We give practical numerical methods to compute the period matrix of a plane algebraic curve (not necessarily smooth). We show how automorphisms and isomorphisms of such curves, as well as the decomposition of their Jacobians up to isogeny, can be calculated heuristically. Particular applications include the determination of (generically) non-Galois morphisms between curves and the identification of Prym varieties.
We describe several improvements to algorithms for the rigorous computation of the endomorphism ring of the Jacobian of a curve defined over a number field.
We describe an algorithm, based on the properties of the characteristic polynomials of Frobenius, to compute $\operatorname{End}_{\overline{K}}(A)$ when $A$ is the Jacobian of a nice genus-2 curve over a number field $K$. We use this algorithm to confirm that the description of the structure of the geometric endomorphism ring of $\operatorname{Jac}(C)$ given in the LMFDB ($L$-functions and modular forms database) is correct for all the genus 2 curves $C$ currently listed in it. We also discuss the determination of the field of definition of the endomorphisms in some special cases.
Let $\mathbb{F}_q[T]$ be the polynomial ring over a finite field $\mathbb{F}_q$. We study the endomorphism rings of Drinfeld $\mathbb{F}_q[T]$-modules of arbitrary rank over finite fields. We compare the endomorphism rings to their subrings generated by the Frobenius endomorphism and deduce from this a refinement of a reciprocity law for division fields of Drinfeld modules proved in our earlier paper. We then use these results to give an efficient algorithm for computing the endomorphism rings and discuss some interesting examples produced by our algorithm.
Let $E/\mathbb{Q}$ be a non-CM elliptic curve. Assuming GRH, we prove that, for a set of primes $p$ of density $1$, the absolute discriminant of the $\mathbb{F}_p$-endomorphism ring of the reduction of $E$ modulo $p$ is close to maximal.
Let $E$ be an elliptic curve without CM that is defined over a number field $K$. For all but finitely many nonarchimedean places $v$ of $K$ there is the reduction $E(v)$ of $E$ at $v$ that is an elliptic curve over the residue field $k(v)$ at $v$. The set of $v$'s with ordinary $E(v)$ has density 1 (Serre). For such $v$ the endomorphism ring $End(E(v))$ of $E(v)$ is an order in an imaginary quadratic field. We prove that for any pair of relatively prime positive integers $N$ and $M$ there are infinitely many nonarchimedean places $v$ of $K$ such that the discriminant $Δ(v)$ of $End(E(v))$ is d…
The question we propose to answer throughout this paper is the following: Given an isogeny class of Drinfeld modules over a finite field, what are the orders of the corresponding endomorphism algebra (which is an isogeny invariant) that occur as endomorphism ring of a Drinfeld module in that isogeny class? It is worth mentioning that this question is different from the ones investigated by the authors Kuhn, Pink in [6] and Garai, Papikian in [3]. The former authors rather provided an answer to the question, given a Drinfeld module ϕ, how does one efficiently compute the endomorphism ring of ϕ?…
Let K be a field of characteristic zero, n>4 an integer, f(x) an irreducible polynomial over K of degree n, whose Galois group is doubly transitive simple non-abelian group. Let p be an odd prime, Z[ζ_p] the ring of integers in the p-th cyclotomic field, C_{f,p}:y^p=f(x) the corresponding superelliptic curve and J(C_{f,p}) its jacobian. Assuming that either n=p+1 or p does not divide n(n-1), we prove that the ring of all endomorphisms of J(C_{f,p}) coincides with Z[ζ_p].
