A pattern that holds in every case anyone has checked feels like a fact, and in mathematics it can still be false.
This lesson starts with patterns that survived far longer than anyone would need to be convinced, and then failed. They are the reason mathematics settles its claims by proof rather than by evidence. The rest of the lesson says what a proof is, names the parts of the structure that proofs build (axioms, definitions, theorems, lemmas, conjectures), writes the first proofs out in full from the definitions of even and odd, and then turns to the two skills every later lesson relies on: reading a proof actively, and writing one that a reader can check. It closes on the question of how much detail a proof needs, and on what the word "obvious" can hide. It assumes school algebra, the material of Mathematical Foundations, and nothing else.
Forty primes, then a square
In 1772 Euler noticed that the expression produces primes with remarkable persistence. At it gives , then , , , , , and every value up to , where it gives , is prime. Forty consecutive successes is more than most people would ask before believing a rule.
At the value is , and . Once it has happened it is easy to see why. Write the expression at with the first two terms grouped: , so the whole thing is .
The same thought shows that fails too: every term of is a multiple of , and the value is . The structure that breaks the pattern was visible in the formula from the start. The forty checks established forty facts and said nothing about the forty-first, because nothing in them said why the values were prime. A check tells you what happened, not what must happen.
It is worth being exact about what the forty checks did establish. Each one is a small proof: " is prime when " is settled by computing and confirming that no integer from to divides it. What no check can do is reach the claim "for every ", because that claim has infinitely many instances and each check settles one. Later in this lesson a proof will settle infinitely many instances in the other direction, showing that the expression is composite for every positive multiple of .
Doubling that stops at thirty-one
Place points on a circle and join every pair with a straight chord, taking care that no three chords pass through the same interior point. Count the regions the chords cut the disc into. One point makes no chord, so there is region. Two points give one chord and regions. Three points give a triangle and regions, four points give , and five give .
The sequence is as clean a pattern as mathematics offers, and the obvious guess is that six points give . They give , and no arrangement of six points does better. (If the six points are the corners of a regular hexagon, the three long diagonals meet at the centre, which breaks the rule about three chords, and the count drops to .)
Here too the failure makes sense once the right quantity is counted. Add the chords one at a time. A new chord that crosses chords already drawn passes through existing regions and splits each of them in two, so it adds regions. Summing over all the chords, the total is for the starting disc, plus for each chord, plus for each crossing point. With points there are chords (one per pair of points, so ), and every choice of four points produces exactly one crossing (where the diagonals of their quadrilateral meet), so there are crossings. The number of regions is therefore
For six points that is , and for seven it is , nowhere near . Eight points give against , and the gap only widens: is a polynomial in of degree , while doubles at every step.
The powers of two were a coincidence of small numbers: and agree up to five points and then part company. (Problem 14 shows that the agreement is not an accident of arithmetic but has a reason, and that the reason expires at five.) The argument rests on the sentence "every choice of four points produces exactly one crossing", and a careful reader should want that sentence justified. Justifying sentences like it is what this course is about.
Why does every choice of four points give exactly one crossing?
Two chords with a common endpoint meet only at that endpoint, on the circle, so every interior crossing comes from two chords with four different endpoints. The question is which pairs of such chords cross.
A chord cuts the disc into two pieces, one on each side of the line through and , and it cuts the circle into two arcs, one in each piece. Take another chord with and different from and . If and lie on the same arc, the whole segment lies in one piece, because each piece is the part of the disc on one side of a line, and the part of a disc on one side of a line contains every segment between two of its points. So does not cross . If and lie on different arcs, they are on opposite sides of the line , so the segment meets that line, and it meets it inside the disc, which is where lies. So the chords cross. In short: two chords cross exactly when their endpoints alternate around the circle.
Now label four points in the order they sit around the circle as . They can be split into two pairs in three ways: , and . In the first two the endpoints do not alternate, and in the third they do. So exactly one of the three pairs of chords crosses, at the point where the diagonals of the quadrilateral meet. Different sets of four points give different crossing points, because a crossing lies on exactly two chords (no three chords pass through one interior point) and those two chords determine their four endpoints. That proves there are exactly crossings.
The claim that a new chord crossing old ones adds regions needs a similar check. The crossing points are distinct, so they cut the new chord into segments. Each segment runs through the interior of a single existing region from one side of it to the other, and so divides that region into two.
One more coincidence is waiting further out. With ten points the formula gives , a power of two again, though not the one the pattern predicted (). A pattern that has failed can still throw up numbers that look like it, which is one more reason not to trust patterns.
Nine hundred million confirmations
Perhaps people should simply check more. The third pattern answers that. Count the prime factors of a whole number with repeats, so that has three and has two, and give zero. Among the numbers from to , five (, , , and ) have an odd number of prime factors, and up to it is fifty-one.
In 1919 George Pólya conjectured that this always happens: for every greater than , at least half of the numbers from to have an odd number of prime factors. It was checked by hand and later by machine over enormous ranges, and it held for every anyone tested.
In 1958 Brian Haselgrove proved that it fails somewhere, by an argument that showed a counterexample exists without producing one. In 1980 Minoru Tanaka found the first one by computer. It is . Up to that number, have an odd number of prime factors and have an even number, so the odd ones are outnumbered by one. Every from to obeys the conjecture.
A second conjecture of the same family has a stranger history. For each whole number , let be if some prime divides twice, and otherwise or according as has an even or an odd number of prime factors. So , , , . Add these up to and call the total : the first values are , , , , . The running total wanders up and down, and in 1897 Franz Mertens conjectured that it always stays small: for every . The conjecture mattered, because it would have implied the Riemann hypothesis, one of the most famous open problems in mathematics. It has been checked by computer far beyond , and no value of that breaks it has ever been found.
