Supersingular genus-two curves over fields of characteristic three
Everett W. Howe
备注：
20 pages, LaTeX
发表信息：
pp. 49-69 in: Computational Arithmetic Geometry (K. E. Lauter and K. A. Ribet, eds.), Contemporary Mathematics 463, American Mathematical Society, Providence, RI, 2008
Let C be a supersingular genus-2 curve over an algebraically closed field of characteristic 3. We show that if C is not isomorphic to the curve y^2 = x^5 + 1 then up to isomorphism there are exactly 20 degree-3 maps phi from C to the elliptic curve E with j-invariant 0. We study the coarse moduli space of triples (C,E,phi), paying particular attention to questions of rationality. The results we obtain allow us to determine, for every finite field k of characteristic 3, the polynomials that occur as Weil polynomials of supersingular genus-2 curves over k.
We prove that there exists a supersingular nonsingular curve of genus $4$ in arbitrary characteristic $p$. For $p>3$ we shall prove that the desingularization of a certain fiber product over $\mathbb{P}^1$ of two supersingular elliptic curves is supersingular.
We determine what isogeny classes of supersingular abelian surfaces over a finite field k of characteristic 2 contain jacobians. We deal with this problem in a direct way by computing explicitly the zeta function of all supersingular curves of genus 2. Our procedure is constructive, so that we are able to exhibit curves with prescribed zeta function and to count the number of curves, up to k-isomorphism, leading to the same zeta function.
One of the big questions in the area of curves over finite fields concerns the distribution of the numbers of points: Which numbers occur as the number of points on a curve of genus $g$? The same question can be asked of various subclasses of curves. In this article we classify the possibilities for the number of points on genus 4 hyperelliptic supersingular curves over finite fields of order $2^n$, $n$ odd.
We describe the intersection of the Torelli locus $j(\mathcal{M}_4^{ct}) = \mathcal{J}_4$ with Newton and Ekedahl-Oort strata related to the supersingular locus in characteristic two. We show that the locus of supersingular Jacobians $\mathcal{S}_4\cap\mathcal{J}_4$ in characteristic two is pure of dimension three. One way to obtain that result uses an analysis of the data of smooth genus four curves and principally polarized abelian fourfolds defined over $\mathbb{F}_2$, and another involves studying the Ekedahl-Oort types and using the indecomposability of some $\mathrm{BT}_1$ group schemes.
We describe a method to show that certain elliptic surfaces do not admit purely inseparable multisections (equivalently, that genus one curves over function fields admit no points over the perfect closure of the base field) and use it to show that any non-Jacobian elliptic structure on a very general supersingular K3 surface has no purely inseparable multisections. We also describe specific examples of such fibrations without purely inseparable multisections. Finally, we discuss the consequences for the claimed proof of the Artin conjecture on unirationality of supersingular K3 surfaces.
This paper determines the normal forms of hyperelliptic supersingular curves of genus g over an algebraically closed field F of characteristic 2 for 0 < g< 9. We also show that every hyperelliptic supersingular curve of genus 9 over F has an equation y^2-y=x^19+c^8x^9+c^3x for some c in F_2bar. The paper determines the dimensions of the open locus of hyperelliptic supersingular curves of genus g < 10 over F_2bar.
We compute in a direct (not algorithmic) way the zeta function of all supersingular curves of genus 2 over a finite field k, with many geometric automorphisms. We display these computations in an appendix where we select a family of representatives of all these curves up to geometric isomorphism and we exhibit equations and the zeta function of all their twists. As an application we obtain a direct computation of the cryptographic exponent of the Jacobians of these curves.
We exhibit the isogeny classes of supersingular abelian threefolds over F_{2^n} containing the Jacobian of a genus 3 curve. In particular, we prove that for even n>6 there always exist a maximal and a minimal curve over F_{2^n}. All the curves can be obtained explicitly.
We show how to construct non-isotrivial families of supersingular K3 surfaces over rational curves using a relative form of the Artin-Tate isomorphism and twisted analogues of Bridgeland's results on moduli spaces of stable sheaves on elliptic surfaces. As a consequence, we show that every point of Artin invariant 10 in the Ogus space of marked supersingular K3 surfaces lies on infinitely many pairwise distinct rational curves canonically associated to elliptic structures on the underlying K3 surface.
In this short paper we prove that the following two 1-dimensional families of Artin-Schreier curves are supersingular: y^7 - y = x^5 + c.x^2 over F_7 y^5 - y = x^7 + c.x over F_5 (for some parameter c). Our method is developed upon the p-adic Dwork's method.
