MathLabs

Arithmetic and number theory

The Riemann zeta function and the Riemann hypothesis

A single complex function ties the whole numbers to the primes; if every one of its nontrivial zeros lines up on one critical line, we would know exactly how evenly the primes are spread — one of the deepest open problems in mathematics.

UndergraduateTwo classical facts this page assumes

Every integer greater than 11 factors into primes in exactly one way, up to the order of the factors.

Why is it true?

This uniqueness is exactly what makes the Euler product below work: expanding it out and collecting terms reproduces each n−sn^{-s} only once, with no double-counting and nothing missing.

Proof

Existence is proved by strong induction on nn. The base case n=2n=2 is already prime, so the claim holds. Suppose every integer 2≤m<n2\le m<n factors into primes, and consider nn. If nn is itself prime we are done; otherwise n=abn=ab with 1<a,b<n1<a,b<n, and the induction hypothesis supplies prime factorizations of both aa and bb. Concatenating these two factorizations produces a prime factorization of nn, which completes the induction.

Uniqueness rests on Euclid's lemma: if a prime pp divides p∣abp\mid ab, then (p∣a)∨(p∣b)(p\mid a)\lor(p\mid b). To see this, suppose p∤ap\nmid a; then gcd⁡(p,a)=1\gcd(p,a)=1, so by Bézout's identity there are integers x,yx,y with px+ay=1px+ay=1. Multiplying by bb gives b=pbx+abyb=pbx+aby. Since p∣abp\mid ab, the prime pp divides both terms on the right, hence p∣bp\mid b.

Now suppose nn has two factorizations into primes, n=p1p2⋯pr=q1q2⋯qsn=p_1p_2\cdots p_r=q_1q_2\cdots q_s, each list written in nondecreasing order. Since p1∣q1q2⋯qsp_1\mid q_1q_2\cdots q_s, repeated application of Euclid's lemma shows p1p_1 divides some qjq_j, and because qjq_j is prime this forces p1=qjp_1=q_j. Cancelling this common factor from both products and repeating the argument on the shorter lists shows, after finitely many steps, that r=sr=s and the two factorizations agree term by term — so the prime factorization of nn is unique up to the order of the factors.

There is no largest prime; the primes never run out.

Why is it true?

Euclid's classical proof (c. 300 BCE) argues by contradiction from a finite list. Later on this page, Euler gives a second, analytic proof of the same fact, using the divergence of the harmonic series at s=1s=1.

Proof

Suppose, for contradiction, that there are only finitely many primes p1,p2,…,pkp_1,p_2,\ldots,p_k. Form the number N=p1p2⋯pk+1N=p_1p_2\cdots p_k+1.

For each ii, dividing NN by pip_i leaves remainder 11, i.e. N≡1(modpi)N\equiv 1\pmod{p_i}, so no pip_i divides NN.

But N>1N>1, so by the fundamental theorem of arithmetic proved above, NN has at least one prime factor qq. Since none of p1,…,pkp_1,\ldots,p_k divides NN, this qq satisfies q∉{p1,…,pk}q\notin\{p_1,\ldots,p_k\} — a prime missing from our supposedly complete list, a contradiction. Hence no finite list can contain all the primes: there are infinitely many.

ResearchTwo ways to see the same information

In 1737, Euler noticed that for real s>1s>1, the series over all whole numbers equals a product over primes only:

ζ(s)=∑n=1∞1ns=∏p prime(1−1ps)−1,Re⁡(s)>1\zeta(s) = \sum_{n=1}^{\infty} \frac{1}{n^s} = \prod_{p \text{ prime}} \left(1 - \frac{1}{p^s}\right)^{-1}, \qquad \operatorname{Re}(s) > 1

The left side only knows about integers; the right side only knows about primes. Every fact about how primes are distributed is therefore hiding somewhere inside ζ\zeta.

For Re⁡(s)>1\operatorname{Re}(s) > 1, ∑n=1∞n−s=∏p(1−p−s)−1\displaystyle\sum_{n=1}^{\infty} n^{-s} = \prod_{p} \left(1-p^{-s}\right)^{-1}, the product ranging over all primes pp.

Why is it true?

