Open the specification of a modern cryptographic protocol — a signature scheme, say, or a scheme for proving a statement without revealing why it is true — and try to read a single line of it aloud. Before any mathematics has happened, the page presents three alphabets at once: double-struck capitals such as and naming entire systems of numbers, Greek letters such as and naming parameters and challenges, and a thicket of operator symbols — , , , — each with a fixed meaning and a spoken name. A reader who cannot pronounce a line cannot discuss it with a colleague, and a reader who mistakes for , or swaps the order of two quantifiers, has misread the claim itself.
This section fixes the small stock of set-theoretic and logical language in which the whole series is written, and it closes by paying the opening debt in full: three reference tables listing every recurring symbol with its spoken form (§1.5). A reader comfortable with elementary mathematics may skim the prose and keep the tables to hand.
A set is a collection of distinct objects, its elements; one writes for membership and for its negation. A set may be given by listing, , or by set-builder notation (“the in such that ”). One writes when every element of lies in , and exactly when and — so proving two sets equal means proving two inclusions. The usual operations are union , intersection , difference , and the empty set . The Cartesian product is , and is the set of -tuples over . For a finite set , denotes its number of elements. The standard number systems are the naturals , the integers , the rationals , the reals , and the complex numbers , with ; we construct the underlying arithmetic of the prime field in §2, certify it as a field—and first call it —in §4, and treat general finite fields in §6.
A function assigns to each a unique value ; is the domain and the codomain. It is injective (one-to-one) if implies ; surjective (onto) if every equals for some ; and bijective if both. The composition of and is ; composition is associative, , both sides sending to . The identity on is , .
A function has a two-sided inverse , meaning and , if and only if is bijective. When it exists, the inverse is unique.
Suppose a two-sided inverse exists. If , applying gives , so is injective; and every satisfies , so is surjective. Conversely, suppose is bijective. Each has at least one preimage by surjectivity and at most one by injectivity, so we may define to be the unique with ; then and hold by construction. Finally, if and are both two-sided inverses, associativity of composition gives ; the inverse is unique, and we write it . □
For the image is , and for the preimage is , defined whether or not is invertible. The overloading of is harmless: when the inverse function exists, the preimage of under is exactly the image of under .
A binary relation on is a subset ; one writes for . It is an equivalence relation if it is reflexive (), symmetric (), and transitive ( and imply ). The equivalence class of is , and the set of distinct classes is the quotient .
Let be an equivalence relation on a set . The distinct equivalence classes partition : they are nonempty, pairwise disjoint, and their union is .
Reflexivity gives for every , so each class is nonempty and every element lies in some class; the union of the classes is therefore . For disjointness, suppose the classes and share an element , and let be arbitrary. From and (the latter by symmetry from ), transitivity gives ; combining with gives , so . Thus , and exchanging the roles of and gives the reverse inclusion; two classes that meet coincide. □
We use this construction twice in the present volume: to form the integers modulo (§2) and the cosets of a subgroup (§3).
A second kind of relation orders rather than identifies. A partial order on is a relation that is reflexive, transitive, and antisymmetric: and imply . Four partial orders recur in the series: the usual on ; inclusion on the subsets of a fixed set, whose antisymmetry is the two-inclusions rule of §1.1; divisibility on (§2.2); and the prefix relation on finite sequences, under which a sequence precedes every sequence that extends it. Two elements are comparable if or , and a partial order under which every two elements are comparable is a total (or linear) order. The order on is total; the other three are not: and are incomparable under inclusion, as are and under divisibility and the one-term sequences and under prefix.
Every partial order has a strict companion, meaning and ; the two determine each other.
If is a partial order on , its strict companion is irreflexive ( holds for no ) and transitive. Conversely, if is irreflexive and transitive, then “ or ” defines a partial order on whose strict companion is .
Irreflexivity of the companion is the clause . For transitivity let ; then because is transitive, and would give , hence by antisymmetry, contradicting . Conversely, the relation “ or ” is reflexive by construction and transitive by cases: if either link is an equality the other link carries the conclusion, and otherwise transitivity of does. It is antisymmetric, since with both and would mean and , whence , against irreflexivity. Its strict companion is again: “( or ) and ” reduces to , which already excludes by irreflexivity. □
A strict order is a strict total order when its non-strict companion is total, equivalently when for all exactly one of , , holds (trichotomy): at least one holds by totality, and any two together would give , by substitution or by transitivity. The usual on is the model. A function between ordered sets is monotone (order-preserving) if implies , and strictly increasing if implies . The one further property of an order that the volume assumes, the well-ordering of on , opens §2.1.