We present a new algorithm for computing the endomorphism ring of an ordinary abelian surface over a finite field which is subexponential and generalizes an algorithm of Bisson and Sutherland for elliptic curves. The correctness of this algorithm only requires the heuristic assumptions required by the algorithm of Biasse and Fieker which computes the class group of an order in a number field in subexponential time. Thus we avoid the multiple heuristic assumptions on isogeny graphs and polarized class groups which were previously required. The output of the algorithm is an ideal in the maximal …
Computing endomorphism rings of supersingular elliptic curves is an important problem in computational number theory, and it is also closely connected to the security of some of the recently proposed isogeny-based cryptosystems. In this paper we give a new algorithm for computing the endomorphism ring of a supersingular elliptic curve $E$ that runs, under certain heuristics, in time $O((\log p)^2p^{1/2})$. The algorithm works by first finding two cycles of a certain form in the supersingular $\ell$-isogeny graph $G(p,\ell)$, generating an order $Λ\subseteq \operatorname{End}(E)$. Then all maxi…
Let $k$ be a global field, let $A$ be a Dedekind domain with $\text{Quot}(A) = k$, and let $K$ be a finitely generated field. Using a unified approach for both elliptic curves and Drinfeld modules $M$ defined over $K$ and having a trivial endomorphism ring, with $k= \mathbb{Q}$, $A = \mathbb{Z}$ in the former case and $k$ a global function field, $A$ its ring of functions regular away from a fixed prime in the latter case, for any nonzero ideal $\mathfrak{a} \lhd A$ we prove best possible estimates in the norm $|\mathfrak{a}|$ for the degrees over $K$ of the subfields of the $\mathfrak{a}$-div…
We prove that the path-finding problem in $\ell$-isogeny graphs and the endomorphism ring problem for supersingular elliptic curves are equivalent under reductions of polynomial expected time, assuming the generalised Riemann hypothesis. The presumed hardness of these problems is foundational for isogeny-based cryptography. As an essential tool, we develop a rigorous algorithm for the quaternion analog of the path-finding problem, building upon the heuristic method of Kohel, Lauter, Petit and Tignol. This problem, and its (previously heuristic) resolution, are both a powerful cryptanalytic too…
Suppose $X$ is a projective variety defined over a finite extension $K$ of $\mathbb{Q}_p$ and suppose $X$ admits a model $\mathcal{X}$ defined over the ring of integers $R$ of $K$. Let $f:{X}\rightarrow {X}$ be an endomorphism of $X$ defined over $K$ that can be extended to an endomorphism of $\mathcal{X}$ defined over $R$. We apply a method of Fakhruddin to prove an explicit upper bound for the primitive period of periodic points defined over $R$.
For a prime $p$, let $E_{p,p^m}=\{\begin{pmatrix}a&b\\p^{m-1}c&d\end{pmatrix}|a,b,c\in\mathbb{Z}_{p},~\mathrm{and}~d\in \mathbb{Z}_{p^{m}}\}$. We first establish a ring isomorphism from $\mathrm{End}(\mathbb{Z}_p\times\mathbb{Z}_p^m)$ onto $E_{p,p^m}$. We then provide the way to compute $-d$ and $d^{-1}$ using arithmetic in $\mathbb{Z}_{p}$ and $\mathbb{Z}_{p^{m}}$, and characterize invertible elements in $E_{p,p^m}$. Moreover, we introduce the minimal polynomial for each element in $E_{p,p^m}$ and given its applications.
Assuming the Mumford-Tate conjecture, we show that the center of the endomorphism ring of an abelian variety defined over a number field can be recovered from an appropriate intersection of the fields obtained from its Frobenius endomorphisms. We then apply this result to exhibit a practical algorithm to compute this center.
Let $ψ: A \to F\{τ\}$ be a Drinfeld $A$-module over $F$ of rank 2 and without complex multiplication, where $A = {\mathbb{F}}_q[T]$, $F = {\mathbb{F}}_q(T)$, and $q$ is an odd prime power. For a prime $\mathfrak{p} = p A$ of $A$ of good reduction for $ψ$ and with residue field ${\mathbb{F}}_{\mathfrak{p}}$, we study the growth of the absolute value $|Δ_{\mathfrak{p}}|$ of the discriminant of the ${\mathbb{F}}_{\mathfrak{p}}$-endomorphism ring of the reduction of $ψ$ modulo $\mathfrak{p}$. We prove that for all $\mathfrak{p}$, $|Δ_{\mathfrak{p}}|$ grows with $|p|$. Moreover, we prove that for a…