Expand each factor (1−p−s)−1=1+p−s+p−2s+⋯(1-p^{-s})^{-1} = 1+p^{-s}+p^{-2s}+\cdots as a geometric series and multiply them all out: unique factorization means every n−sn^{-s} appears exactly once in the expanded product. The product needs infinitely many factors precisely because there are infinitely many primes — the same fact Euclid proved by elementary means, now packaged inside an analytic identity.

Proof

Fix Re⁡(s)>1\operatorname{Re}(s)>1 and expand each factor of the truncated product PN(s)=∏p≤N(1−p−s)−1P_N(s)=\prod_{p\le N}\left(1-p^{-s}\right)^{-1} as a geometric series, (1−p−s)−1=1+p−s+p−2s+⋯(1-p^{-s})^{-1}=1+p^{-s}+p^{-2s}+\cdots, since ∣p−s∣<1|p^{-s}|<1.

Multiplying these geometric series together and distributing, every term that appears is n−sn^{-s} for some integer nn whose prime factors are all at most NN — call the set of such integers SNS_N. By the fundamental theorem of arithmetic each such nn arises from exactly one combination of prime powers, so no term is produced twice and none is missing: PN(s)=∑n∈SNn−sP_N(s)=\sum_{n\in S_N} n^{-s}.

Every integer from 11 to NN belongs to SNS_N, so the difference between the full series and the truncated product only involves integers not in SNS_N, all of which exceed NN: ζ(s)−PN(s)=∑n∉SNn−s\zeta(s)-P_N(s)=\sum_{n\notin S_N} n^{-s}, hence ∣ζ(s)−PN(s)∣≤∑n>Nn−σ\left|\zeta(s)-P_N(s)\right|\le\sum_{n>N} n^{-\sigma} where σ=Re⁡(s)>1\sigma=\operatorname{Re}(s)>1. This tail of a convergent series tends to 00 as N→∞N\to\infty, so PN(s)→ζ(s)P_N(s)\to\zeta(s) and the infinite product equals the infinite sum.

Example: Reproving the infinitude of primes analytically

Suppose there were only finitely many primes. What would go wrong at s=1s=1?

Solution

If there were only finitely many primes p1,…,pkp_1,\ldots,p_k, the Euler product ∏i(1−pi−1)−1\prod_i (1-p_i^{-1})^{-1} would be a finite number even as s→1s\to1. But the left side ∑n≥1n−1\sum_{n\ge1} n^{-1} is the harmonic series, which diverges. A finite product cannot equal an infinite sum, so the list of primes cannot be finite — Euler's own proof of Euclid's theorem, using the divergence of the harmonic series instead of a direct combinatorial argument.

Example: A cryptographic application: how many candidates until a prime?

RSA key generation needs to find large primes near 220482^{2048}. Using the prime number theorem π(x)∼xlog⁡x\pi(x)\sim\dfrac{x}{\log x}, about how many random odd candidates near 220482^{2048} must be tested, on average, before one turns out prime?

Solution

The prime number theorem says the density of primes near a large number xx is approximately 1/log⁡x1/\log x: a randomly chosen integer near xx is prime with probability roughly 1/log⁡x1/\log x. Here x=22048x=2^{2048}, so we need log⁡(22048)=2048log⁡2≈1420\log(2^{2048})=2048\log2\approx1420.

So a uniformly random integer near 220482^{2048} is prime with probability about 1/14201/1420, meaning on average 14201420 random candidates must be tested before finding a prime.

In practice, candidates are restricted to odd numbers (discarding the trivial even non-primes for free), which halves the search, and small trial divisions by primes below a few thousand eliminate most remaining composites cheaply before the expensive Miller–Rabin primality test runs. This cuts the expected number of expensive primality tests to roughly 710710 — a direct, practical use of the prime number theorem in choosing RSA key sizes and estimating key-generation time.

