Fact-checked by Grok 2 weeks ago

GF(2)

GF(2), also known as the Galois field of order 2, is the consisting of the two elements {0, 1}, where addition and multiplication are performed using arithmetic modulo 2. It is the unique (up to ) field of prime order 2 and serves as the prime of characteristic 2. As the smallest non-trivial , GF(2) underpins much of and , providing a foundational structure for binary operations. The operations in GF(2) are straightforward and correspond directly to bitwise operations in . Addition is equivalent to the (XOR) function, with the following table: aligns with the logical AND operation, as shown: These operations satisfy all field axioms, including commutativity, associativity, distributivity, and the existence of identities (0 for , 1 for ) and inverses (each element is its own , and 1 is the of itself). GF(2) is isomorphic to the 2, ℤ/2ℤ, and its additive group is cyclic of order 2 while the multiplicative group consists solely of {1}. GF(2) plays a central role in constructing larger finite fields of the form GF(2^n) for n > 1, which are built as quotient rings of polynomials over GF(2) modulo an of degree n. These extensions are vital in applications such as error-correcting codes—for instance, Hamming codes operate as linear codes over GF(2), enabling single-error correction in . In , GF(2) forms the basis for fields like GF(2^8) used in the (AES) for efficient bitwise computations during encryption processes. Additionally, vector spaces over GF(2) model linear algebra, with applications in , network coding, and .

Fundamentals

Definition

GF(2), also denoted \mathbb{F}_2, is the unique of order 2, consisting of the elements \{[0](/page/0), [1](/page/1)\} with and performed 2. It serves as the prime of 2, isomorphic to the \mathbb{Z}/2\mathbb{Z}, where the integers are reduced the prime 2. Alternatively, GF(2) can be constructed as the of the x^2 - x over the prime of 2, as both roots 0 and 1 lie within the field and satisfy t^2 = t for every element t \in \mathbb{F}_2. To verify that GF(2) is a , it must satisfy the field axioms: it forms a with unity under addition and multiplication, every non-zero is invertible, and the distributive law holds. The additive group is cyclic of 2, with as the and each its own (since $1 + 1 = [0](/page/0)). The multiplicative structure has as the unity, and the non-zero is its own ([1](/page/1) \cdot [1](/page/1) = [1](/page/1)). Commutativity, associativity, and distributivity follow directly from the corresponding properties in \mathbb{Z}/2\mathbb{Z}, verifiable by direct inspection of the two elements. GF(2) is unique up to isomorphism: any field with exactly two elements must be isomorphic to it, as all finite fields of the same order p^n (here p=2, n=1) are isomorphic, determined by the existence and uniqueness of the splitting field of x^{p^n} - x over the prime field \mathbb{F}_p.

Arithmetic Operations

In GF(2), the field with two elements denoted as {0, 1}, addition is defined as the operation modulo 2, which corresponds to the bitwise exclusive OR (XOR) for binary values. Specifically, the addition table yields: $0 + 0 = 0, $0 + 1 = 1, $1 + 0 = 1, and $1 + 1 = 0. Subtraction in GF(2) coincides with due to the field's of 2, where each element is its own , so x - y = x + y for all x, y \in \{0, 1\}. in GF(2) follows the standard binary rules, equivalent to the logical AND operation: $0 \times 0 = 0, $0 \times 1 = 0, $1 \times 0 = 0, and $1 \times 1 = 1. The is , satisfying x + 0 = x for all x \in GF(2), while the multiplicative identity is 1, with x \times 1 = x. Additionally, the of any x is x itself, as x + x = [0](/page/0). For , since the only non-zero is 1 and $1^2 = 1, the of 1 is 1 itself, making by a non-zero y equivalent to by y, so x / y = x \times y for y \neq [0](/page/0). by is undefined, consistent with axioms.

