Let E be an elliptic curve with complex multiplication by R, where R is an order of discriminant D<-4 of an imaginary quadratic field K . If a prime number p is decomposed completely in the ring class field associated with R, then E has good reduction at a prime ideal P of K dividing p and there exist positive integers u and v such that 4p=u^2-Dv^2. It is well known that square of the trace a_P of Frobenius endomorphism of the reduction of E modulo P is equal to u^2. We determine whether a_P=u or a_P=-u in the case the class number of R is 2 or 3 and D is divided by 3,4 or 5. This article is a revised version of the authors' preprint DMIS-RR-02-5,2002.
Assuming the Mumford-Tate conjecture, we show that the center of the endomorphism ring of an abelian variety defined over a number field can be recovered from an appropriate intersection of the fields obtained from its Frobenius endomorphisms. We then apply this result to exhibit a practical algorithm to compute this center.
Let $\mathbb{F}_q[T]$ be the polynomial ring over a finite field $\mathbb{F}_q$. We study the endomorphism rings of Drinfeld $\mathbb{F}_q[T]$-modules of arbitrary rank over finite fields. We compare the endomorphism rings to their subrings generated by the Frobenius endomorphism and deduce from this a refinement of a reciprocity law for division fields of Drinfeld modules proved in our earlier paper. We then use these results to give an efficient algorithm for computing the endomorphism rings and discuss some interesting examples produced by our algorithm.
We give a global description of the Frobenius elements in the division fields of Drinfeld modules of rank $2$. We apply this description to derive a criterion for the splitting modulo primes of a class of non-solvable polynomials, and to study the frequency with which the reductions of Drinfeld modules have small endomorphism rings. We also generalize some of these results to higher rank Drinfeld modules and prove CM-lifting theorems for Drinfeld modules.
In this paper we discuss multiplicative relations between eigenvalues of Frobenius endomorphism of abelian varieties of small dimension over finite fields.
In this paper we introduce the concept of $\mathit{integral}$ $\mathit{Frobenius}$ to formulate an integral analogue of the classical compatibility condition linking the collection of rational Tate modules $V_λ(A)$ arising from abelian varieties over number fields with real multiplication. Our main result gives a recipe for constructing an integral Frobenius when the real multiplication field has class number one. By exploiting algorithms already existing in the literature, we investigate this construction for three modular abelian surfaces over $\mathbf{Q}$.
We give a new characterisation of elliptic curves of Shimura type in terms commuting families of Frobenius lifts and also strengthen an old principal ideal theorem for ray class fields. These two results combined yield the existence of global minimal models for elliptic curves of Shimura type, generalising a result of Gross. Along the way we also prove a handful of small but new results regarding elliptic curves with complex multiplication.
This paper is devoted to abelian varieties arising from generalized Legendre curves. In particular, we consider their corresponding Galois representations, periods, and endomorphism algebras. For certain one parameter families of 2-dimensional abelian varieties of this kind, we determine when the endomorphism algebra of each fiber defined over the algebraic closure of $\Bbb Q$ contains a quaternion algebra.
An isogeny graph is a graph whose vertices are principally polarized abelian varieties and whose edges are isogenies between these varieties. In his thesis, Kohel described the structure of isogeny graphs for elliptic curves and showed that one may compute the endomorphism ring of an elliptic curve defined over a finite field by using a depth first search algorithm in the graph. In dimension 2, the structure of isogeny graphs is less understood and existing algorithms for computing endomorphism rings are very expensive. Our setting considers genus 2 jacobians with complex multiplication, with …
We prove the simultaneous multiplication formulas for Apostol-Bernoulli polynomials and generalized Frobenius-Euler polynomials. These formulas contain Dedekind-Rademacher sums, Apostol-Dedekind sums and Fourier-Dedekind sums.
Let $E$ be an elliptic curve over $\Q$. It is well known that the ring of endomorphisms of $E_p$, the reduction of $E$ modulo a prime $p$ of ordinary reduction, is an order of the quadratic imaginary field $Q(π_p)$ generated by the Frobenius element $π_p$. When the curve has complex multiplication (CM), this is always a fixed field as the prime varies. However, when the curve has no CM, very little is known, not only about the order, but about the fields that might appear as algebra of endomorphisms varying the prime. The ring of endomorphisms is obviously related with the arithmetic of $a_p^2…
Consider the jacobian of a hyperelliptic genus two curve defined over a finite field. Under certain restrictions on the endomorphism ring of the jacobian we give an explicit description all non-degenerate, bilinear, anti-symmetric and Galois-invariant pairings on the jacobian. From this description it follows that no such pairing can be computed more efficiently than the Weil pairing. To establish this result, we need an explicit description of the representation of the Frobenius endomorphism on the l-torsion subgroup of the jacobian. This description is given. In particular, we show that if t…
We present here explicit relations between the traces of Frobenius endomorphisms of certain families of elliptic curves and special values of ${_{2}}F_1$-hypergeometric functions over $\mathbb{F}_q$ for $q \equiv 1 (\text{mod} 6)$ and $q \equiv 1 (\text{mod} 4)$.