It is false. In 1985 Andrew Odlyzko and Herman te Riele proved that exceeds for some , and to this day nobody knows a single such . The first one is believed to be so large that no search by computer will ever reach it. Here the evidence was not merely insufficient: it may never be possible to see the conjecture fail, however long anyone checks.
A claim about every natural number is a claim about infinitely many cases, and any finite collection of checks, however large, leaves infinitely many unchecked. Nine hundred million confirmations are exactly as far from infinity as forty. Evidence, which is how the empirical sciences rightly work, cannot establish a mathematical claim of this kind. It can refute one: a single failure, such as or Tanaka's number, disposes of a claim about every case completely.
How can anyone know a counterexample exists without finding it?
By proving that the claim, if true, would lead to something false. Haselgrove, and later Odlyzko and te Riele, did not search for a bad . They showed that if the conjecture held for every , then certain quantities built from the zeros of Riemann's zeta function would have to behave in a particular way, and then computed enough of those zeros, to high precision, to see that they do not. So the conjecture cannot hold for every , and some breaks it. The argument never needs to know which.
The same thing had happened before. For every that anyone could compute, the number of primes up to is smaller than a standard estimate for it, the logarithmic integral. In 1914 J. E. Littlewood proved that the difference changes sign infinitely often, so the inequality fails for some enormous . More than a century later no such has been exhibited, though the first one is known to be below .
This kind of proof, which shows that something exists without producing it, is called non-constructive, and it is entirely legitimate. It rests on two ideas this course develops properly later: that the negation of "for every , " is "for some , not " (in the quantifiers lesson), and that a statement which leads to a falsehood must itself be false (proof by contradiction, in the lesson on contrapositive and contradiction). The lesson on direct proof has a short example of an existence proof that never names its witness.
For the working mathematician the moral cuts both ways. Numerical evidence can be overwhelming and still wrong; and a conjecture can be settled, completely and permanently, while its counterexamples stay out of reach.
When one case is the whole proof
The asymmetry between confirming and refuting has a practical side. To refute a claim about every case, one case is enough, and checking that one case is a complete proof that the claim is false. The check has to be exact and has to be shown, but nothing more is required.
Euler supplies the next example against himself. Fermat had claimed that no cube is a sum of two positive cubes and no fourth power a sum of two fourth powers, and in 1769 Euler conjectured a generalisation: for every , a sum of fewer than positive th powers is never a th power. So three fourth powers never add to a fourth power, four fifth powers never add to a fifth power, and so on. The conjecture stood for almost two hundred years. In 1966 L. J. Lander and T. R. Parkin, searching by computer, found
and published it in a paper of two sentences. Nothing more was needed: anyone can check that both sides equal , and once they have, the conjecture is dead for . In 1988 Noam Elkies found three fourth powers with a fourth-power sum, and Roger Frye then found the smallest such example by computer, .
A good counterexample often does more than refute: examined closely, it can show why the claim fails. The next Example gives one of the most famous counterexamples in number theory, verified twice, once by brute force and once by an argument that shows where the factor comes from.
Example. The numbers are called Fermat numbers. The first five are , , , and , all prime, and in 1640 Fermat stated his belief that every is prime. Prove that is not.
The claim "every is prime" is refuted by exhibiting one with a factor strictly between and itself. Euler found such a factor in 1732: . The first proof is a multiplication. We have , so , and long multiplication gives
Both factors are greater than , so is composite. That is a complete proof, and it would satisfy any referee.
The second proof avoids large numbers and shows where comes from. Notice that and also . The second fact gives , so
The first fact gives . Expanding by the binomial theorem, every term except the last contains the factor , and the last is , so for the integer . Putting these together,
and since , the second factor is an integer greater than . It is in fact , so the two proofs reach the same factorisation by different routes.
Now you. Multiply the first few primes together and add : , , , and are all prime. Prove that the pattern fails at the next step.
Answer
The next number is , and
Both factors are greater than , so is composite, and the claim that every such number is prime is false. The multiplication is the whole proof. Finding the factor is another matter: it takes trial division by the primes up to , and the first to divide is .
Notice that and are both larger than . That is no accident: none of the primes to can divide a number that is one more than a multiple of it (Problem 11 proves this). The same observation is the heart of Euclid's proof that there are infinitely many primes, which the lesson on contrapositive and contradiction gives in full. Euclid's argument never claims that these numbers are prime, only that their prime factors are new.
What a proof is
A proof is a finite chain of statements, each of which is justified by one of a few things: a definition, an axiom (a statement taken as a starting point and not argued for), a result that has already been proved, an assumption the proof has openly made (such as the hypothesis of the claim, "suppose is odd"), or a rule of logic applied to earlier lines. The last statement in the chain is the claim. Because every link is justified, the claim cannot fail in any case the chain covers, and one chain can cover infinitely many cases.
A proof is not an argument that makes the claim plausible, and it is not a picture: the chords on a circle suggested and delivered . What a proof offers is checkability. A reader can take each line, ask what justifies it, and find the answer in a definition, an axiom, an earlier theorem or the rules of logic. If every line survives that question, the reader has no choice but to accept the conclusion, without needing to trust the writer.
