---
title: 'Rédei Functions: Conics and Cryptography'
url: https://www.emergentmind.com/topics/redei-functions
type: topic
---

# Rédei Functions: Conics and Cryptography

Searching arXiv for recent and foundational papers on Rédei functions and closely related finite-field, conic, Pell, and classification contexts.
Rédei functions are rational functions arising from powers in quadratic extensions and from group laws on conics, with classical roots in Pell-type arithmetic and modern manifestations in finite-field permutation theory, cryptography, and exceptional rational function classification. In the classical setting, they are defined from the expansion
\[
(z+\sqrt d)^n = N_n(d,z)+D_n(d,z)\sqrt d,
\]
with the associated rational function
\[
Q_n(d,z)=\frac{N_n(d,z)}{D_n(d,z)},
\]
while a broader two-parameter generalization replaces the quadratic relation \(x^2=d\) by \(x^2-hx-d=0\) and yields
\[
Q_n(h,d,z)=\frac{N_n(h,d,z)}{D_n(h,d,z)}.
\]
These functions encode repeated composition under explicit algebraic group laws, especially on Pell-type conics, and over finite fields they also appear as permutation rational functions on \(\mathbb P^1(\mathbb F_q)\), often called Rédei permutations [1103.3762] [1209.0573].

## 1. Classical definition and algebraic origin

Classically, Rédei functions are built from the decomposition of \((z+\sqrt d)^n\) into its \(\sqrt d\)-free and \(\sqrt d\)-linear parts:
\[
(z + \sqrt{d})^n = N_n(d, z) + D_n(d, z)\sqrt{d},
\]
where
\[
N_n(d, z) = \sum_{k=0}^{[n/2]} \binom{n}{2k} d^k z^{\,n-2k}, \qquad D_n(d, z) = \sum_{k=0}^{[n/2]} \binom{n}{2k+1} d^k z^{\,n-2k-1}.
\]
The associated Rédei rational function is
\[
Q_n(d, z) = \frac{N_n(d, z)}{D_n(d, z)}.
\]
This construction is the basic one in Pell theory and is also the specialization \(h=0\) of the generalized family studied later on conics [1103.3762] [1209.0573].

A matrix realization makes the structure transparent. In the classical case,
\[
\begin{pmatrix} z & 1\\ d & z \end{pmatrix}^{n} = \begin{pmatrix} N_n & D_n\\ dD_n & N_n \end{pmatrix},
\]
which immediately yields the addition formulas
\[
N_{n+m} = N_nN_m + dD_nD_m, \qquad D_{n+m} = D_nN_m + N_nD_m.
\]
In the generalized setting one replaces this matrix by
\[
M=\begin{pmatrix} z+h & d\\ 1 & z \end{pmatrix},
\qquad
M^n= \begin{pmatrix} N_n+hD_n & dD_n\\ D_n & N_n \end{pmatrix},
\]
and defines
\[
Q_n(h,d,z)=\frac{N_n(h,d,z)}{D_n(h,d,z)}.
\]
When \(h=0\), this recovers the usual Rédei rational functions exactly [1209.0573].

The algebraic source is the quadratic algebra
\[
A=F[x]/(x^2-hx-d),
\]
with multiplication induced by \(x^2=hx+d\). In this framework, powers of \(z+x\) generate the polynomial sequences \(N_n\) and \(D_n\), and the quotient \(N_n/D_n\) encodes the corresponding power in rational form. This mechanism underlies both the classical Pell interpretation and the generalized conic theory [1209.0573].

Both the classical and generalized polynomial sequences satisfy second-order linear recurrences. In the classical case,
\[
(N_n(d, z))_{n\ge 0} = W(1,z,2z,z^2-d), \qquad (D_n(d, z))_{n\ge 0} = W(0,1,2z,z^2-d),
\]
equivalently
\[
N_n(d,z)=2z\,N_{n-1}(d,z) - (z^2-d)N_{n-2}(d,z),
\]
\[
D_n(d,z)=2z\,D_{n-1}(d,z) - (z^2-d)D_{n-2}(d,z).
\]
In the generalized case both satisfy
\[
X_{n+2}=(2z+h)X_{n+1}-(z^2+hz-d)X_n,
\]
with initial data
\[
N_0=1,\ N_1=z,\qquad D_0=0,\ D_1=1.
\]
These recurrence structures are central in both theoretical manipulations and efficient computation [1103.3762] [1209.0573].

## 2. Conics, Pell geometry, and group laws

The most direct structural interpretation of Rédei functions is via conic group laws. In the generalized setting, the relevant conic is
\[
E=E(h,d)_F=\{(x,y)\in F^2:\ x^2+hxy-dy^2=1\}.
\]
Under the identification \((a,b)\leftrightarrow a+bx\) in the quadratic algebra \(F[x]/(x^2-hx-d)\), the norm
\[
N(a+bx)=a^2+hab-db^2
\]
shows that the unit norm elements correspond exactly to the points of this conic [1209.0573].