Properties

Characteristic and Structure

The field GF(2) has characteristic 2, defined as the smallest positive integer k such that k \cdot 1 = 0, where 1 denotes the multiplicative identity; this immediately implies that $1 + 1 = 0. As the prime field of characteristic 2, GF(2) is the smallest field with this property, consisting of the elements {0, 1} and generated additively and multiplicatively by 1, with no proper subfields. The of nonzero elements, denoted GF(2)^\times, is trivial, comprising solely the element and thus having ; this follows from the field's order being 2, making the group cyclic of $2 - 1 = [1](/page/1). As an (with no zero divisors, since every nonzero element has a ), GF(2) exhibits further structural simplicity: every element is idempotent under multiplication, satisfying x^2 = x for x \in \{0, [1](/page/1)\}, a property characteristic of Boolean rings. This idempotence and the field's characteristic 2 align GF(2) closely with , where the operation corresponds to the logical and to the , enabling direct between the field's structure and two-element lattices in computational contexts.

Vector Spaces over GF(2)

A over GF(2), the with two elements {0, 1}, consists of whose components are elements of GF(2), with and defined using the field's arithmetic operations 2. This binary nature means that any can be represented as a of 0s and 1s, where corresponds to bitwise XOR and by 1 leaves the unchanged while by 0 yields the zero . Due to the field's characteristic 2, as discussed in prior sections on field properties, is idempotent (adding a to itself results in zero), which simplifies many structural aspects compared to over fields of characteristic not equal to 2. The of a over GF(2) is the of a basis, and for an n-dimensional space, the total number of vectors is $2^n. A canonical example is \mathbb{F}_2^n, the set of all n-tuples with entries in GF(2), which forms an n-dimensional under componentwise and . For instance, in \mathbb{F}_2^2, a basis is \{(1,0), (0,1)\}, and the four elements are (0,0), (1,0), (0,1), and (1,1), interpretable as 2-bit strings. Every vector in this space is uniquely expressed as a of basis vectors with coefficients in {0,1}, reflecting the field's structure. Linear independence in a over GF(2) requires that no in the set is equal to the (via XOR) of the others. A set of \{v_1, \dots, v_k\} is linearly dependent if there exist coefficients c_i \in \mathbb{F}_2, not all zero, such that \sum c_i v_i = 0, where the sum is modulo 2; otherwise, the set is . The maximum size of a linearly set equals the , and bases provide minimal spanning sets for the space. The standard inner product on \mathbb{F}_2^n is defined as \langle x, y \rangle = \sum_{i=1}^n x_i y_i \pmod{2} for vectors x = (x_1, \dots, x_n) and y = (y_1, \dots, y_n). Two vectors are orthogonal if their inner product is 0, which plays a key role in concepts like orthogonal complements and self-orthogonal subspaces over GF(2). This is symmetric due to the commutativity of in GF(2). In characteristic 2, it satisfies \langle x, x \rangle = \sum_{i=1}^n x_i \pmod{2}, the of the of x, distinguishing it from positive definite inner products over the reals.

Representations

As a Quotient Ring

The field GF(2) is isomorphic to the \mathbb{Z}/2\mathbb{Z}, obtained by factoring out the principal (2) generated by the 2 from the \mathbb{Z}. This construction yields a because the (2) is maximal (equivalently, prime) in the principal ideal domain \mathbb{Z}, ensuring that the quotient has no zero divisors and every nonzero element is invertible. The elements of this quotient ring are the residue classes {{grok:render&&&type=render_inline_citation&&&citation_id=0&&&citation_type=wikipedia}} = 2\mathbb{Z} and {{grok:render&&&type=render_inline_citation&&&citation_id=1&&&citation_type=wikipedia}} = 1 + 2\mathbb{Z}, which are canonically identified with the set \{0, 1\}, where and are defined componentwise modulo 2. As an integral domain of characteristic 2, GF(2) is already a field, so its field of fractions coincides with itself; there are no proper fractions beyond the elements already present, reflecting the finite nature of the structure. This self-contained property underscores its role as the prime field of characteristic 2. GF(2) can also be realized as a quotient of the polynomial ring \mathbb{Z} by the ideal generated by 2 and a suitable polynomial that enforces the field's structure, such as (2, x), which collapses to \mathbb{Z}/2\mathbb{Z} by setting x \equiv 0. More generally, finite fields arise as quotients of polynomial rings over prime fields, but for GF(2) as the base case, the integer quotient provides the foundational construction. The arithmetic underlying GF(2) was discovered implicitly through 19th-century developments in modular arithmetic, notably in Carl Friedrich Gauss's Disquisitiones Arithmeticae (1801), where congruences modulo primes laid the groundwork for finite structures, though the explicit field-theoretic interpretation emerged later with Évariste Galois's work around 1830.

