[step:Use the circuit symmetric-difference criterion for binary matroids]We record the criterion used in the converse direction.
[claim:Binary circuit symmetric-difference criterion]
Here $E(N)$ denotes the ground set of the matroid $N$. A finite matroid $N$ is binary if and only if, for every pair of circuits $C_1, C_2 \subseteq E(N)$, the symmetric difference
\begin{align*}
C_1 \triangle C_2 := (C_1 \setminus C_2) \cup (C_2 \setminus C_1)
\end{align*}
is a disjoint union of circuits of $N$.
[/claim]
[proof]
First suppose that $N$ is represented over $\mathbb{F}_2$ by a matrix
$A \in \mathbb{F}_2^{r \times E(N)}$. For a subset $S \subseteq E(N)$, define its incidence vector
\begin{align*}
\mathbb{1}_S: E(N) \to \mathbb{F}_2
\end{align*}
by $\mathbb{1}_S(e)=1$ if $e \in S$ and $\mathbb{1}_S(e)=0$ otherwise. Since $C_1$ and $C_2$ are circuits, each is a minimally dependent set of columns. Over $\mathbb{F}_2$, every nonzero scalar is equal to $1$, so the dependence relation on a circuit has all coefficients equal to $1$. Hence the sums of their corresponding columns vanish:
\begin{align*}
\sum_{e \in C_1} A_e = 0
\end{align*}
and
\begin{align*}
\sum_{e \in C_2} A_e = 0.
\end{align*}
Adding these two equalities in characteristic $2$ gives
\begin{align*}
\sum_{e \in C_1 \triangle C_2} A_e = 0.
\end{align*}
Thus $C_1 \triangle C_2$ has zero column-sum. If it is nonempty, then it is dependent, so it contains a circuit $D_1$. Since $D_1$ is a circuit in a binary representation, the sum of the columns indexed by $D_1$ is zero. Therefore $(C_1 \triangle C_2) \setminus D_1=(C_1 \triangle C_2)\triangle D_1$ also has zero column-sum. If this remaining set is nonempty, it is again dependent and contains another circuit. Repeating this extraction and using finiteness of $E(N)$, we decompose $C_1 \triangle C_2$ as a disjoint union of circuits.
Conversely, assume that the symmetric difference of any two circuits of $N$ is a disjoint union of circuits. Choose a basis $B \subseteq E(N)$. For each element $e \in E(N) \setminus B$, let $C_B(e)$ denote the fundamental circuit of $e$ with respect to $B$, the unique circuit contained in $B \cup \{e\}$. Define a matrix
$A \in \mathbb{F}_2^{B \times E(N)}$
as follows: for $b \in B$, the $b$-column is the standard basis vector indexed by $b$; for $e \in E(N) \setminus B$, the $e$-column is the vector whose support is $C_B(e) \setminus \{e\}$.
Let $N_A$ be the vector matroid represented by $A$ over $\mathbb{F}_2$. By construction, $B$ is a basis of $N_A$, and for each $e \in E(N) \setminus B$, the fundamental circuit of $e$ with respect to $B$ in $N_A$ is exactly $C_B(e)$.
We use the following fundamental-circuit expansion lemma, and prove it here. If a finite matroid satisfies the symmetric-difference property, $B$ is a basis, and $C$ is a circuit, then
\begin{align*}
C = \triangle_{e \in C \setminus B} C_B(e),
\end{align*}
where the right-hand side is the iterated symmetric difference over the finite set $C \setminus B$.
Indeed, define
\begin{align*}
S := \triangle_{e \in C \setminus B} C_B(e).
\end{align*}
For each $e \in C \setminus B$, the fundamental circuit $C_B(e)$ is contained in $B \cup \{e\}$ and contains $e$, so its only element outside $B$ is $e$. Hence the non-basis part of $S$ is exactly $C \setminus B$. We need the two-circuit hypothesis in the slightly extended form that the symmetric difference of a finite disjoint union of circuits with one additional circuit is again a disjoint union of circuits. This follows by induction on the number of circuit components in the disjoint union: the empty union gives the additional circuit itself, one component is exactly the hypothesis, and the induction step first applies the induction hypothesis to all but one component and then applies the one-component case successively to the resulting circuit components. Applying this extension repeatedly to the finite family $(C_B(e))_{e \in C \setminus B}$ shows that $S$ is a disjoint union of circuits. Applying the same extension to the circuit components of $S$ together with the circuit $C$ shows that $S \triangle C$ is also a disjoint union of circuits. But $S$ and $C$ have the same elements outside $B$, so $S \triangle C \subseteq B$. Since $B$ is independent, it contains no circuit, and the only disjoint union of circuits contained in $B$ is the empty union. Thus $S \triangle C=\varnothing$, which proves $S=C$.
Now let $C$ be a circuit of $N$. Since $B$ is independent in $N$, the set $X := C \setminus B$ is nonempty. By the fundamental-circuit lemma,
\begin{align*}
C = \triangle_{e \in X} C_B(e).
\end{align*}
In the matrix $A$, the sum of the columns indexed by $C$ is zero: each non-basis column indexed by $e \in X$ contributes the vector with support $C_B(e) \setminus \{e\}$, and each basis column indexed by $b \in B$ contributes the standard basis vector indexed by $b$. The parity of the total support is exactly the parity of the symmetric difference $\triangle_{e \in X} C_B(e)=C$, so every coordinate cancels in $\mathbb{F}_2$. Therefore $C$ is dependent in $N_A$.
Conversely, let $C'$ be a circuit of $N_A$. The matroid $N_A$ is binary by construction, so it satisfies the already proved forward half of the symmetric-difference property. The basis $B$ and the fundamental circuits $C_B(e)$ are the same in $N$ and $N_A$ by construction. Applying the same fundamental-circuit lemma inside $N_A$ gives
\begin{align*}
C' = \triangle_{e \in C' \setminus B} C_B(e).
\end{align*}
The right-hand side is a disjoint union of circuits of $N$ by the assumed symmetric-difference property, so $C'$ is dependent in $N$. Thus every circuit of $N_A$ is dependent in $N$, and every circuit of $N$ is dependent in $N_A$. Hence the two matroids have the same dependent sets and therefore the same circuits. A finite matroid is determined by its circuits, so $N=N_A$, and $N$ is binary.
[/proof][/step]