180° about edge axes (15), by 120° about face-center axes (20), by 72° and 144° about vertex axes (12 each), total 1+15+20+12+12=60. Front edges are drawn solid and back edges dashed, flipping in real time as it rotates (continuing EP2’s hidden-line drawing)

2. Why the 5-cycles split into 12+1212+12: centralizers

To compute precisely how big each class is, we need a new tool.

New notation · the centralizer. For an action σ\sigma, its centralizer C(σ)C(\sigma) is the set made up of all the actions in the group that commute with σ\sigma:

C(σ)={ g∈G: gσ=σg }.C(\sigma)=\{\,g\in G:\ g\sigma=\sigma g\,\}.

In plain words, being the same “whether done before or after σ\sigma” is what defines these gg. It is a subgroup: ee is obviously in it; if g,hg,h both commute with σ\sigma, then (gh)σ=g(hσ)=g(σh)=(gσ)h=(σg)h=σ(gh)(gh)\sigma=g(h\sigma)=g(\sigma h)=(g\sigma)h=(\sigma g)h=\sigma(gh), so the product commutes too; and if gσ=σgg\sigma=\sigma g, left-multiplying and right-multiplying both sides by g−1g^{-1} gives σg−1=g−1σ\sigma g^{-1}=g^{-1}\sigma, so g−1g^{-1} also commutes with σ\sigma. Closed, contains ee, contains inverses: all three conditions are met, and C(σ)C(\sigma) is a subgroup. ✓

The conjugacy-class size formula: ∣ σ’s conjugacy class ∣=∣G∣∣C(σ)∣\big|\,\sigma\text{'s conjugacy class}\,\big|=\dfrac{|G|}{|C(\sigma)|}.

Proof: regard the conjugacy class of σ\sigma as all the values of the map g↦gσg−1g\mapsto g\sigma g^{-1}. Two elements g,hg,h give the same conjugate value gσg−1=hσh−1g\sigma g^{-1}=h\sigma h^{-1} if and only if (h−1g) σ (h−1g)−1=σ(h^{-1}g)\,\sigma\,(h^{-1}g)^{-1}=\sigma, that is, h−1g∈C(σ)h^{-1}g\in C(\sigma), which is to say that g,hg,h fall in

the same left coset

of C(σ)C(\sigma); conversely, the gg in the same left coset give the same conjugation result too. So “different conjugation results” and “the left cosets of C(σ)C(\sigma)” are in

one-to-one correspondence, equal in number =∣G∣/∣C(σ)∣=|G|/|C(\sigma)| (a direct application of the coset machinery of Lagrange in §2 earlier). Proved ✓

Computing the centralizer of the 5-cycle σ=(abcde)\sigma=(abcde). First look in the full symmetric group S5S_5. By the earlier criterion (in SnS_n, conjugate ⟺ same cycle type), the 24 5-cycles are one and the same conjugacy class in S5S_5; the conjugacy-class size formula is an equation and can be used in reverse — substituting the known class size 24 back in gives ∣CS5(σ)∣=∣S5∣/24=120/24=5|C_{S_5}(\sigma)|=|S_5|/24=120/24=5. On the other hand, the things that commute with σ\sigma include at least the 5 powers of σ\sigma itself, e,σ,σ2,σ3,σ4e,\sigma,\sigma^2,\sigma^3,\sigma^4 (an action and its own powers of course give the same result whichever is done first); and these 5 are all different from one another — a 5-cycle moves each object one place along, and must be done 5 times in a row before every object is back in its own place (σ5=e\sigma^5=e); with fewer than 5 times not all are back. 5 mutually different powers exactly fill that 5-element centralizer, so

CS5(σ)=⟨σ⟩ (i.e. σ’s powers all together, as a cyclic subgroup)={e,σ,σ2,σ3,σ4}.C_{S_5}(\sigma)=\langle\sigma\rangle\ (\text{i.e. }\sigma\text{'s powers all together, as a cyclic subgroup})=\{e,\sigma,\sigma^2,\sigma^3,\sigma^4\}.

These 5 powers are all even permutations (a 5-cycle is even, and its powers are all even too), all in A5A_5. And the elements in A5A_5 that commute with σ\sigma are precisely those “that in S5S_5 commute with σ\sigma and also happen to fall in A5A_5”, that is, CA5(σ)=CS5(σ)∩A5C_{A_5}(\sigma)=C_{S_5}(\sigma)\cap A_5; since CS5(σ)=⟨σ⟩C_{S_5}(\sigma)=\langle\sigma\rangle already lies entirely within A5A_5, we have CA5(σ)=⟨σ⟩C_{A_5}(\sigma)=\langle\sigma\rangle, ∣CA5(σ)∣=5|C_{A_5}(\sigma)|=5.

So for each 5-cycle σ\sigma, its conjugacy class in A5A_5 has size =∣A5∣∣CA5(σ)∣=605=12=\dfrac{|A_5|}{|C_{A_5}(\sigma)|}=\dfrac{60}{5}=12. Now to close: the 24 5-cycles were originally one whole class in S5S_5, but once in A5A_5, the conjugacy class of each 5-cycle has only 12 members, smaller than 24 — A5A_5 can no longer merge these 24 into one class, so this class splits in A5A_5; and since each piece has exactly 12, 24=12+1224=12+12, it splits into exactly two classes. Proved ✓ (Which two classes: σ=(abcde)\sigma=(abcde) and its inverse σ4=(aedcb)\sigma^4=(aedcb) are in the same class; σ2=(acebd)\sigma^2=(acebd) and σ3=(adbec)\sigma^3=(adbec) are in the other class. Intuitively, the renamings that could in S5S_5 “merge these two classes by renaming” — those gg — are all odd permutations, and there are none in A5A_5 — this is exactly the concrete form, on 5-cycles, of what the earlier ⚠️ said: “the renaming gg may be an odd permutation”.)

On a single 5-fold vertex axis, first rotating 72° and then 144° separates two rotation families, ±72° and ±144°; six such axes each give two families, 12 per family, so the 24 5-cycles that in S₅ belonged to one whole class split into 12+12 in A₅

Figure 13 On a single 5-fold vertex axis, first rotating 72° and then 144° separates two rotation families, ±72° and ±144°; six such axes each give two families, 12 per family, so the 24 5-cycles that in S₅ belonged to one whole class split into 12+12 in A₅

3. Checking one by one: A5A_5 has no proper normal subgroup

Everything is ready. The sizes of the 5 conjugacy classes of A5A_5 are 1,15,20,12,121,15,20,12,12. By the measuring stick from earlier: any normal subgroup NN is put together as “the class of ee + several whole classes chosen from {15,20,12,12}\{15,20,12,12\}”, and ∣N∣|N| must divide 60. Compute ∣N∣|N| for every way of choosing and check them one by one:

Classes chosen (all contain ee)∣N∣\lvert N\rvert60 mod ∣N∣60 \bmod \lvert N\rvertDivides 60?
only ee10✅ yes (N={e}N=\{e\})
e+12e+12138✗
e+15e+151612✗
e+20e+202118✗
e+12+12e+12+122510✗
e+15+12e+15+12284✗
e+20+12e+20+123327✗
e+15+20e+15+203624✗
e+15+12+12e+15+12+124020✗
e+20+12+12e+20+12+124515✗
e+15+20+12e+15+20+124812✗
e+15+20+12+12e+15+20+12+12600✅ yes (N=A5N=A_5)

The 12 candidate orders of a normal subgroup hitting, one by one, the

Figure 14 The 12 candidate orders of a normal subgroup hitting, one by one, the divisibility gate “60 mod |N| = 0?”: each first shows its remainder 60 mod N; those that divide (1 and 60) light up green and pass, those that do not (13, 16, 21, 25, 28, 33, 36, 40, 45, 48) turn red and are blocked — in the end only two green gates are left, N=1 ({e}) and N=60 (the whole of A₅): A₅ has no proper normal subgroup

Among the 12 candidate sizes, only ∣N∣=1|N|=1 (choosing nothing, N={e}N=\{e\}) and ∣N∣=60|N|=60 (choosing everything, N=A5N=A_5) divide 60; the other 10 (13,16,21,25,28,33,36,40,45,4813,16,21,25,28,33,36,40,45,48) do not divide 60, and the corresponding normal subgroups cannot possibly exist — this is exactly where Lagrange rules out every possibility cleanly. (Note: here one must use the true 5 classes {1,15,20,12,12}\{1,15,20,12,12\}; if one wrongly takes the 5-cycles as one class and uses the wrong 4 classes {1,15,20,24}\{1,15,20,24\}, one would miss candidates such as ∣N∣=13,28,33,48|N|=13,28,33,48 that “choose half the 5-cycles” — although these also do not divide 60 and the conclusion happens not to change, the argument would be incomplete. This is why that 12+1212+12 earlier had to be worked out clearly.)

4. Conclusion

A5A_5, apart from {e}\{e\} and itself, has no other normal subgroup — by definition, A5A_5 is a simple group, a “symmetry atom” that cannot be broken apart. Moreover it has 60 elements and is not an “obvious” simple group like a cyclic group of prime order; it is the smallest non-commutative simple group.

It is precisely this atom, both unbreakable and “non-solvable”, stuck in the composition series of S5S_5, that became the root of the quintic equation having no general solution in radicals (this line continues in §4/§5). A₅ is a simple group — proved. ■\blacksquare


§4 A little lesson in field theory: translating root extraction into groups

A little lesson in field theory (the foundation): what a “field” is, and how to measure its size

The EP2 little lesson in group theory taught us to take groups apart; §2/§3 of this episode then took A₅ apart into an “atom that cannot be broken apart”. But “can the quintic equation be solved by radicals” is a question about numbers — whether, starting from the coefficients, by repeatedly adding, subtracting, multiplying, dividing and then extracting roots, the roots can be written out. To make “root extraction” and “radicals” clear, we first need a language for describing “worlds made up of numbers”: fields.

