Elliptic curves with a known number of points over a given prime field with n elements are often needed for use in cryptography. In the context of primality proving, Atkin and Morain suggested the use of the theory of complex multiplication to construct such curves. One of the steps in this method is the calculation of a root modulo n of the Hilbert class polynomial H(X) for a fundamental discriminant D. The usual way is to compute H(X) over the integers and then to find the root modulo n. We present a modified version of the Chinese remainder theorem (CRT) to compute H(X) modulo n directly from the knowledge of H(X) modulo enough small primes. Our complexity analysis suggests that asymptotically our algorithm is an improvement over previously known methods.
Let $p$ be a prime and $K$ a number field of degree $p$. We count the number of elliptic curves, up to $\bar{K}$-isomorphism, having a prescribed property, where this property is either that the curve contains a fixed torsion group as a subgroup, or that it has an isogeny of prescribed degree.
Given a non-isotrivial elliptic curve over an arithmetic surface, one obtains a lisse $\ell$-adic sheaf of rank two over the surface. This lisse sheaf has a number of straightforward properties: cyclotomic determinant, finite ramification, rational traces of Frobenius, and somewhere not potentially good reduction. We prove that any lisse sheaf of rank two possessing these properties comes from an elliptic curve.
In this paper we construct families of Hilbert modular newforms without exceptional primes. This is achieved by generalizing the notion of good-dihedral primes, introduced by Khare and Wintenberger in their proof of Serre's modularity conjecture, to totally real fields.
We consider a particular case of an analog for elliptic curves to the Mersenne problem : finding explicitely all prime power terms in an elliptic divisibility sequence when descent via isogeny is possible. We explain how this question can be related to classical problems in diophantine geometry and we compute an explicit upper bound on the index of prime power terms in magnified elliptic divisibility sequences.
We present a very efficient algorithm to construct an elliptic curve E and a finite field F such that the order of the point group E(F) is a given prime number N. Heuristically, this algorithm only takes polynomial time Otilde((\log N)^3), and it is so fast that it may profitably be used to tackle the related problem of finding elliptic curves with point groups of prime order of prescribed size. We also discuss the impact of the use of high level modular functions to reduce the run time by large constant factors and show that recent gonality bounds for modular curves imply limits on the time r…
The problem of constructing elliptic curves suitable for pairing applications has received a lot of attention. To solve this, we propose a variant algorithm of a known method by Brezing and Weng. We produce new families of parameters using our algorithm for pairing-friendly elliptic curves of embedding degree 8, and we actually compute some explicit curves as numerical examples.
We explore the relationship between elliptic Korselt numbers of Type I, a class of pseudoprimes introduced by Silverman in [20], and anomalous primes. We generalize a result in [20] that gives sufficient conditions for an elliptic Korselt number of Type I to be a product of anomalous primes. Finally, we prove that almost all elliptic Korselt numbers of Type I of the form n=pq are a product of anomalous primes
I provide methods of constructing elliptic and hyperelliptic curves over global fields with interesting rational points over the given fields or over large field extensions. I also provide a elliptic curves defined over any given number field equipped with a rational point, (resp. with two rational points) of infinite order over the given number field, and elliptic curves over the rationals with two rational points over `simplest cubic fields.' I also provide hyperelliptic curves of genus exceeding any given number over any given number fields with points (over the given number field) which sp…
In this paper, we prove the Iwasawa main conjecture for elliptic curves at an odd supersingular prime p. Some consequences are the p-parts of the leading term formulas in the Birch and Swinnerton-Dyer conjectures for analytic rank 0 or 1.
For a given elliptic curve $E$ defined over the rationals, we study the density of primes $p$ satisfying $\mathrm{gcd}(\#E(\mathbb{F}_p),p-1)=1$ and give a conjectural value for this density with strong heuristic evidence for most elliptic curves, in an appropriate sense.
We consider the reduction of an elliptic curve defined over the rational numbers modulo primes in a given arithmetic progression and investigate how often the subgroup of rational points of this reduced curve is cyclic as a special case of Serre's Cyclicity Conjecture.
In this paper we study the problem of how to determine all elliptic curves defined over an arbitrary number field $K$ with good reduction outside a given finite set of primes $S$ of $K$ by solving $S$-unit equations. We give examples of elliptic curves over $\mathbb Q$ and quadratic fields.
In this paper, we propose the use of Ramanujan class of polynomials for the construction of prime order elliptic curves using the CM-method. We compare (theoretically and experimentally) the efficiency of using this new class against the use of the Weber, $M_{D,l}(x)$ and $M_{D,p_1,p_2}(x)$ polynomials and show that they clearly outweigh all of them in the generation of prime order elliptic curves.
