Subgroups and the Subgroup Tests
A subset is a subgroup, written , when is itself a group under the operation of : it contains the identity, is closed under the operation, and is closed under inverses. The two-step test shortens this: a nonempty is a subgroup as soon as it is closed under the operation and closed under inverses. When is finite, the one-step test drops the inverse check entirely — closure under the operation alone forces to be a subgroup.
Associativity is inherited from for free, so only closure, the identity, and inverses can go wrong, and checking all three from the definition is more work than the tests need. Closure under inverses already forces the identity to appear: pick any , then , so by closure. The one-step test works only for finite because closure traps every power inside , and a finite set of powers must eventually repeat, which (as the final section proves) forces some power of to equal . Lose finiteness and the shortcut breaks, which is exactly the trap in "Where it goes wrong" below.
Let inside . is nonempty, the sum of two even numbers is even (closed), and the negative of an even number is even (closed under inverses) — so by the two-step test. The odd integers fail immediately: is not odd, so they are not even closed, and confirms it is no subgroup.
Is a subgroup of (addition mod )? Since is finite, the one-step test applies: check closure alone. , , — every sum lands back in . So , with no separate check needed for or for inverses.
Is a subgroup of ? Before testing closure, check that at all: consists of the residues coprime to , but , so is not even a unit mod . fails to be a subset of , so the question of closure never arises — it cannot be a subgroup.
Is a subgroup of under multiplication mod ? Each element is coprime to , so . Squaring every element: , , (all mod ) — so every non-identity element is its own inverse. The table below confirms closure: every product of two elements of lands in . By the two-step test, .
The one-step test needs finite (or at least finite); for an infinite group, closure under the operation alone is not enough. The positive integers are closed under addition inside — the sum of two positive integers is positive — yet is not a subgroup: , and has no inverse inside (that inverse would have to be ). Powers of under addition, , never repeat and never return to , which is exactly what the one-step test relies on to fail.
Is a subgroup of ?
Show the answerHide the answer
Yes. is finite, so closure alone suffices: the sum of two even residues is even, and reducing mod keeps it even, so every sum of two elements of stays in . has elements, half of — later this will follow from the theorem of Lagrange (Topic 5), but for now the one-step test alone settles it.
Cyclic Groups and Generators
For , the set of all integer powers (written when the operation is addition) is always a subgroup of , the cyclic subgroup generated by . A group is cyclic if for some single element , called a generator.
A cyclic subgroup is the smallest subgroup containing : it has to contain , so by closure it must contain every power of , and the two-step test (Section 1) confirms that the powers alone already form a subgroup, with nothing more to add. A cyclic group is therefore built from a single building block repeated over and over, which is why its structure turns out to be completely solvable — every subgroup, every element order, every count, as the rest of this topic shows. Not every element of a cyclic group is a generator, and a group can look cyclic from one element while being generated only partly by another.
, so generates all of ; so does . But , only the even integers — generates a proper subgroup, not all of . is cyclic, but "cyclic" does not mean every element is a generator.
Does generate ? List the multiples of mod : , and then back to — all twelve residues appear before the list repeats, so and is a generator. Contrast : its multiples mod are only , then back to — , a proper subgroup. The difference is but ; Section 3 explains exactly why the gcd decides this.
has elements (the numbers below coprime to both and ). If were cyclic, some element would have order . Computing orders directly: each have order (for instance , while and are not ), and have order (), have order (, , ), and has order . The largest order present is , not — no element generates the whole group, so is not cyclic.
In , does any positive multiple of ever equal ? No — for every positive integer . So has infinite order, and is an infinite cyclic subgroup (here, all of ). Every element of a finite group has finite order (Section 3), but a cyclic group itself need not be finite.
A common slip is checking only a few powers and assuming they must eventually cover the whole group. Listing multiples of mod : , and then again — only four values, not twelve, so , even though "looks" like a fine candidate. A generator must be followed all the way back to ; stopping early can hide that the orbit already closed up short.
Does generate ?
Show the answerHide the answer
List multiples of mod : , then back to — all ten residues appear, so : yes, generates (as expected, since ).