1. Fields: number systems in which addition, subtraction, multiplication and division all work

Definition (field). A field FF is a set of numbers, with two operations ++, ×\times, satisfying the following (all rules we have long been used to for “ordinary numbers”):

In plain words: in a field, the four arithmetic operations — addition, subtraction, multiplication, division (by a nonzero divisor) — all work, and never go out of bounds.

Examples: the rational numbers Q\mathbb{Q}, the real numbers R\mathbb{R}, the complex numbers C\mathbb{C} are all fields. Counterexample: the integers Z\mathbb{Z} are not a field — addition, subtraction and multiplication all work, but division does not: 2∈Z2\in\mathbb{Z}, but the multiplicative inverse of 22, 12∉Z\tfrac12\notin\mathbb{Z}. Lacking the condition “nonzero elements have inverses”, Z\mathbb{Z} does not qualify as a field.

(Compare with EP2: in the little lesson in group theory, the elements of a group were “actions”; here the elements of a field are “numbers”. Two languages, which will be joined later. This episode uses only fields inside C\mathbb{C}, and all the “numbers” are familiar complex numbers.)

2. Field extensions: seeing the big field as a “vector space” over the small field

Definition (field extension). If two fields satisfy F⊆EF\subseteq E (FF is a subfield of EE), we say E/FE/F is a field extension, EE the big field and FF the small field. Example: Q⊆Q(2)\mathbb{Q}\subseteq\mathbb{Q}(\sqrt2) (Q(2)\mathbb{Q}(\sqrt2) is explained just below).

How do we measure “how much bigger the big field is than the small field”? The key move: see the big field EE as a “vector space” over the small field FF.

First, a word borrowed (from linear algebra).

“Vector space / basis / dimension” are not taught in the little lesson in group theory; they are standard content of another basic course, and this section only borrows them without going into them. What we need is a single sentence: a set of numbers v1,…,vnv_1,\dots,v_n is called a

basis of EE over FF, meaning that —

every

element in EE can be written

uniquely

as c1v1+⋯+cnvnc_1v_1+\dots+c_nv_n (with coefficients cic_i taken from the small field FF). The number of elements in the basis is called the

dimension

. (A standard result of linear algebra: however a basis of the same space is chosen, the bases all have the same size, so the “dimension” is well defined and does not depend on the choice — this section cites this directly.)

Regarding EE as a vector space over FF, its dimension is called the degree of this extension:

[E:F]  =  dim⁡FE  =  (E — the size of a basis over F ).[E:F]\;=\;\dim_F E\;=\;\big(E\text{ — the size of a basis over }F\text{ }\big).

Right away, a concrete one — Q(2)\mathbb{Q}(\sqrt2).

It means { a+b2: a,b∈Q }\{\,a+b\sqrt2:\ a,b\in\mathbb{Q}\,\} (all “rational number ++ rational number ×2\times\sqrt2”). First check that it really is a field: -

Closed under multiplication: (a+b2)(c+d2)=(ac+2bd)+(ad+bc)2(a+b\sqrt2)(c+d\sqrt2)=(ac+2bd)+(ad+bc)\sqrt2, still of the shape "Q+Q2\mathbb{Q}+\mathbb{Q}\sqrt2"; likewise for addition and subtraction. -

Nonzero elements have inverses: 1a+b2=a−b2a2−2b2\dfrac{1}{a+b\sqrt2}=\dfrac{a-b\sqrt2}{a^2-2b^2}, the denominator a2−2b2≠0a^2-2b^2\ne0 (the element being inverted is nonzero: if b=0b=0 then a2=0a^2=0 gives a=0a=0 and the whole element is 00, which is excluded, so b≠0b\ne0; then a2−2b2=0a^2-2b^2=0 would give (a/b)2=2(a/b)^2=2,

implying

that 2\sqrt2 is rational, a contradiction), so the inverse also lies inside. Every number in this field is a combination of {1,2}\{1,\sqrt2\} with rational coefficients; and 1,21,\sqrt2 are

linearly independent

— if a+b2=0a+b\sqrt2=0 with a,b∈Qa,b\in\mathbb{Q}, then b≠0b\ne0 would give 2=−a/b\sqrt2=-a/b rational (a contradiction), so necessarily a=b=0a=b=0. Hence {1,2}\{1,\sqrt2\} is a basis,

[Q(2):Q]=2.■[\mathbb{Q}(\sqrt2):\mathbb{Q}]=2.\qquad\blacksquare

3. Adjoining a root, F(α)F(\alpha), and the minimal polynomial

Q(2)\mathbb{Q}(\sqrt2) is just “adding to Q\mathbb{Q} a 2\sqrt2”. In general:

Definition (simple extension). F(α)F(\alpha) = the smallest field containing both FF and α\alpha (add α\alpha into FF, then fill in the results of all the arithmetic operations).

Definition (algebraic element, minimal polynomial). If α\alpha is a root of some polynomial with coefficients in FF, we say α\alpha is algebraic over FF. Among all the polynomials “having α\alpha as a root, with coefficients in FF, and leading coefficient 11 (monic)”, the one of smallest degree is called the minimal polynomial of α\alpha, m(x)m(x). (There is only one such “smallest-degree and monic” polynomial, so one can speak of “the” minimal polynomial; this section uses only its property of “smallest degree”.)

Example (first look at a concrete one): take F=QF=\mathbb{Q}, α=2\alpha=\sqrt2. 2\sqrt2 is a root of x2−2x^2-2, so it is

algebraic

over Q\mathbb{Q}. Among the monic polynomials with rational coefficients having 2\sqrt2 as a root, x2−2x^2-2 has the smallest degree — to go lower only a linear polynomial x−2x-\sqrt2 is left, but its coefficient 2∉Q\sqrt2\notin\mathbb{Q}, not a rational coefficient, so it does not qualify. So x2−2x^2-2 is exactly the

minimal polynomial

of 2\sqrt2.

mm is necessarily irreducible

(“irreducible” means: over FF it

cannot

be written as a product of two polynomials with coefficients in FF

both of lower degree

). Otherwise m=g⋅hm=g\cdot h (g,hg,h both of lower degree, coefficients in FF); substitute α\alpha: 0=m(α)=g(α) h(α)0=m(\alpha)=g(\alpha)\,h(\alpha), so g(α)=0g(\alpha)=0 or h(α)=0h(\alpha)=0 — out pops a polynomial

of lower degree

that also has α\alpha as a root (dividing by its leading coefficient makes it monic, with the degree unchanged), contradicting ”mm has the smallest degree”. So mm is irreducible. ∎

Theorem (degree of a simple extension). Let α\alpha be algebraic over FF, with minimal polynomial mm of degree nn. Then [F(α):F]=n[F(\alpha):F]=n, and {1,α,α2,…,αn−1}\{1,\alpha,\alpha^2,\dots,\alpha^{n-1}\} is a basis of F(α)F(\alpha) over FF.

Example (first read the theorem through once with 2\sqrt2): α=2\alpha=\sqrt2, minimal polynomial m=x2−2m=x^2-2 of degree n=2n=2. The theorem says [Q(2):Q]=2[\mathbb{Q}(\sqrt2):\mathbb{Q}]=2, with basis {1,α}={1,2}\{1,\alpha\}=\{1,\sqrt2\} — that is, every number in Q(2)\mathbb{Q}(\sqrt2) is written exactly as a⋅1+b⋅2a\cdot1+b\cdot\sqrt2 (a,b∈Qa,b\in\mathbb{Q}), exactly two “basis vectors”, matching the theorem. (Likewise for n=3n=3, 23\sqrt[3]2, with basis {1,23,43}\{1,\sqrt[3]2,\sqrt[3]4\}; see worked example 2.) Below we prove the general case.

**Full proof in Dummit–Foote, Abstract Algebra, 3rd ed. §13.1.

A tool for deciding irreducibility — Eisenstein’s criterion**

(needed for the worked examples below, so stated first): a monic polynomial with coefficients in Z\mathbb{Z},

if there is a prime pp that divides all its non-leading coefficients, and p2p^2 does not divide the constant term

(the leading coefficient 11 is of course not divisible by pp), then it is

irreducible

over Q\mathbb{Q}.

One more link

(the worked examples rely on it to cross from “irreducible” to “is the minimal polynomial”): if a polynomial with coefficients in FF that is

monic and irreducible

has α\alpha as a root, it

is

the minimal polynomial of α\alpha. Because the minimal polynomial mm divides every polynomial having α\alpha as a root (by the same division with remainder as above: the remainder is of lower degree and also annihilates α\alpha, so it can only be 00), while an irreducible polynomial has no proper factor of lower degree other than constants and itself; and both are monic, so they can only be equal.

Worked example 1 — Q(2)\mathbb{Q}(\sqrt2) once more.

The minimal polynomial of 2\sqrt2 is x2−2x^2-2: it has 2\sqrt2 as a root and is monic; take p=2p=2: the non-leading coefficients are 00 and −2-2 (both divisible by 22), and the constant term −2-2 is not divisible by 4=224=2^2 — Eisenstein gives

irreducible

. Degree 22, so [Q(2):Q]=2[\mathbb{Q}(\sqrt2):\mathbb{Q}]=2, basis {1,2}\{1,\sqrt2\}, agreeing with the earlier result (computing Q(2)\mathbb{Q}(\sqrt2) in the section on field extensions).

Worked example 2 — Q(23)\mathbb{Q}(\sqrt[3]2).

The minimal polynomial of 23\sqrt[3]2 is x3−2x^3-2 (likewise irreducible by Eisenstein with p=2p=2). Degree 33, so [Q(23):Q]=3[\mathbb{Q}(\sqrt[3]2):\mathbb{Q}]=3, basis {1,23,43}\{1,\sqrt[3]2,\sqrt[3]4\}.