An abelian variety defined over an algebraically closed field k of positive characteristic is supersingular if it is isogenous to a product of supersingular elliptic curves and is superspecial if it is isomorphic to a product of supersingular elliptic curves. In this paper, the superspecial condition is generalized by defining the superspecial rank of an abelian variety, which is an invariant of its p-torsion. The main results in this paper are about the superspecial rank of supersingular abelian varieties and Jacobians of curves. For example, it turns out that the superspecial rank determines…
We introduce and study a new way to catagorize supersingular abelian varieties defined over a finite field by classifying them as fully maximal, mixed, or fully minimal. The type of $A$ depends on the normalized Weil numbers of $A$ and its twists. We analyze these types for supersingular abelian varieties and curves under conditions on the automorphism group. In particular, we present a complete analysis of these properties for supersingular elliptic curves and supersingular abelian surfaces in arbitrary characteristic, and for a one-dimensional family of supersingular curves of genus $3$ in c…
Rank-2 Drinfeld modules are a function-field analogue of elliptic curves, and the purpose of this paper is to investigate similarities and differences between rank-2 Drinfeld modules and elliptic curves in terms of supersingularity. Specifically, we provide an explicit formula of a supersingular polynomial for rank-2 Drinfeld modules and prove several basic properties. As an application, we give a numerical example of an asymptotically optimal tower of Drinfeld modular curves.
We consider algebraic affine and projective curves of Edwards \cite{E, SkOdProj} over a finite field $\text{F}_{p^n}$. Most cryptosystems of the modern cryptography \cite{SkBlock} can be naturally transform into elliptic curves \cite{Kob}. We research Edwards algebraic curves over a finite field, which at the present time is one of the most promising supports of sets of points that are used for fast group operations \cite{Bir}. New method of counting Edwards curve order over finite field was constructed. It can be applied to order of elliptic curve due to birational equivalence between ellipti…
We investigate to what extent an abelian variety over a finite field can be lifted to one in characteristic zero with small Mumford-Tate group. We prove that supersingular abelian surfaces, respectively threefolds, can be lifted to ones isogenous to a square, respectively product, of elliptic curves. On the other hand, we show that supersingular abelian threefolds cannot be lifted to one isogenous to the cube of an elliptic curve over the Witt vectors.
Let $E$ be an elliptic curve over $\mathbb Q$ and let $p\geq5$ be a prime of good supersingular reduction for $E$. Let $K$ be an imaginary quadratic field satisfying a modified "Heegner hypothesis" in which $p$ splits, write $K_\infty$ for the anticyclotomic $\mathbb Z_p$-extension of $K$ and let $Λ$ denote the Iwasawa algebra of $K_\infty/K$. By extending to the supersingular case the $Λ$-adic Kolyvagin method originally developed by Bertolini in the ordinary setting, we prove that Kobayashi's plus/minus $p$-primary Selmer groups of $E$ over $K_\infty$ have corank $1$ over $Λ$. As an applicat…
We present a deterministic and explicit algorithm to compute the endomorphism rings of supersingular elliptic curves. As an example we compute the endomorphism rings of all supersingular elliptic curves defined over characteristic p=29,...,97.
Let p>3 be a prime and let E, E' be supersingular elliptic curves over F_p. We want to construct an isogeny phi: E --> E'. The currently fastest algorithm for finding isogenies between supersingular elliptic curves solves this problem by performing a "meet-in-the-middle" breadth-first search in the full supersingular 2-isogeny graph over F_{p^2}. In this paper we consider the structure of the isogeny graph of supersingular elliptic curves over F_p. We give an algorithm to construct isogenies between such supersingular elliptic curves that works faster than the usual algorithm. We then discuss …
In late 2012 and early 2013 the discrete logarithm problem (DLP) in finite fields of small characteristic underwent a dramatic series of breakthroughs, culminating in a heuristic quasi-polynomial time algorithm, due to Barbulescu, Gaudry, Joux and Thomé. Using these developments, Adj, Menezes, Oliveira and Rodríguez-Henríquez analysed the concrete security of the DLP, as it arises from pairings on (the Jacobians of) various genus one and two supersingular curves in the literature, which were originally thought to be $128$-bit secure. In particular, they suggested that the new algorithms have n…
In this paper, we prove the Iwasawa main conjecture for elliptic curves at an odd supersingular prime p. Some consequences are the p-parts of the leading term formulas in the Birch and Swinnerton-Dyer conjectures for analytic rank 0 or 1.
We study the supersingular curves on Picard modular surfaces modulo a prime $p$ which is inert in the underlying quadratic imaginary field. We analyze the automorphic vector bundles in characteristic $p$, and as an application derive a formula relating the number of irreducible components in the supersingular locus to the second Chern class of the surface.
We describe the neighborhood of the vertex $[E_0]$ (resp. $[E_{1728}]$) in the $\ell$-isogeny graph $\mathcal{G}_\ell(\mathbb{F}_{p^2}, -2p)$ of supersingular elliptic curves over the finite field $\mathbb{F}_{p^2}$ when $p>3\ell^2$ (resp. $p>4\ell^2$) with $E_0: y^2=x^3+1$ (resp. $E_{1728}: y^2=x^3+x$) supersingular.
