View source for Quadratic residue

In [[number theory]], an [[integer]] ''q'' is called a '''quadratic residue''' [[modulo operation|modulo]] ''n'' if it is [[Congruence relation|congruent]] to a [[Square number|perfect square]] modulo ''n''; i.e., if there exists an integer ''x'' such that:

:<math>x^2\equiv q \pmod{n}.</math>

Otherwise, ''q'' is called a  '''quadratic nonresidue''' modulo ''n''.

Originally an abstract [[mathematics|mathematical]] concept from the branch of number theory known as [[modular arithmetic]], quadratic residues are now used in applications ranging from acoustical engineering to [[cryptography]] and the [[Integer factorization|factoring of large numbers]].

==History, conventions, and elementary facts==
[[Fermat]], [[Euler]], [[Joseph Louis Lagrange|Lagrange]], [[Adrien-Marie Legendre|Legendre]], and other number theorists of the 17th and 18th centuries proved some theorems<ref>Lemmemeyer, Ch. 1</ref> and made some conjectures<ref>Lemmermeyer, pp 6&ndash;8, p. 16 ff</ref> about quadratic residues, but the first systematic treatment is § IV of [[Gauss]]'s ''[[Disquisitiones Arithmeticae]]'' (1801). Article 95 introduces the terminology "quadratic residue" and "quadratic nonresidue", and states that, if the context makes it clear, the adjective "quadratic" may be dropped.

For a given ''n'' a list of the quadratic residues modulo ''n'' may be obtained by simply squaring the numbers 0, 1, ..., {{nowrap|''n'' &minus; 1}}. Because ''a''<sup>2</sup> ≡ (''n'' &minus; ''a'')<sup>2</sup> (mod ''n''), the list of squares modulo ''n'' is symmetrical around ''n''/2, and the list only needs to go that high. This can be seen in the table [[#Table of quadratic residues|below]].

Thus, the number of quadratic residues modulo ''n'' cannot exceed ''n''/2 + 1 (''n'' even) or (''n'' + 1)/2 (''n'' odd).<ref>Gauss, DA, art. 94</ref>

The product of two residues is always a residue.

===Prime modulus===

Modulo 2, every integer is a quadratic residue.

Modulo an odd [[prime number]] ''p'' there are (''p'' + 1)/2 residues (including 0) and (''p'' &minus; 1)/2 nonresidues, by [[Euler's criterion]]. In this case, it is customary to consider 0 as a special case and work within the [[Multiplicative group of integers modulo n|multiplicative group of nonzero elements]] of the [[Field (mathematics)|field]] '''Z/''p''Z'''. (In other words, every congruence class except zero modulo ''p'' has a multiplicative inverse. This is not true for composite moduli.)<ref name="Gauss, DA, art. 96">Gauss, DA, art. 96</ref>

Following this convention, the multiplicative inverse of a residue is a residue, and the inverse of a nonresidue is a nonresidue.<ref name="Gauss, DA, art. 98">Gauss, DA, art. 98</ref>

Following this convention, modulo an odd prime number there are an equal number of residues and nonresidues.<ref name="Gauss, DA, art. 96"/>

Modulo a prime, the product of two nonresidues is a residue and the product of a nonresidue and a (nonzero) residue is a nonresidue.<ref name="Gauss, DA, art. 98"/>

The first supplement<ref>Gauss, DA, art 111</ref> to the [[law of quadratic reciprocity]] is that if ''p'' ≡ 1 (mod 4) then &minus;1 is a quadratic residue modulo ''p'', and if ''p'' ≡ 3 (mod 4) then &minus;1 is a nonresidue modulo ''p''. This implies the following:

If ''p'' ≡ 1 (mod 4) the negative of a residue modulo ''p'' is a residue and the negative of a nonresidue is a nonresidue.

If ''p'' ≡ 3 (mod 4) the negative of a residue modulo ''p'' is a nonresidue and the negative of a nonresidue is a residue.

===Prime power modulus===
All odd squares are ≡ 1 (mod 8) and thus also ≡ 1 (mod 4). If ''a'' is an odd number and ''m'' = 8, 16, or some higher power of 2, then ''a'' is a residue modulo ''m'' if and only if ''a'' ≡ 1 (mod 8).<ref>Gauss, DA, art. 103</ref>

<blockquote>For example, mod (32) the odd squares are
:1<sup>2</sup> &equiv; 15<sup>2</sup> &equiv; 1
:3<sup>2</sup> &equiv; 13<sup>2</sup> &equiv; 9
:5<sup>2</sup> &equiv; 11<sup>2</sup> &equiv; 25
:7<sup>2</sup> &equiv; 9<sup>2</sup>  &equiv; 49 &equiv; 17

and the even ones are
:0<sup>2</sup> &equiv; 8<sup>2</sup> &equiv; 16<sup>2</sup> &equiv; 0
:2<sup>2</sup> &equiv; 6<sup>2</sup>&equiv; 10<sup>2</sup> &equiv; 14<sup>2</sup>&equiv; 4
:4<sup>2</sup> &equiv; 12<sup>2</sup> &equiv; 16.

</blockquote>

So a nonzero number is a residue mod 8, 16, etc., if and only if it is of the form 4<sup>''k''</sup>(8''n'' + 1).

A number ''a'' relatively prime to an odd prime ''p'' is a residue modulo any power of ''p'' if and only if it is a residue modulo ''p''.<ref name="Gauss, DA, art. 101">Gauss, DA, art. 101</ref>

If the modulus is ''p''<sup>''n''</sup>,
:then ''p''<sup>''k''</sup>''a''
::is a residue modulo ''p''<sup>''n''</sup> if ''k'' &ge; ''n''
::is a nonresidue modulo ''p''<sup>''n''</sup> if ''k'' &lt; ''n'' is odd
::is a residue modulo ''p''<sup>''n''</sup> if ''k'' &lt; ''n'' is even and ''a'' is a residue
::is a nonresidue modulo ''p''<sup>''n''</sup> if ''k'' &lt; ''n'' is even and ''a'' is a nonresidue.<ref>Gauss, DA, art. 102</ref>

Notice that the rules are different for powers of two and powers of odd primes.

Modulo an odd prime power ''n'' = ''p''<sup>''k''</sup>, the products of residues and nonresidues relatively prime to ''p'' obey the same rules as they do mod ''p''; ''p'' is a nonresidue, and in general all the residues and nonresidues obey the same rules, except that the products will be zero if the power of ''p'' in the product ≥ ''n''.

Modulo 8, the product of the nonresidues 3 and 5 is the nonresidue 7, and likewise for permutations of 3, 5 and 7. In fact, the multiplicative group of the non-residues and 1 form the [[Klein four-group]].

===Composite modulus not a prime power===

The basic fact in this case is
:if ''a'' is a residue modulo ''n'', then ''a'' is a residue modulo ''p''<sup>''k''</sup> for ''every'' prime power dividing ''n''.
:if ''a'' is a nonresidue modulo ''n'', then ''a'' is a nonresidue modulo ''p''<sup>''k''</sup> for ''at least one'' prime power dividing ''n''.

Modulo a composite number, the product of two residues is a residue. The product of a residue and a nonresidue may be a residue, a nonresidue, or zero.

<blockquote>
For example, from the table for modulus 6 &nbsp; 
 '''1''', 2, '''3''', '''4''', 5 (residues in '''bold''').

The product of the residue 3 and the nonresidue 5 is the residue 3, whereas the product of the residue 4 and the nonresidue 2 is the nonresidue 2.

</blockquote>

Also, the product of two nonresidues may be either a residue, a nonresidue, or zero.

<blockquote>
For example, from the table for modulus 15 &nbsp; 
 '''1''', 2, 3, '''4''', 5, '''6''', 7, 8,  '''9''', '''10''', 11, 12, 13, 14 (residues in '''bold''').

The product of the nonresidues 2 and 8 is the residue 1, whereas the product of the nonresidues 2 and 7 is the nonresidue 14.

</blockquote>

This phenomenon can best be described using the vocabulary of abstract algebra. The congruence classes relatively prime to the modulus are a [[Group (mathematics)|group]] under multiplication, called the [[group of units]] of the [[Ring (mathematics)|ring]] '''Z/''n''Z''', and the squares are a [[subgroup]] of it. Different nonresidues may belong to different [[coset]]s, and there is no simple rule that predicts which one their product will be in. Modulo a prime, there is only the subgroup of squares and a single coset.

The fact that, e.g., modulo 15 the product of the nonresidues 3 and 5, or of the nonresidue 5 and the residue 9, or the two residues 9 and 10 are all zero comes from working in the full ring '''Z/''n''Z''', which has [[zero divisor]]s for composite ''n''.

