General definition
Let and be polynomials with coefficients in an integral domain , typically a field or the integers. A greatest common divisor of and is a polynomial that divides and , and such that every common divisor of and also divides . Every pair of polynomials (not both zero) has a GCD if and only if is a unique factorization domain. If is a field and and are not both zero, a polynomial is a greatest common divisor if and only if it divides both and , and it has the greatest degree among the polynomials having this property. If , the GCD is 0. However, some authors consider that it is not defined in this case. The greatest common divisor of and is usually denoted "". The greatest common divisor is not unique: if is a GCD of and , then the polynomial is another GCD if and only if there is an invertible element of such that : and :. In other words, the GCD is unique up to the multiplication by an invertible constant. In the case of the integers, this indetermination has been settled by choosing, as the GCD, the unique one which is positive (there is another one, which is its opposite). With this convention, the GCD of two integers is also the greatest (for the usual ordering) common divisor. However, since there is no naturalProperties
*As stated above, the GCD of two polynomials exists if the coefficients belong either to a field, the ring of the integers, or more generally to a unique factorization domain. *If is any common divisor of and , then divides their GCD. * * for any polynomial . This property is at the basis of the proof of Euclidean algorithm. *For any invertible element of the ring of the coefficients, . *Hence for any scalars such that is invertible. *If , then . *If , then . *For two univariate polynomials and over a field, there exist polynomials and , such that and divides every such linear combination of and ( Bézout's identity). *The greatest common divisor of three or more polynomials may be defined similarly as for two polynomials. It may be computed recursively from GCD's of two polynomials by the identities: :: : and ::GCD by hand computation
There are several ways to find the greatest common divisor of two polynomials. Two of them are: #'' Factorization of polynomials'', in which one finds the factors of each expression, then selects the set of common factors held by all from within each set of factors. This method may be useful only in simple cases, as factoring is usually more difficult than computing the greatest common divisor. #The '' Euclidean algorithm'', which can be used to find the GCD of two polynomials in the same manner as for two numbers.Factoring
To find the GCD of two polynomials using factoring, simply factor the two polynomials completely. Then, take the product of all common factors. At this stage, we do not necessarily have a monic polynomial, so finally multiply this by a constant to make it a monic polynomial. This will be the GCD of the two polynomials as it includes all common divisors and is monic. Example one: Find the GCD of and . : : Thus, their GCD is .Euclidean algorithm
Factoring polynomials can be difficult, especially if the polynomials have a large degree. The Euclidean algorithm is a method that works for any pair of polynomials. It makes repeated use of Euclidean division. When using this algorithm on two numbers, the size of the numbers decreases at each stage. With polynomials, the degree of the polynomials decreases at each stage. The last nonzero remainder, made monic if necessary, is the GCD of the two polynomials. More specifically, for finding the gcd of two polynomials and , one can suppose (otherwise, the GCD is ), and : The Euclidean division provides two polynomials , the ''quotient'' and , the ''remainder'' such that : A polynomial divides both and if and only if it divides both and . Thus : Setting : one can repeat the Euclidean division to get new polynomials and so on. At each stage we have : so the sequence will eventually reach a point at which : and one has got the GCD: : Example: finding the GCD of and : : : Since is the last nonzero remainder, it is a GCD of the original polynomials, and the monic GCD is . In this example, it is not difficult to avoid introducing denominators by factoring out 12 before the second step. This can always be done by using pseudo-remainder sequences, but, without care, this may introduce very large integers during the computation. Therefore, for computer computation, other algorithms are used, that are described below. This method works only if one can test the equality to zero of the coefficients that occur during the computation. So, in practice, the coefficients must be integers, rational numbers, elements of a finite field, or must belong to someUnivariate polynomials with coefficients in a field
