Tate's algorithm

Last updated

In the theory of elliptic curves, Tate's algorithm takes as input an integral model of an elliptic curve E over , or more generally an algebraic number field, and a prime or prime ideal p. It returns the exponent fp of p in the conductor of E, the type of reduction at p, the local index

Contents

where is the group of -points whose reduction mod p is a non-singular point. Also, the algorithm determines whether or not the given integral model is minimal at p, and, if not, returns an integral model with integral coefficients for which the valuation at p of the discriminant is minimal.

Tate's algorithm also gives the structure of the singular fibers given by the Kodaira symbol or Néron symbol, for which, see elliptic surfaces: in turn this determines the exponent fp of the conductor E.

Tate's algorithm can be greatly simplified if the characteristic of the residue class field is not 2 or 3; in this case the type and c and f can be read off from the valuations of j and Δ (defined below).

Tate's algorithm was introduced by JohnTate  ( 1975 ) as an improvement of the description of the Néron model of an elliptic curve by Néron ( 1964 ).

Notation

Assume that all the coefficients of the equation of the curve lie in a complete discrete valuation ring R with perfect residue field K and maximal ideal generated by a prime π. The elliptic curve is given by the equation

Define:

the p-adic valuation of in , that is, exponent of in prime factorization of , or infinity if

The algorithm

.
If π3 does not divide b6 then the type is IV, c=3 if has two roots in K and 1 if it has two roots outside of K, and f=v(Δ)2.
If has 3 distinct roots modulo π then the type is I0*, f=v(Δ)4, and c is 1+(number of roots of P in K).
.
If has two distinct roots modulo π then the type is IV*, f=v(Δ)6, and c is 3 if the roots are in K, 1 otherwise.

Implementations

The algorithm is implemented for algebraic number fields in the PARI/GP computer algebra system, available through the function elllocalred.

Related Research Articles

Elliptic-curve cryptography (ECC) is an approach to public-key cryptography based on the algebraic structure of elliptic curves over finite fields. ECC allows smaller keys compared to non-EC cryptography to provide equivalent security.

<span class="mw-page-title-main">Elliptic curve</span> Algebraic curve

In mathematics, an elliptic curve is a smooth, projective, algebraic curve of genus one, on which there is a specified point O. An elliptic curve is defined over a field K and describes points in K2, the Cartesian product of K with itself. If the field's characteristic is different from 2 and 3, then the curve can be described as a plane algebraic curve which consists of solutions (x, y) for:

The Lenstra elliptic-curve factorization or the elliptic-curve factorization method (ECM) is a fast, sub-exponential running time, algorithm for integer factorization, which employs elliptic curves. For general-purpose factoring, ECM is the third-fastest known factoring method. The second-fastest is the multiple polynomial quadratic sieve, and the fastest is the general number field sieve. The Lenstra elliptic-curve factorization is named after Hendrik Lenstra.

In vector calculus, Green's theorem relates a line integral around a simple closed curve C to a double integral over the plane region D bounded by C. It is the two-dimensional special case of Stokes' theorem.

In mathematics, a Gaussian function, often simply referred to as a Gaussian, is a function of the base form

<span class="mw-page-title-main">Weierstrass elliptic function</span> Class of mathematical functions

In mathematics, the Weierstrass elliptic functions are elliptic functions that take a particularly simple form. They are named for Karl Weierstrass. This class of functions are also referred to as ℘-functions and they are usually denoted by the symbol ℘, a uniquely fancy script p. They play an important role in the theory of elliptic functions. A ℘-function together with its derivative can be used to parameterize elliptic curves and they generate the field of elliptic functions with respect to a given period lattice.

<i>j</i>-invariant

In mathematics, Felix Klein's j-invariant or j function, regarded as a function of a complex variable τ, is a modular function of weight zero for SL(2, Z) defined on the upper half-plane of complex numbers. It is the unique such function which is holomorphic away from a simple pole at the cusp such that

In mathematics, complex multiplication (CM) is the theory of elliptic curves E that have an endomorphism ring larger than the integers. Put another way, it contains the theory of elliptic functions with extra symmetries, such as are visible when the period lattice is the Gaussian integer lattice or Eisenstein integer lattice.