We study the problem of generating the endomorphism ring of a supersingular elliptic curve by two cycles in $\ell$-isogeny graphs. We prove a necessary and sufficient condition for the two endomorphisms corresponding to two cycles to be linearly independent, expanding on the work in Kohel's thesis. We also give a criterion under which the order generated by two cycles is not a maximal order. We give some examples in which we compute cycles which generate the full endomorphism ring. The most difficult part of these computations is the calculation of the trace of these cycles. We show that a gen…
Chevyrev and Galbraith recently devised an algorithm which inputs a maximal order of the quaternion algebra ramified at one prime and infinity and constructs a supersingular elliptic curve whose endomorphism ring is precisely this maximal order. They proved that their algorithm is correct whenever it halts, but did not show that it always terminates. They did however prove that the algorithm halts under a reasonable assumption which they conjectured to be true. It is the purpose of this paper to verify their conjecture and in turn prove that their algorithm always halts. More precisely, Chevyr…
$\newcommand{\OO}[1]{\mathcal{O}_{#1}}\newcommand{\GG}{\mathcal{G}}\newcommand{\End}{\mathrm{End}}\newcommandØ{\mathcal{O}}$Let $K/F$ be a quadratic extension of non-Archimedean local fields of characteristic not equal to 2, with rings of integers denoted by $\OO K$ and $\OO F$. We consider a formal $\OO F$-module $\GG$, over a discrete valuation ring $\OO W$ with an uniformizer $\varpi$, with extra endomorphisms by a subring $Ø$ of $\OO K$, and the height of its reduction $\GG_0=\GG\otimes \OO W/\varpi$ is 2. The endomorphism ring of $\GG_n=\GG\otimes \OO W/\varpi^{n+1}$ is a subring between …
A conjecture of Coleman implies that only finitely many quaternion algebras over the rational numbers can be the endomorphism $\mathbf{Q}$-algebras of abelian surfaces over the complex numbers which can be defined over $\mathbf{Q}$. One may think of this as a higher-dimensional version of the Gauss Class Number problem. Before now, no one has ruled out quaternion algebras over $\mathbf{Q}$ not already ruled out by the Albert classification. We rule out infinitely many such quaternion algebras by showing that for infinitely many $D$, the Atkin-Lehner quotient Shimura curve $X^D/w_D$ has no $\ma…
Let $F$ be a local non-archimedean field and $\mathcal{O}_F$ its ring of integers. Let $Ω$ be a Bernstein component of the category of smooth representations of $GL_n(F)$, let $(J, λ)$ be a Bushnell-Kutzko $Ω$-type, and let $\mathfrak{Z}_Ω$ be the centre of the Bernstein component $Ω$. This paper contains two major results. Let $σ$ be a direct summand of $\mathrm{Ind}_J^{GL_n(\mathcal{O}_F)} λ$. We will begin by computing $\mathrm{c\text{--} Ind}_{GL_n(\mathcal{O}_F)}^{GL_n(F)} σ\otimes_{\mathfrak{Z}_Ω}κ(\mathfrak{m})$, where $κ(\mathfrak{m})$ is the residue field at maximal ideal $\mathfrak{m…
Let $A=\mathbb{F}_q[T]$ be the polynomial ring over $\mathbb{F}_q$, and $F$ be the field of fractions of $A$. Let $ϕ$ be a Drinfeld $A$-module of rank $r\geq 2$ over $F$. For all but finitely many primes $\mathfrak{p}\lhd A$, one can reduce $ϕ$ modulo $\mathfrak{p}$ to obtain a Drinfeld $A$-module $ϕ\otimes\mathbb{F}_\mathfrak{p}$ of rank $r$ over $\mathbb{F}_\mathfrak{p}=A/\mathfrak{p}$. The endomorphism ring $\mathcal{E}_\mathfrak{p}=\mathrm{End}_{\mathbb{F}_\mathfrak{p}}(ϕ\otimes\mathbb{F}_\mathfrak{p})$ is an order in an imaginary field extension $K$ of $F$ of degree $r$. Let $\mathcal{O}_…
Let $E$ be an elliptic curve, $\mathcal{K}_1$ its Kummer curve $E/\{\pm1\}$, $E^2$ its square product, and $\mathcal{K}_2$ the split Kummer surface $E^2/\{\pm1\}$. The addition law on $E^2$ gives a large endomorphism ring, which induce endomorphisms of $\mathcal{K}_2$. With a view to the practical applications to scalar multiplication on $\mathcal{K}_1$, we study the explicit arithmetic of $\mathcal{K}_2$.
We give an effective algorithm to determine the endomorphism ring of a Drinfeld module, both over its field of definition and over a separable or algebraic closure thereof. Using previous results we deduce an effective description of the image of the adelic Galois representation associated to the Drinfeld module, up to commensurability. We also give an effective algorithm to decide whether two Drinfeld modules are isogenous, again both over their field of definition and over a separable or algebraic closure thereof.