The case of univariate polynomials over a field is especially important for several reasons. Firstly, it is the most elementary case and therefore appears in most first courses in algebra. Secondly, it is very similar to the case of the integers, and this analogy is the source of the notion of Euclidean domain. A third reason is that the theory and the algorithms for theEuclidean division
Euclidean division of polynomials, which is used in Euclid's algorithm for computing GCDs, is very similar to Euclidean division of integers. Its existence is based on the following theorem: Given two univariate polynomials ''a'' and ''b'' ≠ 0 defined over a field, there exist two polynomials ''q'' (the ''quotient'') and ''r'' (the ''remainder'') which satisfy : and : where "deg(...)" denotes the degree and the degree of the zero polynomial is defined as being negative. Moreover, ''q'' and ''r'' are uniquely defined by these relations. The difference from Euclidean division of the integers is that, for the integers, the degree is replaced by the absolute value, and that to have uniqueness one has to suppose that ''r'' is non-negative. The rings for which such a theorem exists are called Euclidean domains. Like for the integers, the Euclidean division of the polynomials may be computed by the long division algorithm. This algorithm is usually presented for paper-and-pencil computation, but it works well on computers when formalized as follows (note that the names of the variables correspond exactly to the regions of the paper sheet in a pencil-and-paper computation of long division). In the following computation "deg" stands for the degree of its argument (with the convention ), and "lc" stands for the leading coefficient, the coefficient of the highest degree of the variable. The proof of the validity of this algorithm relies on the fact that during the whole "while" loop, we have and is a non-negative integer that decreases at each iteration. Thus the proof of the validity of this algorithm also proves the validity of the Euclidean division.Euclid's algorithm
As for the integers, the Euclidean division allows us to define Euclid's algorithm for computing GCDs. Starting from two polynomials ''a'' and ''b'', Euclid's algorithm consists of recursively replacing the pair by (where "" denotes the remainder of the Euclidean division, computed by the algorithm of the preceding section), until ''b'' = 0. The GCD is the last non zero remainder. Euclid's algorithm may be formalized in the recursive programming style as: In the imperative programming style, the same algorithm becomes, giving a name to each intermediate remainder: The sequence of the degrees of the is strictly decreasing. Thus after, at most, steps, one get a null remainder, say . As and have the same divisors, the set of the common divisors is not changed by Euclid's algorithm and thus all pairs have the same set of common divisors. The common divisors of and are thus the common divisors of and 0. Thus is a GCD of and . This not only proves that Euclid's algorithm computes GCDs but also proves that GCDs exist.Bézout's identity and extended GCD algorithm
Bézout's identity is a GCD related theorem, initially proved for the integers, which is valid for every principal ideal domain. In the case of the univariate polynomials over a field, it may be stated as follows. The interest of this result in the case of the polynomials is that there is an efficient algorithm to compute the polynomials and , This algorithm differs from Euclid's algorithm by a few more computations done at each iteration of the loop. It is therefore called extended GCD algorithm. Another difference with Euclid's algorithm is that it also uses the quotient, denoted "quo", of the Euclidean division instead of only the remainder. This algorithm works as follows. The proof that the algorithm satisfies its output specification relies on the fact that, for every we have : : the latter equality implying : The assertion on the degrees follows from the fact that, at every iteration, the degrees of and increase at most as the degree of decreases. An interesting feature of this algorithm is that, when the coefficients of Bezout's identity are needed, one gets for free the quotient of the input polynomials by their GCD.Arithmetic of algebraic extensions