Ribet's theorem is part of number theory. It concerns properties of Galois representations associated with modular forms. It was proposed by Jean-Pierre Serre and proven by Ken Ribet. The proof was a significant step towards the proof of Fermat's Last Theorem (FLT). As shown by Serre and Ribet, the Taniyama–Shimura conjecture and the epsilon conjecture together imply that FLT is true.

In algebraic geometry, a semistable abelian variety is an abelian variety defined over a global or local field, which is characterized by how it reduces at the primes of the field.

In number theory and algebraic geometry, a rational point of an algebraic variety is a point whose coordinates belong to a given field. If the field is not mentioned, the field of rational numbers is generally understood. If the field is the field of real numbers, a rational point is more commonly called a real point.

In mathematics, an elliptic surface is a surface that has an elliptic fibration, in other words a proper morphism with connected fibers to an algebraic curve such that almost all fibers are smooth curves of genus 1. This is equivalent to the generic fiber being a smooth curve of genus one. This follows from proper base change.

A height function is a function that quantifies the complexity of mathematical objects. In Diophantine geometry, height functions quantify the size of solutions to Diophantine equations and are typically functions from a set of points on algebraic varieties to the real numbers.

Schoof's algorithm is an efficient algorithm to count points on elliptic curves over finite fields. The algorithm has applications in elliptic curve cryptography where it is important to know the number of points to judge the difficulty of solving the discrete logarithm problem in the group of points on an elliptic curve.

In number theory, the Néron–Tate height is a quadratic form on the Mordell–Weil group of rational points of an abelian variety defined over a global field. It is named after André Néron and John Tate.

An important aspect in the study of elliptic curves is devising effective ways of counting points on the curve. There have been several approaches to do so, and the algorithms devised have proved to be useful tools in the study of various fields such as number theory, and more recently in cryptography and Digital Signature Authentication. While in number theory they have important consequences in the solving of Diophantine equations, with respect to cryptography, they enable us to make effective use of the difficulty of the discrete logarithm problem (DLP) for the group , of elliptic curves over a finite field , where q = pk and p is a prime. The DLP, as it has come to be known, is a widely used approach to public key cryptography, and the difficulty in solving this problem determines the level of security of the cryptosystem. This article covers algorithms to count points on elliptic curves over fields of large characteristic, in particular p > 3. For curves over fields of small characteristic more efficient algorithms based on p-adic methods exist.

In mathematics, elliptic curve primality testing techniques, or elliptic curve primality proving (ECPP), are among the quickest and most widely used methods in primality proving. It is an idea put forward by Shafi Goldwasser and Joe Kilian in 1986 and turned into an algorithm by A. O. L. Atkin the same year. The algorithm was altered and improved by several collaborators subsequently, and notably by Atkin and François Morain, in 1993. The concept of using elliptic curves in factorization had been developed by H. W. Lenstra in 1985, and the implications for its use in primality testing followed quickly.

In mathematics, the Tate curve is a curve defined over the ring of formal power series with integer coefficients. Over the open subscheme where q is invertible, the Tate curve is an elliptic curve. The Tate curve can also be defined for q as an element of a complete field of norm less than 1, in which case the formal power series converge.

In mathematics, the conductor of an elliptic curve over the field of rational numbers, or more generally a local or global field, is an integral ideal analogous to the Artin conductor of a Galois representation. It is given as a product of prime ideals, together with associated exponents, which encode the ramification in the field extensions generated by the points of finite order in the group law of the elliptic curve. The primes involved in the conductor are precisely the primes of bad reduction of the curve: this is the Néron–Ogg–Shafarevich criterion.

In mathematics, the rank of an elliptic curve is the rational Mordell–Weil rank of an elliptic curve defined over the field of rational numbers. Mordell's theorem says the group of rational points on an elliptic curve has a finite basis. This means that for any elliptic curve there is a finite subset of the rational points on the curve, from which all further rational points may be generated. If the number of rational points on a curve is infinite then some point in a finite basis must have infinite order. The number of independent basis points with infinite order is the rank of the curve.

References