We study the algbraic dynamics for endomorphisms of projective spaces with coefficients in a p-adic field whose reduction in positive characteritic is the Frobenius. In particular, we prove a version of the dynamical Manin-Mumford conjecture and the dynamical Mordell-Lang conjecture for the coherent backward orbits for such endomorphisms. We also give a new proof of a dynamical version of the Tate-Voloch conjecture in this case. Our method is based on the theory of perfectoid spaces introduced by P. Scholze. In the appendix, we prove that under some technical condition on the field of definiti…
We present here a formula for expressing the trace of the Frobenius endomorphism of an elliptic curve $E$ over $\mathbb{F}_q$ satisfying $j(E)\neq 0,1728$ and $q\equiv 1 \pmod{12}$ in terms of special values of Gaussian hypergeometric series. This paper uses methods introduced in Fuselier's work for one parameter families of curves to express the trace of Frobenius of $E$ as a function of its $j$-invariant and discriminant instead of a parameter, which are more intrinsic characteristics of the curve.
This paper investigates the fields of definition up to isogeny of the abelian varieties called building blocks. A result of Ribet characterizes the fields of definition of these varieties together with their endomorphisms, in terms of a Galois cohomology class canonically attached to them. However, when the building blocks have quaternionic multiplication, then the field of definition of the varieties can be strictly smaller than the field of definition of their endomorphisms. What we do is to give a characterization of the fields of definition of the varieties in this case (also in terms of t…
We consider the problem of checking whether an elliptic curve defined over a given number field has complex multiplication. We study two polynomial time algorithms for this problem, one randomized and the other deterministic. The randomized algorithm can be adapted to yield the discriminant of the endomorphism ring of the curve.
Let $E$ be an elliptic curve, $\mathcal{K}_1$ its Kummer curve $E/\{\pm1\}$, $E^2$ its square product, and $\mathcal{K}_2$ the split Kummer surface $E^2/\{\pm1\}$. The addition law on $E^2$ gives a large endomorphism ring, which induce endomorphisms of $\mathcal{K}_2$. With a view to the practical applications to scalar multiplication on $\mathcal{K}_1$, we study the explicit arithmetic of $\mathcal{K}_2$.
An abelian surface A over a field K has potential quaternionic multiplication if the ring End_\bar K (A) of geometric endomorphisms of A is an order in an indefinite rational division quaternion algebra. In this brief note, we study the possible structures of the ring of endomorphisms of these surfaces and we provide explicit examples of Jacobians of curves of genus two which show that our result is sharp.
We present an accelerated Schoof-type point-counting algorithm for curves of genus 2 equipped with an efficiently computable real multiplication endomorphism. Our new algorithm reduces the complexity of genus 2 point counting over a finite field (\F_{q}) of large characteristic from (\widetilde{O}(\log^8 q)) to (\widetilde{O}(\log^5 q)). Using our algorithm we compute a 256-bit prime-order Jacobian, suitable for cryptographic applications, and also the order of a 1024-bit Jacobian.
An abelian variety over a number field is called L-abelian variety if, for any element of the absolute Galois group of a number field L, the conjugated abelian variety is isogenous to the given one by means of an isogeny that preserves the Galois action on the endomorphism rings. We can think of them as generalizations of abelian varieties defined over L with endomorphisms also defined over L. In the one dimensional case, an elliptic curve defined over L gives rise to a Galois representation provided by the Galois action on its Tate module. This classical Galois representation has been a centr…
We present algorithms which, given a genus 2 curve $C$ defined over a finite field and a quartic CM field $K$, determine whether the endomorphism ring of the Jacobian $J$ of $C$ is the full ring of integers in $K$. In particular, we present probabilistic algorithms for computing the field of definition of, and the action of Frobenius on, the subgroups $J[\ell^d]$ for prime powers $\ell^d$. We use these algorithms to create the first implementation of Eisenträger and Lauter's algorithm for computing Igusa class polynomials via the Chinese Remainder Theorem \cite{el}, and we demonstrate the algo…
We prove that the jacobian of a hyperelliptic curve y^2=f(x) has no nontrivial endomorphisms over an algebraic closure of the ground field of characteristic zero if the Galois group of the polynomial f is ``very big''.