An important application of the extended GCD algorithm is that it allows one to compute division in algebraic field extensions. Let an algebraic extension of a field , generated by an element whose minimal polynomial has degree . The elements of are usually represented by univariate polynomials over of degree less than . The addition in is simply the addition of polynomials: : The multiplication in is the multiplication of polynomials followed by the division by : : The inverse of a non zero element of is the coefficient in Bézout's identity , which may be computed by extended GCD algorithm. (the GCD is 1 because the minimal polynomial is irreducible). The degrees inequality in the specification of extended GCD algorithm shows that a further division by is not needed to get deg() < deg().Subresultants
In the case of univariate polynomials, there is a strong relationship between the greatest common divisors andTechnical definition
Let : be two univariate polynomials with coefficients in a field ''K''. Let us denote by the ''K'' vector space of dimension ''i'' of polynomials of degree less than ''i''. For non-negative integer ''i'' such that ''i'' ≤ ''m'' and ''i'' ≤ ''n'', let : be the linear map such that : TheSketch of the proof
It is not obvious that, as defined, the subresultants have the desired properties. Nevertheless, the proof is rather simple if the properties of linear algebra and those of polynomials are put together. As defined, the columns of the matrix ''Ti'' are the vectors of the coefficients of some polynomials belonging to the image of . The definition of the ''i''-th subresultant polynomial ''Si'' shows that the vector of its coefficients is a linear combination of these column vectors, and thus that ''Si'' belongs to the image of If the degree of the GCD is greater than ''i'', then Bézout's identity shows that every non zero polynomial in the image of has a degree larger than ''i''. This implies that ''Si''=0. If, on the other hand, the degree of the GCD is ''i'', then Bézout's identity again allows proving that the multiples of the GCD that have a degree lower than ''m'' + ''n'' − ''i'' are in the image of . The vector space of these multiples has the dimension ''m'' + ''n'' − 2''i'' and has a base of polynomials of pairwise different degrees, not smaller than ''i''. This implies that the submatrix of the ''m'' + ''n'' − 2''i'' first rows of the column echelon form of ''Ti'' is the identity matrix and thus that ''si'' is not 0. Thus ''Si'' is a polynomial in the image of , which is a multiple of the GCD and has the same degree. It is thus a greatest common divisor.GCD and root finding
Square-free factorization
Most root-finding algorithms behave badly with polynomials that have multiple roots. It is therefore useful to detect and remove them before calling a root-finding algorithm. A GCD computation allows detection of the existence of multiple roots, since the multiple roots of a polynomial are the roots of the GCD of the polynomial and itsSturm sequence
The ''Sturm sequence'' of a polynomial with real coefficients is the sequence of the remainders provided by a variant of Euclid's algorithm applied to the polynomial and its derivative. For getting the Sturm sequence, one simply replaces the instruction : of Euclid's algorithm by : Let ''V''(''a'') be the number of changes of signs in the sequence, when evaluated at a point ''a''. Sturm's theorem asserts that ''V''(''a'') − ''V''(''b'') is the number of real roots of the polynomial in the interval 'a'', ''b'' Thus the Sturm sequence allows computing the number of real roots in a given interval. By subdividing the interval until every subinterval contains at most one root, this provides an algorithm that locates the real roots in intervals of arbitrary small length.GCD over a ring and its field of fractions
In this section, we consider polynomials over a unique factorization domain ''R'', typically the ring of the integers, and over its field of fractions ''F'', typically the field of the rational numbers, and we denote ''R'' 'X''and ''F'' 'X''the rings of polynomials in a set of variables over these rings.Primitive part–content factorization
The ''content'' of a polynomial ''p'' ∈ ''R'' 'X'' denoted "cont(''p'')", is the GCD of its coefficients. A polynomial ''q'' ∈ ''F'' 'X''may be written : where ''p'' ∈ ''R'' 'X''and ''c'' ∈ ''R'': it suffices to take for ''c'' a multiple of all denominators of the coefficients of ''q'' (for example their product) and ''p'' = ''cq''. The ''content'' of ''q'' is defined as: : In both cases, the content is defined up to the multiplication by a unit of ''R''. The ''primitive part'' of a polynomial in ''R'' 'X''or ''F'' 'X''is defined by : In both cases, it is a polynomial in ''R'' 'X''that is ''primitive'', which means that 1 is a GCD of its coefficients. Thus every polynomial in ''R'' 'X''or ''F'' 'X''may be factorized as : and this factorization is unique up to the multiplication of the content by a unit of ''R'' and of the primitive part by the inverse of this unit. Gauss's lemma implies that the product of two primitive polynomials is primitive. It follows that : and :Relation between the GCD over ''R'' and over ''F''
