We introduce the twisted $\boldsymbolμ_4$-normal form for elliptic curves, deriving in particular addition algorithms with complexity $9\mathbf{M} + 2\mathbf{S}$ and doubling algorithms with complexity $2\mathbf{M} + 5\mathbf{S} + 2\mathbf{m}$ over a binary field. Every ordinary elliptic curve over a finite field of characteristic 2 is isomorphic to one in this family. This improvement to the addition algorithm, applicable to a larger class of curves, is comparable to the $7\mathbf{M} + 2\mathbf{S}$ achieved for the $\boldsymbolμ_4$-normal form, and replaces the previously best known complexity of $13\mathbf{M} + 3\mathbf{S}$ on López-Dahab models applicable to these twisted curves. The derived doubling algorithm is essentially optimal, without any assumption of special cases. We show moreover that the Montgomery scalar multiplication with point recovery carries over to the twisted models, giving symmetric scalar multiplication adapted to protect against side channel attacks, with a cost of $4\mathbf{M} + 4\mathbf{S} + 1\mathbf{m}_t + 2\mathbf{m}_c$ per bit. In characteristic different from 2, we establish a linear isomorphism with the twisted Edwards model over the base field. This work, in complement to the introduction of $\boldsymbolμ_4$-normal form, fills the lacuna in the body of work on efficient arithmetic on elliptic curves over binary fields, explained by this common framework for elliptic curves in $\boldsymbolμ_4$-normal form over a field of any characteristic. The improvements are analogous to those which the Edwards and twisted Edwards models achieved for elliptic curves over finite fields of odd characteristic, and extend $\boldsymbolμ_4$-normal form to cover the binary NIST curves.
Let $E_{m,n}$ be an elliptic curve over $\mathbb{Q}$ of the form $y^2=x^3-m^2x+n^2$, where $m$ and $n$ are positive integers. Brown and Myers showed that the curve $E_{1,n}$ has rank at least two for all $n$. In the present paper, we specify the two points which can be extended to a basis for $E_{1,n}(\mathbb{Q})$ under certain conditions described explicitly. Moreover, we verify a similar result for the curve $E_{m,1}$, which, however, gives a basis for the rank three part of $E_{m,1}(\mathbb{Q})$.
Under suitable, fairly weak hypotheses on an elliptic curve $E/\mathbb{Q}$ and a primitive non-trivial Dirichlet character $χ$, we show that the algebraic $L$-value $\mathscr{L}(E,χ)$ at $s=1$ is an algebraic integer. For instance, for semistable curves $\mathscr{L}(E,χ)$ is integral whenever $E$ admits no isogenies defined over $\mathbb{Q}$. Moreover we give examples illustrating that our hypotheses are necessary for integrality to hold.
Let E be an elliptic curve and ρan Artin representation, both defined over the rational numbers. Let p be a prime at which E has good reduction. We prove that there exists an infinite set of Dirichlet characters χ, ramified only at p, such that the Artin-twisted L-values L(E,ρχ,β) are non-zero when βlies in a specified region in the critical strip (assuming the conjectural continuations and functional equations for these L-functions). The new contribution of our paper is that we may choose our characters to be ramified only at one prime, which may divide the conductor of ρ.
We investigate in this paper the vanishing at $s=1$ of the twisted $L$-functions of elliptic curves $E$ defined over the rational function field $\mathbb{F}_q(t)$ (where $\mathbb{F}_q$ is a finite field of $q$ elements and characteristic $\geq 5$) for twists by Dirichlet characters of prime order $\ell \geq 3$, from both a theoretical and numerical point of view. In the case of number fields, it is predicted that such vanishing is a very rare event, and our numerical data seems to indicate that this is also the case over function fields for non-constant curves. For constant curves, we adapt th…
We introduce a procedure for constructing a generalized elliptic curve from a genus-one twisted curve, and we use this procedure to define an explicit, modular isomorphism between two compactifications of moduli stacks of elliptic curves with level structure.
We consider a generalization of elliptic multiple zeta values, which we call twisted elliptic multiple zeta values. These arise as iterated integrals on an elliptic curve from which a rational lattice has been removed. At the cusp, twisted elliptic multiple zeta values are shown to degenerate to cyclotomic multiple zeta values in the same way as elliptic multiple zeta values degenerate to classical multiple zeta values. We investigate properties of twisted elliptic multiple zeta values and consider them in the context of the non-planar part of the four-point one-loop open-string amplitude.
