Lemma 2.15, p. 17 — for t ∈ I with t·I⁻¹ coprime to J, u ↦ t·u induces an R-module isomorphism M/JM → IM/IJM
ProvedLPRRingLWE.Clear.lemma_2_15Let be a number field with ring of integers , let be nonzero ideals, let be such that the ideal is coprime to (that is, ), and let be a nonzero fractional ideal of . Consider the -linear map
Then is surjective and its kernel is exactly . Equivalently, multiplication by induces an isomorphism of -modules
The lemma lets one replace an arbitrary ideal by the ring itself modulo : with and it identifies with , and with it identifies with . Both reductions of the paper (§4.2 and §5) rest on these identifications.
Formalization Note The paper's sentence "Moreover, this isomorphism may be efficiently inverted given , and " is algorithmic and is not formalized. The hypotheses , , express the paper's convention that ideals are nonzero (footnote 2, p. 13); is essential because Lean sets . The isomorphism is stated through the given map (surjectivity and kernel), not as the bare existence of some isomorphism, which would hold for unrelated reasons.
import Mathlib import Definitions.Def_LPRRingLWE_Clear_Setting
namespace LPRRingLWE.Clear
open NumberField
open scoped nonZeroDivisors
/-- Lemma 2.15, p. 17: for `t ∈ I` with `t · I⁻¹` coprime to `J` and a fractional ideal `M`,
the map `M → IM/IJM`, `u ↦ t · u mod IJM`, is surjective with kernel `JM`; that is,
`θ_t(u) = t · u` induces an `𝓞 K`-module isomorphism `M/JM ≅ IM/IJM`. -/
theorem lemma_2_15 {K : Type*} [Field K] [NumberField K]
(I J : Ideal (𝓞 K)) (hI : I ≠ ⊥) (hJ : J ≠ ⊥) (t : 𝓞 K) (ht : t ∈ I)
(hcop : ClearedCoprime t I J) (M : FractionalIdeal (𝓞 K)⁰ K) (hM : M ≠ 0) :
Function.Surjective (theta t I J ht M) ∧
LinearMap.ker (theta t I J ht M) = sub M ((J : FractionalIdeal (𝓞 K)⁰ K) * M) := by sorry
end LPRRingLWE.Clear
Confirmed by the mission captain (proposal self-audit).
Confirmed by the moderator at approval.