Classical solution of quadratic congruence equations over a finite field Fₚ relies on the Legendre symbol (p) as a preliminary criterion, thereby splitting the equation into two separate algebraic branches: solvable and unsolvable. Starting from algebraic extensions and Galois theory, this paper lifts the solution space from the base field Fₚ to the quadratic extension Fℂ, constructing a unified algebraic solution paradigm that bridges this rupture within the extension field. Chapter 1 constructs a canonical extension K = Fₚ () by fixing a quadratic non-residue, proves that the square root of any discriminant exists unconditionally in this unified field, and thereby endows the quadratic formula x = (-b) / (2a) with universality at the algebraic-existence level; the original dichotomous criterion based on the discriminant's property now manifests as the positional characteristic of the solutions in K (solutions lie in the base field when is a residue, and in the non-trivial part of the extension otherwise). Chapter 2 reveals that the Galois group of K/Fₚ is generated by the Frobenius automorphism () =ᵖ, which, under a power basis representation, is equivalent to (a+b) =a-b; this extends the conjugate symmetry between the two roots to an arbitrary discriminant; based on this symmetry, the fact that the sum and product in Vieta's formulas always belong to the base field receives a natural interpretation as Galois invariants. Chapter 3 points out that the algebraic core of the Cipolla square-root algorithm is the extraction of the square root of the extension field norm, namely ( (t+) ^ (p+1) /2) ² = ; accordingly, the square-root extraction can be performed along a unified Fℂ arithmetic path. The algorithm relocates the object of the Legendre symbol determination from the input data to a randomly derived parameter t²-; the core root-finding path executes an identical sequence of algebraic operations for all, and the residue property of the discriminant is revealed a posteriori by the -coefficient of the computed result. This paradigm transfers the branching condition based on the sensitive input onto a random derivative parameter, keeping the core computation path uniform for all inputs, and thus provides a beneficial structural property for side-channel-secure constant-time implementations.
Ni Chuangao (Sun,) studied this question.