Two things follow from that description. First, a proof is relative to its starting points. It shows that the claim follows from the definitions and axioms used, and if those change, the proof may fail. The claim "the angles of a triangle add up to degrees" is a theorem of Euclid's geometry and false on the surface of a sphere, where a triangle with a vertex at the North Pole and two on the equator can have three right angles. Second, a proof is judged line by line, not as a whole. An argument that is persuasive overall but has one unjustified step is not a proof, however likely its conclusion. Many false "proofs" in the history of mathematics were wrong in exactly one sentence.
This is the trade mathematics makes. Its conclusions hold only under the stated assumptions, and within them they are permanent. Euclid's proof that there are infinitely many primes, written around 300 BCE, is as correct now as it was then, which no measurement from that century can claim.
Proofs in this course are written in sentences. Symbols appear where they are clearer, but words such as "suppose", "since" and "so" carry the argument, because they say which statement follows from which. A column of bare equations often hides exactly the step that needed justifying.
Who decides whether a proof is correct?
In principle, anyone who reads it carefully: that is the point of checkability. In practice, a new proof is read by experts, most formally by the referees of the journal it is sent to, and it is accepted when the people best placed to find an error have tried and failed. The system works well but not perfectly, and its failures are instructive.
In 1879 Alfred Kempe published a proof of the four colour theorem, that every map in the plane can be coloured with four colours so that neighbouring regions differ. It was accepted for eleven years. In 1890 Percy Heawood found the flaw: one step in Kempe's argument, a case in which two recolourings are done at once, can fail. Kempe's method still proved that five colours suffice, and the four colour theorem waited until 1976. In 1993 Andrew Wiles announced a proof of Fermat's Last Theorem; a gap was found while the paper was being checked, and Wiles, working with Richard Taylor, repaired it the following year. In both cases the error was found by exactly the kind of line-by-line reading this lesson describes.
What never decides the question is the reputation of the author, the number of people who believe the result, or the amount of evidence for it. A proof by an unknown student is as good as one by a famous professor, and Euler's name did not save his conjecture on sums of powers. Since the 1990s a further check has become available: proof assistants, programs that verify every logical step of a proof written in a formal language. The lesson on direct proof describes how they settled doubts about two proofs too long for any person to check by hand.
Axioms, definitions, theorems and conjectures
Mathematics organises what it knows with a small vocabulary, and every textbook uses it. The words say what role a statement plays, which is also what a reader may do with it.
An axiom is a statement accepted without proof, as a starting point. Every chain of proofs has to start somewhere, and the axioms are where. Euclid began his geometry with five postulates, such as "a straight line can be drawn between any two points"; this course takes as axioms the ordinary rules of arithmetic for the integers and the real numbers, listed later in this lesson, and a few more facts introduced when they are needed, such as the well-ordering of the natural numbers in the lesson on direct proof.
A definition gives a new word an exact meaning in terms of words already understood. "An integer is even if for some integer " introduces "even" and asserts nothing, so it cannot be false. It can only be useful or useless, well chosen or badly chosen. Definitions are written with "if" but always meant as "if and only if": an integer that is not twice an integer is not even.
A theorem is a statement that has been proved, usually one important enough to be remembered. Lesser results go by other names, and the choice is a matter of emphasis, not of logic.
- A proposition is a proved statement of moderate interest.
- A lemma is a proved statement whose main purpose is to help prove something else. Long proofs are broken into lemmas the way long programs are broken into functions. Some lemmas outgrew their purpose and kept the name, such as Euclid's lemma about primes.
- A corollary is a statement that follows from a theorem just proved with little extra work.
- A conjecture is a statement that someone believes and nobody has proved. Goldbach's conjecture, that every even number greater than is a sum of two primes, has been open since 1742. The twin prime conjecture says there are infinitely many pairs of primes that differ by , such as and or and .
A conjecture that is proved becomes a theorem, whatever it is still called: "Fermat's Last Theorem" was a conjecture from the 1630s until Andrew Wiles proved it in the 1990s, and the Poincaré conjecture, proved by Grigori Perelman in 2003, kept its name. A conjecture that is refuted becomes a false statement, and the object that refutes it is a counterexample, as is for Euler's expression.
Most theorems have the shape "if these conditions hold, then this conclusion follows". The conditions are the hypotheses of the theorem and what follows is its conclusion. A theorem says nothing about situations where its hypotheses fail, so every application must first check that they hold. Much of reading mathematics well is keeping track of which hypotheses a result needs.
If axioms are not proved, how do we know they are true?
For most of history the answer was that axioms are self-evident truths about the world, and Euclid's geometry was the model. But one of his postulates, the parallel postulate, never looked as self-evident as the others. In one common form it says that through a point not on a given line there is exactly one line that never meets the given one. For two thousand years mathematicians tried to prove it from the other four, and failed.
Around 1830 János Bolyai and Nikolai Lobachevsky, independently (and Gauss privately, before them), showed why. They developed a geometry in which the other axioms hold and the parallel postulate fails, with infinitely many parallels through the point, and found it perfectly coherent. Its theorems differ from Euclid's: the angles of a triangle add up to less than degrees. Later in the century Eugenio Beltrami built a model of the new geometry inside ordinary Euclidean geometry, which showed that if Euclid's geometry is free of contradictions, so is this one. So the parallel postulate cannot be proved from the others; it is a genuine choice.
The modern view grew from this. Axioms are not claims about the world, but a description of a structure: a proof shows that whatever satisfies the axioms also satisfies the theorem. The structure may model something physical, and whether it does is a question for physics. David Hilbert, who rebuilt Euclid's geometry on complete axioms around 1899, is reported to have said that one must be able to say "tables, chairs and beer mugs" in place of "points, lines and planes", since a proof may use only what the axioms say.