4. The tower formula: one layer nested in another, the degrees multiply

If a big extension is “two layers nested together”, its degree is the product of the degrees of the two layers.

Theorem (tower formula). For a tower of fields F⊆K⊆EF\subseteq K\subseteq E,

[E:F]=[E:K]⋅[K:F].[E:F]=[E:K]\cdot[K:F].

Intuition (viewing “degree” as “dimension”): Q\mathbb{Q} itself is “11-dimensional”; add a 2\sqrt2, and the dimension doubles to 22 (basis {1,2}\{1,\sqrt2\}); on top of that add a 3\sqrt3, and the dimension doubles again to 44 (basis {1,2,3,6}\{1,\sqrt2,\sqrt3,\sqrt6\}). What the tower formula says is exactly —

nesting upward layer by layer, the dimensions multiply layer by layer: two layers of ×2\times2 each, together 2×2=42\times2=4 times. Below, “multiplying bases” is written up as a proof.

**Full proof in Dummit–Foote §13.2.

Worked example 3 — Q(2,3)\mathbb{Q}(\sqrt2,\sqrt3) (adding 2\sqrt2 and 3\sqrt3 at the same time).**

Build a two-layer tower Q⊆Q(2)⊆Q(2,3)\mathbb{Q}\subseteq\mathbb{Q}(\sqrt2)\subseteq\mathbb{Q}(\sqrt2,\sqrt3). -

First layer

[Q(2):Q]=2[\mathbb{Q}(\sqrt2):\mathbb{Q}]=2 (worked example 1). -

Second layer

[Q(2,3):Q(2)][\mathbb{Q}(\sqrt2,\sqrt3):\mathbb{Q}(\sqrt2)]: 3\sqrt3 satisfies x2−3x^2-3; for this to be the minimal polynomial of the second layer, we must first confirm that

3∉Q(2)\sqrt3\notin\mathbb{Q}(\sqrt2)

. Suppose to the contrary that 3=a+b2\sqrt3=a+b\sqrt2 (a,b∈Qa,b\in\mathbb{Q}); squaring both sides gives 3=(a2+2b2)+2ab23=(a^2+2b^2)+2ab\sqrt2; the left side is rational, so 2ab22ab\sqrt2 must also be rational, and necessarily ab=0ab=0. b=0b=0 gives 3=a\sqrt3=a rational (false); a=0a=0 gives 3=b2\sqrt3=b\sqrt2, that is, 3/2\sqrt{3/2} rational (false). A contradiction, so 3∉Q(2)\sqrt3\notin\mathbb{Q}(\sqrt2) ✓. Moreover x2−3x^2-3 is a

quadratic; if it were reducible over Q(2)\mathbb{Q}(\sqrt2), it would have to split off a linear factor, that is, have a root in Q(2)\mathbb{Q}(\sqrt2) (that is, 3∈Q(2)\sqrt3\in\mathbb{Q}(\sqrt2)); since we have just proved there is no such root, x2−3x^2-3 is

irreducible over Q(2)\mathbb{Q}(\sqrt2), and the second layer has degree 22. -

Tower formula: [Q(2,3):Q]=2×2=4[\mathbb{Q}(\sqrt2,\sqrt3):\mathbb{Q}]=2\times2=4, basis {1,2,3,6}\{1,\sqrt2,\sqrt3,\sqrt6\}.

The extension tower of ℚ(√2,√3)/ℚ: from ℚ at the bottom upward, each square root added is one layer; the minimal polynomials of the layers (x²−2, x²−3) both have degree 2, the two layers multiply to 2×2=4, and the basis of the whole tower over ℚ at the top is {1,√2,√3,√6}

Figure 15 The extension tower of ℚ(√2,√3)/ℚ: from ℚ at the bottom upward, each square root added is one layer; the minimal polynomials of the layers (x²−2, x²−3) both have degree 2, the two layers multiply to 2×2=4, and the basis of the whole tower over ℚ at the top is {1,√2,√3,√6}

Connecting back to the “Gauss · the regular 17-gon” episode (G17) — the tower formula is exactly the tool that was really at work behind that episode.

Remember why the regular 17-gon can be constructed with straightedge and compass? The key is this: the field corresponding to it, Q ⁣(cos⁡2π17)\mathbb{Q}\!\left(\cos\tfrac{2\pi}{17}\right), has degree over Q\mathbb{Q} exactly 8=2×2×28=2\times2\times2 — a tower of

three layers, each a factor of 22

. Each step forward in a straightedge-and-compass construction corresponds exactly to “taking one square root”, that is, adding to the tower a layer of factor 22; and “constructible with straightedge and compass   ⟺  \iff the degree is a power of 22” is exactly the criterion the G17 episode explained thoroughly. The tower formula [E:F]=[E:K][K:F][E:F]=[E:K][K:F] is the measuring stick for counting “how many layers in all, and how many times bigger altogether”: 23=82^3=8, multiplied layer by layer, and only so does the regular 17-gon fall within the reach of straightedge and compass. (The Q(2,3)\mathbb{Q}(\sqrt2,\sqrt3) above is a one-size-smaller version of the same principle: two layers, 2×2=42\times2=4.)

(This “four-element tower” of Q(2,3)\mathbb{Q}(\sqrt2,\sqrt3) will, when we connect to Galois groups below, match up with the Klein four-group V4V_4 we saw in §2.)


Splitting fields and Galois groups: trading “the tower of fields” for “a group”

Earlier we learned to measure how big an extension is (the degree [E:F]). This section gives each extension a group — its symmetry. Once this bridge is built, “can the equation be solved by radicals” is completely translated into “can a group be taken apart”.

1. Splitting fields: the smallest field in which a polynomial splits completely

Definition (splitting field). Given an FF-coefficient polynomial ff, its splitting field is an extension field EE such that: ff splits completely into linear factors over EE (that is, all the roots of ff fall in EE), and EE is the smallest field carrying these roots (generated exactly by adjoining to FF all the roots of ff).

Example 1: the roots of f=(x2−2)(x2−3)f=(x^2-2)(x^2-3) are ±2,±3\pm\sqrt2,\pm\sqrt3, all in Q(2,3)\mathbb{Q}(\sqrt2,\sqrt3), and this field is generated exactly by these roots — so Q(2,3)\mathbb{Q}(\sqrt2,\sqrt3) is the splitting field of ff, of degree 44 (computed earlier).

Example 2: the three roots of f=x3−2f=x^3-2 are 23, ω23, ω223\sqrt[3]2,\ \omega\sqrt[3]2,\ \omega^2\sqrt[3]2, where ω=−12+32i\omega=-\tfrac12+\tfrac{\sqrt3}2 i is a non-real “cube root of unity”, satisfying ω3=1\omega^3=1 (and hence ω2+ω+1=0\omega^2+\omega+1=0). Using 1,ω,ω21,\omega,\omega^2 to multiply the real root 23\sqrt[3]2 gives exactly these three roots (the cube of each is (23)3 (ωk)3=2⋅1=2(\sqrt[3]2)^3\,(\omega^k)^3=2\cdot1=2). To hold all three roots we need 23\sqrt[3]2 and ω\omega, and the splitting field is Q(23,ω)\mathbb{Q}(\sqrt[3]2,\omega). Compute its degree: [Q(23):Q]=3[\mathbb{Q}(\sqrt[3]2):\mathbb{Q}]=3 (x3−2x^3-2); ω\omega satisfies x2+x+1x^2+x+1 and is not in the real field Q(23)\mathbb{Q}(\sqrt[3]2) (ω\omega is non-real), so the next layer up has degree 22. The tower formula gives [Q(23,ω):Q]=3×2=6[\mathbb{Q}(\sqrt[3]2,\omega):\mathbb{Q}]=3\times2=6.

This section uses only polynomials whose roots are pairwise distinct (both above are); this point will be needed below when counting.

2. Field automorphisms and fixing the base field

Definition (field automorphism, fixing FF). A field automorphism of the extension E/FE/F is a bijection σ:E→E\sigma:E\to E that preserves addition and multiplication (σ(x+y)=σx+σy\sigma(x+y)=\sigma x+\sigma y, σ(xy)=σx⋅σy\sigma(xy)=\sigma x\cdot\sigma y), and fixes FF pointwise (for each c∈Fc\in F we have σ(c)=c\sigma(c)=c). Intuitively: σ\sigma is a symmetry transformation inside EE that “does not disturb the small field FF, and only stirs the big field”.

Example: on E=Q(2)E=\mathbb{Q}(\sqrt2), F=QF=\mathbb{Q}, define σ(a+b2)=a−b2\sigma(a+b\sqrt2)=a-b\sqrt2 (that is, flip the sign of 2\sqrt2). It

fixes Q\mathbb{Q}

(when b=0b=0, a↦aa\mapsto a);

preserving addition

is obvious;

preserving multiplication

can be checked: σ((a+b2)(c+d2))=(ac+2bd)−(ad+bc)2=(a−b2)(c−d2)=σ(a+b2) σ(c+d2)\sigma\big((a+b\sqrt2)(c+d\sqrt2)\big)=(ac+2bd)-(ad+bc)\sqrt2=(a-b\sqrt2)(c-d\sqrt2)=\sigma(a+b\sqrt2)\,\sigma(c+d\sqrt2). So σ\sigma is a field automorphism fixing Q\mathbb{Q}. (It sends 2\sqrt2 to −2-\sqrt2 — and −2-\sqrt2 is exactly the other root of x2−2x^2-2; this is what the lemma below says.)

Lemma (automorphisms send roots to roots). Let gg be a polynomial with coefficients in FF, β∈E\beta\in E a root of gg, and σ\sigma an automorphism fixing FF. Then σ(β)\sigma(\beta) is also a root of gg.

Full proof in Dummit–Foote §13.4 (extending isomorphisms to splitting fields), §14.1 (automorphisms permute roots).