We find all elliptic curves defined over $\mathbb{Q}$ that have a rational point of order $N$, $N\ge 4$, and whose conductor is of the form $p^aq^b$, where p, q are two distinct primes, a, b are two positive integers. In particular, we prove that Szpiro's conjecture holds for these elliptic curves.
We present an algorithm that, on input of a positive integer N together with its prime factorization, constructs a finite field F and an elliptic curve E over F for which E(F) has order N. Although it is unproved that this can be done for all N, a heuristic analysis shows that the algorithm has an expected run time that is polynomial in 2^omega(N) log N, where omega(N) is the number of distinct prime factors of N. In the cryptographically relevant case where N is prime, an expected run time O((log N)^{4+epsilon}) can be achieved. We illustrate the efficiency of the algorithm by constructing el…
Let $E$ be an elliptic curve over the finite field $\mathbb F_q$. We prove that, when $n$ is a sufficiently large positive integer, $\#E(\mathbb F_{q^n})$ has a prime factor exceeding $n\exp(c\log n/\log\log n)$.
For certain elliptic curves $E/\mathbb{Q}$ with $E(\mathbb{Q})[2]=\mathbb{Z}/2 \mathbb{Z}$, we prove a criterion for prime twists of $E$ to have analytic rank 0 or 1, based on a mod 4 congruence of 2-adic logarithms of Heegner points. As an application, we prove new cases of Silverman's conjecture that there exists a positive proposition of prime twists of $E$ of rank zero (resp. positive rank).
We give several new constructions for moderate rank elliptic curves over $\mathbb{Q}(T)$. In particular we construct infinitely many rational elliptic surfaces (not in Weierstrass form) of rank 6 over $\mathbb{Q}$ using polynomials of degree two in $T$. While our method generates linearly independent points, we are able to show the rank is exactly 6 \emph{without} having to verify the points are independent. The method generalizes; however, the higher rank surfaces are not rational, and we need to check that the constructed points are linearly independent.
For an elliptic curve E/Q without complex multiplication we study the distribution of Atkin and Elkies primes l, on average, over all good reductions of E modulo primes p. We show that, under the Generalised Riemann Hypothesis, for almost all primes p there are enough small Elkies primes l to ensure that the Schoof-Elkies-Atkin point-counting algorithm runs in (log p)^(4+o(1)) expected time.
We present a general framework for constructing families of elliptic curves of prime order with prescribed embedding degree. We demonstrate this method by constructing curves with embedding degree k = 10, which solves an open problem posed by Boneh, Lynn, and Shacham. We show that our framework incorporates existing constructions for k = 3, 4, 6, and 12, and we give evidence that the method is unlikely to produce infinite families of curves with embedding degree k > 12.
Let E be an elliptic curve over Q. In 1988, Koblitz conjectured a precise asymptotic for the number of primes p up to x such that the order of the group of points of E over the finite field F_p is prime. This is an analogue of the Hardy and Littlewood twin prime conjecture in the case of elliptic curves. Koblitz's conjecture is still widely open. In this paper we prove that Koblitz's conjecture is true on average over a two-parameter family of elliptic curves. One of the key ingredients in the proof is a short average distribution result in the style of Barban-Davenport-Halberstam, where the a…
For a given elliptic curve $E_0$ defined over a number field $k$, we construct two families of elliptic curves whose mod 3 representations are isomorphic to that of $E_0$. The isomorphisms in the first family are symplectic, and those in the second family are anti-symplectic. Our construction is based on the notion of Hessian and Cayleyan curves in classical geometry.
Let $E$ be an elliptic curve defined over rational field $\mathbb{Q}$ and $N$ be a positive integer. Now, $M_E(N)$ denotes the number of primes $p$, such that the group $E_p(\mathbb{F}_p)$ is of order $N$. We show that $M_E(N)$ follows Poisson distribution when an average is taken over a large class of curves.
We consider the primes which divide the denominator of the x-coordinate of a sequence of rational points on an elliptic curve. It is expected that for every sufficiently large value of the index, each term should be divisible by a primitive prime divisor, one that has not appeared in any earlier term. Proofs of this are known in only a few cases. Weaker results in the general direction are given, using a strong form of Siegel's Theorem and some congruence arguments. Our main result is applied to the study of prime divisors of Somos sequences.
In this paper we shall investigate the problem of the representation of the number of integral points of an elliptic curve modulo a prime number p. We present a way of expressing an exponential sum which involves polynomials of third degree, in explicit non-exponential terms. In the process, we present explicit formulas for the calculation of some series involving the Riemann Zeta function.