The induced product on the conic is
\[
(x,y)\odot_E (u,v) = (xu+yvd,\; yu+xv+yvh).
\]
The paper states that \((E,\odot_E)\) is an abelian group with identity \((1,0)\) and inverse
\[
(x,y)^{-1}=(x+hy,-y).
\]
When \(h=0\), this becomes the Pell hyperbola
\[
x^2-dy^2=1
\]
with group law
\[
(x,y)\odot_E (u,v)=(xu+dyv,\; yu+xv),
\]
which is exactly the multiplication law inherited from \((x+y\sqrt d)(u+v\sqrt d)\) [1209.0573].

A rational parametrization transports this conic group to a one-dimensional parameter set. With
\[
P=F\cup\{\alpha\},
\]
the parametrization map is
\[
\epsilon(m)=\left(\frac{m^2+d}{m^2+hm-d},\ \frac{2m+h}{m^2+hm-d}\right), \qquad \epsilon(\alpha)=(1,0),
\]
and the inverse is
\[
\tau(x,y)=\frac{1+x}{y}
\]
for \(y\neq 0\), together with
\[
\tau(1,0)=\alpha,\qquad \tau(-1,0)=-\frac h2.
\]
Transporting the conic law to \(P\) gives
\[
a\odot_P b=\frac{d+ab}{h+a+b},
\]
with \(a\odot_P b=\alpha\) when \(a+b=-h\). The identity is \(\alpha\). The generalized Rédei functions are precisely the powers in this parameter group [1209.0573].

In the Pell case this reduction is especially explicit. On the extended line \(\mathbb{R}^{\infty}\), the transported product is
\[
x \odot_d y = \frac{d+xy}{x+y},
\]
with identity \(\infty\), inverse \(-x\), and an isomorphism from \((\mathbb{R}^*,\cdot)\) given by
\[
\rho_d(x)=\frac{x+1}{x-1}\sqrt d.
\]
Within this interpretation, Rédei functions are exactly the iterated powers:
\[
z^{n\odot_d}=Q_n(d,z).
\]
This turns the addition law
\[
Q_{n+m}(d,z)=\frac{d + Q_n(d,z)Q_m(d,z)}{Q_n(d,z)+Q_m(d,z)}
\]
into the ordinary power law of the group \((P_d,\odot_d)\) [1103.3762].

A determinant identity ties these constructions back to the conic. Since
\[
\det(M)=z^2+hz-d,
\]
one gets
\[
N_n^2+hN_nD_n-dD_n^2=(z^2+hz-d)^n.
\]
Hence, when
\[
z^2+hz-d=1,
\]
the pair \((N_n,D_n)\) lies on the conic \(E(h,d)_F\). This exhibits the polynomial pair itself as a generator of conic powers and thereby links recurrence, conic geometry, and rational parametrization in a single formalism [1209.0573].

## 3. Composition, powers, and approximation theory

A fundamental property of classical Rédei functions is the multiplicative index law
\[
Q_{nm}(d, z) = Q_n(d, Q_m(d, z)),
\]
which implies that Rédei functions commute under composition. In the group-law interpretation this is immediate: once \(Q_n(d,z)\) is viewed as the \(n\)-th power of \(z\) in the \(\odot_d\)-group, composition corresponds to multiplication of exponents [1103.3762].

The generalized functions satisfy the analogous role on the parameter group of the conic. The paper on generalized Rédei functions emphasizes that they “play exactly the same structural role as in the Pell hyperbola”: they encode repeated composition under the group law and provide explicit formulas for powers of points over the conic [1209.0573].

The same formalism also yields rational approximations to quadratic irrationalities. In the Pell setting, the paper explicitly emphasizes that \(Q_n(d,z)\) converges to \(\sqrt d\), describing Rédei functions as “rational approximations of \(\sqrt d\), for any parameter \(z\)” [1103.3762]. The generalized conic paper extends this approximation viewpoint and states that it obtains “a new result for the approximation of quadratic irrationalities” [1209.0573].

A polynomial analogue appears in the study of the polynomial Pell equation
\[
P^2-DQ^2=1.
\]
Using Rédei polynomials
\[
(z+\sqrt{\alpha})^n = D_n(\alpha,z)\sqrt{\alpha}+N_n(\alpha,z),
\]
the identity
\[
N_n(\alpha,z)^2-\alpha\,D_n(\alpha,z)^2=(z^2-\alpha)^n
\]
produces explicit polynomial solutions once one chooses \(\alpha=f(x)^2+d\) and \(z=f(x)\), so that \(z^2-\alpha=-d\). This yields all integer polynomial solutions for
\[
P^2-(f(x)^2+d)Q^2=1
\]
in the cases \(d=-1,1,\pm 2\) described in the paper [1911.01837].

This suggests a unifying interpretation: Rédei functions and polynomials are compression devices for powers in quadratic algebras. In arithmetic settings, the compression is rational and suited to Pell-type groups; in polynomial settings, the same binomial decomposition yields complete families of Pell-type solutions [1103.3762] [1911.01837].