This lemma has a direct consequence, used again and again below: an automorphism fixing FF merely permutes among “those few roots of ff”; and the splitting field is generated by these roots, so σ\sigma is completely determined by “which root it sends each root to”.

3. The Galois group

Definition (Galois group). For the extension E/FE/F, all its “field automorphisms fixing FF” form a group under composition (composing two still fixes FF, still preserves the operations, is still a bijection; the identity map is the identity element; the inverse map also fixes FF). This group is written Gal(E/F)\mathrm{Gal}(E/F) and is called the Galois group of E/FE/F.

Example (the smallest Galois group): Gal(Q(2)/Q)\mathrm{Gal}(\mathbb{Q}(\sqrt2)/\mathbb{Q}). An automorphism fixing Q\mathbb{Q} is determined by σ(2)\sigma(\sqrt2), and σ(2)\sigma(\sqrt2) can only be a root of x2−2x^2-2, ±2\pm\sqrt2 (the earlier lemma “automorphisms send roots to roots”), so there are only two: the identity ee and the sign flip σ\sigma. σ\sigma multiplied by itself returns to ee, so Gal(Q(2)/Q)={e,σ}≅Z/2\mathrm{Gal}(\mathbb{Q}(\sqrt2)/\mathbb{Q})=\{e,\sigma\}\cong\mathbb{Z}/2. (Later in this section we will see the larger examples V4V_4, S3S_3.)

By the consequence of that earlier lemma, sending each σ\sigma to “the permutation it performs on the roots of ff” gives a map Gal(E/F)→(permutations of the roots)\mathrm{Gal}(E/F)\to(\text{permutations of the roots}), and it is injective (σ\sigma is determined by where the roots go) and preserves composition — that is to say, Gal(E/F)\mathrm{Gal}(E/F) embeds into the permutation group of the roots. This is exactly the origin of “the symmetry group of an equation” spoken of in §2/§3.

4. The core theorem: ∣Gal(E/F)∣=[E:F]|\mathrm{Gal}(E/F)|=[E:F]

To work out Galois groups, we need a theorem that links “how big the group is” and “how big the extension is” precisely.

Theorem. Let EE be the splitting field of some FF-coefficient polynomial, and let the roots of that polynomial be pairwise distinct. Then

∣Gal(E/F)∣=[E:F].\big|\mathrm{Gal}(E/F)\big|=[E:F].

Example (first read the core theorem through once with Q(2)\mathbb{Q}(\sqrt2)): E=Q(2)E=\mathbb{Q}(\sqrt2), F=QF=\mathbb{Q} (the splitting field of x2−2x^2-2, whose two roots ±2\pm\sqrt2 are distinct). The tower has only one layer, Q⊆Q(2)\mathbb{Q}\subseteq\mathbb{Q}(\sqrt2); the minimal polynomial of 2\sqrt2 is m0=x2−2m_0=x^2-2, of degree d0=2d_0=2. An automorphism fixing Q\mathbb{Q} is determined by σ(2)\sigma(\sqrt2), and σ(2)\sigma(\sqrt2) can only be sent to the roots of m0m_0, {2,−2}\{\sqrt2,-\sqrt2\} — exactly 22 ways of sending, each giving a legitimate automorphism, so ∣Gal∣=2=[Q(2):Q]|\mathrm{Gal}|=2=[\mathbb{Q}(\sqrt2):\mathbb{Q}], matching the theorem. (The two-layer Q(2,3)\mathbb{Q}(\sqrt2,\sqrt3): 22 ways for each layer, 2×2=42\times2=4 automorphisms, looked at in detail in “Example one” later in this section.) Below we prove the general case.

**Full proof in Dummit–Foote §14.1–§14.2.

Note that the splitting field and “pairwise distinct roots” are both indispensable**: without the splitting field, the roots of mim_i may not be in EE and cannot be sent there (too few choices); without “pairwise distinct”, the did_i roots would coincide and the number of choices would not match either. The two conditions guarantee exactly ”did_i roots at each layer, each giving one extension”.

5. Example one: Gal(Q(2,3)/Q)=V4\mathrm{Gal}(\mathbb{Q}(\sqrt2,\sqrt3)/\mathbb{Q})=V_4

E=Q(2,3)E=\mathbb{Q}(\sqrt2,\sqrt3) is the splitting field of (x2−2)(x2−3)(x^2-2)(x^2-3), [E:Q]=4[E:\mathbb{Q}]=4, and by the theorem ∣Gal∣=4|\mathrm{Gal}|=4. Concretely, lay out these 44 automorphisms: each σ\sigma is determined by σ(2)\sigma(\sqrt2) and σ(3)\sigma(\sqrt3), and σ(2)\sigma(\sqrt2) can only be a root of x2−2x^2-2, ±2\pm\sqrt2, and σ(3)\sigma(\sqrt3) can only be a root of x2−3x^2-3, ±3\pm\sqrt3 (the earlier lemma on sending roots to roots); combining them independently gives 2×2=42\times2=4:

Automorphism2↦\sqrt2\mapsto3↦\sqrt3\mapstoOrder
ee2\sqrt23\sqrt31
σ\sigma−2-\sqrt23\sqrt32
τ\tau2\sqrt2−3-\sqrt32
στ\sigma\tau−2-\sqrt2−3-\sqrt32

Every non-ee automorphism multiplied by itself returns to ee (flipping the sign of a root twice restores it), and composing any two different non-ee automorphisms gives the third (for example σ\sigma flips the sign of 2\sqrt2 and τ\tau flips the sign of 3\sqrt3; doing one after the other flips both signs, which is exactly στ\sigma\tau). Four elements, every non-ee one of order 22, and closed under composition — the multiplication table is uniquely determined. This multiplication table is exactly the same as that of the Klein four-group V4V_4 seen in §2:

Gal(Q(2,3)/Q)≅V4≅Z/2×Z/2.\mathrm{Gal}(\mathbb{Q}(\sqrt2,\sqrt3)/\mathbb{Q})\cong V_4\cong \mathbb{Z}/2\times\mathbb{Z}/2.

(That is, V4V_4 rather than Z/4\mathbb{Z}/4: order 44, commutative, each non-ee element of order 22.) ∎

6. Example two: Gal(x3−2/Q)=S3\mathrm{Gal}(x^3-2/\mathbb{Q})=S_3 (non-commutative)

E=Q(23,ω)E=\mathbb{Q}(\sqrt[3]2,\omega) is the splitting field of x3−2x^3-2, [E:Q]=6[E:\mathbb{Q}]=6, and by the earlier core theorem ∣Gal∣=[E:F]|\mathrm{Gal}|=[E:F] we get ∣Gal(E/Q)∣=6|\mathrm{Gal}(E/\mathbb{Q})|=6.

Next, see which group of order 66 it lands on. Each σ\sigma permutes the three roots {23, ω23, ω223}\{\sqrt[3]2,\ \omega\sqrt[3]2,\ \omega^2\sqrt[3]2\} among themselves (the earlier lemma on sending roots to roots), giving a map Gal(E/Q)→S3\mathrm{Gal}(E/\mathbb{Q})\to S_3 (all permutations of the 33 roots, ∣S3∣=6|S_3|=6). This map: - injective: the values of σ\sigma on the three roots determine the whole of σ\sigma — because ω=ω2323\omega=\dfrac{\omega\sqrt[3]2}{\sqrt[3]2}, and σ\sigma preserves multiplication and so naturally also preserves division (σ(a/b)=σa/σb\sigma(a/b)=\sigma a/\sigma b), so σ(ω)=σ(ω23)σ(23)\sigma(\omega)=\dfrac{\sigma(\omega\sqrt[3]2)}{\sigma(\sqrt[3]2)} is computed from the values of σ\sigma on two roots; once σ(23)\sigma(\sqrt[3]2) and σ(ω)\sigma(\omega) are fixed, the whole of σ\sigma is fixed. - preserves composition: permuting the roots one after another = composing the automorphisms one after another.

So Gal(E/Q)\mathrm{Gal}(E/\mathbb{Q}) injects into S3S_3, and both sides have 66 elements (on a finite set an injection is a surjection), so

Gal(x3−2/Q)≅S3.\mathrm{Gal}(x^3-2/\mathbb{Q})\cong S_3.

This is a non-commutative group (in S3S_3, (cycling the three roots, starting from 23)(\text{cycling the three roots, starting from }\sqrt[3]2\text{}) and (complex conjugation)(\text{complex conjugation}) give different results in different orders). (Order 66, non-commutative, contains odd permutations.) ∎

Left: the 4 automorphisms of Gal(ℚ(√2,√3)/ℚ)=V₄ = independently flipping the signs of √2 and √3 (four cells e/σ/τ/στ, every non-e element of order 2, ≅ℤ/2×ℤ/2); right: the 6 automorphisms of Gal(x³−2/ℚ)=S₃ = all permutations of the three cube roots ∛2, ω∛2, ω²∛2 in the complex plane (non-commutative)

Figure 16 Left: the 4 automorphisms of Gal(ℚ(√2,√3)/ℚ)=V₄ = independently flipping the signs of √2 and √3 (four cells e/σ/τ/στ, every non-e element of order 2, ≅ℤ/2×ℤ/2); right: the 6 automorphisms of Gal(x³−2/ℚ)=S₃ = all permutations of the three cube roots ∛2, ω∛2, ω²∛2 in the complex plane (non-commutative)

Comparing the two examples: the quadratic-type Q(2,3)\mathbb{Q}(\sqrt2,\sqrt3) gives a commutative group V4V_4; the irreducible cubic x3−2x^3-2 gives a non-commutative group S3S_3. The higher the degree and the more complicated the entanglement among the roots, the more the Galois group may turn from commutative to non-commutative — this line goes all the way to S5S_5 in §5, where non-commutativity reaches the point of “cannot be taken apart”, which is precisely the root of the quintic equation having no solution in radicals.