Let $p\ge5$ be a prime and $T$ a Kodaira type of the special fiber of an elliptic curve. We estimate the number of elliptic curves over $\mathbb Q$ up to height $X$ with Kodaira type $T$ at $p$. This enables us find the proportion of elliptic curves over $\mathbb Q$, when ordered by height, with Kodaira type $T$ at a prime $p\ge5$ inside the set of all elliptic curves. This proportion is a rational function in $p$. For instance, we show that $\displaystyle\frac{p^8(p-1)}{p^9-1}$ of all elliptic curves with bad reduction at $p$ are of multiplicative reduction. Furthermore, we prove that the pri…
Let $[K:\mathbb{Q}]=p$ be a prime number and let $E/K$ be an elliptic curve with $j(E) \in \mathbb{Q}$. We determine the all possibilities for $E(K)_{tors}$. We obtain these results by studying Galois representations of $E$ and of it's quadratic twists.
In this paper we will give a global description of the Frobenius for the division fields of an elliptic curve E which is strictly analogous to the cyclotomic case. This is then applied to determine the splitting of a prime p in subfields of such a division field. Such fields include a large class of non-solvable quintic extensions and our application provides an arithmetic counterpart to Klein's "solution" of quintic equations using elliptic functions. A central role is played by the discriminant of the ring of endomorphisms of the elliptic curve reduced modulo p.
It is shown that, under some mild technical conditions, representations of prime numbers by binary quadratic forms can be computed in polynomial complexity by exploiting Schoof's algorithm, which counts the number of $\mathbb F_q$-points of an elliptic curve over a finite field $\mathbb F_q$. Further, a method is described which computes representations of primes from reduced quadratic forms by means of the integral roots of polynomials over $\mathbb Z$. Lastly, some progress is made on the still-unsettled general problem of deciding which primes are represented by which classes of quadratic f…
In this paper we present an iterative construction of irreducible polynomials over finite fields based upon repeated applications of transforms induced by endomorphisms of odd prime degree of ordinary elliptic curves.
This work builds on earlier results. We define universal elliptic Gauß sums for Atkin primes in Schoof's algorithm for counting points on elliptic curves. Subsequently, we show these quantities admit an efficiently computable representation in terms of the $j$-invariant and two other modular functions. We analyse the necessary computations in detail and derive an alternative approach for determining the trace of the Frobenius homomorphism for Atkin primes using these pre-computations. A rough run-time analysis shows, however, that this new method is not competitive with existing ones.
In 1987, B. Perrin-Riou formulated a Heegner point main conjecture for elliptic curves at primes of ordinary reduction. In this paper, we formulate an analogue of Perrin-Riou's main conjecture for supersingular primes. We then prove this conjecture under mild hypotheses, and deduce from this result a $Λ$-adic extension of Kobayashi's $p$-adic Gross-Zagier formula, new cases of B.-D. Kim's doubly-signed main conjectures, and a strengthened version of Skinner's converse to the Gross-Zagier-Kolyvagin theorem for supersingular primes.
Two rational primes p, q are called dual elliptic if there is an elliptic curve E mod p with q points. They were introduced as an interesting means for combining the strengths of the elliptic curve and cyclotomy primality proving algorithms. By extending to elliptic curves some notions of galois theory of rings used in the cyclotomy primality tests, one obtains a new algorithm which has heuristic cubic run time and generates certificates that can be verified in quadratic time. After the break through of Agrawal, Kayal and Saxena has settled the complexity theoretical problem of primality testi…
Let $E$ be an elliptic curve over a finite field $k$, and $\ell$ a prime number different from the characteristic of $k$. In this paper we consider the problem of finding the structure of the Tate module $T_\ell(E)$ as an integral Galois representations of $k$. We indicate an explicit procedure to solve this problem starting from the characteristic polynomial $f_E(x)$ and the $j$-invariant $j_E$ of $E$. Hilbert Class Polynomials of imaginary quadratic orders play here an important role. We give a global application to the study of prime-splitting in torsion fields of elliptic curves over numbe…
We show that if $E/\mathbb{Q}$ is an elliptic curve with a rational $p$-torsion for $p=2$ or $3$, then there is a congruence relation between Ramanujan's tau function and $E$ modulo $p$. We make use of such congruences to compute the Iwasawa invariants of $2$-adic and $3$-adic Mazur--Tate elements attached to Ramanujan's tau function. We also investigate numerically the Iwasawa invariants of the Mazur--Tate elements attached to an elliptic curve with additive reduction at a fixed prime number.