For this reason some authors<ref>e.g., {{harvnb|Ireland|Rosen|1990|p=50}}</ref> add to the definition that a quadratic residue ''a'' must not only be a square but must also be [[relatively prime]] to the modulus ''n''. (''a'' is coprime to ''n'' if and only if ''a''<sup>2</sup> is coprime to ''n''.)

Although it makes things tidier, this article does not insist that residues must be coprime to the modulus.

==Notations==

Gauss<ref>Gauss, DA, art. 131</ref> used {{math|R}} and {{math|N}} to denote residuosity and non-residuosity, respectively;
:for example, {{math|2 R 7}} and {{math|5 N 7}}, or {{math|1 R 8}} and {{math|3 N 8}}.

Although this notation is compact and convenient for some purposes,<ref>e.g. Hardy and Wright use it</ref><ref>Gauss, DA, art 230 ff.</ref> a more useful notation is the [[Legendre symbol]], also called the [[Dirichlet character#Examples|quadratic character]], which is defined for all integers {{mvar|a}} and positive odd [[prime number]]s {{mvar|p}} as
:<math>
\left(\frac{a}{p}\right) = \begin{cases}\;\;\,0&\text{ if }p \text { divides } a\\+1&\text{ if } a \operatorname{R} p \text{ and }p \text { does not divide } a\\-1&\text{ if }a \operatorname{N} p \text{ and }p \text{ does not divide } a\end{cases}</math>

There are two reasons why numbers ≡ 0 (mod {{mvar|p}}) are treated specially. As we have seen,  it makes many formulas and theorems easier to state. The other (related) reason is that the quadratic character is a [[homomorphism]] from the [[multiplicative group of integers modulo n|multiplicative group of nonzero congruence classes modulo {{mvar|p}}]] to the [[complex numbers]] under multiplication. Setting <math>(\tfrac{np}{p}) = 0</math>  allows its [[Domain (mathematics)|domain]] to be extended to the multiplicative [[semigroup]] of all the integers.<ref>This extension of the domain is necessary for defining ''L'' functions.</ref>

One advantage of this notation over Gauss's is that the Legendre symbol is a function that can be used in formulas.<ref>See [[Legendre symbol#Properties of the Legendre symbol]] for examples</ref>  It can also easily be generalized to [[Cubic reciprocity|cubic]], quartic and higher power residues.<ref>Lemmermeyer, pp 111&ndash;end</ref>

There is a generalization of the Legendre symbol for composite values of {{mvar|p}}, the [[Jacobi symbol]], but its properties are not as simple: if {{mvar|m}} is composite and the Jacobi symbol <math>(\tfrac{a}{m}) = -1,</math> then {{math|''a'' N ''m''}}, and if {{math|''a'' R ''m''}} then <math>(\tfrac{a}{m}) = 1,</math> but if <math>(\tfrac{a}{m}) = 1</math> we do not know whether {{math|''a'' R ''m''}} or {{math|''a'' N ''m''}}. For example: <math>(\tfrac{2}{15}) = 1</math> and <math>(\tfrac{4}{15}) = 1</math>, but {{math|1=2 N 15}} and {{math|1=4 R 15}}. If {{mvar|m}} is prime, the Jacobi and Legendre symbols agree.

==Distribution of quadratic residues==

Although quadratic residues appear to occur in a rather random pattern modulo ''n'', and this has been exploited in such [[#Applications of quadratic residues|applications]] as [[#Acoustics|acoustics]] and [[#Cryptography|cryptography]], their distribution also exhibits some striking regularities.

Using [[Dirichlet's theorem on arithmetic progressions|Dirichlet's theorem]] on primes in arithmetic progressions, the [[law of quadratic reciprocity]], and the [[Chinese remainder theorem]] (CRT) it is easy to see that for any ''M'' > 0 there are primes ''p'' such that the numbers 1, 2, ..., ''M'' are all residues modulo ''p''.
<blockquote>For example, if ''p'' ≡ 1 (mod 8), (mod 12), (mod 5) and (mod 28), then by the law of quadratic reciprocity 2, 3, 5, and 7 will all be residues modulo ''p'', and thus all numbers 1&ndash;10 will be. The CRT says that this is the same as ''p'' ≡ 1 (mod 840), and Dirichlet's theorem says there are an infinite number of primes of this form. 2521 is the smallest, and indeed 1<sup>2</sup> ≡ 1, 1046<sup>2</sup> ≡ 2, 123<sup>2</sup> ≡ 3, 2<sup>2</sup> ≡ 4, 643<sup>2</sup> ≡ 5, 87<sup>2</sup> ≡ 6, 668<sup>2</sup> ≡ 7, 429<sup>2</sup> ≡ 8, 3<sup>2</sup> ≡ 9, and 529<sup>2</sup> ≡ 10 (mod 2521).</blockquote>

===Dirichlet's formulas===

The first of these regularities stems from [[Peter Gustav Lejeune Dirichlet]]'s work (in the 1830s) on the [[class number formula|analytic formula]] for the [[Class number (number theory)|class number]] of binary [[quadratic form]]s.<ref>{{harvnb|Davenport|2000|pp=8&ndash;9, 43&ndash;51}}. These are classical results.</ref> Let ''q'' be a prime number, ''s'' a complex variable, and define a [[Dirichlet L-function]] as
:<math>L(s) = \sum_{n=1}^\infty\left(\frac{n}{q}\right)n^{-s}. </math>

Dirichlet showed that if ''q'' ≡ 3 (mod 4), then
:<math>L(1) = -\frac{\pi}{\sqrt q}\sum_{n=1}^{q-1} \frac{n}{q} \left(\frac{n}{q}\right) > 0.</math>

Therefore, in this case (prime ''q'' ≡ 3 (mod 4)), the sum of the quadratic residues minus the sum of the nonresidues in the range 1, 2, ..., ''q'' &minus; 1 is a negative number.
<blockquote>
For example, modulo 11,

:'''1''', 2, '''3''', '''4''', '''5''', 6, 7, 8, '''9''', 10 (residues in '''bold''')

:1 + 4 + 9 + 5 + 3 = 22, 2 + 6 + 7 + 8 + 10 = 33, and the difference is &minus;11. </blockquote>

In fact the difference will always be an odd multiple of ''q'' if ''q'' > 3.<ref>{{harvnb|Davenport|2000|pp=49&ndash;51}}, (conjectured by [[Carl Gustav Jacob Jacobi|Jacobi]], proved by Dirichlet)</ref> In contrast, for prime ''q'' ≡ 1 (mod 4), the sum of the quadratic residues minus the sum of the nonresidues in the range 1, 2, ..., ''q'' &minus; 1 is zero, implying that both sums equal <math>\frac{q(q-1)}{4}</math>.

Dirichlet also proved that for prime ''q'' ≡ 3 (mod 4),
:<math>L(1) = \frac{\pi}{\left(2-\left(\frac{2}{q}\right)\right)\!\sqrt q}\sum_{n=1}^\frac{q-1}{2}\left(\frac{n}{q}\right) > 0.</math>
This implies that there are more quadratic residues than nonresidues among the numbers 1, 2, ..., (''q'' &minus; 1)/2.

<blockquote>For example, modulo 11 there are four residues less than 6 (namely 1, 3, 4, and 5), but only one nonresidue (2).</blockquote>

An intriguing fact about these two theorems is that all known proofs rely on analysis; no-one has ever published a simple or direct proof of either statement.<ref>{{harvnb|Davenport|2000|p=9}}</ref>

===Law of quadratic reciprocity===

If ''p'' and ''q'' are odd primes, then:

((''p'' is a quadratic residue mod ''q'') if and only if (''q'' is a quadratic residue mod ''p'')) if and only if (at least one of ''p'' and ''q'' is congruent to 1 mod 4).

That is:

:<math> \left(\frac{p}{q}\right) \left(\frac{q}{p}\right) = (-1)^{\frac{p-1}{2} \cdot \frac{q-1}{2}}</math>

where <math>\left(\frac{p}{q}\right)</math> is the [[Legendre symbol]].