That leaves two demands on a system of axioms. It should be free of contradictions, since from a contradiction anything can be derived (the next lesson shows why), and it should say enough to decide the questions one cares about. In 1931 Kurt Gödel showed that for arithmetic the second demand cannot be fully met: for any consistent list of axioms about the whole numbers that a computer could print out, some statements about the whole numbers can be neither proved nor refuted from it. Mathematicians choose axioms that are consistent as far as anyone can tell, and rich enough for the mathematics they want to do.
Definitions do the work
A proof starts from definitions. This is the habit that most separates proof from school mathematics: a word such as "even" stops being something you recognise and becomes an exact statement you can use.
An integer is even if there is an integer with . An integer is odd if there is an integer with . Everything this lesson proves about parity comes from those two sentences and the ordinary rules of algebra for integers, such as the fact that sums and products of integers are integers and that multiplication distributes over addition.
The definition settles questions that recognition leaves vague. Is even? Yes, since . Is odd? Yes, since . Is even? Yes, since , and the definition never asked for to be positive. The school test "the last digit is , , , or " agrees, but it is a fact about base-ten notation and would need its own proof before it could be used.
Notice also what the definitions do not say. Nothing in them states that every integer is even or odd, or that no integer is both. Both are true, but both need proofs of their own, which rest on division with remainder, and a proof that quietly relies on them before they are proved is incomplete. The direct proof lesson proves them, from a theorem about division that itself needs an axiom about the natural numbers. Until then, this lesson's proofs about parity may assume only what their hypotheses say.
The word "some" in the definitions matters too, and it gives every definition of this shape two uses. To show a number is even you must produce the , or show that one exists: is even because . To use the fact that a number is even you may name its and work with it: if is even, write for an integer , and from then on is available. Producing and naming are the whole mechanism of the proofs below. The first half of a typical proof names, the second half produces.
Definitions are choices, made to make the theorems come out cleanly. A prime is defined as an integer greater than whose only positive divisors are and itself, and the "greater than " is deliberate. If counted as prime, the theorem that every integer greater than factors into primes in only one way would be false, since . Rather than add "apart from factors of " to every such theorem, mathematicians exclude once, in the definition.
First proofs
The sum is even, and so is , but those are evidence. The goal is an argument that covers every pair at once.
Example. Prove that the sum of two odd integers is even.
Let and be odd integers. By the definition of odd, there is an integer with , and there is an integer with . Then . Since and are integers, is an integer. So is twice an integer, and by the definition of even, is even.
Three details are worth copying. It names arbitrary odd integers, so nothing is assumed about them except that they are odd. It uses two different letters, and , because and need not be equal; one letter would have proved the claim only for a number added to itself. And its last sentence names the definition it has satisfied, so the reader sees the chain close.
The proof also has the shape the vocabulary above predicts. The claim, spelled out, is "for all integers and , if is odd and is odd, then is even". The first sentence of the proof takes arbitrary and and assumes the hypotheses; the last states the conclusion. Everything between is justified by a definition or by arithmetic.
Now you. Prove that the sum of an even integer and an odd integer is odd.
Answer
Let be an even integer and an odd integer. By the definitions, there is an integer with and an integer with . Then . Since is an integer, has the form twice an integer plus one, so by the definition of odd, is odd.
Example. Prove that the product of two odd integers is odd.
Let and be odd integers, so that and for some integers and . Then . Since and are integers, so is . Therefore is twice an integer plus one, and by the definition of odd, is odd.
The algebra here is chosen with the goal in view. Expanding gives four terms, and the target is the form , so the three terms with a factor of are grouped together and the is left outside. Writing the conclusion's definition down first, and then steering the algebra towards it, is how nearly every proof in the first half of this course is found.
A proved result becomes a tool. Taking gives a corollary at once: the square of an odd integer is odd. Applying the result twice shows that is odd when is, and so on for every power, though "and so on" is itself a claim about infinitely many cases, which the induction lesson will turn into a proof.
Now you. Prove that if is an even integer and is any integer, then is even.
Answer
Let be an even integer and any integer. By the definition of even, there is an integer with . Then . Since and are integers, is an integer, so is twice an integer and, by the definition of even, is even.
Nothing was assumed about , not even its parity, and none was needed. That matters here, because this lesson has not yet proved that must be even or odd.
Proving that a pattern fails
Proof can also show that a pattern fails, and why, far beyond a single counterexample. For this the definitions needed are those of prime and composite: an integer greater than is prime if its only positive divisors are and itself, and composite if it is the product of two integers each greater than . The integer is neither.
Example. Prove that is composite whenever is a positive multiple of .
Let be a positive multiple of , so that for some integer . Then . The first factor, , is greater than . Since , the second factor is at least , so it is greater than as well. Therefore is a product of two integers each greater than , and by definition it is composite.
No amount of checking could do this: the proof shows Euler's expression fails at , , and infinitely many other values, and why. Notice the check that the second factor exceeds . Without it the proof would be incomplete, since a number such as is a product with a factor of and is prime. The hypothesis is used exactly there.
Now you. Prove that is composite whenever for some integer . (At this is the failure at .)
Answer
Let with an integer. Expanding, , so . The factor is greater than , and since the second factor is at least , so it is greater than too. So is a product of two integers each greater than , and is composite.
The same idea disposes of every polynomial of this kind. For any integers and with , the value of at is , which is composite as soon as . Euler's expression was never going to produce primes for ever, and neither is any other polynomial with integer coefficients that is not constant, a fact known since the eighteenth century.