UndergraduateExtending ζ past the line where the series converges

Riemann's 1859 paper showed that ζ\zeta, defined so far only for Re⁡(s)>1\operatorname{Re}(s)>1, extends to a single analytic function on the whole complex plane except for a simple pole at s=1s=1 (where it behaves like the divergent harmonic series). This extension satisfies a striking symmetry, the functional equation, once we introduce the completed zeta function ξ\xi:

ξ(s)=12s(s−1)π−s/2Γ ⁣(s2)ζ(s),ξ(s)=ξ(1−s)\xi(s) = \tfrac{1}{2}s(s-1)\pi^{-s/2}\Gamma\!\left(\tfrac{s}{2}\right)\zeta(s), \qquad \xi(s) = \xi(1-s)

Definition: Trivial and nontrivial zeros

The functional equation forces ζ\zeta to vanish at the negative even integers s=−2,−4,−6,…s=-2,-4,-6,\ldots; these are called the trivial zeros, coming from the poles of Γ(s/2)\Gamma(s/2) being cancelled. Every other zero — called nontrivial — must satisfy 0<Re⁡(s)<10 < \operatorname{Re}(s) < 1, the critical strip, and comes bundled with three companions: if ρ\rho is a nontrivial zero, so are ρˉ\bar\rho, 1−ρ1-\rho, and 1−ρˉ1-\bar\rho, by the functional equation and the fact that ζ\zeta has real coefficients. A zero off the line Re⁡(s)=12\operatorname{Re}(s)=\tfrac12 never travels alone.

ResearchThe Riemann hypothesis

In that same 1859 paper — his only work on number theory — Riemann conjectured the strongest possible symmetry: every nontrivial zero sits exactly on the line Re⁡(s)=12\operatorname{Re}(s)=\tfrac12, called the critical line.

Riemann hypothesis. Every nontrivial zero of ζ(s)\zeta(s) has real part exactly 12\tfrac12.

The library catalogues this as the great problem Riemann hypothesis: one of the seven Millennium Prize Problems of the Clay Mathematics Institute (2000), and problem 8 on Hilbert's 1900 list. It remains open, though every zero found so far — and there are trillions of them — sits exactly on the line.

A complex-domain grid plot of the map $z\mapsto e^z$, used as a visual stand-in for analytic continuation: the Riemann zeta function itself is not one of this widget's preset functions, so no real zeros of ζ are shown here.
Illustrative only: grid distortion under the analytic map z↦ezz\mapsto e^z, standing in for ζ's analytic continuation.

ResearchHow the zeros control the primes

Define ψ(x)=∑pk≤xlog⁡p\psi(x) = \sum_{p^k \le x} \log p, a weighted count of prime powers up to xx. Von Mangoldt's explicit formula (1895) writes ψ\psi exactly in terms of the zeros ρ\rho of ζ\zeta:

ψ0(x)=x−∑ρxρρ−log⁡2π−12log⁡ ⁣(1−x−2)\psi_0(x) = x - \sum_{\rho} \frac{x^{\rho}}{\rho} - \log 2\pi - \tfrac12\log\!\left(1-x^{-2}\right)

Each pair of zeros ρ,ρˉ\rho,\bar\rho contributes an oscillating term of size roughly xβ/∣ρ∣x^{\beta}/|\rho|, where β=Re⁡(ρ)\beta=\operatorname{Re}(\rho). The larger β\beta is, the bigger that wave — so the real parts of the zeros directly control how far ψ(x)\psi(x), and hence the prime-counting function π(x)\pi(x), can stray from its smooth prediction:

RH  ⟺  ψ(x)=x+O ⁣(x log⁡2x)  ⟺  π(x)=Li⁡(x)+O ⁣(x log⁡x)\text{RH} \iff \psi(x) = x + O\!\left(\sqrt{x}\,\log^2 x\right) \iff \pi(x) = \operatorname{Li}(x) + O\!\left(\sqrt{x}\,\log x\right)

π(x)∼xlog⁡x\pi(x) \sim \dfrac{x}{\log x} as x→∞x\to\infty: the number of primes up to xx is asymptotically x/log⁡xx/\log x.

Why is it true?

Hadamard and de la Vallée Poussin proved this independently in 1896, and both proofs go through ζ\zeta: the theorem is equivalent to ζ(s)\zeta(s) having no zeros on the line Re⁡(s)=1\operatorname{Re}(s)=1. That already-proven fact is much weaker than the Riemann hypothesis (which asks for no zeros anywhere off Re⁡(s)=12\operatorname{Re}(s)=\tfrac12) — exactly why this theorem is settled while RH is not. RH would only sharpen the error term in the approximation, from roughly x/log⁡xx/\log x accuracy to the near-optimal xlog⁡x\sqrt{x}\log x shown above.

