Let , and let be the least common multiple of the orders of its elements. For every prime power dividing , some element of has order divisible by , and a suitable power of it has order exactly . Multiplying these elements over the distinct primes produces, because their orders are coprime, an element of order .
Every element of is a root of . A nonzero polynomial of degree over a field has at most roots, so . On the other hand, every element order divides by Lagrange's theorem, so . Hence , and
The squaring homomorphism has kernel because is odd. Its image therefore has order and index two. If , then is already a square. Otherwise . In the two-element quotient , either , or , or both are the nontrivial coset, in which case . Thus one of is a square modulo .
Finally,Whichever of is a square supplies a root, soThis is the index-two square-class argument for three related residues.
Solved by gpt-5.6-sol high.
Codex Wiki