Reading a proof actively
A proof is not read like a story, from start to finish at an even pace. It is read with a pencil, and the reader's job is to be convinced line by line, which means doing a share of the work. Five habits turn passive reading into active reading.
- State the claim exactly before reading the proof. Say what is assumed and what is to be shown, with every "for all" and "if" made explicit. A proof of a claim you have not pinned down cannot be checked.
- Try the claim on examples. Small cases show what the claim says and often show why it is true. They also give test values for each line of the proof.
- Ask of every line what justifies it. The answer should be a definition, an axiom, an earlier result, an assumption made openly, or the rules of algebra and logic. If you cannot find the justification, you have found either a gap in your understanding or a gap in the proof, and both are worth finding.
- Find where each hypothesis is used. A hypothesis that is never used is suspicious: either the theorem is stronger than stated, or the proof has a mistake. Then drop the hypothesis and see what goes wrong, which shows why it is there.
- Ask what the proof gives beyond the claim. Often the argument proves more than it states, or suggests a stronger result, or fails in a way that points to one.
Example. Read the following proof actively.
Claim. If and are odd integers, then is divisible by .
Proof. Write and with and integers. Then , which is times an integer.
The claim. For all integers and : if is odd and is odd, then there is an integer with . "Divisible by " has been unpacked into its definition, which is what the proof must produce.
Examples. , , , . All are divisible by , including the negative one and the zero.
Line by line. "Write and " is justified by the definition of odd and the hypotheses; the letters differ because and need not be equal. The expansion is algebra, . The final grouping is the distributive law. That is an integer follows because and are integers, and the proof leaves that step to the reader, which is acceptable at this level.
Hypotheses. Both are used, in the first line. Drop one: with and , , not divisible by . So the claim is false without it.
Beyond the claim. Every example was divisible by , not just : , , , . The proof suggests why. The expression is , and is a product of consecutive integers, which is always even. Proving "always even" needs the fact that every integer is even or odd, so the stronger result, that is divisible by , must wait for the lesson on direct proof, where it follows from the fact that every odd square is one more than a multiple of .
Now you. Read this argument actively, using the five habits, and find the step it takes for granted.
Claim. The product of two consecutive integers is even.
Proof. Let be an integer. One of and is even. An even integer times any integer is even, so is even.
Answer
The claim. For every integer , the integer is even, that is, for some integer .
Examples. , , , . All even.
Line by line. The first line introduces an arbitrary integer, which is right for a claim about every integer. The last line uses the second Now you in the section on first proofs, that an even integer times any integer is even, together with the fact that if the even one is . The middle line, "one of and is even", has no justification. It needs two facts: that is even or odd, and that if is odd then is even. The second is easy: if then . The first is the statement that every integer is even or odd, which the definitions do not give and this lesson has not proved.
Hypotheses. There are none beyond " is an integer", and it is used: for the product is , which is not an even integer.
So the argument is correct but incomplete at this point in the course, and it becomes a complete proof once the lesson on direct proof proves that every integer is even or odd. The step is the kind that feels too obvious to state. Active reading is how such steps get noticed.
Writing a proof
A proof is written for a reader, and its job is to let that reader check every step without having to reconstruct the writer's thinking. A handful of conventions, followed by almost every mathematician, do most of the work.
Introduce every letter before using it, and say what it is. "Let be an integer" or "let and be odd integers" at the start; "there is an integer with " when a new letter arrives from a definition. A letter that appears from nowhere cannot be checked, because the reader cannot know what may be assumed about it.
Use the connecting words precisely. The words carry the logic, and each has a job.
- "Let" introduces an arbitrary object: "let be a real number". The proof must then work for every of that kind.
- "Suppose" or "assume" introduces a hypothesis to be used for the rest of the argument, or for one case of it.
- "Since", "because" and "by" give a justification: "since and are integers", "by the definition of odd".
- "So", "therefore", "hence" and "thus" announce a conclusion drawn from what came before.
- "We must show" or "it suffices to show" announces the goal, which helps the reader in a long proof.
Write in sentences. Every line of a proof, even one that is mostly symbols, should read aloud as an English sentence with a verb. "" is a sentence whose verb is "equals". Do not start a sentence with a symbol (" is even" is better as "The integer is even"), and do not use arrows such as as shorthand for "so" in a written proof: is a connective with a precise meaning, fixed in the next lesson, and "" does not say that is true.
Make chains of equations honest. In each joins two expressions that are equal, so the chain proves that the first equals the last. Never write a chain in which some link is not an equation between neighbours, and never start from the equation you are trying to prove.
Justify what a reader could doubt, and nothing more. Routine algebra such as expanding brackets needs no comment. Every use of a definition, of a hypothesis and of an earlier result should be visible. The test is a classmate who knows the definitions but not the proof: any step they could reasonably question needs its reason stated.
Say when you are done. End with the conclusion in words that echo the claim, and then a marker such as , or the older "Q.E.D." (from the Latin quod erat demonstrandum, "which was to be shown").
Here is the same proof written badly and then well. The bad version:
, , even.
It never says what and are or what is being proved. It uses one letter for both numbers, so it proves the claim only for . It uses for "so". And it never says which definition "even" refers to. The good version is the first Example in the section on first proofs: every letter introduced, every step justified, the conclusion tied to the definition. It is longer, and every extra word is doing work.
A proof is also not the record of how it was found. The search for a proof is full of false starts, guesses and working backwards from the goal, and none of that belongs in the final text. The finished proof runs forwards from what is known to what is claimed, as if the route had been obvious all along. The lesson on direct proof shows why working backwards, handed in as a proof, can "prove" false things.