The relations of the preceding section imply a strong relation between the GCD's in ''R'' 'X''and in ''F'' 'X'' To avoid ambiguities, the notation "''gcd''" will be indexed, in the following, by the ring in which the GCD is computed. If ''q''1 and ''q''2 belong to ''F'' 'X'' then : If ''p''1 and ''p''2 belong to ''R'' 'X'' then : and : Thus the computation of polynomial GCD's is essentially the same problem over ''F'' 'X''and over ''R'' 'X'' For univariate polynomials over the rational numbers, one may think that Euclid's algorithm is a convenient method for computing the GCD. However, it involves simplifying a large number of fractions of integers, and the resulting algorithm is not efficient. For this reason, methods have been designed to modify Euclid's algorithm for working only with polynomials over the integers. They consist of replacing the Euclidean division, which introduces fractions, by a so-called ''pseudo-division'', and replacing the remainder sequence of the Euclid's algorithm by so-called ''pseudo-remainder sequences'' (seeProof that GCD exists for multivariate polynomials
In the previous section we have seen that the GCD of polynomials in ''R'' 'X''may be deduced from GCDs in ''R'' and in ''F'' 'X'' A closer look on the proof shows that this allows us to prove the existence of GCDs in ''R'' 'X'' if they exist in ''R'' and in ''F'' 'X'' In particular, if GCDs exist in ''R'', and if ''X'' is reduced to one variable, this proves that GCDs exist in ''R'' 'X''(Euclid's algorithm proves the existence of GCDs in ''F'' 'X''. A polynomial in ''n'' variables may be considered as a univariate polynomial over the ring of polynomials in (''n'' − 1) variables. Thus a recursion on the number of variables shows that if GCDs exist and may be computed in ''R'', then they exist and may be computed in every multivariate polynomial ring over ''R''. In particular, if ''R'' is either the ring of the integers or a field, then GCDs exist in ''R'' 1,..., ''xn''">'x''1,..., ''xn'' and what precedes provides an algorithm to compute them. The proof that a polynomial ring over a unique factorization domain is also a unique factorization domain is similar, but it does not provide an algorithm, because there is no general algorithm to factor univariate polynomials over a field (there are examples of fields for which there does not exist any factorization algorithm for the univariate polynomials).Pseudo-remainder sequences
In this section, we consider an integral domain ''Z'' (typically the ring Z of the integers) and its field of fractions ''Q'' (typically the field Q of the rational numbers). Given two polynomials ''A'' and ''B'' in the univariate polynomial ring ''Z'' 'X'' the Euclidean division (over ''Q'') of ''A'' by ''B'' provides a quotient and a remainder which may not belong to ''Z'' 'X'' For, if one applies Euclid's algorithm to the following polynomials : and : the successive remainders of Euclid's algorithm are : One sees that, despite the small degree and the small size of the coefficients of the input polynomials, one has to manipulate and simplify integer fractions of rather large size. The ''pseudo-division'' has been introduced to allow a variant of Euclid's algorithm for which all remainders belong to ''Z'' 'X'' If and and ''a'' ≥ ''b'', the pseudo-remainder of the pseudo-division of ''A'' by ''B'', denoted by prem(''A'',''B'') is : where is the leading coefficient of ''B'' (the coefficient of ''X''''b''). The pseudo-remainder of the pseudo-division of two polynomials in ''Z'' 'X''belongs always to ''Z'' 'X'' A pseudo-remainder sequence is the sequence of the (pseudo) remainders ''r''''i'' obtained by replacing the instruction : of Euclid's algorithm by : where ''α'' is an element of ''Z'' that divides exactly every coefficient of the numerator. Different choices of ''α'' give different pseudo-remainder sequences, which are described in the next subsections. As the common divisors of two polynomials are not changed if the polynomials are multiplied by invertible constants (in ''Q''), the last nonzero term in a pseudo-remainder sequence is a GCD (in ''Q'' 'X'' of the input polynomials. Therefore, pseudo-remainder sequences allows computing GCD's in ''Q'' 'X''without introducing fractions in ''Q''. In some contexts, it is essential to control the sign of the leading coefficient of the pseudo-remainder. This is typically the case when computingTrivial pseudo-remainder sequence