We employ the symbols (“for all”), (“there exists”), (“there exists a unique”), and “” or “s.t.” for “such that”. Negation swaps the quantifiers: is , and is . The order of unlike quantifiers matters: (the may depend on ) is weaker than (one works for all ).
The following conventions are fixed for the entire series. We prove an implication directly (assume , derive ), by contraposition (assume , derive ), or by contradiction; we prove a statement by taking an arbitrary , and by exhibiting a witness. We prove statements about all natural numbers by induction.
The debt incurred at the opening of this section falls due here. The series draws on three alphabets: blackboard-bold letters for the standard number systems and structures, Greek letters, and a handful of relational and operator symbols. Tables 1–3 collect these symbols and the complete Greek alphabet, with common English pronunciations, spelled approximately for reading mathematics aloud. These vary between speakers and regions; the alternatives shown are not exhaustive. A capitalised syllable carries the stress, and a slash separates alternatives. These are English letter names, not a guide to pronouncing Greek words. Each symbol is defined where it is first used; the notes here are reminders, not definitions.
| Symbol | Name | Said | Typical role in the series |
|---|---|---|---|
| blackboard N | “natural numbers” | the naturals | |
| blackboard Z | “the integers” | the integers (German Zahlen) | |
| blackboard Q | “the rationals” | the rationals (quotients) | |
| blackboard R | “the reals” | the real numbers | |
| blackboard C | “the complexes” | the complex numbers | |
| blackboard F | “eff-cue” | the finite field of elements | |
| blackboard G | “group G” | an abstract group | |
| blackboard E | “expectation” | expectation of a random variable (§11) | |
| blackboard P | “the Pallas curve” | the Pallas group (§10; protocol-spec notation) |
| Lower | Capital | Name | Said | Lower | Capital | Name | Said | |
|---|---|---|---|---|---|---|---|---|
| alpha | AL-fa | nu | nyoo / noo | |||||
| beta | BEE-ta / BAY-ta | xi | ksigh / zigh | |||||
| gamma | GAM-a | omicron | OM-i-kron / oh-MY-kron | |||||
| delta | DEL-ta | pi | pie | |||||
| epsilon | EP-si-lon / ep-SIGH-lun | rho | roe | |||||
| zeta | ZEE-ta / ZAY-ta | sigma | SIG-ma | |||||
| eta | EE-ta / AY-ta | tau | tow / taw | |||||
| theta | THEE-ta / THAY-ta | upsilon | UP-si-lon / yoop-SIGH-lun | |||||
| iota | eye-OH-ta | phi | fie / fee | |||||
| kappa | KAP-a | chi | kigh | |||||
| lambda | LAM-da | psi | sigh / psigh / see / psee | |||||
| mu | mew / moo | omega | OH-mig-a / oh-MAY-ga |
| Symbol | Said | Meaning |
|---|---|---|
| “in”, “not in” | set membership | |
| “subset of” | (proper) inclusion | |
| “union”, “intersect” | set union and intersection | |
| “A minus B” | set difference | |
| “times” / “cross” | Cartesian product | |
| “divides”, “does not divide” | divisibility | |
| “precedes” | partial order, strict companion | |
| “congruent to” | congruence, qualified | |
| “a mod n” | remainder of division by | |
| “is defined as” | definitional equality | |
| “maps to” | the action of a function | |
| “g after f” | function composition | |
| “floor”, “ceiling” | round down, round up | |
| “log”, “log base two”, “log base ” | natural, base-, and discrete (base ) logarithm | |
| “inner product” | inner product; the subgroup generated by | |
| “x-or” | bitwise exclusive or | |
| “x concat y” | concatenation of bit or byte strings | |
| “drawn from” | sampling ( marks uniform); also assignment | |
| “k times P” | scalar multiplication of a point (§10) | |
| “P star” | canonical bit-encoding of a point or element | |
| “dot” | product; argument placeholder, as in | |
| “size of A” / “order of A” | cardinality |