Orders in a Cyclic Group
The order of is the smallest positive integer with (additively, ); if no such exists, has infinite order. If is cyclic of order , then for every integer ,
The order of measures how far you have to run around the full cycle of elements before landing back on using steps of size ; is exactly the amount of overlap between the step size and the cycle length, so dividing it out gives the number of distinct steps before a repeat. When and share no common factor, visits every element and generates the whole group, which is the gcd-criterion for generators used informally in Section 2. This single formula answers every question about element orders in a cyclic group without ever listing powers by hand.
, so by the order formula . Checking directly: — three steps to return to , confirming the order is .
, so . Directly: — exactly five steps, matching the formula.
By the order formula, exactly when , i.e. . Checking : only and satisfy . So has exactly elements of order — matching the totient , since the generators of any cyclic group of order (here, the subgroup ) number .
The order formula assumes already sits inside a finite cyclic group. In itself, has infinite order (Section 2) — there is no finite to divide by. The formula only ever applies inside once that cyclic subgroup is known to be finite.
The order of is , never — those agree only when already divides . In , the order of is (check: ), not the meaningless . Always compute the gcd first; skipping straight to produces a number that is not even an integer as often as not.
Find the order of in .
Show the answerHide the answer
, so . Check: — six steps, as the formula predicts.
The Subgroups of a Cyclic Group
Every subgroup of a cyclic group is itself cyclic (proved in the final section). If has order , then for each divisor of there is exactly one subgroup of order , namely — and these are all the subgroups has. So a cyclic group of order has exactly as many subgroups as has divisors.
This is the payoff of the order formula: plugging in gives , so that single element already produces a subgroup of the right size. Uniqueness is the surprising half — a general group can have several different subgroups of the same order, but a cyclic group cannot, so once is known the entire subgroup lattice is known just from the divisors of , with no further work. This turns "find all subgroups" from a search into a counting problem.
The divisors of are , so has exactly subgroups, one per divisor: order : ; order : ; order : ; order : ; order : ; order : itself.
The divisors of are — eight of them — so has exactly subgroups, with those eight orders, no computation of any actual elements required.
Find the subgroup of of order . Here , , so the formula names the generator at once: . Then , and indeed is four steps, so as required — no guessing was needed to find it.
In , both and equal : multiples of give , and multiples of give , the same set in a different order. This is forced by uniqueness: both and have , so both have order by the order formula, and a cyclic group of order has only one subgroup of order for them to generate.
It is tempting to think different-looking generators give different subgroups of the same size, but uniqueness rules this out completely: has only ONE subgroup of order , however it is named. and : multiples of mod are , giving again — the exact same subgroup, not a second one. Two generators can coincide on the same subgroup even when the generators themselves look unrelated.
List the orders of all subgroups of , and find the subgroup of order .
Show the answerHide the answer
The divisors of are , so has subgroups of exactly those six orders. For order : , so the subgroup is .
Why It Works
Let be a nonempty subset of , closed under the operation and closed under inverses (the two-step test). Associativity holds in because it holds in all of . Pick any ; closure under inverses puts , and closure under the operation then puts . So contains the identity, is closed, and every element has an inverse in — all four group axioms hold, and . Conversely a subgroup obviously satisfies both closures, so the two-step test is exactly equivalent to the definition. Now suppose is finite and is a nonempty subset closed under the operation only (the one-step test). Fix ; closure keeps every power inside , and since is finite this list of powers must repeat: for some . Cancelling (valid in any group) gives with , so contains the identity via a positive power of . Let ; if then is its own inverse, and if then shows is the inverse of , and by closure. So is also closed under inverses, and the two-step test applies.
Let have order in , so has exactly elements and exactly when . Fix , let , and write , with . First, , so the order of divides . Second, suppose for some . Then , so , i.e. , i.e. ; since , this forces , impossible for . So the order of is exactly .
Let be cyclic and let . If it is cyclic, generated by . Otherwise contains some , and closure under inverses puts too, so contains a positive power of ; let be the smallest positive integer with . Then . For the reverse inclusion, take any (every element of is a power of ) and divide: with . Then , since both and lie in . By the minimality of , is forced, so . Hence is cyclic. Now suppose is finite of order . A short lemma first: for any , . By Bezout, for some integers , so ; conversely gives , so each subgroup contains the generator of the other, making . Now for each divisor of , the order formula gives , so is a subgroup of order — existence is settled. For uniqueness, let have order ; by the first paragraph for some , and forces . By the lemma, — the same subgroup found above. So exactly one subgroup of order exists for each divisor of .