Let $f$ be a continuous ring endomorphism of $\mathbf{Z}_p[[x]]/\mathbf{Z}_p$ of degree $p.$ We prove that if $f$ acts on the tangent space at $0$ by a uniformizer and commutes with an automorphism of infinite order, then it is necessarily an endomorphism of a formal group over $\mathbf{Z}_p.$ The proof relies on finding a stable embedding of $\mathbf{Z}_p[[x]]$ in Fontaine's crystalline period ring with the property that $f$ appears in the monoid of endomorphisms generated by the Galois group of $\mathbf{Q}_p$ and crystalline Frobenius. Our result verifies, over $\mathbf{Z}_p,$ the height one…
We give an efficient, deterministic algorithm to decide if two abelian varieties over a number field are isogenous. From this, we derive an algorithm to compute the endomorphism ring of an elliptic curve over a number field.
Let $\E/\Q$ be a fixed elliptic curve over $\Q$ which does not have complex multiplication. Assuming the Generalized Riemann Hypothesis, A. C. Cojocaru and W. Duke have obtained an asymptotic formula for the number of primes $p\le x$ such that the reduction of $\E$ modulo p has a trivial Tate-Shafarevich group. Recent results of A. C. Cojocaru and C. David lead to a better error term. We introduce a new argument in the scheme of the proof which gives further improvement.
We show that a two dimensional $\ell $-adic representation of the absolute Galois group of a number field which is locally potentially equivalent to a $GL(2)$-$\ell$-adic representation $ρ$ at a set of places of $K$ of positive upper density is potentially equivalent to $ρ$. For an elliptic curver \( E \) defined over a number field \( K \) and a finite place \( v \) of \( K \) of good reduction for \( E \), let \( F(E,v) \) denote the Frobenius field of \( E \) at \( v \), given by the splitting field of the characteristic polynomial of the Frobenius automorphism at \( v \) acting on the Tate…
The study of Frobenius endomorphism provides numerous information about its corresponding Abelian variety. To understand the action of the Frobenius endomorphism, one may be interested in its eigenvalues. According to Weil's third conjecture ("Riemann hypothesis over finite fields"), they all have absolute value less than or equal to $2g\sqrt{p}$. Thus, the eigenvalues of the Frobenius endomorphism all belong to the same compact subset of the complex plane, and are roots of the same monic polynomial with integer coefficients (the characteristic polynomial of the Frobenius endomorphism). Such c…
We describe an algorithm, based on the properties of the characteristic polynomials of Frobenius, to compute $\operatorname{End}_{\overline{K}}(A)$ when $A$ is the Jacobian of a nice genus-2 curve over a number field $K$. We use this algorithm to confirm that the description of the structure of the geometric endomorphism ring of $\operatorname{Jac}(C)$ given in the LMFDB ($L$-functions and modular forms database) is correct for all the genus 2 curves $C$ currently listed in it. We also discuss the determination of the field of definition of the endomorphisms in some special cases.
Using Galois cohomology, Schmoyer characterizes cryptographic non-trivial self-pairings of the $\ell$-Tate pairing in terms of the action of the Frobenius on the $\ell$-torsion of the Jacobian of a genus 2 curve. We apply similar techniques to study the non-degeneracy of the $\ell$-Tate pairing restrained to subgroups of the $\ell$-torsion which are maximal isotropic with respect to the Weil pairing. First, we deduce a criterion to verify whether the jacobian of a genus 2 curve has maximal endomorphism ring. Secondly, we derive a method to construct horizontal $(\ell,\ell)$-isogenies starting …
In this paper we propose conjectures that assert that, the sequence of Frobenius angles of a given elliptic curve over $\mathbf{Q}$ without complex multiplication is pseudorandom, in other words that the Frobenius angles are statistically independently distributed with respect to the Sato-Tate measure. Numerical evidences are presented to support the conjectures.
We prove that the abelian $K$-surfaces whose endomorphism algebra is a quaternion algebra are parametrized, up to isogeny, by the $K$-rational points of the quotient of certain Shimura curves by the group of their Atkin-Lehner involutions.
We consider principally polarized abelian varieties with quaternionic multiplication over number fields and we study the field of moduli of their endomorphisms in relation to the set of rational points on suitable Shimura varieties.