Thus, for numbers ''a'' and odd primes ''p'' that does not divide ''a'':

{|class="wikitable"
!''a''
!''a'' is a quadratic residue mod ''p'' if and only if
!''a''
!''a'' is a quadratic residue mod ''p'' if and only if
|-
|1
|(every prime ''p'')
|−1
|''p'' ≡ 1 (mod 4)
|-
|2
|''p'' ≡ 1, 7 (mod 8)
|−2
|''p'' ≡ 1, 3 (mod 8)
|-
|3
|''p'' ≡ 1, 11 (mod 12)
|−3
|''p'' ≡ 1 (mod 3)
|-
|4
|(every prime ''p'')
|−4
|''p'' ≡ 1 (mod 4)
|-
|5
|''p'' ≡ 1, 4 (mod 5)
|−5
|''p'' ≡ 1, 3, 7, 9 (mod 20)
|-
|6
|''p'' ≡ 1, 5, 19, 23 (mod 24)
|−6
|''p'' ≡ 1, 5, 7, 11 (mod 24)
|-
|7
|''p'' ≡ 1, 3, 9, 19, 25, 27 (mod 28)
|−7
|''p'' ≡ 1, 2, 4 (mod 7)
|-
|8
|''p'' ≡ 1, 7 (mod 8)
|−8
|''p'' ≡ 1, 3 (mod 8)
|-
|9
|(every prime ''p'')
|−9
|''p'' ≡ 1 (mod 4)
|-
|10
|''p'' ≡ 1, 3, 9, 13, 27, 31, 37, 39 (mod 40)
|−10
|''p'' ≡ 1, 7, 9, 11, 13, 19, 23, 37 (mod 40)
|-
|11
|''p'' ≡ 1, 5, 7, 9, 19, 25, 35, 37, 39, 43 (mod 44)
|−11
|''p'' ≡ 1, 3, 4, 5, 9 (mod 11)
|-
|12
|''p'' ≡ 1, 11 (mod 12)
|−12
|''p'' ≡ 1 (mod 3)
|}

See also [[quadratic reciprocity]].

===Pairs of residues and nonresidues===

Modulo a prime ''p'', the number of pairs ''n'', ''n'' + 1 where ''n'' R ''p'' and ''n'' + 1 R ''p'', or ''n'' N ''p'' and ''n'' + 1 R ''p'', etc., are almost equal. More precisely,<ref>Lemmermeyer, p. 29 ex. 1.22; cf pp. 26&ndash;27, Ch. 10</ref><ref>Crandall & Pomerance, ex 2.38, pp 106&ndash;108</ref> let ''p'' be an odd prime. For ''i'', ''j'' = 0, 1 define the sets
:<math>A_{ij}=\left\{k\in\{1,2,\dots,p-2\}: \left(\frac{k}{p}\right)=(-1)^i\land\left(\frac{k+1}{p}\right)=(-1)^j\right\},</math>
and let
:<math>\alpha_{ij} = |A_{ij}|.</math>

That is,
:&alpha;<sub>00</sub> is the number of residues that are followed by a residue,
:&alpha;<sub>01</sub> is the number of residues that are followed by a nonresidue,
:&alpha;<sub>10</sub> is the number of nonresidues that are followed by a residue, and
:&alpha;<sub>11</sub> is the number of nonresidues that are followed by a nonresidue.

Then if ''p'' ≡ 1 (mod 4)

:<math>\alpha_{00} = \frac{p-5}{4},\;\alpha_{01} =\alpha_{10} =\alpha_{11} = \frac{p-1}{4} </math>

and if ''p'' ≡ 3 (mod 4)

:<math>\alpha_{01} = \frac{p+1}{4},\;\alpha_{00} =\alpha_{10} =\alpha_{11} = \frac{p-3}{4}. </math>

<blockquote>For example: (residues in '''bold''')

Modulo 17
:'''1''', '''2''', 3, '''4''', 5, 6, 7, '''8''', '''9''', 10, 11, 12, '''13''', 14, '''15''', '''16'''
::''A''<sub>00</sub> = {1,8,15},
::''A''<sub>01</sub> = {2,4,9,13},
::''A''<sub>10</sub> = {3,7,12,14},
::''A''<sub>11</sub> = {5,6,10,11}.

Modulo 19
:'''1''', 2, 3, '''4''', '''5''', '''6''', '''7''', 8, '''9''', 10, '''11''', 12, 13, 14, 15, '''16''', '''17''', 18
::''A''<sub>00</sub> = {4,5,6,16},
::''A''<sub>01</sub> = {1,7,9,11,17},
::''A''<sub>10</sub> = {3,8,10,15},
::''A''<sub>11</sub> = {2,12,13,14}. </blockquote>

Gauss (1828)<ref>Gauss, ''Theorie der biquadratischen Reste, Erste Abhandlung'' (pp 511&ndash;533 of the ''Untersuchungen über hohere Arithmetik)''</ref> introduced this sort of counting when he proved that if ''p'' ≡ 1 (mod 4) then ''x''<sup>4</sup> ≡ 2 (mod ''p'') can be solved if and only if ''p''&nbsp;=&nbsp;''a''<sup>2</sup>&nbsp;+&nbsp;64&nbsp;''b''<sup>2</sup>.

===The Pólya&ndash;Vinogradov inequality===

The values of <math>(\tfrac{a}{p})</math> for consecutive values of ''a'' mimic a random variable like a [[coin flip]].<ref>Crandall & Pomerance, ex 2.38, pp 106&ndash;108 discuss the similarities and differences. For example, tossing ''n'' coins, it is possible (though unlikely) to get ''n''/2 heads followed by that many tails. V-P inequality rules that out for residues.</ref> Specifically, [[George Pólya|Pólya]] and [[Ivan Matveevich Vinogradov|Vinogradov]] proved<ref>{{harvnb|Davenport|2000|pp=135–137}}, (proof of P&ndash;V, (in fact big-O can be replaced by 2); journal references for Paley, Montgomery, and Schur)</ref> (independently) in 1918 that for any nonprincipal [[Dirichlet character]] χ(''n'') modulo ''q'' and any integers ''M'' and ''N'',

:<math>\left|\sum_{n=M+1}^{M+N}\chi(n)\right| =O\left( \sqrt q \log q\right),</math>

in [[big O notation]]. Setting

:<math> \chi(n) = \left(\frac{n}{q}\right),</math>

this shows that the number of quadratic residues modulo ''q'' in any interval of length ''N'' is

:<math>\frac{1}{2}N + O(\sqrt q\log q).</math>

It is easy<ref>Planet Math: Proof of Pólya&ndash;Vinogradov Inequality in [[#External links|external links]]. The proof is a page long and only requires elementary facts about Gaussian sums</ref> to prove that

:<math> \left| \sum_{n=M+1}^{M+N} \left( \frac{n}{q} \right) \right| < \sqrt q \log q.</math>

In fact,<ref>Pomerance & Crandall, ex 2.38 pp.106&ndash;108. result from T. Cochrane, "On a trigonometric inequality of Vinogradov", ''J. Number Theory'', 27:9&ndash;16, 1987</ref>

:<math> \left| \sum_{n=M+1}^{M+N} \left( \frac{n}{q} \right) \right| < \frac{4}{\pi^2} \sqrt q \log q+0.41\sqrt q +0.61.</math>

[[Hugh Montgomery (mathematician)|Montgomery]] and [[Robert Charles Vaughan (mathematician)|Vaughan]] improved this in 1977, showing that, if the [[generalized Riemann hypothesis]] is true then

:<math>\left|\sum_{n=M+1}^{M+N}\chi(n)\right|=O\left(\sqrt q \log  \log q\right).</math>

This result cannot be substantially improved, for [[Issai Schur|Schur]] had proved in 1918 that

:<math>\max_N \left|\sum_{n=1}^{N}\left(\frac{n}{q}\right)\right|>\frac{1}{2\pi}\sqrt q</math>

and [[Raymond Paley|Paley]] had proved in 1932 that

:<math>\max_N \left|\sum_{n=1}^{N}\left(\frac{d}{n}\right)\right|>\frac{1}{7}\sqrt d \log \log d</math>

for infinitely many ''d'' > 0.

