Prove2Me
Navigate
DiscoverCollectionsFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in
← Formalpedia

Lemma 2.15, p. 17 — for t ∈ I with t·I⁻¹ coprime to J, u ↦ t·u induces an R-module isomorphism M/JM → IM/IJM

Proved
LPRRingLWE.Clear.lemma_2_15

by mikedeng1 · Oct 9, 2026 · Mathlib 0df444a (Lean v4.33.1)

dedekind-domainfractional-idealp2o-batch-pfp2ap2o-gran-per-chapterp2o-plan-paperp2o-v1quotient-modulering-lwe

Let KKK be a number field with ring of integers R=OKR = \mathcal{O}_KR=OK​, let I,J⊆RI, J \subseteq RI,J⊆R be nonzero ideals, let t∈It \in It∈I be such that the ideal t⋅I−1⊆Rt\cdot I^{-1} \subseteq Rt⋅I−1⊆R is coprime to JJJ (that is, t⋅I−1+J=Rt\cdot I^{-1} + J = Rt⋅I−1+J=R), and let MMM be a nonzero fractional ideal of KKK. Consider the RRR-linear map

θt:M⟶IM/IJM,u⟼t⋅u mod IJM.\theta_t : M \longrightarrow IM/IJM, \qquad u \longmapsto t\cdot u \bmod IJM .θt​:M⟶IM/IJM,u⟼t⋅umodIJM.

Then θt\theta_tθt​ is surjective and its kernel is exactly JMJMJM. Equivalently, multiplication by ttt induces an isomorphism of RRR-modules

M/JM  → ∼   IM/IJM,u mod JM⟼tu mod IJM.M/JM \;\xrightarrow{\ \sim\ }\; IM/IJM, \qquad u \bmod JM \longmapsto t u \bmod IJM .M/JM ∼ ​IM/IJM,umodJM⟼tumodIJM.

The lemma lets one replace an arbitrary ideal III by the ring RRR itself modulo qqq: with J=⟨q⟩J = \langle q\rangleJ=⟨q⟩ and M=RM = RM=R it identifies R/qRR/qRR/qR with I/qII/qII/qI, and with M=I∨M = I^\veeM=I∨ it identifies I∨/qI∨I^\vee/qI^\veeI∨/qI∨ with R∨/qR∨R^\vee/qR^\veeR∨/qR∨. Both reductions of the paper (§4.2 and §5) rest on these identifications.

Formalization Note The paper's sentence "Moreover, this isomorphism may be efficiently inverted given I,J,MI, J, MI,J,M, and ttt" is algorithmic and is not formalized. The hypotheses I≠0I \neq 0I=0, J≠0J \neq 0J=0, M≠0M \neq 0M=0 express the paper's convention that ideals are nonzero (footnote 2, p. 13); I≠0I \neq 0I=0 is essential because Lean sets 0−1=00^{-1} = 00−1=0. The isomorphism is stated through the given map (surjectivity and kernel), not as the bare existence of some isomorphism, which would hold for unrelated reasons.

Preamble
import Mathlib
import Definitions.Def_LPRRingLWE_Clear_Setting
Formal statement
namespace LPRRingLWE.Clear

open NumberField
open scoped nonZeroDivisors

/-- Lemma 2.15, p. 17: for `t ∈ I` with `t · I⁻¹` coprime to `J` and a fractional ideal `M`,
the map `M → IM/IJM`, `u ↦ t · u mod IJM`, is surjective with kernel `JM`; that is,
`θ_t(u) = t · u` induces an `𝓞 K`-module isomorphism `M/JM ≅ IM/IJM`. -/
theorem lemma_2_15 {K : Type*} [Field K] [NumberField K]
    (I J : Ideal (𝓞 K)) (hI : I ≠ ⊥) (hJ : J ≠ ⊥) (t : 𝓞 K) (ht : t ∈ I)
    (hcop : ClearedCoprime t I J) (M : FractionalIdeal (𝓞 K)⁰ K) (hM : M ≠ 0) :
    Function.Surjective (theta t I J ht M) ∧
      LinearMap.ker (theta t I J ht M) = sub M ((J : FractionalIdeal (𝓞 K)⁰ K) * M) := by sorry

end LPRRingLWE.Clear
Source
Lyubashevsky, Peikert & Regev, On ideal lattices and learning with errors over rings, J. ACM 60(6) (2013), p. 17, Lemma 2.15
Human review
  • Endorsed by Shuze Chen · Oct 9, 2026

    Confirmed by the moderator at approval.

  • Endorsed by mikedeng1 · Oct 9, 2026

    Confirmed by the mission captain (proposal self-audit).

View graph

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me