Explicit Operation Tables

The operations in GF(2), the finite field with two elements {0, 1}, are defined modulo 2, making addition equivalent to the exclusive-or (XOR) operation and multiplication equivalent to the logical AND operation. The addition table for GF(2) is as follows:
+01
001
110
This table illustrates that addition computes the : the sum is 1 if the inputs differ and 0 if they are the same. The multiplication table for GF(2) is:
×01
000
101
Multiplication yields 1 only when both inputs are 1, aligning with the (logical AND). These operations map directly to binary hardware primitives, where addition corresponds to XOR gates for bitwise parity checks and multiplication to AND gates for bit-wise conjunctions, enabling efficient implementations in digital circuits and software for tasks like error-correcting codes.

Algebraic Aspects

Finite Extensions

Finite extensions of GF(2) are finite fields GF(2^n) for integers n > 1, which serve as splitting fields for s over GF(2). These fields have exactly 2^n elements and are unique up to . Specifically, GF(2^n) can be constructed as the GF(2) / (p(x)), where p(x) is any monic of degree n over GF(2); the elements are then the residue classes of polynomials of degree less than n with coefficients in GF(2), and arithmetic is performed modulo p(x). A concrete example is GF(4), obtained using the x^2 + x + 1 over GF(2). Let \omega be a of this , so \omega^2 = \omega + 1. The elements of GF(4) are \{0, 1, \omega, \omega + 1\}, with \omega + 1 satisfying (\omega + 1)^2 = \omega since addition and multiplication follow the usual rules modulo 2 and the polynomial. The nonzero elements form the \{1, \omega, \omega + 1\}, where \omega^3 = 1 and \omega is a primitive element. The of GF(2^n), denoted GF(2^n)^\times, is cyclic of 2^n - 1. This means there exists a primitive element \alpha \in GF(2^n) such that every nonzero element is a power of \alpha, i.e., GF(2^n)^\times = {\alpha^0, \alpha^1, \dots, \alpha^{2^n - 2}}. The cyclicity follows from the structure of finite fields, where the group divides the exponent of and maximal elements generate the group. The of the extension GF(2^n)/GF(2) is generated by the Frobenius \sigma: x \mapsto x^2, which is a fixing GF(2) pointwise. Since \sigma^n = \mathrm{id} but \sigma^k \neq \mathrm{id} for 1 ≤ k < n, the is cyclic of order n, isomorphic to \mathbb{Z}/n\mathbb{Z}. This plays a key role in the structure of finite fields of characteristic 2. Subfields of GF(2^n) correspond to divisors of n: for each d dividing n, there is a unique subfield of order 2^d. In particular, the tower law implies that GF(2^{mn}) contains GF(2^m) as a subfield, with [GF(2^{mn}) : GF(2^m)] = n, forming a chain of extensions GF(2) \subset GF(2^m) \subset GF(2^{mn}). This structure allows iterative construction of larger fields from smaller ones.

Algebraic Closure

The algebraic closure of GF(2), denoted \overline{\mathrm{GF}(2)}, is the union of all its finite extensions \mathrm{GF}(2^n) for n = 1, 2, \dots. This construction yields an infinite field containing exactly one subfield isomorphic to \mathrm{GF}(2^n) for each positive integer n, with \mathrm{GF}(2^m) \subseteq \mathrm{GF}(2^n) if and only if m divides n. As the algebraic closure, \overline{\mathrm{GF}(2)} is algebraically closed, meaning it is the smallest of GF(2) in which every non-constant with coefficients in GF(2) factors completely into linear factors. All roots of such polynomials lie within some finite extension \mathrm{GF}(2^n), ensuring that \overline{\mathrm{GF}(2)} captures all algebraic elements over GF(2) without including transcendental extensions. The field \overline{\mathrm{GF}(2)} has characteristic 2, inheriting this property from GF(2), and is countable as an infinite union of finite fields. GF(2) itself is a perfect field, since finite fields of characteristic p are perfect: every element is a p-th power, and the Frobenius endomorphism x \mapsto x^p (here p=2, so x \mapsto x^2) is an automorphism. Consequently, every algebraic extension of GF(2), including \overline{\mathrm{GF}(2)}, is separable, as perfect fields have the property that all irreducible polynomials are separable and all algebraic extensions are separable. This separability ensures that the Galois group of \overline{\mathrm{GF}(2)} over GF(2) is profinite, isomorphic to the profinite completion of the integers \hat{\mathbb{Z}}, generated topologically by the Frobenius automorphism.