===Least quadratic non-residue===
The least quadratic residue mod ''p'' is clearly 1.  The question of the magnitude of the least quadratic non-residue ''n''(''p'') is more subtle, but it is always prime.  The Pólya–Vinogradov inequality above gives O({{radic|''p''}} log ''p'').  The best unconditional estimate is ''n''(''p'') ≪ ''p''<sup>θ</sup> for any θ>1/4{{radic|e}}, obtained by estimates of Burgess on [[character sum]]s.<ref name=FI156/>  On the assumption of the [[Generalised Riemann hypothesis]], Ankeny obtained ''n''(''p'') ≪ (log ''p'')<sup>2</sup>.<ref>{{cite book | title=Ten Lectures on the Interface Between Analytic Number Theory and Harmonic Analysis | first=Hugh L. | last=Montgomery | authorlink=Hugh Montgomery (mathematician) | publisher=[[American Mathematical Society]] | year=1994 | isbn=0-8218-0737-4 | zbl=0814.11001 | page=176 }}</ref>  Linnik has shown that the number of ''p'' less than ''X'' such that ''n''(''p'') > X<sup>ε</sup> is bounded by a constant depending on ε.<ref name=FI156>{{cite book | title=Opera De Cribro | first1=John B. | last1=Friedlander | author1-link=John Friedlander | first2=Henryk  | last2=Iwaniec | author2-link=Henryk Iwaniec | publisher=[[American Mathematical Society]] | year=2010 | isbn=0-8218-4970-0 | zbl=1226.11099  | page=156 }}</ref>

Least quadratic non-residue mod ''p'' for odd primes ''p'' are:
:2, 2, 3, 2, 2, 3, 2, 5, 2, 3, 2, 3, 2, 5, 2, 2, 2, 2, 7, 5, 3, 2, 3, 5, 2, 3, 2, 2, 3, 3, 2, 3, 2, 2, 3, 2, 2, 5, 2, 2, 2, 7, 5, 2, 3, 2, 3, 2, 2, 3, 7, 7, 2, 3, 5, 2, 3, 2, 3, 2, 2, 2, 11, 5, 2, 2, 5, 2, 2, 3, 7, 3, 2, 2, ... {{OEIS|id=A053760}}

===Quadratic excess===
Let ''p'' be an odd prime.  The '''quadratic excess''' ''E''(''p'') is the number of quadratic residues on the range (0,''p''/2) minus the number in the range (''p''/2,''p'') {{OEIS|A178153}}.  For ''p'' congruent to 1 mod 4, the excess is zero, since −1 is a quadratic residue and the residues are symmetric under ''r'' ↔ ''p''−''r''.  For ''p'' congruent to 3 mod 4, the excess ''E'' is always positive.<ref>{{cite book | first1=Paul T. | last1=Bateman | author1-link=Paul T. Bateman | first2=Harold G. | last2=Diamond | title=Analytic Number Theory | publisher=World Scientific | year=2004 | isbn=981-256-080-7 | zbl=1074.11001 | page=250 }}</ref>

==Complexity of finding square roots==

That is, given a number ''a'' and a modulus ''n'', how hard is it
# to tell whether an ''x'' solving ''x''<sup>2</sup> ≡ ''a'' (mod ''n'') exists
# assuming one does exist, to calculate it?

An important difference between prime and composite moduli shows up here. Modulo a prime ''p'', a quadratic residue ''a'' has 1 + (''a''|''p'')  roots (i.e. zero if ''a'' N ''p'', one if ''a'' ≡ 0 (mod ''p''), or two if ''a'' R ''p'' and gcd(''a,p'') = 1.)

In general if a composite modulus ''n'' is written as a product of powers of distinct primes, and there are ''n''<sub>1</sub> roots modulo the first one, ''n''<sub>2</sub> mod the second, ..., there will be ''n''<sub>1</sub>''n''<sub>2</sub>... roots modulo ''n''.

The theoretical way solutions modulo the prime powers are combined to make solutions modulo ''n'' is called the [[Chinese remainder theorem]]; it can be implemented with an efficient algorithm.<ref>{{Harvnb|Bach|Shallit|1996|p=104 ff}}; it requires O(log<sup>2</sup> ''m'') steps where ''m'' is the number of primes dividing ''n''.</ref>

<blockquote>For example:
:Solve x<sup>2</sup> ≡ 6 (mod 15).
::x<sup>2</sup> ≡ 6 (mod 3) has one solution, 0; x<sup>2</sup> ≡ 6 (mod 5) has two, 1 and 4.
:: and there are two solutions modulo 15, namely 6 and 9.

:Solve x<sup>2</sup> ≡ 4 (mod 15).
::x<sup>2</sup> ≡ 4 (mod 3) has two solutions, 1 and 2; x<sup>2</sup> ≡ 4 (mod 5) has two, 2 and 3.
:: and there are four solutions modulo 15, namely 2, 7, 8, and 13.
 
:Solve x<sup>2</sup> ≡ 7 (mod 15).
::x<sup>2</sup> ≡ 7 (mod 3) has two solutions, 1 and 2; x<sup>2</sup> ≡ 7 (mod 5) has no solutions.
:: and there are no solutions modulo 15.
</blockquote>

===Prime or prime power modulus===

First off, if the modulus ''n'' is prime the [[Legendre symbol]] <math>\left(\frac{a}{n}\right)</math> can be [[Jacobi symbol#Calculating the Jacobi symbol|quickly computed]] using a variation of [[Euclid's algorithm]]<ref>{{Harvnb|Bach|Shallit|1996|p=113}}; computing <math>\left(\frac{a}{n}\right)</math> requires O(log ''a'' log ''n'') steps</ref> or the [[Euler's criterion]]. If it is −1 there is no solution.
Secondly, assuming that <math>\left(\frac{a}{n}\right)=1</math>, if ''n'' ≡ 3 (mod 4), [[Joseph Louis Lagrange|Lagrange]] found that the solutions are given by
:<math>x \equiv  \pm\; a^{(n+1)/4} \pmod{n},</math>
and [[Adrien-Marie Legendre|Legendre]] found a similar solution<ref>Lemmermeyer, p. 29</ref> if ''n'' ≡ 5 (mod 8):
:<math>x \equiv  \begin{cases}  
\pm\; a^{(n+3)/8}            \pmod{n}& \text{ if } a \text{ is a quartic residue modulo } n \\
\pm\; a^{(n+3)/8}2^{(n-1)/4} \pmod{n}& \text{ if } a \text{ is a quartic non-residue modulo } n \end{cases}</math>

For prime ''n'' ≡ 1 (mod 8), however, there is no known formula. [[Shanks&ndash;Tonelli algorithm|Tonelli]]<ref>{{Harvnb|Bach|Shallit|1996|p=156 ff}}; the algorithm requires O(log<sup>4</sup>''n'') steps.</ref> (in 1891) and [[Cipolla's algorithm|Cipolla]]<ref>{{Harvnb|Bach|Shallit|1996|p=156 ff}}; the algorithm requires O(log<sup>3</sup> ''n'') steps and is also nondetermisitic.</ref>  found efficient algorithms that work for all prime moduli. Both algorithms require finding a quadratic nonresidue modulo ''n'', and there is no efficient deterministic algorithm known for doing that. But since half the numbers between 1 and ''n'' are nonresidues, picking numbers ''x'' at random and calculating the Legendre symbol (''x''|''n'') until a nonresidue is found will quickly produce one.  A slight variant of this algorithm is the [[Tonelli–Shanks algorithm]].

If the modulus ''n'' is a [[prime power]] ''n'' = ''p''<sup>''e''</sup>, a solution may be found modulo ''p'' and "lifted" to a solution modulo ''n'' using [[Hensel's lemma]] or an algorithm of Gauss.<ref name="Gauss, DA, art. 101"/>

===Composite modulus===

If the modulus ''n'' has been factored into prime powers the solution was discussed above.

If ''n'' is not congruent to 2 modulo 4 and the [[Kronecker symbol]] <math>\left(\tfrac{a}{n}\right)=-1</math> then there is no solution; if ''n'' is congruent to 2 modulo 4 and <math>\left(\tfrac{a}{n/2}\right)=-1</math>, then there is also no solution. If ''n'' is not congruent to 2 modulo 4 and <math>\left(\tfrac{a}{n}\right)=1</math>, or ''n'' is congruent to 2 modulo 4 and <math>\left(\tfrac{a}{n/2}\right)=1</math>, there may or may not be one.

If the complete factorization of ''n'' is not known, and <math>\left(\tfrac{a}{n}\right)=1</math> and ''n'' is not congruent to 2 modulo 4, or ''n'' is congruent to 2 modulo 4 and <math>\left(\tfrac{a}{n/2}\right)=1</math>, the problem is known to be equivalent to [[integer factorization]] of ''n'' (i.e. an efficient solution to either problem could be used to solve the other efficiently).
<blockquote>The above discussion indicates how knowing the factors of ''n'' allows us to find the roots efficiently. Say there were an efficient algorithm for finding square roots modulo a composite number. The article [[congruence of squares]] discusses how finding two numbers x and y where {{math|''x''<sup>2</sup> ≡ ''y''<sup>2</sup> (mod ''n'')}} and {{math|''x'' &ne; ±''y''}} suffices to factorize ''n'' efficiently. Generate a random number, square it modulo ''n'', and have the efficient square root algorithm find a root. Repeat until it returns a number not equal to the one we originally squared (or its negative modulo ''n''), then follow the algorithm described in congruence of squares. The efficiency of the factoring algorithm depends on the exact characteristics of the root-finder (e.g. does it return all roots? just the smallest one? a random one?), but it will be efficient.<ref>Crandall & Pomerance, ex. 6.5 & 6.6, p.273</ref></blockquote>

Determining whether ''a'' is a quadratic residue or nonresidue modulo ''n'' (denoted {{math|''a'' R ''n''}} or {{math|''a'' N ''n''}}) can be done efficiently for prime ''n'' by computing the Legendre symbol. However, for composite ''n'', this forms the [[quadratic residuosity problem]], which is not known to be as [[Computational hardness assumption|hard]] as factorization, but is assumed to be quite hard.