Let $E$ be an elliptic curve over $\mathbb Q$ and let $p\geq5$ be a prime of good supersingular reduction for $E$. Let $K$ be an imaginary quadratic field satisfying a modified "Heegner hypothesis" in which $p$ splits, write $K_\infty$ for the anticyclotomic $\mathbb Z_p$-extension of $K$ and let $Λ$ denote the Iwasawa algebra of $K_\infty/K$. By extending to the supersingular case the $Λ$-adic Kolyvagin method originally developed by Bertolini in the ordinary setting, we prove that Kobayashi's plus/minus $p$-primary Selmer groups of $E$ over $K_\infty$ have corank $1$ over $Λ$. As an applicat…
We show that under the assumption of Artin's Primitive Root Conjecture, for all primes p there exist ordinary elliptic curves over $\bar F_p(x)$ with arbitrary high rank and constant j-invariant. For odd primes p, this result follows from a theorem which states that whenever p is a generator of (Z/ell Z)^*/<-1> (ell an odd prime) there exists a hyperelliptic curve over $\bar F_p$ whose Jacobian is isogenous to a power of one ordinary elliptic curve.
Using the rank of the Mordell-Weil group $E(\mathbb{Q})$ of an elliptic curve $E$ over $\mathbb{Q}$, we give a lower bound of the class number of the number field $\mathbb{Q}(E[p^n])$ generated by $p^n$-division points of $E$ when the curve $E$ does not possess a $p$-adic point of order $p$: $E(\mathbb{Q}_p)[p] =0$.
Let $n>1$, $e\geq 0$ and a prime number $p\geq 2^{n+2+2e}+3$, such that the index of regularity of $p$ is $\leq e$. We show that there are infinitely many irreducible Galois representations $ρ: Gal(\bar{\mathbb{Q}}/\mathbb{Q})\rightarrow {GL}_n(\mathbb{Q}_p)$ unramified at all primes $l\neq p$. Furthermore, these representations are shown to have image containing a fixed finite index subgroup of ${SL}_n(\mathbb{Z}_p)$. Such representations are constructed by lifting suitable residual representations $\barρ$ with image in the diagonal torus in ${GL}_n(\mathbb{F}_p)$, for which the global deform…
At a prime of ordinary reduction, the Iwasawa ``main conjecture'' for elliptic curves relates a Selmer group to a $p$-adic $L$-function. In the supersingular case, the statement of the main conjecture is more complicated as neither the Selmer group nor the $p$-adic $L$-function is well-behaved. Recently Kobayashi discovered an equivalent formulation of the main conjecture at supersingular primes that is similar in structure to the ordinary case. Namely, Kobayashi's conjecture relates modified Selmer groups, which he defined, with modified $p$-adic $L$-functions defined by the first author. In …
We present a method for constructing optimized equations for the modular curve X_1(N) using a local search algorithm on a suitably defined graph of birationally equivalent plane curves. We then apply these equations over a finite field F_q to efficiently generate elliptic curves with nontrivial N-torsion by searching for affine points on X_1(N)(F_q), and we give a fast method for generating curves with (or without) a point of order 4N using X_1(2N).
For $N\geq 3$, we show Tate's conjecture for the elliptic modular surface $E(N)$ of level $N$ over $\mathbb{F}_p$ for a prime $p$ satisfying $p\equiv 1\mod N$ outside of a set of primes of density zero. We also prove a strong form of Tate's conjecture for $E(N)$ over any finite field of characteristic $p$ prime to $N$ under the assumption that the formal Brauer group of $E(N)$ is of finite height.
Let $p$ be an odd prime number, and let $E$ be an elliptic curve defined over a number field which has good reduction at every prime above $p$. Under suitable assumptions, we prove that the $η$-eigenspace and the $\barη$-eigenspace of mixed signed Selmer group of the elliptic curve are pseudo-isomorphic. As a corollary, we show that the $η$-eigenspace is trivial if and only if the $\barη$-eigenspace is trivial. Our results can be thought as a reflection principle which relate an Iwasawa module in a given eigenspace with another Iwasawa module in a "reflected" eigenspace.