This article has three goals. First, we generalize the result of Deuring and Serre on the characterization of supersingular locus of modular curves to all Shimura varieties given by totally indefinite quaternion algebras over totally real number fields. Second, we generalize the result of Ribet on arithmetic level raising to such Shimura varieties in the inert case. Third, as an application to number theory, we use the previous results to study the Selmer group of certain triple product motive of an elliptic curve, in the context of the Bloch--Kato conjecture.
We study when Hurwitz curves are supersingular. Specifically, we show that the curve $H_{n,\ell}: X^nY^\ell + Y^nZ^\ell + Z^nX^\ell = 0$, with $n$ and $\ell$ relatively prime, is supersingular over the finite field $\mathbb{F}_{p}$ if and only if there exists an integer $i$ such that $p^i \equiv -1 \bmod (n^2 - n\ell + \ell^2)$. If this holds, we prove that it is also true that the curve is maximal over $\mathbb{F}_{p^{2i}}$. Further, we provide a complete table of supersingular Hurwitz curves of genus less than 5 for characteristic less than 37.
For small odd primes $p$, we prove that most of the rational points on the modular curve $X_0(p)/w_p$ parametrize pairs of elliptic curves having infinitely many supersingular primes. This result extends the class of elliptic curves for which the infinitude of supersingular primes is known. We give concrete examples illustrating how these techniques can be explicitly used to construct supersingular primes for such elliptic curves. Finally, we discuss generalizations to points defined over larger number fields and indicate the types of obstructions that arise for higher level modular curves.
Given an elliptic curve E over a field of positive characteristic p, we consider how to efficiently determine whether E is ordinary or supersingular. We analyze the complexity of several existing algorithms and then present a new approach that exploits structural differences between ordinary and supersingular isogeny graphs. This yields a simple algorithm that, given E and a suitable non-residue in F_p^2, determines the supersingularity of E in O(n^3 log^2 n) time and O(n) space, where n=O(log p). Both these complexity bounds are significant improvements over existing methods, as we demonstrat…
Let $A/\overline{\mathbb{F}}\_p$ and $A'/\overline{\mathbb{F}}\_p$ be supersingular principally polarized abelian varieties of dimension $g>1$. For any prime $\ell \ne p$, we give an algorithm that finds a path $ϕ\colon A \rightarrow A'$ in the $(\ell, \dots , \ell)$-isogeny graph in $\widetilde{O}(p^{g-1})$ group operations on a classical computer, and $\widetilde{O}(\sqrt{p^{g-1}})$ calls to the Grover oracle on a quantum computer. The idea is to find paths from $A$ and $A'$ to nodes that correspond to products of lower dimensional abelian varieties, and to recurse down in dimension until an…
For a prime number $p$ we study the zeros modulo $p$ of divisor polynomials of rational elliptic curves $E$ of conductor $p$. Ono made the observation that these zeros of are often $j$-invariants of supersingular elliptic curves over $\overline{\mathbb{F}_p}$. We show that these supersingular zeros are in bijection with zeros modulo $p$ of an associated quaternionic modular form $v_E$. This allows us to prove that if the root number of $E$ is $-1$ then all supersingular $j$-invariants of elliptic curves defined over $\mathbb{F}_{p}$ are zeros of the corresponding divisor polynomial. If the roo…
We study generalisations to totally real fields of methods originating with Wiles and Taylor-Wiles. In view of the results of Skinner-Wiles on elliptic curves with ordinary reduction, we focus here on the case of supersingular reduction. Combining these, we then obtain some partial results on the modularity problem for semistable elliptic curves, and end by giving some applications of our results, for example proving the modularity of all semistable elliptic curves over $\mathbb{Q}(\sqrt{2})$.
This is a translation of a research announcement by Anas G. Nasybullin from 1976, in which he states formulas for the p-primary part of the Tate-Shafarevich group of an elliptic curve in cyclotomic $\Z_p$-extensions of number fields.
We generalize a theorem of Ogg on supersingular $j$-invariants to supersingular elliptic curves with level. Ogg observed that the level one case yields a characterization of the primes dividing the order of the monster. We show that the corresponding analyses for higher levels give analogous characterizations of the primes dividing the orders of other sporadic simple groups (e.g., baby monster, Fischer's largest group). This situates Ogg's theorem in a broader setting. More generally, we characterize, in terms of supersingular elliptic curves with level, the primes arising as orders of Fricke …
Bleher et al. began studying higher codimension Iwasawa theory for classical Iwasawa modules. Subsequently, Lei and Palvannan studied an analogue for elliptic curves with supersingular reduction. In this paper, we obtain a vast generalization of the work of Lei and Palvannan. A key technique is an approach to the work of Bleher et al. that the author previously proposed. For this purpose, we also study the structure of $\pm$-norm subgroups and duality properties of multiply-signed Selmer groups.