On the other hand, if we want to know if there is a solution for ''x'' less than some given limit ''c'', this problem is [[NP-complete]];<ref>{{harvnb|Manders|Adleman|1978}}</ref> however, this is a [[fixed-parameter tractable]] problem, where ''c'' is the parameter.

In general, to determine if ''a'' is a quadratic residue modulo composite ''n'', one can use the following theorem:<ref>{{cite book|last=Burton|first=David|title=Elementary Number Theory|year=2007|publisher=McGraw HIll|location=New York|pages=195}}</ref>

Let {{math|''n'' > 1}}, and {{math|1=gcd(''a'',''n'') = 1}}. Then {{math|''x''<sup>2</sup> ≡ ''a'' (mod ''n'')}} is solvable if and only if:

* The [[Legendre symbol]] <math>\left(\tfrac{a}{p}\right)=1</math> for all odd prime divisors ''p'' of ''n''.
* {{math|''a'' ≡ 1 (mod 4)}} if ''n'' is divisible by 4 but not 8; or {{math|''a'' ≡ 1 (mod 8)}} if ''n'' is divisible by 8.

Note: This theorem essentially requires that the factorization of ''n'' is known.  Also notice that if {{math|1=gcd(''a'',''n'') = ''m''}}, then the congruence can be reduced to {{math|''a''/''m'' ≡ ''x''<sup>2</sup>/''m'' (mod ''n''/''m'')}}, but then this takes the problem away from quadratic residues (unless ''m'' is a square).

==The number of quadratic residues==

The list of the number of quadratic residues modulo ''n'', for ''n'' = 1, 2, 3 ..., looks like:
:1, 2, 2, 2, 3, 4, 4, 3, 4, 6, 6, 4, 7, 8, 6, 4, 9, 8, 10, 6, 8, 12, 12, 6, 11, 14, 11, 8, 15, 12, 16, 7, 12, 18, 12, 8, 19, 20, 14, 9, 21, 16, 22, 12, 12, 24, 24, 8, 22, 22, ... {{OEIS|id=A000224}}

A formula to count the number of squares modulo ''n'' is given by Stangl.<ref>{{Citation |last=Stangl |first=Walter D. |title=Counting Squares in ℤ<sub>''n''</sub> |journal=Mathematics Magazine |volume=69 |issue=4 |pages=285&ndash;289 |date=October 1996 |url=http://www.maa.org/sites/default/files/Walter_D22068._Stangl.pdf |doi= 10.2307/2690536}}</ref>

==Applications of quadratic residues==

===Acoustics===
[[Diffusion (acoustics)#Quadratic-residue diffusors|Sound diffusers]] have been based on number-theoretic concepts such as [[primitive root modulo n|primitive roots]] and quadratic residues.<ref>{{cite web|last=Walker|first=R|title=The design and application of modular acoustic diffusing elements|url=http://downloads.bbc.co.uk/rd/pubs/reports/1990-15.pdf|publisher=BBC Research Department|accessdate=25 October 2016}}</ref>

===Graph theory===

[[Paley graph]]s are dense undirected graphs, one for each prime ''p'' ≡ 1 (mod 4), that form an infinite family of [[conference graph]]s, which yield an infinite family of [[symmetric matrix|symmetric]] [[conference matrix|conference matrices]].

Paley digraphs are directed analogs of Paley graphs, one for each ''p'' ≡ 3 (mod 4), that yield [[Skew-symmetric matrix|antisymmetric]] conference matrices.

The construction of these graphs uses quadratic residues.

===Cryptography===
The fact that finding a square root of a number modulo a large composite ''n'' is equivalent to factoring (which is widely believed to be a [[Computational hardness assumption|hard problem]]) has been used for constructing [[cryptography|cryptographic schemes]] such as the [[Rabin cryptosystem]] and the [[oblivious transfer]]. The [[quadratic residuosity problem]] is the basis for the [[Goldwasser-Micali cryptosystem]].

The [[discrete logarithm]] is a similar problem that is also used in cryptography.

===Primality testing===

[[Euler's criterion]] is a formula for the Legendre symbol (''a''|''p'') where ''p'' is prime. If ''p'' is composite the formula may or may not compute (''a''|''p'') correctly. The [[Solovay-Strassen primality test]] for whether a given number ''n'' is prime or composite picks a random ''a'' and computes (''a''|''n'') using a modification of Euclid's algorithm,<ref>{{Harvnb|Bach|Shallit|1996|p=113}}</ref> and also using Euler's criterion.<ref>{{Harvnb|Bach|Shallit|1996|pp=109&ndash;110}}; Euler's criterion requires O(log<sup>3</sup> ''n'') steps</ref> If the results disagree, ''n'' is composite; if they agree, ''n'' may be composite or prime. For a composite ''n'' at least 1/2 the values of ''a'' in the range 2, 3, ...,  ''n'' &minus; 1 will return "''n'' is composite"; for prime ''n'' none will. If, after using many different values of ''a'', ''n'' has not been proved composite it is called a "[[probable prime]]".

The [[Miller-Rabin primality test]] is based on the same principles. There is a deterministic version of it, but the proof that it works depends on the [[generalized Riemann hypothesis]]; the output from this test is "''n'' is definitely composite" or "either ''n'' is prime or the GRH is false". If the second output ever occurs for a composite ''n'', then the GRH would be false, which would have implications through many branches of mathematics.

===Integer factorization===

In § VI of the ''Disquisitiones Arithmeticae''<ref>Gauss, DA, arts 329&ndash;334</ref> Gauss discusses two factoring algorithms that use quadratic residues and the [[law of quadratic reciprocity]].

Several modern factorization algorithms (including [[Dixon's algorithm]], the [[continued fraction factorization|continued fraction method]], the [[quadratic sieve]], and the [[General number field sieve|number field sieve]]) generate small quadratic residues (modulo the number being factorized) in an attempt to find a [[congruence of squares]] which will yield a factorization. The number field sieve is the fastest general-purpose factorization algorithm known.

==Table of quadratic residues==

The following table {{OEIS|id=A096008}} lists the quadratic residues mod 1 to 75 (a {{color|crimson|red number}} means it is not coprime to ''n''). (For the quadratic residues coprime to ''n'', see {{oeis|id=A096103}}, and for nonzero quadratic residues, see {{oeis|id=A046071}}.)