Let $E$ be an elliptic curve over $\mathbb{Q}$ and $A$ be another elliptic curve over a real quadratic number field. We construct a $\mathbb{Q}$-motive of rank $8$, together with a distinguished class in the associated Bloch-Kato Selmer group, using Hirzebruch-Zagier cycles, that is, graphs of Hirzebruch-Zagier morphisms. We show that, under certain assumptions on $E$ and $A$, the non-vanishing of the central critical value of the (twisted) triple product $L$-function attached to $(E,A)$ implies that the dimension of the associated Bloch-Kato Selmer group of the motive is $0$; and the non-vani…
Let $\mathbb{F}_r$ be a finite field of characteristic $p>3$. For any power $q$ of $p$, consider the elliptic curve $E=E_{q,r}$ defined by $y^2=x^3 + t^q -t$ over $K=\mathbb{F}_r(t)$. We describe several arithmetic invariants of $E$ such as the rank of its Mordell--Weil group $E(K)$, the size of its Néron--Tate regulator $\text{Reg}(E)$, and the order of its Tate--Shafarevich group $III(E)$ (which we prove is finite). These invariants have radically different behaviors depending on the congruence class of $p$ modulo 6. For instance $III(E)$ either has trivial $p$-part or is a $p$-group. On the…
Abramovich, Corti and Vistoli have studied modular compactifications of stacks of curves equipped with abelian level structures arising as substacks of the stack of twisted stable maps into the classifying stack of a finite group, provided the order of the group is invertible on the base scheme. Recently Abramovich, Olsson and Vistoli extended the notion of twisted stable maps to allow arbitrary base schemes, where the target is a tame stack, not necessarily Deligne-Mumford. We use this to extend the results of Abramovich, Corti and Vistoli to the case of elliptic curves with level structures …
This is an investigation into the possible existence and consequences of a Birch-Swinnerton-Dyer-type formula for L-functions of elliptic curves twisted by Artin representations. We translate expected properties of L-functions into purely arithmetic predictions for elliptic curves, and show that these force some peculiar properties of the Tate-Shafarevich group, which do not appear to be tractable by traditional Selmer group techniques. In particular we exhibit settings where the different p-primary components of the Tate-Shafarevich group do not behave independently of one another. We also gi…
Cheng constructed product expansions from twists of elliptic genera of symmetric powers of K3 surfaces that are related to M_24 moonshine. We study which of them are Siegel modular forms. If the predicted level is non-composite, they are modular, and their powers can be represented as products of rescaled Borcherds products.
We prove that all elliptic curves defined over the cyclotomic $\mathbb{Z}_p$-extension of a real quadratic field are modular under the assumption that the algebraic part of the central value of a twisted $L$-function is a $p$-adic unit. Our result is a generalization of a result of X. Zhang, which is a real quadratic analogue of a result of Thorne.
We fix an elliptic curve $E/\mathbb{F}_q(t)$ and consider the family $\{E\otimesχ_D\}$ of $E$ twisted by quadratic Dirichlet characters. The one-level density of their $L$-functions is shown to follow orthogonal symmetry for test functions with Fourier transform supported inside $(-1,1)$. As an application, we obtain an upper bound of 3/2 on the average analytic rank. By splitting the family according to the sign of the functional equation, we obtain that at least $12.5\%$ of the family have rank zero, and at least $37.5\%$ have rank one. The Katz and Sarnak philosophy predicts that those perc…
Pairings have been widely used since their introduction to cryptography. They can be applied to identity-based encryption, tripartite Diffie-Hellman key agreement, blockchain and other cryptographic schemes. The Acceleration of pairing computations is crucial for these cryptographic schemes or protocols. In this paper, we will focus on the Elliptic Net algorithm which can compute pairings in polynomial time, but it requires more storage than Miller's algorithm. We use several methods to speed up the Elliptic Net algorithm. Firstly, we eliminate the inverse operation in the improved Elliptic Ne…
Here we study the recently introduced notion of a locally harmonic Maass form and its applications to the theory of $L$-functions. In particular, we find finite formulas for certain twisted central $L$-values of a family of elliptic curves in terms of finite sums over canonical binary quadratic forms. This yields vastly simpler formulas related to work of Birch and Swinnerton-Dyer for such $L$-values, and extends beyond their framework to special non-CM elliptic curves.
We propose two optimal representations for the elements of trace zero subgroups of twisted Edwards curves. For both representations, we provide efficient compression and decompression algorithms. The efficiency of the algorithm is compared with the efficiency of similar algorithms on elliptic curves in Weierstrass form.
We give an elementary and self-contained introduction to pairings on elliptic curves over finite fields. For the first time in the literature, the three different definitions of the Weil pairing are stated correctly and proved to be equivalent using Weil reciprocity. Pairings with shorter loops, such as the ate, ate$_i$, R-ate and optimal pairings, together with their twisted variants, are presented with proofs of their bilinearity and non-degeneracy. Finally, we review different types of pairings in a cryptographic context. This article can be seen as an update chapter to A. Enge, Elliptic Cu…
Let E be an elliptic curved defined over $\Q$ and let $K/\Q$ be a finite Galois extension with Galois group G. The equivariant Birch-Swinnerton-Dyer conjecture for $h^1(E\times_{\Q} K)(1)$ viewed as a motive over $\Q$ with coefficients in $\Q[G]$ relates the twisted L-values associated with E with the arithmetic invariants of the same. In this paper we prescribe an approach to verify this conjecture for a given data. Using this approach, we verify the conjecture for an elliptic curve of conductor 11 and an S_3-extension of $\Q$.