Applications

In Coding Theory

In coding theory, linear codes over GF(2) form a fundamental class of error-correcting codes, defined as subspaces of the GF(2)^n, where n is the code length. Each codeword is a in GF(2)^n with entries in {0,1}, and the code's dimension k corresponds to the number of bits, yielding 2^k codewords. The minimum distance d of the code, which determines its error-correcting capability, is the minimum (number of 1s) among nonzero codewords. These codes are particularly suited to binary channels due to the field's characteristic 2, where is 2, simplifying computations like checks. A linear [n,k,d]_2 code can be generated by a k × n G whose rows form a basis for the subspace; any codeword c is then c = u G for a message vector u in GF(2)^k. The dual view uses an (n-k) × n parity-check matrix H such that c H^T = 0 for all codewords c, ensuring the code is the of H. Both G and H have entries in {0,1}, and operations like over GF(2) use XOR for addition. For error correction, syndrome decoding computes the syndrome s = r H^T for a received vector r = c + e (where e is the vector), which equals H e^T; if errors are sparse, s identifies e via a or linear functionals, as distinct low-weight errors produce unique . A seminal example is the , a [7,4,3]_2 that corrects single errors and detects double errors, constructed with H whose columns are all nonzero vectors in GF(2)^3. Developed by in 1950 at to address errors in early equipment like the , it was motivated by unreliable vacuum-tube failures during long calculations. Simpler examples include the binary repetition code, such as the [3,1,3]_2 code repeating each bit thrice (codewords 000, 111), which corrects single errors by majority vote, and the even-weight code, the [n,n-1,2]_2 subcode of GF(2)^n where all codewords have even parity (weight even), useful for single-error detection via a single parity-check bit. These codes are analyzed over the binary symmetric channel (BSC), a model where each bit flips independently with probability p < 1/2, quantifying error performance through metrics like after decoding.

In Computer Science and Cryptography

In , operations over GF(2) underpin binary arithmetic at the hardware level, where addition corresponds to the bitwise XOR operation and multiplication to the bitwise AND operation, enabling efficient computation on standard CPUs. These bitwise instructions, such as XOR for addition in GF(2)-based spaces and AND for by 0 or 1, form the foundation of low-level programming and are optimized in processor architectures for of . In cryptography, GF(2) extensions play a central role in block and stream ciphers. The Advanced Encryption Standard (AES), based on the Rijndael algorithm, computes its substitution box (S-box) using multiplicative inversion in the finite field GF(2^8), defined by the irreducible polynomial x^8 + x^4 + x^3 + x + 1, followed by an affine transformation over GF(2) with a specific 8×8 matrix and constant vector to enhance nonlinearity and diffusion. Stream ciphers like Trivium generate keystreams through nonlinear feedback shift registers and linear feedback mechanisms operating entirely over GF(2), where state updates use XOR for addition and modular reductions via primitive polynomials. Boolean satisfiability (SAT) solvers leverage GF(2) to model problems involving parity constraints, representing XOR clauses as linear equations over GF(2) that can be solved via integrated into frameworks. This approach efficiently handles systems where variables are binary and equations enforce linear dependencies, as seen in cryptographic analysis and circuit verification tasks. Field-programmable gate arrays (FPGAs) exploit GF(2) arithmetic for high-performance implementations, particularly multipliers and inverters over GF(2^m), using systolic architectures or lookup tables to achieve low and in applications like . For instance, for solving large linear systems over GF(2) on FPGAs employs pipelined processing elements to parallelize row operations, outperforming software on sparse matrices common in error-correcting decoders. A prominent example is the , a code-based public-key scheme proposed in 1978, which relies on binary Goppa codes over GF(2) for and efficient decoding, offering resistance to quantum attacks by hiding the code's structure in a disguised .