Levels of rigour, and what "obvious" hides
Every proof leaves some steps to the reader. The first Example did not prove that is an integer from any axiom; it said "since and are integers", and trusted the reader to accept that sums of integers are integers. How much may be left out is a question of level, and there are roughly three.
An informal argument explains why something is true and skips whatever the speaker considers routine. It is how mathematicians talk to each other at a blackboard, and how the regions on a circle were counted above. A written proof, the kind this course teaches and every textbook and journal uses, justifies every step that a competent reader could doubt, from definitions, axioms and earlier results, and leaves only routine algebra and routine logic unstated. A formal proof leaves nothing out: every step is an application of a stated rule to earlier lines, and a computer can check it. Formal proofs of even simple facts are long, which is why people rarely write them by hand.
The level is a choice about audience, not about truth. A written proof is expected to be convertible into a formal one by a patient reader, and the unstated steps are the ones where that conversion is routine. The danger lies in steps that feel routine and are not. The word "obvious" is where such steps hide, and there are three ways it goes wrong: the obvious fact is false, the obvious fact is true but hard, or the obvious fact is true and easy but has not yet been proved at the point where it is used.
The third kind is the commonest in a first course. "Every integer is even or odd" is true and not hard, but it does not follow from the definitions without a theorem about division, and the Now you on reading actively showed how easily it slips into a proof unannounced. Another example is the ordinary rules of algebra. This course takes as axioms the following facts about the integers (the real numbers obey the same ones). Sums and products of integers are integers, and for all integers , and :
- and ;
- and ;
- ;
- and ;
- there is an integer with .
Subtraction is defined by . Everything else in school algebra, including rules that feel as basic as these, can be proved from them. That is what makes them a good choice of axioms: a short list, from which the rest follows.
Example. Prove from the axioms that for every integer .
The rule is obvious, and that is the point: the proof shows that it is not an extra assumption but a consequence of the five. The only facts about available are axiom 4, , and axiom 5, which involves as the result of adding . The trick is to use .
Let be an integer. By axiom 4, , so
by axiom 3. Write , so this says . By axiom 5 there is an integer with . Adding to both sides of gives . The left side is . By axiom 2 the right side is , which is by axiom 4. So , that is, . By axiom 1, also .
The step "add to both sides" is a rule of logic rather than an axiom of arithmetic: if two expressions name the same number, adding the same thing to each gives the same result.
Now you. Prove from the axioms, in this order: (i) if then , so each integer has only one negative; (ii) ; (iii) . The last is the school rule "a negative times a negative is a positive".
Answer
(i) Let and be integers with . Then
using, in order, axiom 4, axiom 5, axiom 2, axiom 1, the hypothesis, and axioms 1 and 4 (since ).
(ii) Let be an integer. Then
using axiom 4 (with axiom 1 to write ), axiom 3 (with axiom 1 to put the common factor on the left), axiom 5, and the Example. So is an integer that gives when added to , and by (i) it equals .
(iii) First, . By (ii) with , . And by axioms 1 and 5, so by (i), applied to the integer , the negative of is . Now let and be integers. By (ii), and , so
where the middle step rearranges a product of four factors using axioms 1 and 2 several times.
The rule that puzzles schoolchildren is therefore forced: any number system with the five properties must have . That is a better answer to "why?" than any story about debts.
The second way "obvious" goes wrong is that the fact is true but hard. A closed curve drawn in the plane without crossing itself divides the plane into an inside and an outside. Nobody doubts it, and it is the Jordan curve theorem, stated by Camille Jordan in 1887; his proof was long thought inadequate, and the first proof generally accepted as complete was given by Oswald Veblen in 1905. The difficulty is that "curve" includes shapes far wilder than anything one draws.
The first way is the worst: the obvious fact is false. For most of the nineteenth century mathematicians took it for granted that a continuous function, one whose graph can be drawn without lifting the pen, must have a slope at most points. In 1872 Karl Weierstrass presented a continuous function that has a slope at no point at all. Intuition is formed by the examples one has seen, and the theorems are about all examples, including the ones nobody has drawn.
Does anyone really prove that ?
Yes, and the place where it happens shows what a fully formal proof costs. Alfred North Whitehead and Bertrand Russell set out in Principia Mathematica, published in three volumes between 1910 and 1913, to derive mathematics from logic alone. The proposition from which follows, numbered , appears several hundred pages into the first volume, and the authors remark that it will follow once arithmetical addition has been defined. The length is not because is deep. It is because every notion involved, "one", "two", "plus", "equals", had to be built from logic first, and every step recorded.
Most of mathematics does not work that way. The natural numbers are usually given by axioms of their own (Giuseppe Peano's, from 1889, are the standard ones), and from those, takes a few lines: is defined as the number after , and addition is defined so that adding to a number gives the number after it.
The modern descendant of Principia is the proof assistant. Systems such as Lean and Coq check formal proofs by computer, and large libraries of mathematics have been formalised in them. Their users report the same experience Whitehead and Russell had: the steps a written proof calls obvious are where most of the effort goes, and occasionally where an error is found.
This course works at the level of written proofs throughout. Its standard for "obvious" is practical: a step may go unstated only if the reader could supply its proof from the definitions and earlier results in a line or two. The rules of algebra listed in this section meet that standard, having been proved or assumed here. "Every integer is even or odd" does not, until the lesson on direct proof.
Every proof in this lesson began by working out what its claim actually asserted. "The sum of two odd integers is even" turned out to mean: for any integers and , if is odd and is odd, then is even. Hidden in that ordinary sentence are an "if ... then" and a "for any", and the proof's shape came from them: take arbitrary and , assume they are odd, and reach the conclusion. Refuting Pólya's conjecture needed the same precision in reverse: knowing that one with fewer than half is enough means knowing exactly what the negation of "for every " says.