Proof

The prime number theorem is equivalent to a statement about the Chebyshev function ψ(x)=∑pk≤xlog⁡p\psi(x)=\sum_{p^k\le x}\log p, which weights each prime power below xx by the logarithm of its prime base: proving ψ(x)∼x\psi(x)\sim x is equivalent (by a routine partial-summation argument) to proving π(x)∼x/log⁡x\pi(x)\sim x/\log x.

Riemann's explicit formula expresses ψ(x)\psi(x) almost exactly in terms of the nontrivial zeros ρ=β+iγ\rho=\beta+i\gamma of ζ\zeta, all of which satisfy 0≤β≤10\le\beta\le1: ψ(x)=x−∑ρxρρ−log⁡(2π)−12log⁡(1−x−2)\psi(x)=x-\sum_{\rho}\frac{x^{\rho}}{\rho}-\log(2\pi)-\tfrac12\log(1-x^{-2}). The leading term xx comes from the simple pole of ζ\zeta at s=1s=1; every other term oscillates with size roughly xβx^{\beta}, so the theorem reduces to showing that this oscillating sum is o(x)o(x).

The oscillating sum is o(x)o(x) exactly when no zero has β=1\beta=1, i.e. when ζ(1+it)≠0\zeta(1+it)\ne0 for all t∈Rt\in\mathbb{R}. Hadamard and de la Vallée Poussin each proved this non-vanishing in 1896 using the elementary trigonometric inequality 3+4cos⁡θ+cos⁡2θ≥03+4\cos\theta+\cos2\theta\ge0, applied to the real part of 3log⁡ζ(σ)+4log⁡ζ(σ+it)+log⁡ζ(σ+2it)3\log\zeta(\sigma)+4\log\zeta(\sigma+it)+\log\zeta(\sigma+2it) as σ→1+\sigma\to1^+: a zero at 1+it1+it would force this combination to diverge to −∞-\infty, which the inequality forbids.

Combining the two steps gives ψ(x)=x+o(x)\psi(x)=x+o(x), and the partial-summation identity that links ψ\psi and π\pi then upgrades this to π(x)∼x/log⁡x\pi(x)\sim x/\log x, which is the prime number theorem.

A 3D ripple surface $z=\sin r/r$ used as a visual analogy for the oscillating wave each pair of zeta zeros contributes to the explicit formula for ψ(x); it is not an actual plot of that sum, since ζ's zeros are not among this widget's preset functions.
Illustrative only: a ripple surface z=sin⁡r/rz=\sin r/r, standing in for the way each pair of zeros adds an oscillating wave to the explicit formula.

ResearchToolbox: how far unconditional methods reach

No single tool comes close to proving RH, but each one fences off part of the critical strip. A zero-free region is a strip near Re⁡(s)=1\operatorname{Re}(s)=1 known to contain no zeros: de la Vallée Poussin (1899) found the region Re⁡(s)≥1−c/log⁡t\operatorname{Re}(s) \ge 1 - c/\log t, and Vinogradov and Korobov (1958) pushed it, using exponential-sum bounds, to Re⁡(s)≥1−c/(log⁡t)2/3(log⁡log⁡t)1/3\operatorname{Re}(s) \ge 1 - c/(\log t)^{2/3}(\log\log t)^{1/3} — an exponent that has stood, essentially unimproved, for more than sixty years. Its width still shrinks to zero as t→∞t\to\infty; even a fixed strip Re⁡(s)>1−ε\operatorname{Re}(s) > 1-\varepsilon free of zeros (the 'weak Riemann hypothesis') remains open.

When you can't exclude zeros, count them instead. Let N(σ,T)N(\sigma,T) count zeros with real part at least σ\sigma and height at most TT. Ingham (1940) showed N(σ,T)≪T3(1−σ)/(2−σ)N(\sigma,T) \ll T^{3(1-\sigma)/(2-\sigma)}; Huxley (1972) improved the exponent at σ=3/4\sigma=3/4 to 12/512/5, where it stayed for nearly fifty years — until Guth and Maynard's 2024 bound on large values of Dirichlet polynomials (published in the Annals of Mathematics, 2026) lowered it to 30/1330/13. A direct consequence: the prime number theorem now holds unconditionally in every interval [x,x+x17/30+ε][x, x+x^{17/30+\varepsilon}].