Let $F$ be a finite field of order $q$ and characteristic $p$. Let $\mathbb{Z}_F=F[t]$, $\mathbb{Q}_F=F(t)$, $\mathbb{R}_F=F((1/t))$ equipped with the discrete valuation for which $1/t$ is a uniformizer, and let $\mathbb{T}_F=\mathbb{R}_F/\mathbb{Z}_F$ which has the structure of a compact abelian group. Let $d$ be a positive integer and let $A$ be a $d\times d$-matrix with entries in $\mathbb{Z}_F$ and non-zero determinant. The multiplication-by-$A$ map is a surjective endomorphism on $\mathbb{T}_F^d$. First, we compute the entropy of this endomorphism; the result and arguments are analogous t…
The first step in elliptic curve scalar multiplication algorithms based on scalar decompositions using efficient endomorphisms-including Gallant-Lambert-Vanstone (GLV) and Galbraith-Lin-Scott (GLS) multiplication, as well as higher-dimensional and higher-genus constructions-is to produce a short basis of a certain integer lattice involving the eigenvalues of the endomorphisms. The shorter the basis vectors, the shorter the decomposed scalar coefficients, and the faster the resulting scalar multiplication. Typically, knowledge of the eigenvalues allows us to write down a long basis, which we th…
In this paper we extend a previous investigation by us regarding an iterative construction of irreducible polynomials over finite fields of odd characteristic. In particular, we show how it is possible to iteratively construct irreducible polynomials by means of two families of transforms, which we call the $Q_k$ and $\hat{Q}_k$-transforms, related to certain degree two isogenies over elliptic curves, which split the multiplication-by-$2$ map.
Let $ψ: A \to F\{τ\}$ be a Drinfeld $A$-module over $F$ of rank 2 and without complex multiplication, where $A = {\mathbb{F}}_q[T]$, $F = {\mathbb{F}}_q(T)$, and $q$ is an odd prime power. For a prime $\mathfrak{p} = p A$ of $A$ of good reduction for $ψ$ and with residue field ${\mathbb{F}}_{\mathfrak{p}}$, we study the growth of the absolute value $|Δ_{\mathfrak{p}}|$ of the discriminant of the ${\mathbb{F}}_{\mathfrak{p}}$-endomorphism ring of the reduction of $ψ$ modulo $\mathfrak{p}$. We prove that for all $\mathfrak{p}$, $|Δ_{\mathfrak{p}}|$ grows with $|p|$. Moreover, we prove that for a…
We prove that in odd characteristic the jacobian of a hyperelliptic curve $y^2=f(x)$ has no nontrivial endomorphisms over an algebraic closure of the ground field if the Galois group of the polynomial $f$ of even degree is ``very big". The case of characteristic zero was previously treated by the author (Math. Res. Letters 7(2000), 123--132).
Elliptic curves have a well-known and explicit theory for the construction and application of endomorphisms, which can be applied to improve performance in scalar multiplication. Recent work has extended these techniques to hyperelliptic Jacobians, but one obstruction is the lack of explicit models of curves together with an efficiently computable endomorphism. In the case of hyperelliptic curves there are limited examples, most methods focusing on special CM curves or curves defined over a small field. In this article we describe three infinite families of curves which admit an efficiently co…
The GLV method of Gallant, Lambert and Vanstone (CRYPTO 2001) computes any multiple $kP$ of a point $P$ of prime order $n$ lying on an elliptic curve with a low-degree endomorphism $Φ$ (called GLV curve) over $\mathbb{F}_p$ as [kP = k_1P + k_2Φ(P), \quad\text{with} \max{|k_1|,|k_2|}\leq C_1\sqrt n] for some explicit constant $C_1>0$. Recently, Galbraith, Lin and Scott (EUROCRYPT 2009) extended this method to all curves over $\mathbb{F}_{p^2}$ which are twists of curves defined over $\mathbb{F}_p$. We show in this work how to merge the two approaches in order to get, for twists of any GLV curve…
We study the distribution of the Frobenius traces on $K3$ surfaces. We compare experimental data with the predictions made by the Sato--Tate conjecture, i.e. with the theoretical distributions derived from the theory of Lie groups assuming equidistribution. Our sample consists of generic $K3$ surfaces, as well as of such having real and complex multiplication. Each time, the theoretical density and the histogram obtained by counting points match in the range of visible accuracy. Thus, we report evidence for the Sato-Tate conjecture for the surfaces considered.
We give a new algorithm for constructing Picard curves over a finite field with a given endomorphism ring. This has important applications in cryptography since curves of genus 3 allow for smaller key sizes than elliptic curves. For a sextic CM-field $K$ containing the cube roots of unity, we define and compute certain class polynomials modulo small primes and then use the Chinese Remainder Theorem to construct the class polynomials over the rationals. We also give some examples.
In this paper, we consider the hyperelliptic analogue of the Frobenius endomorphism generator and show that it produces sequences with large linear complexity on the Jacobian of genus 2 curves.
