Lang–Steinberg theorem