## 4. Finite-field Rédei functions and Rédei permutations

Over finite fields, Rédei functions become rational self-maps of the projective line
\[
\mathbb P^1(\mathbb F_q)=\mathbb F_q\cup\{\infty\}.
\]
For \(a\in\mathbb F_q\), writing
\[
(x+\sqrt a\, y)^n = N(x,y)+D(x,y)\sqrt a\, y,
\]
one defines
\[
R_{n,a}(x)=
\begin{cases}
\dfrac{N(x,a)}{D(x,a)} & \text{if } D(x,a)\neq 0,\ x\neq \infty,\\[1ex]
\infty & \text{otherwise.}
\end{cases}
\]
A Rédei function that induces a bijection on \(\mathbb P^1(\mathbb F_q)\) is called a Rédei permutation [2007.00123] [2110.02143].

A standard criterion is
\[
R_{n,a}\text{ permutes }\mathbb P^1(\mathbb F_q) \iff \gcd(n,q-\chi(a))=1,
\]
where \(\chi(a)\in\{1,-1\}\) is the quadratic character. Since \(q-\chi(a)\) is even for odd \(q\), no even \(n\) yields a Rédei permutation [2007.00123] [2110.02143].

The cycle structure is controlled entirely by arithmetic modulo divisors of \(q-\chi(a)\). If \(R_{n,a}\) is a permutation, then it consists of
\[
\frac{\varphi(d)}{\operatorname{ord}_d(n)}
\]
disjoint \(\operatorname{ord}_d(n)\)-cycles for each divisor \(d\mid q-\chi(a)\), together with \(\chi(a)+1\) fixed points. The total number of fixed points is
\[
\gcd(n-1,q-\chi(a))+\chi(a)+1.
\]
Moreover,
\[
R_{m,a}\circ R_{n,a}=R_{mn,a},
\qquad
R_{n,a}^{\,j}=R_{n^j,a}.
\]
These formulas place the dynamics of Rédei permutations squarely in the arithmetic of multiplicative orders [2007.00123].

A complete characterization of when two Rédei permutations have the same cycle structure is given in terms of the condition
\[
\gcd(m^r-1,q-\chi)=\gcd(n^r-1,q-\chi)\qquad\forall r\ge 1,
\]
assuming the parameters have the same quadratic character. The classification is then refined prime by prime using multiplicative orders and \(p\)-adic valuation constraints [2110.02143].

Special attention has been given to Rédei permutations whose nontrivial cycles all have the same length. For cycle decompositions consisting only of \(1\)-cycles and \(p\)-cycles, with \(p\) prime, the paper gives an exact admissibility criterion for divisors \(d\mid q-\chi\) and an existence theorem: such a Rédei permutation exists if and only if \(q-1\) or \(q+1\) has a prime factor of the form \(pk+1\) or is divisible by \(p\) [2007.00123].

A different finite-field presentation, especially useful structurally, expresses Rédei functions by Möbius conjugation. For odd \(q\), if \(h(x)=x^2-a\) is irreducible over \(\mathbb F_q\) and \(\beta\) is a root, define
\[
\rho(x)=\frac{x-\bar\beta}{x-\beta},
\qquad
R_n(x,a)=\rho^{-1}\circ x^n\circ \rho.
\]
Then \(\rho\) maps \(\mathbb P^1(\mathbb F_q)\) bijectively onto \(\mu_{q+1}\), the group of \((q+1)\)-st roots of unity in \(\mathbb F_{q^2}\). As a result, the functional graph of \(R_n(x,a)\) on \(\mathbb P^1(\mathbb F_q)\) is isomorphic to that of \(x\mapsto x^n\) on \(\mu_{q+1}\), and
\[
R_n(x,a)\text{ permutes }\mathbb P^1(\mathbb F_q)\iff \gcd(n,q+1)=1
\]
in that nonsquare setting [2103.08128].

This Möbius-conjugation viewpoint also yields an addition law:
\[
R_{m+n}(x,a)= \frac{R_m(x,a)R_n(x,a)+a} {R_m(x,a)+R_n(x,a)-(\beta+\bar\beta)}.
\]
For odd \(q\), where \(\beta+\bar\beta=0\), this simplifies to
\[
R_{m+n}(x,a)=\frac{R_m(x,a)R_n(x,a)+a}{R_m(x,a)+R_n(x,a)}.
\]
This is the finite-field counterpart of the Pell-style addition law seen over \(\mathbb R\) [2103.08128].

## 5. Cryptographic and algorithmic roles

Rédei functions have been used as the computational core of RSA-like schemes based on conics, especially the Pell hyperbola. The central idea is to replace ordinary exponentiation by powering in a non-standard parameter group
\[
a\odot b=\frac{D+ab}{a+b}
\]
or, in the generalized conic setting,
\[
a\odot_{\mathcal P} b=\frac{D+ab}{H+a+b}.
\]
Since
\[
z^{\

Source: https://www.emergentmind.com/topics/redei-functions