{| class="wikitable"
!''n''
!quadratic residues mod ''n''
!''n''
!quadratic residues mod ''n''
!''n''
!quadratic residues mod ''n''
|-
|1
|0
|26
|{{color|crimson|0}}, 1, 3, {{color|crimson|4}}, 9, {{color|crimson|10}}, {{color|crimson|12}}, {{color|crimson|13}}, {{color|crimson|14}}, {{color|crimson|16}}, 17, {{color|crimson|22}}, 23, 25
|51
|{{color|crimson|0}}, 1, 4, {{color|crimson|9}}, 13, {{color|crimson|15}}, 16, {{color|crimson|18}}, 19, {{color|crimson|21}}, 25, {{color|crimson|30}}, {{color|crimson|33}}, {{color|crimson|34}}, {{color|crimson|36}}, {{color|crimson|42}}, 43, 49
|-
|2
|{{color|crimson|0}}, 1
|27
|{{color|crimson|0}}, 1, 4, 7, {{color|crimson|9}}, 10, 13, 16, 19, 22, 25
|52
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 9, {{color|crimson|12}}, {{color|crimson|13}}, {{color|crimson|16}}, 17, 25, 29, {{color|crimson|36}}, {{color|crimson|40}}, {{color|crimson|48}}, 49
|-
|3
|{{color|crimson|0}}, 1
|28
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|8}}, 9, {{color|crimson|16}}, {{color|crimson|21}}, 25
|53
|{{color|crimson|0}}, 1, 4, 6, 7, 9, 10, 11, 13, 15, 16, 17, 24, 25, 28, 29, 36, 37, 38, 40, 42, 43, 44, 46, 47, 49, 52
|-
|4
|{{color|crimson|0}}, 1
|29
|{{color|crimson|0}}, 1, 4, 5, 6, 7, 9, 13, 16, 20, 22, 23, 24, 25, 28
|54
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 7, {{color|crimson|9}}, {{color|crimson|10}}, 13, {{color|crimson|16}}, 19, {{color|crimson|22}}, 25, {{color|crimson|27}}, {{color|crimson|28}}, 31, {{color|crimson|34}}, {{color|crimson|36}}, 37, {{color|crimson|40}}, 43, {{color|crimson|46}}, 49, {{color|crimson|52}}
|-
|5
|{{color|crimson|0}}, 1, 4
|30
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|6}}, {{color|crimson|9}}, {{color|crimson|10}}, {{color|crimson|15}}, {{color|crimson|16}}, 19, {{color|crimson|21}}, {{color|crimson|24}}, {{color|crimson|25}}
|55
|{{color|crimson|0}}, 1, 4, {{color|crimson|5}}, 9, {{color|crimson|11}}, 14, {{color|crimson|15}}, 16, {{color|crimson|20}}, {{color|crimson|25}}, 26, 31, 34, 36, {{color|crimson|44}}, {{color|crimson|45}}, 49
|-
|6
|{{color|crimson|0}}, 1, {{color|crimson|3}}, {{color|crimson|4}}
|31
|{{color|crimson|0}}, 1, 2, 4, 5, 7, 8, 9, 10, 14, 16, 18, 19, 20, 25, 28
|56
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|8}}, 9, {{color|crimson|16}}, 25, {{color|crimson|28}}, {{color|crimson|32}}, {{color|crimson|36}}, {{color|crimson|44}}, {{color|crimson|49}}
|-
|7
|{{color|crimson|0}}, 1, 2, 4
|32
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 9, {{color|crimson|16}}, 17, 25
|57
|{{color|crimson|0}}, 1, 4, {{color|crimson|6}}, 7, {{color|crimson|9}}, 16, {{color|crimson|19}}, {{color|crimson|24}}, 25, 28, {{color|crimson|30}}, {{color|crimson|36}}, {{color|crimson|39}}, {{color|crimson|42}}, 43, {{color|crimson|45}}, 49, {{color|crimson|54}}, 55
|-
|8
|{{color|crimson|0}}, 1, {{color|crimson|4}}
|33
|{{color|crimson|0}}, 1, {{color|crimson|3}}, 4, {{color|crimson|9}}, {{color|crimson|12}}, {{color|crimson|15}}, 16, {{color|crimson|22}}, 25, {{color|crimson|27}}, 31
|58
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 5, {{color|crimson|6}}, 7, 9, 13, {{color|crimson|16}}, {{color|crimson|20}}, {{color|crimson|22}}, 23, {{color|crimson|24}}, 25, {{color|crimson|28}}, {{color|crimson|29}}, {{color|crimson|30}}, 33, {{color|crimson|34}}, 35, {{color|crimson|36}}, {{color|crimson|38}}, {{color|crimson|42}}, 45, 49, 51, {{color|crimson|52}}, 53, {{color|crimson|54}}, 57
|-
|9
|{{color|crimson|0}}, 1, 4, 7
|34
|{{color|crimson|0}}, 1, {{color|crimson|2}}, {{color|crimson|4}}, {{color|crimson|8}}, 9, 13, 15, {{color|crimson|16}}, {{color|crimson|17}}, {{color|crimson|18}}, 19, 21, 25, {{color|crimson|26}}, {{color|crimson|30}}, {{color|crimson|32}}, 33
|59
|{{color|crimson|0}}, 1, 3, 4, 5, 7, 9, 12, 15, 16, 17, 19, 20, 21, 22, 25, 26, 27, 28, 29, 35, 36, 41, 45, 46, 48, 49, 51, 53, 57
|-
|10
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|5}}, {{color|crimson|6}}, 9
|35
|{{color|crimson|0}}, 1, 4, 9, 11, {{color|crimson|14}}, {{color|crimson|15}}, 16, {{color|crimson|21}}, {{color|crimson|25}}, 29, {{color|crimson|30}}
|60
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|9}}, {{color|crimson|16}}, {{color|crimson|21}}, {{color|crimson|24}}, {{color|crimson|25}}, {{color|crimson|36}}, {{color|crimson|40}}, {{color|crimson|45}}, 49
|-
|11
|{{color|crimson|0}}, 1, 3, 4, 5, 9
|36
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|9}}, 13, {{color|crimson|16}}, 25, {{color|crimson|28}}
|61
|{{color|crimson|0}}, 1, 3, 4, 5, 9, 12, 13, 14, 15, 16, 19, 20, 22, 25, 27, 34, 36, 39, 41, 42, 45, 46, 47, 48, 49, 52, 56, 57, 58, 60
|-
|12
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|9}}
|37
|{{color|crimson|0}}, 1, 3, 4, 7, 9, 10, 11, 12, 16, 21, 25, 26, 27, 28, 30, 33, 34, 36
|62
|{{color|crimson|0}}, 1, {{color|crimson|2}}, {{color|crimson|4}}, 5, 7, {{color|crimson|8}}, 9, {{color|crimson|10}}, {{color|crimson|14}}, {{color|crimson|16}}, {{color|crimson|18}}, 19, {{color|crimson|20}}, 25, {{color|crimson|28}}, {{color|crimson|31}}, {{color|crimson|32}}, 33, 35, {{color|crimson|36}}, {{color|crimson|38}}, 39, {{color|crimson|40}}, 41, 45, 47, 49, {{color|crimson|50}}, 51, {{color|crimson|56}}, 59
|-
|13
|{{color|crimson|0}}, 1, 3, 4, 9, 10, 12
|38
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 5, {{color|crimson|6}}, 7, 9, 11, {{color|crimson|16}}, 17, {{color|crimson|19}}, {{color|crimson|20}}, 23, {{color|crimson|24}}, 25, {{color|crimson|26}}, {{color|crimson|28}}, {{color|crimson|30}}, 35, {{color|crimson|36}}
|63
|{{color|crimson|0}}, 1, 4, {{color|crimson|7}}, {{color|crimson|9}}, 16, {{color|crimson|18}}, 22, 25, {{color|crimson|28}}, {{color|crimson|36}}, 37, 43, 46, {{color|crimson|49}}, 58
|-
|14
|{{color|crimson|0}}, 1, {{color|crimson|2}}, {{color|crimson|4}}, {{color|crimson|7}}, {{color|crimson|8}}, 9, 11
|39
|{{color|crimson|0}}, 1, {{color|crimson|3}}, 4, {{color|crimson|9}}, 10, {{color|crimson|12}}, {{color|crimson|13}}, 16, 22, 25, {{color|crimson|27}}, {{color|crimson|30}}, {{color|crimson|36}}
|64
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 9, {{color|crimson|16}}, 17, 25, 33, {{color|crimson|36}}, 41, 49, 57
|-
|15
|{{color|crimson|0}}, 1, 4, {{color|crimson|6}}, {{color|crimson|9}}, {{color|crimson|10}}
|40
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 9, {{color|crimson|16}}, {{color|crimson|20}}, {{color|crimson|24}}, {{color|crimson|25}}, {{color|crimson|36}}
|65
|{{color|crimson|0}}, 1, 4, 9, {{color|crimson|10}}, 14, 16, {{color|crimson|25}}, {{color|crimson|26}}, 29, {{color|crimson|30}}, {{color|crimson|35}}, 36, {{color|crimson|39}}, {{color|crimson|40}}, 49, 51, {{color|crimson|55}}, 56, 61, 64
|-
|16
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 9
|41
|{{color|crimson|0}}, 1, 2, 4, 5, 8, 9, 10, 16, 18, 20, 21, 23, 25, 31, 32, 33, 36, 37, 39, 40
|66
|{{color|crimson|0}}, 1, {{color|crimson|3}}, {{color|crimson|4}}, {{color|crimson|9}}, {{color|crimson|12}}, {{color|crimson|15}}, {{color|crimson|16}}, {{color|crimson|22}}, 25, {{color|crimson|27}}, 31, {{color|crimson|33}}, {{color|crimson|34}}, {{color|crimson|36}}, 37, {{color|crimson|42}}, {{color|crimson|45}}, {{color|crimson|48}}, 49, {{color|crimson|55}}, {{color|crimson|58}}, {{color|crimson|60}}, {{color|crimson|64}}
|-
|17
|{{color|crimson|0}}, 1, 2, 4, 8, 9, 13, 15, 16
|42
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|7}}, {{color|crimson|9}}, {{color|crimson|15}}, {{color|crimson|16}}, {{color|crimson|18}}, {{color|crimson|21}}, {{color|crimson|22}}, 25, {{color|crimson|28}}, {{color|crimson|30}}, {{color|crimson|36}}, 37, {{color|crimson|39}}
|67
|{{color|crimson|0}}, 1, 4, 6, 9, 10, 14, 15, 16, 17, 19, 21, 22, 23, 24, 25, 26, 29, 33, 35, 36, 37, 39, 40, 47, 49, 54, 55, 56, 59, 60, 62, 64, 65
|-
|18
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 7, {{color|crimson|9}}, {{color|crimson|10}}, 13, {{color|crimson|16}}
|43
|{{color|crimson|0}}, 1, 4, 6, 9, 10, 11, 13, 14, 15, 16, 17, 21, 23, 24, 25, 31, 35, 36, 38, 40, 41
|68
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|8}}, 9, 13, {{color|crimson|16}}, {{color|crimson|17}}, 21, 25, {{color|crimson|32}}, 33, {{color|crimson|36}}, 49, {{color|crimson|52}}, 53, {{color|crimson|60}}, {{color|crimson|64}}
|-
|19
|{{color|crimson|0}}, 1, 4, 5, 6, 7, 9, 11, 16, 17
|44
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 5, 9, {{color|crimson|12}}, {{color|crimson|16}}, {{color|crimson|20}}, 25, {{color|crimson|33}}, {{color|crimson|36}}, 37
|69
|{{color|crimson|0}}, 1, {{color|crimson|3}}, 4, {{color|crimson|6}}, {{color|crimson|9}}, {{color|crimson|12}}, 13, 16, {{color|crimson|18}}, {{color|crimson|24}}, 25, {{color|crimson|27}}, 31, {{color|crimson|36}}, {{color|crimson|39}}, {{color|crimson|46}}, {{color|crimson|48}}, 49, 52, {{color|crimson|54}}, 55, 58, 64
|-
|20
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|5}}, 9, {{color|crimson|16}}
|45
|{{color|crimson|0}}, 1, 4, {{color|crimson|9}}, {{color|crimson|10}}, 16, 19, {{color|crimson|25}}, 31, 34, {{color|crimson|36}}, {{color|crimson|40}}
|70
|{{color|crimson|0}}, 1, {{color|crimson|4}}, 9, 11, {{color|crimson|14}}, {{color|crimson|15}}, {{color|crimson|16}}, {{color|crimson|21}}, {{color|crimson|25}}, 29, {{color|crimson|30}}, {{color|crimson|35}}, {{color|crimson|36}}, 39, {{color|crimson|44}}, {{color|crimson|46}}, {{color|crimson|49}}, {{color|crimson|50}}, 51, {{color|crimson|56}}, {{color|crimson|60}}, {{color|crimson|64}}, {{color|crimson|65}}
|-
|21
|{{color|crimson|0}}, 1, 4, {{color|crimson|7}}, {{color|crimson|9}}, {{color|crimson|15}}, 16, {{color|crimson|18}}
|46
|{{color|crimson|0}}, 1, {{color|crimson|2}}, 3, {{color|crimson|4}}, {{color|crimson|6}}, {{color|crimson|8}}, 9, {{color|crimson|12}}, 13, {{color|crimson|16}}, {{color|crimson|18}}, {{color|crimson|23}}, {{color|crimson|24}}, 25, {{color|crimson|26}}, 27, 29, 31, {{color|crimson|32}}, 35, {{color|crimson|36}}, 39, 41
|71
|{{color|crimson|0}}, 1, 2, 3, 4, 5, 6, 8, 9, 10, 12, 15, 16, 18, 19, 20, 24, 25, 27, 29, 30, 32, 36, 37, 38, 40, 43, 45, 48, 49, 50, 54, 57, 58, 60, 64
|-
|22
|{{color|crimson|0}}, 1, 3, {{color|crimson|4}}, 5, 9, {{color|crimson|11}}, {{color|crimson|12}}, {{color|crimson|14}}, 15, {{color|crimson|16}}, {{color|crimson|20}}
|47
|{{color|crimson|0}}, 1, 2, 3, 4, 6, 7, 8, 9, 12, 14, 16, 17, 18, 21, 24, 25, 27, 28, 32, 34, 36, 37, 42
|72
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|9}}, {{color|crimson|16}}, 25, {{color|crimson|28}}, {{color|crimson|36}}, {{color|crimson|40}}, 49, {{color|crimson|52}}, {{color|crimson|64}}
|-
|23
|{{color|crimson|0}}, 1, 2, 3, 4, 6, 8, 9, 12, 13, 16, 18
|48
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|9}}, {{color|crimson|16}}, 25, {{color|crimson|33}}, {{color|crimson|36}}
|73
|{{color|crimson|0}}, 1, 2, 3, 4, 6, 8, 9, 12, 16, 18, 19, 23, 24, 25, 27, 32, 35, 36, 37, 38, 41, 46, 48, 49, 50, 54, 55, 57, 61, 64, 65, 67, 69, 70, 71, 72
|-
|24
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|9}}, {{color|crimson|12}}, {{color|crimson|16}}
|49
|{{color|crimson|0}}, 1, 2, 4, 8, 9, 11, 15, 16, 18, 22, 23, 25, 29, 30, 32, 36, 37, 39, 43, 44, 46
|74
|{{color|crimson|0}}, 1, 3, {{color|crimson|4}}, 7, 9, {{color|crimson|10}}, 11, {{color|crimson|12}}, {{color|crimson|16}}, 21, 25, {{color|crimson|26}}, 27, {{color|crimson|28}}, {{color|crimson|30}}, 33, {{color|crimson|34}}, {{color|crimson|36}}, {{color|crimson|37}}, {{color|crimson|38}}, {{color|crimson|40}}, 41, {{color|crimson|44}}, {{color|crimson|46}}, 47, {{color|crimson|48}}, 49, 53, {{color|crimson|58}}, {{color|crimson|62}}, 63, {{color|crimson|64}}, 65, 67, {{color|crimson|70}}, 71, 73
|-
|25
|{{color|crimson|0}}, 1, 4, 6, 9, 11, 14, 16, 19, 21, 24
|50
|{{color|crimson|0}}, 1, {{color|crimson|4}}, {{color|crimson|6}}, 9, 11, {{color|crimson|14}}, {{color|crimson|16}}, 19, 21, {{color|crimson|24}}, {{color|crimson|25}}, {{color|crimson|26}}, 29, 31, {{color|crimson|34}}, {{color|crimson|36}}, 39, 41, {{color|crimson|44}}, {{color|crimson|46}}, 49
|75
|{{color|crimson|0}}, 1, 4, {{color|crimson|6}}, {{color|crimson|9}}, 16, 19, {{color|crimson|21}}, {{color|crimson|24}}, {{color|crimson|25}}, 31, 34, {{color|crimson|36}}, {{color|crimson|39}}, 46, 49, {{color|crimson|51}}, {{color|crimson|54}}, 61, 64, {{color|crimson|66}}, {{color|crimson|69}}
|}