The simplest (to define) remainder sequence consists in taking always . In practice, it is not interesting, as the size of the coefficients grows exponentially with the degree of the input polynomials. This appears clearly on the example of the preceding section, for which the successive pseudo-remainders are : : : : The number of digits of the coefficients of the successive remainders is more than doubled at each iteration of the algorithm. This is typical behavior of the trivial pseudo-remainder sequences.Primitive pseudo-remainder sequence
The ''primitive pseudo-remainder sequence'' consists in taking for ''α'' the content of the numerator. Thus all the ''r''''i'' are primitive polynomials. The primitive pseudo-remainder sequence is the pseudo-remainder sequence, which generates the smallest coefficients. However it requires to compute a number of GCD's in ''Z'', and therefore is not sufficiently efficient to be used in practice, especially when ''Z'' is itself a polynomial ring. With the same input as in the preceding sections, the successive remainders, after division by their content are : : : : The small size of the coefficients hides the fact that a number of integers GCD and divisions by the GCD have been computed.Subresultant pseudo-remainder sequence
A subresultant sequence can be also computed with pseudo-remainders. The process consists in choosing ''α'' in such a way that every ''r''''i'' is a subresultant polynomial. Surprisingly, the computation of ''α'' is very easy (see below). On the other hand, the proof of correctness of the algorithm is difficult, because it should take into account all the possibilities for the difference of degrees of two consecutive remainders. The coefficients in the subresultant sequence are rarely much larger than those of the primitive pseudo-remainder sequence. As GCD computations in ''Z'' are not needed, the subresultant sequence with pseudo-remainders gives the most efficient computation. With the same input as in the preceding sections, the successive remainders are : : : : The coefficients have a reasonable size. They are obtained without any GCD computation, only exact divisions. This makes this algorithm more efficient than that of primitive pseudo-remainder sequences. The algorithm computing the subresultant sequence with pseudo-remainders is given below. In this algorithm, the input is a pair of polynomials in ''Z'' The are the successive pseudo remainders in ''Z'' the variables ''i'' and are non negative integers, and the Greek letters denote elements in ''Z''. The functionsdeg()
and rem()
denote the degree of a polynomial and the remainder of the Euclidean division. In the algorithm, this remainder is always in ''Z'' Finally the divisions denoted / are always exact and have their result either in ''Z'' or in ''Z''.
Note: "lc" stands for the leading coefficient, the coefficient of the highest degree of the variable.
This algorithm computes not only the greatest common divisor (the last non zero ), but also all the subresultant polynomials: The remainder is the -th subresultant polynomial. If , the -th subresultant polynomial is . All the other subresultant polynomials are zero.
Sturm sequence with pseudo-remainders
One may use pseudo-remainders for constructing sequences having the same properties asModular GCD algorithm
If ''f'' and ''g'' are polynomials in ''F'' 'x''for some finitely generated field ''F'', the Euclidean Algorithm is the most natural way to compute their GCD. However, modern computer algebra systems only use it if ''F'' is finite because of a phenomenon called intermediate expression swell. Although degrees keep decreasing during the Euclidean algorithm, if ''F'' is not finite then the bit size of the polynomials can increase (sometimes dramatically) during the computations because repeated arithmetic operations in ''F'' tends to lead to larger expressions. For example, the addition of two rational numbers whose denominators are bounded by ''b'' leads to a rational number whose denominator is bounded by ''b''2, so in the worst case, the bit size could nearly double with just one operation. To expedite the computation, take a ring ''D'' for which ''f'' and ''g'' are in ''D'' 'x'' and take an ideal ''I'' such that ''D''/''I'' is a finite ring. Then compute the GCD over this finite ring with the Euclidean Algorithm. Using reconstruction techniques ( Chinese remainder theorem, rational reconstruction, etc.) one can recover the GCD of ''f'' and ''g'' from its image modulo a number of ideals ''I''. One can prove that this works provided that one discards modular images with non-minimal degrees, and avoids ideals ''I'' modulo which a leading coefficient vanishes. Suppose ,