So statements have to be read exactly: "and", "or", "not" and "if ... then" do not always mean in mathematics what they mean in conversation. The next lesson fixes those meanings, and the conditional, the "if ... then" that every theorem is written in, turns out to mean something that surprises almost everyone the first time.
Problems
Work each problem on paper before opening anything; for Core and Challenge problems, try the hint before the solution. Unless a problem says otherwise, do not assume that every integer is even or odd.
Warm-up
1. Using only the definitions, show that: (a) is odd; (b) is even for every integer ; (c) is odd for every integer ; (d) is odd for every integer .
Solution
(a) We have , and is an integer, so is odd.
(b) Let be an integer. Then , and is an integer, so is even.
(c) Let be an integer. Then , and is an integer, so is odd.
(d) Let be an integer. Then , and is an integer, so is odd. The only step that needs thought is rewriting as , so that the constant term has the form the definition asks for.
2. In the setting of this lesson, say whether each statement is an axiom, a definition, a theorem or a conjecture, and whether it is known to be true. (a) For all integers and , . (b) An integer is odd if for some integer . (c) The product of two odd integers is odd. (d) Every even integer greater than is a sum of two primes. (e) The number is prime for every natural number .
Solution
(a) An axiom (axiom 1 of the list in the section on levels of rigour). It is accepted without proof.
(b) A definition. It introduces the word "odd" and asserts nothing, so it is neither true nor false.
(c) A theorem, proved in the section on first proofs. It is true.
(d) Goldbach's conjecture. Nobody knows whether it is true.
(e) A conjecture that has been refuted, so a false statement: is a counterexample, since .
3. It was once believed that is prime whenever is prime. Check the claim for , , and , and then show that is a counterexample.
Solution
The values are , , and . The first three are clearly prime, and is prime because none of , , , , divides it (a factorisation with would need , and every integer from to that is not prime is a multiple of a smaller prime on the list).
For , which is prime, , and . Both factors are greater than , so is composite and the claim is false. Primes of the form are called Mersenne primes, after Marin Mersenne; Problem 12 proves the true statement in the other direction.
4. Prove that for all integers and : (a) if is even and is odd, then is odd; (b) if and are both odd, then is even.
Solution
(a) Let be even and odd, so and for some integers and . Then . Since is an integer, is odd.
(b) Let and be odd, so and for some integers and . Then , and is an integer, so is even.
In (a) the constant had to be rewritten as to reach the form .
Core
5. Prove that if and are odd integers, then is even but not a multiple of .
Hint
Write for an integer . To show it is not for any integer , look at the difference and show it can never be .
Solution
Let and be odd, so and for some integers and . Then
where is an integer. Since and is an integer, is even.
Now let be any integer. Then , where is an integer. If then , and if then ; every integer is at least or at most , so in either case. Hence , that is, . Since was arbitrary, is not a multiple of .
For example, , and are all even and none is a multiple of .
6. Prove or disprove each claim. (a) The sum of three odd integers is odd. (b) The product of an even integer and an odd integer is odd. (c) The number is prime for every natural number . (d) For all integers and , if is even, then and are both even.
Hint
Two are false. For each false one, a single well-chosen example settles it, but you must verify that the example really fails the conclusion, which may need a line of argument (for instance, that a certain number is not odd). For (c), try the that makes every term a multiple of , or the one just below it.
Solution
(a) True. Let , and be odd, so , and for some integers , and . Then , and is an integer, so is odd.
(b) False. Take , which is even, and , which is odd (). Their product is . If were odd we would have for an integer , so ; but when and when . So is not odd, and the claim fails. (In fact the product of an even integer and any integer is even, by the second Now you on first proofs.)
(c) False. At , , which is composite. The reason is the one that broke Euler's expression: , so the value is . The value at , , is composite too.
(d) False. Take . Then is even, but is not even: would need , which fails for every integer by the argument in (b). The correct statement is that is even exactly when and have the same parity, which follows from a result in the lesson on direct proof.
7. Find the flaw in this proof. Is the claim true?
Claim. For every integer , if is even, then is even.
Proof. Let be an even integer, so for some integer . Then , and is an integer, so is even.
Hint
Compare what the proof assumes in its first line with what the claim assumes.
Solution
The claim has hypothesis " is even" and conclusion " is even". The proof assumes " is even" and concludes " is even". So it proves the converse, "if is even then is even", which is a different statement. Every line of the proof is correct; it is a correct proof of the wrong claim.
A proof of an "if ... then" statement must begin by assuming the hypothesis of that statement. The error is easy to make here because both statements are true and look alike, and the next lesson shows that a conditional and its converse are, in general, logically independent: either can be true while the other is false. (For example, "if is divisible by then is even" is true, and its converse is false at .)
The claim itself is true. A direct attempt stalls, because from there is no evident way to write as twice an integer. The lesson on contrapositive and contradiction proves it by proving the equivalent statement "if is not even then is not even", and then uses it to show that is irrational.
8. Find the flaw in this argument.
Hint
Every step uses either arithmetic or a law of exponents. For which bases is the law valid when is a fraction?
Solution
The first two equalities are true, since . The last two are true, since and . The false step is , which applies the law with , and .
That law is proved for real exponents only when the base is positive. For negative bases, fractional powers are not even defined in the real numbers in general ( would be a real number whose square is , and there is none), and the law fails: here it would equate with . The same slip lies behind the familiar error , which fails for every negative ; the correct statement is .