{| class="wikitable" style="text-align:right;"
|+ Quadratic Residues
|-style="text-align:right;"
! ''x'' || 1||2|| 3|| 4||5|| 6|| 7|| 8 ||9 ||10|| 11|| 12|| 13|| 14 ||15|| 16|| 17|| 18 ||19|| 20|| 21|| 22|| 23|| 24 ||25
|-style="text-align:right;"
! ''x''<sup>2</sup>
! style="width:25px;"|1
! style="width:25px;"|4
! style="width:25px;"|9
! style="width:25px;"|16
! style="width:25px;"|25
! style="width:25px;"|36
! style="width:25px;"|49
! style="width:25px;"|64
! style="width:25px;"|81
!100|| 121|| 144|| 169|| 196 ||225|| 256|| 289|| 324 ||361 || 400|| 441|| 484|| 529|| 576 ||625
|-
! mod 1
| 0 || 0 || 0 || 0 || 0
| 0 || 0 || 0 || 0 || 0
| 0 || 0 || 0 || 0 || 0
| 0 || 0 || 0 || 0 || 0
| 0 || 0 || 0 || 0 || 0
|-
! mod 2
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1
|-
! mod 3
| 1 || 1 || 0
| 1 || 1 || 0
| 1 || 1 || 0
| 1 || 1 || 0
| 1 || 1 || 0
| 1 || 1 || 0
| 1 || 1 || 0
| 1 || 1 || 0
| 1
|-
! mod 4
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1 || 0
| 1
|-
! mod 5
| 1 || 4 || 4 || 1 || 0
| 1 || 4 || 4 || 1 || 0
| 1 || 4 || 4 || 1 || 0
| 1 || 4 || 4 || 1 || 0
| 1 || 4 || 4 || 1 || 0
|-