The Galois correspondence: translating “taking groups apart” into “taking towers apart”

Earlier we gave each splitting field E/FE/F a group Gal(E/F)\mathrm{Gal}(E/F). This section is the summit of §4: the subgroups of Gal(E/F)\mathrm{Gal}(E/F) and the intermediate fields between FF and EE are in one-to-one correspondence. With this dictionary, “can a group be taken apart” is equivalent to “can a tower of fields be built”, and the solvability of an equation by radicals comes down completely to the group.

The E/FE/F of this section are all extensions of the earlier kind — splitting fields, with pairwise distinct roots (such extensions satisfy ∣Gal(E/F)∣=[E:F]|\mathrm{Gal}(E/F)|=[E:F] and are called Galois extensions).

1. Two directions: the fixed field and the relative Galois group

The two sides of the dictionary, two constructions that are the reverse of each other:

Constructing a subgroup from an intermediate field. Given an intermediate field KK (F⊆K⊆EF\subseteq K\subseteq E), let

K ⟼ Gal(E/K)={ σ∈Gal(E/F): σ fixes pointwise K }.K\ \longmapsto\ \mathrm{Gal}(E/K)=\{\,\sigma\in\mathrm{Gal}(E/F):\ \sigma\text{ fixes pointwise }K\,\}.

Fixing KK is a stricter requirement than fixing FF (KK is bigger), so Gal(E/K)\mathrm{Gal}(E/K) is a subgroup of Gal(E/F)\mathrm{Gal}(E/F).

Constructing an intermediate field from a subgroup. Given a subgroup H≤Gal(E/F)H\le\mathrm{Gal}(E/F), let

H ⟼ EH={ x∈E: σ(x)=x for all σ∈H }.H\ \longmapsto\ E^{H}=\{\,x\in E:\ \sigma(x)=x\ \text{for all}\ \sigma\in H\,\}.

This EHE^H (the elements fixed by every automorphism in HH) is a field: if x,yx,y are both fixed, then x±y, xy, x/yx\pm y,\ xy,\ x/y are also fixed (automorphisms preserve the operations). And FF was fixed by the whole of Gal(E/F)\mathrm{Gal}(E/F) to begin with, so F⊆EH⊆EF\subseteq E^H\subseteq E, an intermediate field. EHE^H is called the fixed field of HH.

Example (the smallest case): E=Q(2)E=\mathbb{Q}(\sqrt2), Gal(E/Q)={e,σ}≅Z/2\mathrm{Gal}(E/\mathbb{Q})=\{e,\sigma\}\cong\mathbb{Z}/2 (earlier). Two subgroups: the fixed field of {e}\{e\} is the whole of EE (everything is fixed); the fixed field of {e,σ}\{e,\sigma\} is Q\mathbb{Q} (what is fixed by σ\sigma is exactly those a+b2a+b\sqrt2 with b=0b=0, that is, the rational numbers). Two subgroups ↔ two fields (EE and Q\mathbb{Q}), matching exactly.

2. The correspondence theorem: the two constructions are inverse to each other, and order-reversing

Theorem (Galois correspondence). Let E/FE/F be a Galois extension. Then the two maps above

{ Gal(E/F) subgroups } ⇄Gal(E/−)E(−) { F — E intermediate fields }\{\,\mathrm{Gal}(E/F)\text{ subgroups}\,\}\ \underset{\textstyle E^{(-)}}{\overset{\textstyle \mathrm{Gal}(E/-)}{\rightleftarrows}}\ \{\,F\text{ — }E\text{ intermediate fields}\,\}

are one-to-one correspondences inverse to each other, and are order-reversing (the bigger the subgroup, the smaller the corresponding fixed field). Concretely,

Gal(E/EH)=H,EGal(E/K)=K,∣H∣=[E:EH],[EH:F]=[ Gal(E/F):H ].\mathrm{Gal}(E/E^{H})=H,\qquad E^{\mathrm{Gal}(E/K)}=K,\qquad |H|=[E:E^{H}],\qquad [E^H:F]=[\,\mathrm{Gal}(E/F):H\,].

**Full proof in Dummit–Foote §14.2 (the fundamental theorem of Galois theory).

The only deep external citation in §4 — Artin’s theorem (also the most critical one).**

Full statement: let GG be a

finite

group of automorphisms of a field KK, and KGK^{G} its fixed field; then [K:KG]=∣G∣[K:K^{G}]=|G|, and K/KGK/K^{G} is a Galois extension, Gal(K/KG)=G\mathrm{Gal}(K/K^{G})=G. This section uses its [E:EH]=∣H∣[E:E^H]=|H| to close the correspondence bijection; the later section on normal correspondence also uses its Gal(K/KG)=G\mathrm{Gal}(K/K^G)=G to obtain the quotient group. It is the half of the bijection bridge of the Galois correspondence that is “admitted for now”: the proof of Artin’s theorem relies on

the linear independence of characters (Dedekind), which belongs to another course, and this section does not go into it. Apart from this deep external citation of Artin, and the two basic-course prerequisites already marked as cited earlier (“any two bases of the same space have the same size” from linear algebra, and the polynomial version of Bézout), §4 (together with the earlier tower formula, ∣Gal∣=[E:F]|\mathrm{Gal}|=[E:F], the lemma on sending roots to roots, and the first isomorphism theorem) is all derived step by step from the axioms of groups and fields.

3. The normal correspondence: normal subgroups ↔ normal (Galois) extensions

The dictionary also matches up the word “normal”.

Theorem (normal correspondence). Let E/FE/F be Galois, and let H≤Gal(E/F)H\le\mathrm{Gal}(E/F) correspond to the intermediate field K=EHK=E^H. Then

H in Gal(E/F) is normal⟺K/F is also a Galois extension.H\ \text{in}\ \mathrm{Gal}(E/F)\ \text{is normal}\quad\Longleftrightarrow\quad K/F\ \text{is also a Galois extension}.

And in that case Gal(K/F)≅Gal(E/F) / H\mathrm{Gal}(K/F)\cong\mathrm{Gal}(E/F)\,/\,H.

(This “normal correspondence” is also part of the fundamental theorem of Galois theory above; the proof is the same.)

4. An instance: the whole correspondence lattice of x3−2x^3-2 (S3↔S_3 \leftrightarrow subfields)

E=Q(23,ω)E=\mathbb{Q}(\sqrt[3]2,\omega), Gal(E/Q)=S3\mathrm{Gal}(E/\mathbb{Q})=S_3 (earlier), [E:Q]=6[E:\mathbb{Q}]=6. The 6 subgroups of S3S_3 correspond, in reverse order according to the correspondence theorem, to 6 intermediate fields:

S3S_3 subgroup HH (order)Fixed field EHE^H[EH:Q]=[S3:H][E^H:\mathbb{Q}]=[S_3:H]
{e}\{e\} (1)the whole E=Q(23,ω)E=\mathbb{Q}(\sqrt[3]2,\omega)6
⟨ 23→ω23→ω223 (the 3-cycle) ⟩=A3\langle\,\sqrt[3]2\to\omega\sqrt[3]2\to\omega^2\sqrt[3]2\ \text{(the 3-cycle)}\,\rangle=A_3 (3, fixes ω\omega)Q(ω)\mathbb{Q}(\omega)2
the three transposition subgroups (2 each)Q(23)\mathbb{Q}(\sqrt[3]2), Q(ω23)\mathbb{Q}(\omega\sqrt[3]2), Q(ω223)\mathbb{Q}(\omega^2\sqrt[3]2)3 each
S3S_3 (6)Q\mathbb{Q}1

The order reversal is plain to see: the subgroups grow from {e}\{e\} (smallest) to S3S_3 (largest), and the fixed fields shrink from EE (largest) to Q\mathbb{Q} (smallest); in each row ∣H∣⋅[EH:Q]=6|H|\cdot[E^H:\mathbb{Q}]=6.

What the normal correspondence looks like here: - A3◃S3A_3\triangleleft S_3 (index 2, normal) ↔ Q(ω)/Q\mathbb{Q}(\omega)/\mathbb{Q} is a Galois extension (it is the splitting field of x2+x+1x^2+x+1, with both roots ω,ω2\omega,\omega^2 inside); the quotient S3/A3≅Z/2≅Gal(Q(ω)/Q)S_3/A_3\cong\mathbb{Z}/2\cong\mathrm{Gal}(\mathbb{Q}(\omega)/\mathbb{Q}). ✓ - The three transposition subgroups are not normal ↔ Q(23)\mathbb{Q}(\sqrt[3]2) and the others are not Galois extensions (Q(23)\mathbb{Q}(\sqrt[3]2) is a real field and cannot hold the other two non-real roots ω23,ω223\omega\sqrt[3]2,\omega^2\sqrt[3]2; x3−2x^3-2 does not split in it).

The whole lattice of the Galois correspondence of x³−2: on the left, the lattice of the 6 subgroups of S₃ ({e} at the bottom, the three transpositions + A₃ in the middle, S₃ at the top); on the right, the lattice of the 6 intermediate fields of ℚ(∛2,ω) drawn upside down (E at the top, the three cubic fields + ℚ(ω) in the middle, ℚ at the bottom); order-reversing arrows in between connect corresponding items; the normal pair A₃↔ℚ(ω) is highlighted

Figure 17 The whole lattice of the Galois correspondence of x³−2: on the left, the lattice of the 6 subgroups of S₃ ({e} at the bottom, the three transpositions + A₃ in the middle, S₃ at the top); on the right, the lattice of the 6 intermediate fields of ℚ(∛2,ω) drawn upside down (E at the top, the three cubic fields + ℚ(ω) in the middle, ℚ at the bottom); order-reversing arrows in between connect corresponding items; the normal pair A₃↔ℚ(ω) is highlighted

The Galois correspondence (animation): the group ladder S₃▷A₃▷{e} and the field tower ℚ⊆ℚ(ω)⊆ℚ(ω,∛2) corresponding crosswise layer by layer — big group ↔ small field, inclusion reversed

Figure 18 The Galois correspondence (animation): the group ladder S₃▷A₃▷{e} and the field tower ℚ⊆ℚ(ω)⊆ℚ(ω,∛2) corresponding crosswise layer by layer — big group ↔ small field, inclusion reversed

This “subgroup lattice ↔ subfield lattice” is the full picture of the Galois correspondence: every structure on the group side (subgroup, normal, index) has a mirror image on the field side (intermediate field, Galois subextension, degree). The next section (§5) uses it to translate “the equation is solvable by radicals” into ”Gal\mathrm{Gal} is solvable”, arriving at the non-solvability of S5S_5.