In 1987, B. Perrin-Riou formulated a Heegner point main conjecture for elliptic curves at primes of ordinary reduction. In this paper, we formulate an analogue of Perrin-Riou's main conjecture for supersingular primes. We then prove this conjecture under mild hypotheses, and deduce from this result a $Λ$-adic extension of Kobayashi's $p$-adic Gross-Zagier formula, new cases of B.-D. Kim's doubly-signed main conjectures, and a strengthened version of Skinner's converse to the Gross-Zagier-Kolyvagin theorem for supersingular primes.
For a fixed prime p, we consider the (finite) set of supersingular elliptic curves over $\bar{\mathbb{F}}$. Hecke operators act on this set. We compute the asymptotic frequence with which a given supersingular elliptic curve visits another under this action.
Assuming GRH, we present an algorithm which inputs a prime $p$ and outputs the set of fundamental discriminants $D<0$ such that the reduction map modulo a prime above $p$ from elliptic curves with CM by $\order_{D}$ to supersingular elliptic curves in characteristic $p$. In the algorithm we first determine an explicit constant $D_p$ so that $|D|> D_p$ implies that the map is necessarily surjective and then we compute explicitly the cases $|D|<D_p$.
A recent paper of Shekhar compares the ranks of elliptic curves $E_1$ and $E_2$ for which there is an isomorphism $E_1[p] \simeq E_2[p]$ as $\mathrm{Gal}(\bar{\mathbf{Q}}/\mathbf{Q})$-modules, where $p$ is a prime of good ordinary reduction for both curves. In this paper we prove an analogous result in the case where $p$ is a prime of good supersingular reduction.
At a prime of ordinary reduction, the Iwasawa ``main conjecture'' for elliptic curves relates a Selmer group to a $p$-adic $L$-function. In the supersingular case, the statement of the main conjecture is more complicated as neither the Selmer group nor the $p$-adic $L$-function is well-behaved. Recently Kobayashi discovered an equivalent formulation of the main conjecture at supersingular primes that is similar in structure to the ordinary case. Namely, Kobayashi's conjecture relates modified Selmer groups, which he defined, with modified $p$-adic $L$-functions defined by the first author. In …
We study the arithmetic properties of Weierstrass points on the modular curves $X_0^+(p)$ for primes $p$. In particular, we obtain a relationship between the Weierstrass points on $X_0^+(p)$ and the $j$-invariants of supersingular elliptic curves in characteristic $p$.
In this paper, we make a study of the Iwasawa theory of an elliptic curve at a supersingular prime p along an arbitrary Z_p-extension of a number field K in the case when p splits completely in K. Generalizing work of Kobayashi and Perrin-Riou, we define restricted Selmer groups and λ^\pm, μ^\pm-invariants; we then derive asymptotic formulas describing the growth of the Selmer group in terms of these invariants. To be able to work with non-cyclotomic Z_p-extensions, a new local result is proven that gives a complete description of the formal group of an elliptic curve at a supersingular prime …
In this article, we provide a relation between the $μ$-invariants of the dual plus and minus Selmer groups for supersingular elliptic curves when we ascend from the cyclotomic $\mathbb{Z}_p$-extension to a $\mathbb{Z}_p^2$-extension over an imaginary quadratic field. Furthermore we show that the supersingular $\mathfrak{M}_H(G)$-conjecture is equivalent to the fact that the $μ$-invariants doesn't change as we go up the tower.
Let $p\geq 5$ be a prime number. We generalize the results of E. de Shalit about supersingular $j$-invariants in characteristic $p$. We consider supersingular elliptic curves with a basis of $2$-torsion over $\overline{\mathbf{F}}_p$, or equivalently supersingular Legendre $λ$-invariants. Let $F_p(X,Y) \in \mathbf{Z}[X,Y]$ be the $p$-th modular polynomial for $λ$-invariants. A simple generalization of Kronecker's classical congruence shows that $R(X):=\frac{F_p(X,X^{p})}{p}$ is in $\mathbf{Z}[X]$. We give a formula for $R(λ)$ if $λ$ is a supersingular. This formula is related to the Manin--Dri…
We revisit theoretical background on OSIDH, that is an isogeny-based key-exchange protocol proposed by Colò and Kohel at NutMiC 2019. We give a proof of a fundamental theorem for OSIDH. The theorem was stated by Colò and Kohel without proof. Furthermore, we consider parameters of OSIDH, give a sufficient condition on the parameters that the protocol works, and estimate the size of the parameters for a certain security level.
