Let be a primitive root, and let . Then . (It's easy to see that all of are distinct, so we have solutions.) Moreover if is a solution, we can write for some least nonnegative integer ; and then since we must have and then we have that is one of our solutions above.