§5 Closing the loop: the Abel–Ruffini theorem

Group solvable ⟺ solvable by radicals: why the quintic equation has no formula for its roots

The quadratic equation has a formula for its roots, x=−b±b2−4ac2ax=\tfrac{-b\pm\sqrt{b^2-4ac}}{2a}, and so do the cubic and the quartic (longer, but still using only +,−,×,÷+,-,\times,\div and root extraction). What about the quintic? This section answers it with the tools built earlier, and the key step of the conclusion uses ”A5A_5 cannot be broken apart”, proved in §3.

1. Radical extensions: towers of root extraction

What exactly does “solve with a formula for the roots” mean? It means starting from the coefficients, repeatedly applying +,−,×,÷+,-,\times,\div and then extracting roots, and writing the roots out. Translate this into fields:

Definition (radical extension / solvable by radicals). A radical tower is a chain of fields F=F0⊆F1⊆⋯⊆FmF=F_0\subseteq F_1\subseteq\cdots\subseteq F_m in which each layer “adds one root”: Fi+1=Fi(aini)F_{i+1}=F_i\big(\sqrt[n_i]{a_i}\big) (for some ai∈Fia_i\in F_i). A polynomial ff (with coefficients in FF) is called solvable by radicals if its roots all fall into some radical tower based on FF, inside its FmF_m.

Example: x3−2x^3-2 is solvable by radicals — its roots 23,ω23,ω223\sqrt[3]2,\omega\sqrt[3]2,\omega^2\sqrt[3]2 fall in the two-layer tower Q⊆Q(ω)⊆Q(ω,23)\mathbb{Q}\subseteq\mathbb{Q}(\omega)\subseteq\mathbb{Q}(\omega,\sqrt[3]2) (the first layer adds the cube root of unity ω=ζ3\omega=\zeta_3, that is, a non-real root of x3−1x^3-1; the second layer adds 23\sqrt[3]2; both are root extractions). The quadratic equation is more direct: the roots −b±Δ2a\tfrac{-b\pm\sqrt{\Delta}}{2a} fall in the one-layer tower Q(coefficients)⊆Q(coefficients)(Δ)\mathbb{Q}(\text{coefficients})\subseteq\mathbb{Q}(\text{coefficients})(\sqrt{\Delta}).

“Does the quintic equation have a formula for its roots” thus becomes: “is the general quintic polynomial solvable by radicals”.

2. Solvable groups: groups that can be peeled all the way down into commutative steps

§2 taught composition series. Give the groups whose “every layer’s quotient is commutative” a name of their own:

Definition (solvable group). A group GG is called solvable if there is a chain G=G0▹G1▹⋯▹Gk={e}G=G_0\triangleright G_1\triangleright\cdots\triangleright G_k=\{e\} in which each quotient Gi/Gi+1G_i/G_{i+1} is a commutative group. (Equivalently: the composition factors in a composition series are all cyclic groups of prime order.)

Example: S3▹A3▹{e}S_3\triangleright A_3\triangleright\{e\}, the two quotients Z/2\mathbb{Z}/2, Z/3\mathbb{Z}/3 are both commutative, so S3S_3 is

solvable

. S4S_4 is also solvable (peeled in §2: the quotients Z/2,Z/3,Z/2,Z/2\mathbb{Z}/2,\mathbb{Z}/3,\mathbb{Z}/2,\mathbb{Z}/2 are all commutative).

Counterexample (the key one): A5A_5 is

not solvable

— it is a

simple group

(proved in §3: apart from {e}\{e\} and itself it has no normal subgroup), so the only chain that can be peeled is A5▹{e}A_5\triangleright\{e\}, whose quotient is A5A_5 itself, and A5A_5 is

non-commutative

. No commutative steps can be peeled out. S5S_5 is not solvable either (its composition series S5▹A5▹{e}S_5\triangleright A_5\triangleright\{e\} runs into A5A_5, a non-commutative simple group, and cannot be taken apart further into commutative pieces).

The radical tower cannot reach the roots (animation): the radical tower of x⁵−6x+3 climbs upward layer by layer, +√, +∛, +⁵√, and stops when it hits the wall of A₅ (proved unbreakable in §3) — radicals can never reach its roots; this is exactly

Figure 19 The radical tower cannot reach the roots (animation): the radical tower of x⁵−6x+3 climbs upward layer by layer, +√, +∛, +⁵√, and stops when it hits the wall of A₅ (proved unbreakable in §3) — radicals can never reach its roots; this is exactly the root of “there is no formula for the roots”

A small group-theory fact along the way

(needed for the ⟹ direction below, and can be proved on the spot): the

subgroups and quotient groups of a solvable group are also solvable

. Subgroup HH: intersecting with the chain gives Hi=H∩GiH_i=H\cap G_i; by the second isomorphism theorem (§2), Hi/Hi+1H_i/H_{i+1} embeds into the commutative group Gi/Gi+1G_i/G_{i+1}, so it is still commutative. Quotient group G/NG/N: reduce the chain modulo NN term by term; the quotients are quotients of the original quotients, still commutative. So “solvable” is closed under taking subgroups and taking quotients. (What the ⇒\Rightarrow direction really uses is the “quotient” half.) ∎

3. Kummer: extracting one root = one cyclic step

Each layer of a radical tower is “adding a an\sqrt[n]a”. What does this layer look like on the group side?

Lemma (root extraction ⇒\Rightarrow cyclic).

If the base field FF

already contains the nn-th roots of unity

(that is, xn−1x^n-1 already splits in FF), then adjoining an nn-th root, F(an)/FF(\sqrt[n]a)/F, is a Galois extension, and its Galois group is

cyclic

.

Full proof in Dummit–Foote §14.7.

The precondition “contains the nn-th roots of unity” must be treated honestly: in general the base field F=QF=\mathbb{Q} does not contain them. The remedy is to add the layer of roots of unity first — Q⊆Q(ζn)\mathbb{Q}\subseteq\mathbb{Q}(\zeta_n) (ζn=\zeta_n= a primitive nn-th root of unity) is itself a radical layer of the “add 1n\sqrt[n]1” type, and its Galois group is commutative, which is also proved on the spot: any σ∈Gal(Q(ζn)/Q)\sigma\in\mathrm{Gal}(\mathbb{Q}(\zeta_n)/\mathbb{Q}) sends ζn\zeta_n to another primitive nn-th root of unity ζn k\zeta_n^{\,k} (σ\sigma preserves the orders of elements, so gcd⁡(k,n)=1\gcd(k,n)=1); define ψ(σ)=k∈(Z/n)×\psi(\sigma)=k\in(\mathbb{Z}/n)^\times; ψ\psi preserves multiplication (στ(ζn)=σ(ζn kτ)=ζn kσkτ\sigma\tau(\zeta_n)=\sigma(\zeta_n^{\,k_\tau})=\zeta_n^{\,k_\sigma k_\tau}) and is injective (σ\sigma is determined by σ(ζn)\sigma(\zeta_n)), so Gal\mathrm{Gal} embeds into the commutative group (Z/n)×(\mathbb{Z}/n)^\times, and is commutative. ∎ So in the tower obtained by “first adding the roots of unity, then extracting roots layer by layer”, the Galois group of every layer is commutative (the roots-of-unity layer is commutative, and each layer after that is cyclic by the lemma above).

Example: Q⊆Q(ω)⊆Q(ω,23)\mathbb{Q}\subseteq\mathbb{Q}(\omega)\subseteq\mathbb{Q}(\omega,\sqrt[3]2). The first layer Q(ω)/Q\mathbb{Q}(\omega)/\mathbb{Q} adds the cube root of unity ω\omega, Gal=Z/2\mathrm{Gal}=\mathbb{Z}/2 (commutative); in the second layer Q(ω,23)/Q(ω)\mathbb{Q}(\omega,\sqrt[3]2)/\mathbb{Q}(\omega) the base field already contains ω\omega, and by the lemma above (root extraction ⟹ cyclic) adding 23\sqrt[3]2 gives Gal=Z/3\mathrm{Gal}=\mathbb{Z}/3 (cyclic). Both layers are commutative.

4. The core theorem: solvable by radicals ⟺ the Galois group is solvable

Core theorem (Galois’s solvability criterion). An FF-coefficient polynomial ff is solvable by radicals   ⟺  \iff its Galois group Gal(f)\mathrm{Gal}(f) is solvable.

Proof

(both directions; the only external citations left are, in the ⟸ direction,

Kummer in reverse

[the Lagrange resolvent] + the normal closure being still radical; everything else is derived).

(⇒\Rightarrow solvable by radicals ⇒\Rightarrow Gal(f)\mathrm{Gal}(f) solvable) — this is the direction the finale needs.