In this paper, we make a study of the Iwasawa theory of an elliptic curve at a supersingular prime p along an arbitrary Z_p-extension of a number field K in the case when p splits completely in K. Generalizing work of Kobayashi and Perrin-Riou, we define restricted Selmer groups and λ^\pm, μ^\pm-invariants; we then derive asymptotic formulas describing the growth of the Selmer group in terms of these invariants. To be able to work with non-cyclotomic Z_p-extensions, a new local result is proven that gives a complete description of the formal group of an elliptic curve at a supersingular prime …
Let $p$ be an odd prime number, $E$ an elliptic curve defined over a number field. Suppose that $E$ has good reduction at any prime lying above $p$, and has supersingular reduction at some prime lying above $p$. In this paper, we construct the plus and the minus Selmer groups of $E$ over the cyclotomic $\mathbb Z_p$-extension in a more general setting than that of B.D. Kim, and give a generalization of a result of B.D. Kim on the triviality of finite $Λ$-submodules of the Pontryagin duals of the plus and the minus Selmer groups, where $Λ$ is the Iwasawa algebra of the Galois group of the $\mat…
In this paper we present and analyse a construction of irreducible polynomials over odd prime fields via the transforms which take any polynomial $f \in \mathbf{F}_p[x]$ of positive degree $n$ to $\left(\frac{x}{k} \right)^n \cdot f(k(x+x^{-1}))$, for some specific values of the odd prime $p$ and $k \in \mathbf{F}_p$.
Let $p$ be an odd prime number, and let $E$ be an elliptic curve defined over a number field $F'$ such that $E$ has semistable reduction at every prime of $F'$ above $p$ and is supersingular at at least one prime above $p$. Under appropriate hypotheses, we compute the Akashi series of the signed Selmer groups of $E$ over a $\mathbb{Z}_p^d$-extension over a finite extension $F$ of $F'$. As a by-product, we also compute the Euler characteristics of these Selmer groups.
Let $p$ be an odd prime. We attach appropriate signed Selmer groups to an elliptic curve $E$, where $E$ is assumed to have semistable reduction at all primes above $p$. We then compare the Iwasawa $λ$-invariants of these signed Selmer groups for two congruent elliptic curves over the cyclotomic $\mathbb{Z}_p$-extension in the spirit of Greenberg-Vatsal and B. D. Kim. As an application of our comparsion formula, we show that if the $p$-parity conjecture is true for one of the congruent elliptic curves, then it is also true for the other elliptic curve. In the midst of proving this latter result…
Let $p, q$ be twin prime numbers with $q-p=2$ . Consider the elliptic curves E=E_σ: y^2 = x (x+σp)(x+σq) . (σ=\pm 1). E=E_σis also denoted as E_+ or E_- when σ= +1or $-1.Here the Mordell-Weil group and the rank of the elliptic curve E over the Gauss field K=Q(\sqrt -1) (and over the rational field Q is determined in several cases; and results on solutions of related Diophantine equations and simultaneous Pellian equations will be given. The arithmetic constructs over Q of the elliptic curve E have been studied in the last paper1, the Selmer groups are determined, results on Mordell-Weil group,…
The main result of this paper is to extend from $\Q$ to each of the nine imaginary quadratic fields of class number one a result of Serre (1987) and Mestre-Oesterlé (1989), namely that if $E$ is an elliptic curve of prime conductor then either $E$ or a $2$-, $3$- or $5$-isogenous curve has prime discriminant. For four of the nine fields, the theorem holds with no change, while for the remaining five fields the discriminant of a curve with prime conductor is either prime or the square of a prime. The proof is conditional in two ways: first that the curves are modular, so are associated to suita…
Fix an elliptic curve E over Q. An extremal prime for E is a prime p of good reduction such that the number of rational points on E modulo p is maximal or minimal in relation to the Hasse bound. Assuming that all the symmetric power L-functions associated to E are automorphic and satisfy the Generalized Riemann Hypothesis, we give the first non-trivial upper bounds for the number of such primes when E is a curve without complex multiplication. In order to obtain this bound, we use explicit equidistribution for the Sato-Tate measure as in the work of Rouse and Thorner (arXiv:1305.5283) and refi…
In this paper, we investigate extreme values of $ω(E(\mathbb{F}_p))$, where $E/\mathbb{Q}$ is an elliptic curve with complex multiplication and $ω$ is the number-of-distinct-prime-divisors function. For fixed $γ> 1$, we prove that \[ \#\{p \leq x : ω(E(\mathbb{F}_p)) > γ\log\log x\} = \frac{x}{(\log x)^{2 + γ\logγ- γ+ o(1)}}. \] The same result holds for the quantity $\#\{p \leq x : ω(E(\mathbb{F}_p)) < γ\log\log x\}$ when $0 < γ< 1$. The argument is worked out in detail for the curve $E : y^2 = x^3 - x$, and we discuss how the method can be adapted for other CM elliptic curves.