Let $k$ be a field of positive characteristic $p$. Question: Does every twisted form of $μ_p$ over $k$ occur as subgroup scheme of an elliptic curve over $k$? We show that this is true for most finite fields, for local fields and for fields of characteristic $p\leq11$. However, it is false in general for fields of characteristic $p\geq13$, which implies that there are also $p$-divisible and formal groups of height one over such fields that do not arise from elliptic curves. It also implies that the Hasse invariant does not obey the Hasse principle. Moreover, we also analyse twisted forms of $p…
Ordinary 3-Isogeny Graphs and Improvement of Supersingularity Testing for Twisted Hessian Curves over Prime Fields
School of Science and Engineering, Tokyo Denki University（东京电机大学理工学部）；Institute of Mathematics for Industry (IMI), Kyushu University（九州大学产业数学研究院）；Cyber Physical Security Research Institute (CPSEC)National Institute of Advanced Industrial Science and Technology (AIST)（先进工业科学技术研究所网络物理安全研究所）
本文利用扭曲Hessian曲线的3-同源性质，证明当p≡2 mod 3时普通曲线位于3-火山表面，并据此改进Sutherland超奇异检测算法，同时推广了超奇异j-不变量为立方的结论。
It is well known that given a finitely generated torsion module $M$ over the Iwasawa algebra $\mathbb Z_p[[Γ]]$, where $Γ\cong \mathbb Z_p$, there exists a continuous $p$-adic character $ρ$ of $Γ$ such that, for the twist $M(ρ)$ of $M$, the $Γ_n := Γ^{p^n}$ Euler characteristic, i.e. $χ(Γ_n, M(ρ))$, is finite for every $n$. We prove a generalization of this result by considering modules over the Iwasawa algebra of a general $p$-adic Lie group $G$, instead of $Γ$. We relate this twisted Euler characteristic to the evaluation of the {\it Akashi series} at the twist and in turn use it to indicate…
We compute by a purely local method the elliptic, twisted by transpose-inverse, character χ_πof the representation π=I_{(3,1)}(1_3) of PGL(4,F) normalizedly induced from the trivial representation of the maximal parabolic subgroup of type (3,1), where F is a p-adic field. Put C=(GL(2,F)xGL(2,F))'/F^x (F^x embeds diagonally, prime means equal determinants). It is a twisted elliptic endoscopic group of PGL(4). We deduce from the computation that χ_πis an unstable function: its value at one twisted regular elliptic conjugacy class with norm in C is minus its value at the other class within the tw…
Let L(E/Q,s) be the L-function of an elliptic curve E defined over the rational field Q. We examine the vanishing and non-vanishing of the central values L(E,1,χ) of the twisted L-function as χranges over Dirichlet characters of given order.
We give the parameters of any evaluation code on a smooth quadric surface. For hyperbolic quadrics the approach uses elementary results on product codes and the parameters of codes on elliptic quadrics are obtained by detecting a BCH structure of these codes and using the BCH bound. The elliptic quadric is a twist of the surface P^1 x P^1 and we detect a similar BCH structure on twists of the Segre embedding of a product of any d copies of the projective line.
Let $E$ be an elliptic curve over $\mathbb{Q}$, with L-function $L_E(s)$. For any primitive Dirichlet character $χ$, let $L_E(s, χ)$ be the L-function of $E$ twisted by $χ$. In this paper, we use random matrix theory to study vanishing of the twisted L-functions $L_E(s, χ)$ at the central value $s=1$. In particular, random matrix theory predicts that there are infinitely many characters of order 3 and 5 such that $L_E(1, χ)=0$, but that for any fixed prime $k \geq 7$, there are only finitely many character of order $k$ such that $L_E(1, χ)$ vanishes. With the Birch and Swinnerton-Dyer Conjectu…
In this paper we address two different problems related with the factorization of an RSA module N. First we can show that factoring is equivalent in deterministic polynomial time to counting points on a pair of twisted Elliptic curves modulo N. Also we settle the malleability of factoring an RSA module, as described in [9], using the number of points of a single elliptic curve modulo N, and Coppersmith's algorithm.
The twisted elliptic genera of a $K3$ surface associated with the conjugacy classes of the Mathieu group $M_{24}$ are known to be weak Jacobi forms of weight $0$. In 2010, Cheng constructed formal infinite products from the twisted elliptic genera and conjectured that they define Siegel modular forms of degree two. In this paper we prove that for each conjugacy class of level $N_g$ the associated product is a meromorphic Borcherds product on the lattice $U(N_g)\oplus U \oplus A_1$ in a strict sense. We also compute the divisors of these products and determine for which conjugacy classes the pr…
Let E be a rational elliptic curve of conductor N without complex multiplication and let K be an imaginary quadratic field of discriminant D prime to N. Assume that the number of primes dividing N and inert in K is odd, and let H be the ring class field of K of conductor c prime to ND with Galois group G over K. Fix a complex character χof G. Our main result is that if the special value of the χ-twisted L-function of E/K is non-zero then the tensor product (with respect to χ) of the p-Selmer group of E/H with W over Z[G] is 0 for all but finitely many primes p, where W is a suitable finite ext…