References

  1. [1]
    Finite Field -- from Wolfram MathWorld
    The finite field GF(2) consists of elements 0 and 1 which satisfy the following addition and multiplication tables. 0. 1.Missing: properties | Show results with:properties
  2. [2]
    [PDF] PART 4: Finite Fields of the Form GF(2n) Theoretical Underpinnings ...
    Feb 13, 2011 · GF(2) is a finite field with elements {0,1}, modulo 2 addition and multiplication. GF(2n) is a finite field for every n.
  3. [3]
    [PDF] The finite field with 2 elements
    The simplest finite field is. GF(2) = F2 = {0,1} = Z/2. It has addition and multiplication + and × defined to be. 0+0=0 0+1=1 1+0=1 1+1=0.
  4. [4]
    [PDF] Hamming Codes
    A Hamming code of redundancy r(≥ 2) over the field F,. |F| = q, is a linear ... 2. These dual Hamming codes are equidistant codes in that distinct codewords.Missing: GF( | Show results with:GF(
  5. [5]
    [PDF] mackay-finite-field-appendix.pdf - Washington
    GF(2). The addition and multiplication tables for GF(2) are shown in ta- ble C.1. These are the rules of addition and multiplication modulo 2. GF(p). For ...
  6. [6]
    [PDF] how to construct them, properties of elements in a finite field, and ...
    This handout discusses finite fields: how to construct them, properties of elements in a finite field, and relations between different finite fields.
  7. [7]
    [PDF] Galois Fields - MIT
    This is called the binary field or GF(2) and satisfies the above conditions by inspection. 3) For any prime number p, the set F={0,1,...p-1} using mod p ...
  8. [8]
    [PDF] Chapter 22 Finite Fields
    Theorem 22.1 For each prime number p and positive integer n, there is a unique finite field of order pn up to isomorphism. Every finite field has order pn.
  9. [9]
    Fast Galois Field Arithmetic Library in C/C++ - UTK-EECS
    A library of procedures for Galois Field Arithmetic in GF(2 w ) for w between 1 and 32. The library is written in C, but will work in C++ as well.
  10. [10]
    Manipulation of Binary Messages as Polynomials in GF(2)
    In summary the set {0,1} is both an additive group and multiplicative group and the operation of multiplication is distributive over addition (e.g. a × [b+c] = ...
  11. [11]
    [PDF] Çetin Kaya Koç - Koc Lab
    ... GF(2) is a Galois field of 2 elements. The set is given as {0,1}. The field size is 2, and the field characteristic is 2 ... multiplicative group: ({1,2},·).
  12. [12]
    Finite Field - an overview | ScienceDirect Topics
    The simplest finite field is GF(2). As shown in Fig. 10, it contains the elements 0 and 1 it corresponds to addition and multiplication mod 2. Sign in to ...
  13. [13]
    AATA Structure of a Finite Field - Abstract Algebra
    The multiplicative group of any finite field is cyclic. This result follows from the more general result that we will prove in the next theorem.
  14. [14]
    [PDF] Rings of characteristics 2 may not be Boolean
    It is well-known that every Boolean ring has characteristics 2 and is commutative. For any ring (possible without identity) R, the standard proof for char(R)=2 ...Missing: GF( | Show results with:GF(
  15. [15]
    [PDF] arXiv:0903.3456v1 [math.RA] 20 Mar 2009
    Mar 20, 2009 · A boolean ring is a ring R with idempotent multiplication. Such rings are automatically commutative of characteristic 2. The multi- plicative ...
  16. [16]
    Introduction to Finite Fields and their Applications
    The theory of finite fields is a branch of modern algebra that has come to the fore in recent years because of its diverse applications in such areas as ...
  17. [17]
    [PDF] Vector Spaces over Finite Fields
    First recall the basic notions about vector spaces: linear combination of vectors, linear independence/dependence, generating system, basis, dimension,.
