Proof.
In defining

, we expressed each number in
as congruent to a number in the set
No number

appears more than once, with either choice of sign, because if it
did then either two elements of

are congruent modulo

or
0 is the sum of two elements of

, and both events are impossible.
Thus the resulting set must be of the form
where each

is either

or

. Multiplying together
the elements of

and of

, we see that
so
The lemma then follows from Proposition
1.1.