Where each unconditional tool stops
ToolBest known resultWhere it stops
Zero-free regionVinogradov–Korobov 1958, exponent 2/3 of log⁡t\log tWidth still shrinks to 0; no fixed strip Re⁡(s)>1−ε\operatorname{Re}(s)>1-\varepsilon yet
Zero-densityGuth–Maynard 2024, A(3/4)=30/13A(3/4)=30/13Only counts, doesn't exclude; even the density hypothesis A=2A=2 falls short of RH
ComputationAll zeros with γ≤3×1012\gamma \le 3\times10^{12} verified (Platt–Trudgian, 2021)A finite check; says nothing about t→∞t\to\infty
Equivalent criteriade Bruijn–Newman: 0≤Λ≤0.220 \le \Lambda \le 0.22 (Rodgers–Tao 2018; Polymath 15)Restates RH (Λ=0\Lambda=0) without lowering its difficulty

The de Bruijn–Newman constant Λ\Lambda gives a sharp way to state RH: as tt increases, a heat-flow deformation HtH_t of ξ\xi has only real zeros once t≥Λt\ge\Lambda, and RH is equivalent to Λ≤0\Lambda\le0. Rodgers and Tao (2018) proved Λ≥0\Lambda\ge0, so if RH is true it is true just barely — Λ=0\Lambda=0 exactly. The Polymath 15 project then pushed the upper bound down to Λ≤0.22\Lambda\le0.22.

The one place a version of RH is fully proved is over function fields: for a curve over a finite field Fq\mathbb{F}_q, the zeta function is a rational function of q−sq^{-s}, and the analogue of RH says its zeros all have absolute value q\sqrt{q}. Hasse (1933) proved this for elliptic curves, Weil (1948) for all curves, and Deligne (1974) for all varieties over finite fields, using a Frobenius operator acting on a cohomology group. The obstruction to copying this over Z\mathbb{Z}: there is no Frobenius acting on the integers, and no known geometric object plays the role of Spec⁡Z×Spec⁡Z\operatorname{Spec}\mathbb{Z}\times\operatorname{Spec}\mathbb{Z}.

The generalized Riemann hypothesis (GRH) extends the same conjecture to every Dirichlet LL-function, and shows up as a working tool one step further into the library: for the great problem Goldbach conjecture, GRH helped prove the odd (ternary) case for large numbers, while the unconditional tools built above — zero-free regions, zero-density estimates — bound how far the even case can go without any hypothesis at all. Sieve methods, covered next, supply the other half of that story.

Why does the Euler product ζ(s)=∏p(1−p−s)−1\zeta(s)=\prod_p(1-p^{-s})^{-1} need infinitely many factors?

Every nontrivial zero of ζ(s)\zeta(s) satisfies which condition?

Which of these is already proved (not conjectural)?

Trillions of zeros have been computationally verified to lie on the critical line. Why doesn't this prove the Riemann hypothesis?

References

  1. H. M. Edwards (1974). Riemann's Zeta Function · DOI:10.1090/s0273-0979-01-00912-0
  2. E. C. Titchmarsh; revised by D. R. Heath-Brown (1986). The Theory of the Riemann Zeta-Function · DOI:10.1070/im1975v009n03abeh001485
  3. J. B. Conrey (2003). The Riemann Hypothesis
  4. Larry Guth, James Maynard (2026). New large value estimates for Dirichlet polynomials · arXiv:2405.20552
  5. Dave Platt, Tim Trudgian (2021). The Riemann hypothesis is true up to 3×10^12 · arXiv:2004.09765
  6. Brad Rodgers, Terence Tao (2020). The de Bruijn–Newman constant is non-negative · arXiv:1801.05914
  7. D. H. J. Polymath (2019). Effective approximation of heat flow evolution of the Riemann ξ function, and a new upper bound for the de Bruijn–Newman constant · arXiv:1904.12438