  18. [18]
    [PDF] Abstract Algebra
    ... 2. Preliminaries. Page 27. Part I. GROU P TH EORY. The modem treatment of abstract algebra begins with the disarmingly simple abstract definition of a group ...
  19. [19]
    [PDF] Algebra: abstract and concrete / Frederick M. Goodman
    May 1, 2015 · ... 2. Algebra: abstract and concrete / Frederick M. Goodman— ed. 2.6 ... Abstract Algebra, 2nd ed., Prentice Hall, 1999, pp. 278 and 283 ...
  20. [20]
    [PDF] Abstract Algebra Paul Garrett
    This material fits a two-semester beginning graduate course in abstract algebra. It is a how-to manual, not a monument to traditional icons. Rather than an ...
  21. [21]
    [PDF] A History of Galois fields - HAL
    Feb 9, 2013 · The Galois fields network was actually rooted on a specific algebraic culture that had devel- oped over the course of the 19th century. We shall ...
  22. [22]
  23. [23]
    [PDF] Optimizing Galois Field Arithmetic for Diverse Processor ...
    Addition and sub- traction in GF(2) is done with the bitwise XOR operator, and multiplication is the bitwise AND operator. It follows that addition and ...
  24. [24]
    [PDF] CS252 Graduate Computer Architecture Lecture 18 Error Correction
    Apr 4, 2007 · – Binary, called GF(2) ⇐ Galois Field with base 2. » Values 0, 1. Addition/subtraction: use xor. Multiplicative inverse of 1 is 1. – Prime ...
  25. [25]
    [PDF] Fields and Galois Theory - James Milne
    2-3 Construct a splitting field for 𝑋. 5 − 2 over ℚ. What is its degree ... ⟸: Let 𝑓 ∈ 𝐹[𝑋] have solvable Galois group 𝐺𝑓. Let 𝐹. ′ = 𝐹[𝜁] ...
  26. [26]
    (PDF) Algebraic Closure of Finite Fields - ResearchGate
    Sep 29, 2024 · In this presentation, we will construct and prove the algebraic closure of finite fields. We shall also study its Galois group.
  27. [27]
  28. [28]
    [PDF] Optimizing Galois Field Arithmetic for Diverse Processor ...
    Addition and sub- traction in GF(2) is done with the bitwise XOR operator, and multiplication is the bitwise AND operator. It follows that addition and ...
  29. [29]
    [PDF] The Rijndael Block Cipher - NIST Computer Security Resource Center
    It describes all aspects of. Rijndael and is only available on paper. Reference [1] is the original Rijndael documentation submitted to AES and dates from June.
  30. [30]
    [PDF] Trivium Specifications*
    Trivium is a synchronous stream cipher designed to generate up to 264 bits of key stream from an 80-bit secret key and an 80-bit initial value (IV).
  31. [31]
    [PDF] When Boolean Satisfiability Meets Gaussian Elimination in a ...
    Abstract. Recent research on Boolean satisfiability (SAT) reveals mod- ern solvers' inability to handle formulae in the abundance of parity (xor).
  32. [32]
    Synthesizing shortest linear straight-line programs over GF(2) using ...
    Learning polynomials over GF(2) in a SAT solver. SAT'12: Proceedings of the 15th international conference on Theory and Applications of Satisfiability Testing.
  33. [33]
    FPGA implementation of an efficient multiplier over finite fields GF(2 ...
    Abstract: Arithmetic operations over finite fields GF(2m) are widely used in cryptography, error-correcting codes and signal processing.
  34. [34]
    [PDF] Solving Large Systems of Linear Equations over GF(2) on FPGAs
    Abstract—This paper presents an efficient systolic line ar- chitecture for solving large systems of linear equations using. Gaussian elimination on the ...
  35. [35]
    [PDF] A Public-Key Cryptosystem Based On Algebraic Coding Theory
    In this paper we propose a public key cryptosystem which is based on the theory of algebraic codes. II. Description of the System. We base our system on the ...