! mod 6
| 1 || 4 || 3 || 4 || 1 || 0
| 1 || 4 || 3 || 4 || 1 || 0
| 1 || 4 || 3 || 4 || 1 || 0
| 1 || 4 || 3 || 4 || 1 || 0
| 1
|-
! mod 7
| 1 || 4 || 2 || 2 || 4 || 1 || 0
| 1 || 4 || 2 || 2 || 4 || 1 || 0
| 1 || 4 || 2 || 2 || 4 || 1 || 0
| 1 || 4 || 2 || 2
|-

! mod 8
| 1 || 4 || 1 || 0
| 1 || 4 || 1 || 0
| 1 || 4 || 1 || 0
| 1 || 4 || 1 || 0
| 1 || 4 || 1 || 0
| 1 || 4 || 1 || 0
| 1
|-

! mod 9
| 1 || 4 || 0 || 7 || 7 || 0 || 4 || 1 || 0
| 1 || 4 || 0 || 7 || 7 || 0 || 4 || 1 || 0
| 1 || 4 || 0 || 7 || 7 || 0 || 4
|-

! mod 10
| 1 || 4 || 9 || 6 || 5 || 6 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 6 || 5 || 6 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 6 || 5
|-

! mod 11
| 1 || 4 || 9 || 5 || 3 || 3 || 5 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 5 || 3 || 3 || 5 || 9 || 4 || 1 || 0
| 1 || 4 || 9
|-

! mod 12
| 1 || 4 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 4 || 1 || 0
| 1
|-

! mod 13
| 1 || 4 || 9 || 3 || 12 || 10 || 10 || 12 || 3 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 3 || 12 || 10 || 10 || 12 || 3 || 9 || 4 || 1
|-

! mod 14
| 1 || 4 || 9 || 2 || 11 || 8 || 7 || 8 || 11 || 2 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 2 || 11 || 8 || 7 || 8 || 11 || 2 || 9
|-

! mod 15
| 1 || 4 || 9 || 1 || 10 || 6 || 4 || 4 || 6 || 10 || 1 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 1 || 10 || 6 || 4 || 4 || 6 || 10
|-

! mod 16
| 1 || 4 || 9 || 0 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 0 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 0 || 9 || 4 || 1 || 0
| 1
|-

! mod 17
| 1 || 4 || 9 || 16 || 8 || 2 || 15 || 13 || 13 || 15 || 2 || 8 || 16 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 16 || 8 || 2 || 15 || 13
|-

! mod 18
| 1 || 4 || 9 || 16 || 7 || 0 || 13 || 10 || 9 || 10 || 13 || 0 || 7 || 16 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 16 || 7 || 0 || 13
|-

! mod 19
| 1 || 4 || 9 || 16 || 6 || 17 || 11 || 7 || 5 || 5 || 7 || 11 || 17 || 6 || 16 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 16 || 6 || 17
|-

! mod 20
| 1 || 4 || 9 || 16 || 5 || 16 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 16 || 5 || 16 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 16 || 5
|-

! mod 21
| 1 || 4 || 9 || 16 || 4 || 15 || 7 || 1 || 18 || 16 || 16 || 18 || 1 || 7 || 15 || 4 || 16 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 16
|-

! mod 22
| 1 || 4 || 9 || 16 || 3 || 14 || 5 || 20 || 15 || 12 || 11 || 12 || 15 ||  20 || 5 || 14 || 3 || 16 ||  9 || 4 || 1 || 0
| 1 || 4 || 9
|-

! mod 23
| 1 || 4 || 9 || 16 || 2 || 13 || 3 || 18 || 12 || 8 || 6 || 6 || 8 || 12 ||18 || 3 || 13 || 2 || 16 || 9 || 4 || 1 || 0
| 1 || 4
|-

! mod 24
| 1 || 4 || 9 || 16 || 1 || 12 || 1 || 16 || 9 || 4 || 1 || 0
| 1 || 4 || 9 || 16 || 1 || 12 || 1 || 16 || 9 || 4 || 1 || 0
| 1
|-

! mod 25
| 1 || 4 || 9 || 16 || 0 || 11 || 24 || 14 || 6 || 0 || 21 || 19  || 19 || 21 || 0 || 6 || 14 || 24 || 11 || 0 || 16 || 9 || 4 || 1 || 0
|}

==See also==
*[[Euler's criterion]]
*[[Gauss's lemma (number theory)|Gauss's lemma]]
*[[Zolotarev's lemma]]
*[[Character sum]]
*[[Law of quadratic reciprocity]]
*[[Quadratic residue code]]

==Notes==
{{Reflist|30em}}

==References==

The ''[[Disquisitiones Arithmeticae]]'' has been translated from Gauss's Ciceronian Latin into English and German. The German edition includes all of his papers on number theory: all the proofs of quadratic reciprocity, the determination of the sign of the Gauss sum, the investigations into biquadratic reciprocity, and unpublished notes.

*{{citation
  | last1 = Gauss  | first1 = Carl Friedrich
  | last2 = Clarke | first2 = Arthur A. (translator into English)
  | title = Disquisitiones Arithemeticae |edition=Second corrected
  | publisher = [[Springer Science+Business Media|Springer]]
  | location = New York
  | year = 1986
  | isbn = 0-387-96254-9}}
*{{citation
  | last1 = Gauss | first1 = Carl Friedrich
  | last2 = Maser | first2 = H. (translator into German)
  | title = Untersuchungen über hohere Arithmetik |trans-title=Disquisitiones Arithemeticae & other papers on number theory |edition=second
  | publisher = Chelsea
  | location = New York
  | year = 1965
  | isbn = 0-8284-0191-8}}
*{{citation
  | last1 = Bach  | first1 = Eric
  | last2 = Shallit | first2 = Jeffrey
  | series = Algorithmic Number Theory |volume=I |title=Efficient Algorithms
  | publisher = [[The MIT Press]]
  | location = Cambridge
  | year = 1996
  | isbn = 0-262-02405-5}}
*{{citation
  | last1 = Crandall  | first1 = Richard
  | last2 = Pomerance  | first2 = Carl
  | title = Prime Numbers: A Computational Perspective
  | publisher = Springer
  | location = New York
  | year = 2001
  | isbn = 0-387-94777-9}}
*{{Citation
  | last = Davenport
  | first = Harold
  | title = Multiplicative Number Theory |edition=third
  | publisher = Springer
  | location = New York
  | year = 2000
  | isbn = 0-387-95097-4}}
*{{Citation
  |last=Garey |first= Michael R. |authorlink=Michael R. Garey |last2=Johnson |first2=David S. |author2-link=David S. Johnson
  | year = 1979
  | title = Computers and Intractability: A Guide to the Theory of NP-Completeness
  | publisher = W. H. Freeman
  | isbn = 0-7167-1045-5}} A7.1: AN1, pg.249.
*{{citation |last1      = Hardy
 |first1     = G. H.
 |last2      = Wright
 |first2     = E. M.
 |title      = An Introduction to the Theory of Numbers
 |edition    = fifth
 |publisher  = [[Oxford University Press]]
 |location   = Oxford
 |year       = 1980
 |isbn       = 978-0-19-853171-5
 |url-access = registration
 |url        = https://archive.org/details/introductiontoth00hard
}}
*{{citation
  | last1 = Ireland  | first1 = Kenneth
  | last2 = Rosen  | first2 = Michael
  | title = A Classical Introduction to Modern Number Theory |edition=second
  | publisher = Springer
  | location = New York
  | year = 1990
  | isbn = 0-387-97329-X}}
*{{citation
  | last1 = Lemmermeyer  | first1 = Franz
  | title = Reciprocity Laws: from Euler to Eisenstein
  | publisher = Springer
  | location = Berlin
  | year = 2000
  | isbn = 3-540-66957-4}}
*{{Citation
  |first=Kenneth L. |last=Manders
  |last2=Adleman |first2=Leonard |author2-link=Leonard Adleman
  |title = ''NP''-Complete Decision Problems for Binary Quadratics
  |journal = Journal of Computer and System Sciences
  |volume=16 |issue=2 |year=1978
  |pages = 168&ndash;184
  |doi = 10.1016/0022-0000(78)90044-2
  |postscript = .}}

==External links==
*{{MathWorld|urlname=QuadraticResidue|title=Quadratic Residue}}
*{{PlanetMath|urlname=PolyaVinogradovInequality|title=Proof of Pólya&ndash;Vinogradov inequality}}

{{DEFAULTSORT:Quadratic Residue}}
[[Category:Modular arithmetic]]
[[Category:NP-complete problems]]
[[Category:Quadratic residue]]