The lesson is about hypotheses. A rule of algebra is a theorem, and like every theorem it has hypotheses, often left unspoken in school. Applying it outside them can "prove" anything.
9. Prove that if is an odd integer, then is a multiple of . Is it always a multiple of ?
Hint
Substitute and collect terms. For the second question, try the smallest odd positive .
Solution
Let be odd, so for some integer . Then
and is an integer, so is a multiple of .
It is not always a multiple of . At the value is . If for an integer , then gives and gives , so there is no such . One counterexample settles the question.
10. Using only the five axioms in the section on levels of rigour, the Example there and the results of its Now you, prove that for all integers , and : (a) if then ; (b) ; (c) .
Hint
For (a), add to both sides and regroup. For (b) and (c), use part (i) of the Now you: to show that some integer is the negative of , it is enough to show .
Solution
Two consequences of axioms 1, 4 and 5 are used throughout: , and , for every integer .
(a) Let , , be integers with . Then
using the two consequences above, axiom 2 twice, and the hypothesis in the middle step.
(b) Let be an integer. By axiom 5 and axiom 1, . So is an integer that gives when added to , and by part (i) of the Now you, applied to the integer , it is the negative of : .
(c) Let and be integers. Using axioms 1 and 2 to rearrange the four terms,
by axioms 5 and 4. So gives when added to , and by part (i) of the Now you it is .
Part (a) is the cancellation law for addition. The corresponding law for multiplication, "if and then ", does not follow from these five axioms; it needs a further one, and the lesson on direct proof shows what happens when its condition is forgotten.
11. Let be an integer and let be a multiple of . Prove that is not a multiple of . Deduce that none of the primes divides .
Hint
Write . For an arbitrary integer , show that cannot be by splitting into the cases and .
Solution
Since is a multiple of , for some integer . Let be any integer and put , an integer. Then
If , then because , so . If , then , so . Every integer satisfies or , so in either case , that is, . Since was arbitrary, is not a multiple of .
Now let . For each prime in the list, is times the product of the other five, so is a multiple of , and . By the first part, is not a multiple of .
So every prime factor of is larger than , which is why the Now you in the section on counterexamples found the factors and . The same reasoning, applied to the product of any finite list of primes, shows that no finite list contains every prime.
12. Prove that if for integers and , then is composite. Illustrate with .
Hint
First prove the identity by expanding the right-hand side. Then put .
Solution
The identity. Let be a number and an integer. Multiplying out,
Every power appears once with each sign and cancels, leaving .
The claim. Let with and integers, and put . Then , so by the identity
Both factors are integers. The first is at least , since . The second is a sum of positive terms, including and , so it is at least . So is a product of two integers each greater than , and is composite.
For : . Taking , instead gives .
So if is prime, then cannot be composite, and since is not prime, must be prime. (Passing from "composite gives composite " to this is the contrapositive, which the next lesson shows is equivalent.) Problem 3 shows that the converse fails.
Challenge
13. Prove that if a positive integer has an odd divisor , then is composite. Check the result for , and explain why it shows that can be prime only when is a power of .
Hint
For odd , replace by in the identity of Problem 12 to get a factorisation of . Then write and put . To show the second factor exceeds , compare with .
Solution
A factorisation. Let be odd. The identity of Problem 12 with , applied to the number , gives
Since is odd, , so the left side is , and the first factor on the right is . Multiplying both sides by ,
where the signs alternate, since for even and for odd , and is even.
The claim. Let be a positive integer with an odd divisor , and write for a positive integer . Put , so . Then
The number is an integer, since it is a sum and difference of powers of . The first factor satisfies . Since and , , so . The product of and is , which is larger than ; since is positive, this forces . So is a product of two integers each greater than , and is composite.
Check. For , take and : , and .
Powers of . Every positive integer can be written as with and odd: divide out factors of until none remain (the prime factorisation proved in the lesson on induction makes this precise). If is prime, then by what was just proved has no odd divisor greater than , so its odd part is and . So a prime of the form is a Fermat number . The Example on Fermat numbers shows the converse fails at .
14. For integers and , let be the number of -element subsets of a set with elements, so when . The section on the circle problem found regions for points. Prove that
for every , and deduce that exactly when .
Hint
First prove Pascal's rule, for and , by fixing one element of an -element set and sorting the -element subsets by whether they contain it. For the second part, count all the subsets of a set with elements.
Solution
Pascal's rule. Let and , and let be a set with elements. Fix one element of . A -element subset of either contains or does not. Those that contain correspond exactly to the -element subsets of without (remove , or put it back), and there are of them. Those that do not contain are exactly the -element subsets of without , and there are . Every -element subset is in exactly one group, so . The rule holds even when or , since both sides then count subsets that do not exist.
The identity. Let . By Pascal's rule with and ,
and , since a set has exactly one subset with no elements. Adding these three equations gives the identity.
Comparison with . Let be a set with elements. A subset of is fixed by deciding, for each of the elements, whether it is in or out, so has subsets in all. Sorting them by size, is the sum of over all from to . By the identity, counts only the subsets of size at most . So
If , then , no subset has or more elements, and . If , then , and itself, or any of its elements, gives at least one subset of size at least , so .
For the only such subset is itself, and . For the missing subsets number , so , which explains the coincidence with a power of two noted earlier: a -element set has exactly as many subsets of size at least as of size at most , since taking complements swaps the two kinds.
So the pattern was not a coincidence of arithmetic after all. It was the count of all subsets of a set too small to have any subset of size , and it stopped the moment such subsets appeared.