Let ff be solvable by radicals, its roots falling in a radical tower. First add all the roots of unity at the very bottom layer (the earlier Kummer section: the roots-of-unity layer is commutative), then extract roots layer by layer; by the same earlier conclusion, we obtain a tower F⊆F1⊆⋯⊆FmF\subseteq F_1\subseteq\cdots\subseteq F_m,

each layer Fi+1/FiF_{i+1}/F_i of which is a Galois extension with commutative Galois group, and FmF_m contains all the roots of ff. Here we must add a

key remark: “every layer is Galois” alone does not guarantee that Fm/FF_m/F as a whole is Galois (being Galois is not transitive — in Q⊆Q(2)⊆Q(24)\mathbb{Q}\subseteq\mathbb{Q}(\sqrt2)\subseteq\mathbb{Q}(\sqrt[4]2) each layer is Galois of degree 2, but Q(24)/Q\mathbb{Q}(\sqrt[4]2)/\mathbb{Q} is not normal). The remedy is to

take FmF_m to be a Galois extension over FF: take the

normal closure of this radical tower over FF; it is still a radical extension (the normal closure of a radical extension is still radical — cited as a standard result and not gone into in this section, like Kummer), and layer by layer it can still be arranged into commutative Galois layers. So Fm/FF_m/F is both Galois as a whole and commutative at every layer. Apply the

Galois correspondence

(the previous section) to Fm/FF_m/F: the tower of fields F⊆F1⊆⋯⊆FmF\subseteq F_1\subseteq\cdots\subseteq F_m corresponds to the chain of subgroups Gal(Fm/F)⊇Gal(Fm/F1)⊇⋯⊇{e}\mathrm{Gal}(F_m/F)\supseteq\mathrm{Gal}(F_m/F_1)\supseteq\cdots\supseteq\{e\};

each layer Fi+1/FiF_{i+1}/F_i is Galois, so by the normal correspondence of the previous section, adjacent subgroups satisfy Gal(Fm/Fi+1)◃Gal(Fm/Fi)\mathrm{Gal}(F_m/F_{i+1})\triangleleft\mathrm{Gal}(F_m/F_i), with quotient ≅Gal(Fi+1/Fi)\cong\mathrm{Gal}(F_{i+1}/F_i)

commutative

— this is exactly a chain with commutative quotients, so Gal(Fm/F)\mathrm{Gal}(F_m/F) is

solvable

. And the splitting field of ff, E⊆FmE\subseteq F_m, is a Galois subextension over FF, so by the

normal correspondence

(previous section: E/FE/F normal ⇒\Rightarrow Gal(Fm/E)◃Gal(Fm/F)\mathrm{Gal}(F_m/E)\triangleleft\mathrm{Gal}(F_m/F), with quotient precisely Gal(E/F)\mathrm{Gal}(E/F)), Gal(f)=Gal(E/F)\mathrm{Gal}(f)=\mathrm{Gal}(E/F) is a

quotient group of Gal(Fm/F)\mathrm{Gal}(F_m/F); a quotient of a solvable group is solvable (the small fact in the earlier “solvable groups” section), so Gal(f)\mathrm{Gal}(f) is solvable.

(⇐\Leftarrow Gal(f)\mathrm{Gal}(f) solvable ⇒\Rightarrow solvable by radicals).

Conversely: Gal(f)\mathrm{Gal}(f) solvable gives a chain of subgroups with commutative quotients — then

refine each commutative quotient into cyclic quotients

(any finite commutative group can be refined into a string of cyclic quotients of prime order, that is, the equivalent formulation in the earlier “solvable groups” section); first add the roots of unity to the base field, then translate this cyclic chain back to the field side through the Galois correspondence, obtaining a tower of intermediate fields,

each layer with cyclic Galois group; by

Kummer in reverse

— when the base field contains the roots of unity, a cyclic Galois extension must be of the form F(an)F(\sqrt[n]a), and each layer is just adding a ⋅n\sqrt[n]{\cdot} (this step relies on the Lagrange resolvent, and is one of the three external citations from field theory in §4/§5 — the other two are Artin in §4 and “the normal closure is still radical” used in the ⇒\Rightarrow direction; like Artin: a standard result of another course, not gone into in this section). So the roots fall into a radical tower, and ff is solvable by radicals. ∎

Example (the criterion paying out): x3−2x^3-2‘s Gal=S3\mathrm{Gal}=S_3 is solvable (the earlier “solvable groups” section) ⇒\Rightarrow by the criterion it is solvable by radicals — exactly the earlier “radical extension” tower Q⊆Q(ω)⊆Q(ω,23)\mathbb{Q}\subseteq\mathbb{Q}(\omega)\subseteq\mathbb{Q}(\omega,\sqrt[3]2), matching the two commutative quotients of S3▹A3▹{e}S_3\triangleright A_3\triangleright\{e\}. Solvable groups ↔ towers of root extraction, the two sides corresponding layer by layer.

5. The finale: x5−6x+3x^5-6x+3 and Abel–Ruffini

The criterion moves “is there a formula for the roots” entirely onto the group: as soon as we find a quintic polynomial whose Galois group is not solvable, it has no solution in radicals.

Before getting down to it, let us first invite in someone who will help us below. Cauchy (Augustin-Louis Cauchy, 1789–1857) was one of the rare prolific figures in the history of mathematics, publishing as many as 789 papers in his lifetime; the diligence with which he submitted to the French Academy of Sciences’ Comptes Rendus surpassed all his peers. He was a devout Catholic and a staunch legitimist royalist — which placed him at exactly the opposite political end from the republican Galois. After the July Revolution of 1830, the new king Louis-Philippe demanded an oath of allegiance; Cauchy would rather give up all his teaching posts in Paris and wander in exile to Turin and Prague than swear an oath against his conscience, and only returned home several years later. He was also known for his generosity: according to the eulogy given at his funeral by the mayor of Sceaux, Cauchy made great financial sacrifices for the town’s schools and charities; when the mayor expressed surprise, he replied: « Ne vous effrayez pas, ce n’est que mon traitement, c’est l’Empereur qui paye » (“Don’t be alarmed, it is only my salary; it is the Emperor who pays”).

What Cauchy left to group theory is a result that fills exactly the gap in Lagrange’s theorem. Lagrange tells us: the order of a subgroup must divide the order of the group; but the converse does not necessarily hold — a group of order 60 does not necessarily have a subgroup of order 15. Yet Cauchy proved in 1845: as soon as a prime pp divides the order of a group, the group must contain an element of order pp. So that group of order 60, though not guaranteed to have a subgroup of order 15, must contain elements of order 2, 3 and 5. Later, when proving Gal(f)=S5\mathrm{Gal}(f)=S_5, we will use its p=5p=5 case — at that point it will be proved clearly on the spot with the picture of a ring of beads.

Take f(x)=x5−6x+3f(x)=x^5-6x+3. - Irreducible: Eisenstein’s criterion with p=3p=3 (the non-leading coefficients 0,0,0,−6,30,0,0,-6,3 are all divisible by 33, and the constant term 33 is not divisible by 99), so ff is irreducible over Q\mathbb{Q}. (Eisenstein was used in §4.) - Gal(f)=S5\mathrm{Gal}(f)=S_5: regard Gal(f)\mathrm{Gal}(f) as a permutation group on the 5 roots of ff (≤S5\le S_5), and prove in three steps that it is the whole of S5S_5. - Contains a 55-cycle: ff irreducible ⇒\Rightarrow Gal\mathrm{Gal} is transitive on the 5 roots — any two roots α,β\alpha,\beta give Q(α)≅Q[x]/(f)≅Q(β)\mathbb{Q}(\alpha)\cong\mathbb{Q}[x]/(f)\cong\mathbb{Q}(\beta), and this isomorphism extends to an automorphism of the splitting field (the earlier machinery of sending roots to roots), sending α\alpha to β\beta, so any root can reach any root. By the orbit-stabilizer theorem, the orbit length 5∣∣Gal∣5\mid|\mathrm{Gal}|. > Cauchy’s theorem (p∣∣G∣⇒Gp\mid|G|\Rightarrow G has an element of order pp), proved on the spot (pp prime; with the picture of a ring of beads): string pp beads into a ring, write a group element on each, x1,…,xpx_1,\dots,x_p, and require that multiplied in order they give =e=e. How many such legal rings are there? The first p−1p-1 beads are chosen freely, and the last one is determined by xp=(x1⋯xp−1)−1x_p=(x_1\cdots x_{p-1})^{-1}: ∣G∣p−1|G|^{p-1} in all. > After turning the ring by one place, (x1,…,xp)→(x2,…,xp,x1)(x_1,\dots,x_p)\to(x_2,\dots,x_p,x_1), it is still legal: x2⋯xpx1=x1−1(x1⋯xp)x1=ex_2\cdots x_px_1=x_1^{-1}(x_1\cdots x_p)x_1=e. A ring turned over and over either turns out pp mutually different appearances (a group of pp — pp is prime, there is no intermediate size), or stays the same however it is turned (if and only if all the beads are the same aa, with ap=ea^p=e; called an all-same ring). > Group them by “turning one place”: the non-all-same ones in groups of pp, each all-same ring on its own ⟹ the number of all-same rings ≡∣G∣p−1(modp)\equiv|G|^{p-1}\pmod p. p∣∣G∣⇒p∣∣G∣p−1p\mid|G|\Rightarrow p\mid|G|^{p-1}, so the number of all-same rings is divisible by pp; the trivial (e,…,e)(e,\dots,e) already counts as one ⟹ ≥p≥2\ge p\ge2 ⟹ there is at least one more (a,…,a)(a,\dots,a), a≠ea\neq e, ap=ea^p=e, that is, an element of order pp. ∎ > > Take p=5p=5 (a ring of 5 beads): 5∣∣Gal∣5\mid|\mathrm{Gal}| gives an element of order 5 — in S5S_5 an element of order 5 can only be a 55-cycle. - Contains a transposition: ff has exactly 3 real roots + 1 pair of conjugate complex roots (the derivative has only two real critical points → the graph crosses the xx axis 3 times); complex conjugation fixes the 3 real roots and swaps that pair of complex roots, which is exactly a transposition. - 55-cycle + transposition ⇒S5\Rightarrow S_5 (proved on the spot, p=5p=5 prime): let the 55-cycle be σ\sigma and the transposition τ\tau. Relabel so that τ=(1 2)\tau=(1\,2). Since pp is prime, ⟨σ⟩\langle\sigma\rangle is transitive, some power σk\sigma^k sends 1 ⁣→ ⁣21\!\to\!2 and is still a 55-cycle, and ⟨σk⟩=⟨σ⟩\langle\sigma^k\rangle=\langle\sigma\rangle (kk coprime to 55), so σk\sigma^k can be used in place of σ\sigma; then relabel the remaining three points (fixing 1,21,2, τ\tau unchanged) so that σk=(1 2 3 4 5)\sigma^k=(1\,2\,3\,4\,5). Conjugating (1 2)(1\,2) with it gives in turn (2 3),(3 4),(4 5)(2\,3),(3\,4),(4\,5), and adjacent transpositions generate the whole of S5S_5. So ⟨σ,τ⟩=S5\langle\sigma,\tau\rangle=S_5. ∎

Putting the three steps together, Gal(f)\mathrm{Gal}(f) contains both a 55-cycle and a transposition, so Gal(f)=S5\mathrm{Gal}(f)=S_5.

The distribution of the roots of x⁵−6x+3: 3 real roots (red, fixed by complex conjugation) + 1 pair of conjugate complex roots (blue); complex conjugation only swaps this pair and fixes those three, which is exactly a transposition

Figure 20 The distribution of the roots of x⁵−6x+3: 3 real roots (red, fixed by complex conjugation) + 1 pair of conjugate complex roots (blue); complex conjugation only swaps this pair and fixes those three, which is exactly a transposition

Complex conjugation = a transposition (animation): the 5 roots of x⁵−6x+3 in the complex plane; complex conjugation reflects across the real axis, swapping only that pair of complex roots and fixing the three real roots ⇒ a transposition

Figure 21 Complex conjugation = a transposition (animation): the 5 roots of x⁵−6x+3 in the complex plane; complex conjugation reflects across the real axis, swapping only that pair of complex roots and fixing the three real roots ⇒ a transposition

The Abel–Ruffini theorem: the general polynomial equation of degree five and above has no uniform formula for its roots in radicals. The concrete x5−6x+3x^5-6x+3 above is a counterexample — its roots cannot be written out using only the coefficients, +−×÷+-\times\div and root extraction.

The two composition series, solvable vs non-solvable: on the left, S₃▷A₃▷{e} of x³−2, each quotient ℤ/2, ℤ/3 commutative (green · solvable → has a solution in radicals); on the right, S₅▷A₅▷{e} of x⁵−6x+3, which hits A₅ (a non-commutative simple group, proved in §3), a layer that cannot be peeled into commutative steps (red · dashed · unbreakable), so non-solvable → no solution in radicals. Bottom = Abel–Ruffini: A₅, this non-commutative simple atom, is the root of the quintic having no uniform formula for its roots

Figure 22 The two composition series, solvable vs non-solvable: on the left, S₃▷A₃▷{e} of x³−2, each quotient ℤ/2, ℤ/3 commutative (green · solvable → has a solution in radicals); on the right, S₅▷A₅▷{e} of x⁵−6x+3, which hits A₅ (a non-commutative simple group, proved in §3), a layer that cannot be peeled into commutative steps (red · dashed · unbreakable), so non-solvable → no solution in radicals. Bottom = Abel–Ruffini: A₅, this non-commutative simple atom, is the root of the quintic having no uniform formula for its roots

Solvable vs non-solvable (animation): the roots of x⁵=2 form a regular pentagon, and radicals light up the five vertices one by one (solvable ✓); the roots of x⁵−6x+3 are scattered, and radicals reach out but cannot get to them (non-solvable ✗)

Figure 23 Solvable vs non-solvable (animation): the roots of x⁵=2 form a regular pentagon, and radicals light up the five vertices one by one (solvable ✓); the roots of x⁵−6x+3 are scattered, and radicals reach out but cannot get to them (non-solvable ✗)

The honest scope

(do not exaggerate): this does not say “no quintic equation can be solved”. Some quintics

can

be solved by radicals, for example x5−2x^5-2 (roots 25⋅ζ5k\sqrt[5]2\cdot\zeta_5^k, solvable Galois group). What Abel–Ruffini says is that

there is no formula that works for all quintics, and that

there exist

concrete equations like x5−6x+3x^5-6x+3 that simply cannot be written in radicals.

Tying back to §3. The last piece of the puzzle in the whole argument is ”A5A_5 cannot be broken apart”. In §3 we counted out A5A_5 element by element, computed 12+1212+12 with centralizers, and then checked divisibility of 60 case by case, proving that it is the smallest non-commutative simple group — at that time it was still just a “symmetry atom”. Now its meaning shows itself: precisely because the atom A5A_5 is non-commutative and also cannot be broken apart, S5S_5 is not solvable, and the quintic equation has no formula for its roots in radicals.


Epilogue: the first atom, and a list no one had seen

A5A_5 is the first “non-commutative symmetry atom” we have run into. You might naturally guess: the symmetry atoms are just the column of even-permutation groups A5,A6,A7,…A_5, A_6, A_7, \dots, right? Find them all, and isn’t the story over?

Precisely not. List all the symmetry atoms (non-commutative simple groups) “smaller than two thousand”, and you get this string of numbers:

60,168,360,504,660,1092.60,\quad 168,\quad 360,\quad 504,\quad 660,\quad 1092.

6060 is A5A_5, 360360 is A6A_6 — but that 168168 no longer belongs to the family of alternating groups. It comes from another kind of regular family (mathematicians later called it PSL(2,7)\mathrm{PSL}(2,7), belonging to the large class of “Lie type”) — these predictable families were later arranged into a “periodic table”. 168168 is the first atom on the table to jump out of the alternating groups, and it told people for the first time: the atoms of symmetry are much richer than the one family of alternating groups; and the predictable families are not just one either. The true exceptions, which “no periodic table can hold”, only come on stage further on.

The non-commutative symmetry atoms smaller than 2000: 60(A₅), 360(A₆) in the alternating-group family; 168=PSL(2,7) is the first to jump out of the alternating groups, coming from

Figure 24 The non-commutative symmetry atoms smaller than 2000: 60(A₅), 360(A₆) in the alternating-group family; 168=PSL(2,7) is the first atom to jump out of the alternating groups, coming from the “Lie type” periodic table

The exceptional atoms'

Figure 25 The “periodic table” of the exceptional atoms (animation): first the alternating groups Aₙ are laid out in a column, then all the non-commutative atoms smaller than 2000 are listed, 60·168·360·504·660·1092, with 168 highlighted — it is not any Aₙ; it is the first atom to jump out of the alternating-group family

And how hard are these atoms to find? Later we will meet two exceptional atoms that each scramble 100100 objects, of sizes 604,800604{,}800 and 44,352,00044{,}352{,}000 — that already sounds big, but the world they live in (all the even permutations of 100100 objects) is a 158158-digit number; within it those two atoms are smaller, by who knows how many orders of magnitude, than an atom is to the whole visible universe. In a universe too large to imagine, searching for some things you do not even know exist — that is the story that follows.

It will bring humanity into a war fought for thirty years, whose proof is so long that no one can read it through alone (EP5). And at the end of that war crouches a giant beast hidden in the deepest place, which no one had expected to exist.

But that is a story for later.


Sources

Biographies of the mathematicians (the historical skeleton) — MacTutor: Abel, Ruffini, Jordan, Galois, Lagrange, Cauchy. They support the lives and dates of the people in the text (Abel’s death from illness, the gap in Ruffini’s 1799 work, Jordan’s 1870 Traité des substitutions, Cauchy’s 1845 theorem and exile, Lagrange’s 1770 Réflexions).

Abel’s life (tuberculosis) — Wikipedia: Niels Henrik Abel. The dates of birth and death and the background of the correspondence with Crelle in the section “The letter that came too late”.

Galois’s testament letter on the eve of the duel — IHP: Lettre-testament de Galois (images of the original at the Institut Henri Poincaré in Paris). Supports the “manuscript on the eve of the duel” mentioned in the introduction.

The impossibility of the 15-puzzle and debunking the Loyd legend — cut-the-knot: The Fifteen Puzzle (including the research of Slocum & Sonneveld, 2006: the real inventor was Noyes Chapman, not Loyd). Supports the historical boundaries of the parity argument in the introduction.

The series’ source book — Mark Ronan, Symmetry and the Monster (OUP, 2006): author page, Mark Ronan. The skeleton of the story, the list of non-commutative simple groups <2000, the exceptional atoms (epilogue).

Standard references for group theory and field theory — D. S. Dummit & R. M. Foote, Abstract Algebra, 3rd ed. (Wiley, 2004): isomorphism theorems §3.3 · composition series and Jordan–Hölder §3.4 · field extensions and the degree of simple extensions §13.1 · the tower formula §13.2 · splitting fields and extension of isomorphisms §13.4 · Galois groups and automorphisms permuting roots §14.1 · the fundamental correspondence theorem of Galois theory §14.2 · solvability and radical extensions (Kummer, the insolvability of the quintic) §14.7. The sources of the standard lemmas marked “full proof in” in the main text. (See also Artin, Galois Theory, and Stewart, Galois Theory.)

The historical portraits in the text (Abel, Galois, Ruffini, Jordan) and the illustration (Loyd’s 15-puzzle) are all taken from Wikimedia Commons and are in the public domain (PD-old). The mathematical diagrams (Cayley tables, conjugacy classes, field towers, Galois correspondence lattices, root distributions, composition series, the periodic table of atoms, etc.) are original to this series.