Arakelov Geometry

January 14, 2018January 14, 2018 / Anton Hilado / 1 Comment

In many posts on this blog, such as Basics of Arithmetic Geometry and Elliptic Curves, we have discussed how the geometry of shapes described by polynomial equations is closely related to number theory. This is especially true when it comes to the thousands-of-years-old subject of Diophantine equations, polynomial equations whose coefficients are whole numbers, and whose solutions of interest are also whole numbers (or, equivalently, rational numbers, since we can multiply or divide both sides of the polynomial equation by a whole number). We might therefore expect that the more modern and more sophisticated tools of algebraic geometry (which is a subject that started out as just the geometry of shapes described by polynomial equations) might be extremely useful in answering questions and problems in number theory.

One of the tools we can use for this purpose is the concept of an arithmetic scheme, which makes use of the ideas we discussed in Grothendieck’s Relative Point of View. An arithmetic variety is defined to be a a regular scheme that is projective and flat over the scheme $\text{Spec}(\mathbb{Z})$ . An example of this is the scheme $\text{Spec}(\mathbb{Z}[x])$ , which is two-dimensional, and hence also referred to as an arithmetic surface.

We recall that the points of an affine scheme $\text{Spec}(R)$ , for some ring $R$ , are given by the prime ideals of $R$ . Therefore the scheme $\text{Spec}(\mathbb{Z})$ has one point for every prime ideal – one “closed point” for every prime number $p$ , and a “generic point” given by the prime ideal $(0)$ .

However, we also recall from Adeles and Ideles the concept of the “infinite primes” – which correspond to the archimedean valuations of a number field, just as the finite primes (primes in the classical sense) correspond to the nonarchimedean valuations. It is important to consider the infinite primes when dealing with questions and problems in number theory, and therefore we need to modify some aspects of algebraic geometry if we are to use it in helping us with number theory.

We now go back to arithmetic schemes, taking into consideration the infinite prime. Since we are dealing with the ordinary integers $\mathbb{Z}$ , there is only one infinite prime, corresponding to the embedding of the rational numbers into the real numbers. More generally we can also consider an arithmetic variety over $\text{Spec}(\mathcal{O_{K}})$ instead of $\text{Spec}(\mathbb{Z})$ , where $\mathcal{O}_{K}$ is the ring of integers of a number field $K$ . In this case we may have several infinite primes, corresponding to the embediings of $K$ into the real and complex numbers. In this post, however, we will consider only $\text{Spec}(\mathbb{Z})$ and one infinite prime.

How do we describe an arithmetic scheme when the scheme $\text{Spec}(\mathbb{Z})$ has been “compactified” with the infinite prime? Let us look at the fibers of the arithmetic scheme. The fiber of an arithmetic scheme $X$ at a finite prime $p$ is given by the scheme defined by the same homogeneous polynomials as $X$ , but with the coefficients taken modulo $p$ , so that they are elements of the finite field $\mathbb{F}_{p}$ . The fiber over the generic point $(0)$ is given by taking the tensor product of the coordinate ring of $X$ with the rational numbers. But how should we describe the fiber over the infinite prime?

It was the idea of the mathematician Suren Arakelov that the fiber over the infinite prime should be given by a complex variety – in the case of an arithmetic surface, which Arakelov originally considered, the fiber should be given by a Riemann surface. The ultimate goal of all this machinery, at least when Arakelov was constructing it, was to prove the famous Mordell conjecture, which states that the number of rational solutions to a curve of genus greater than or equal to $2$ was finite. These rational solutions correspond to sections of the arithmetic surface, and Arakelov’s strategy was to “bound” the number of these solutions by constructing a “height function” using intersection theory (see Algebraic Cycles and Intersection Theory) on the arithmetic surface. Arakelov unfortunately was not able to carry out his proof. He had only a very short career, being forced to retire after being diagnosed with schizophrenia. The Mordell conjecture was eventually proved by another mathematician, Gerd Faltings, who continues to develop Arakelov’s ideas.

Since we will be dealing with a complex variety, we must first discuss a little bit of differential geometry, in particular complex geometry (see An Intuitive Introduction to String Theory and (Homological) Mirror Symmetry). Let $X$ be a smooth projective complex equidimensional variety with complex dimension $d$ . The space $A^{n}(X)$ of differential forms (see Differential Forms) of degree $n$ on $X$ has the following decomposition:

$\displaystyle A^{n}(X)=\bigoplus_{p+q=n}A^{p,q}(X)$

We say that $A^{p,q}(X)$ is the vector space of complex-valued differential forms of type $(p,q)$ . We have differential operators

$\displaystyle \partial:A^{p,q}(X)\rightarrow A^{p+1,q}(X)$

$\displaystyle \bar{\partial}:A^{p,q}(X)\rightarrow A^{p,q+1}(X)$ .

$\displaystyle d=\partial+\bar{\partial}:A^{n}\rightarrow A^{n+1}$ .

We let $D_{p,q}(X)$ be the dual to the vector space $A^{p,q}(X)$ , and we write $D^{p,q}(X)$ to denote $D_{d-p,d-q}(X)$ . We refer to an element of $D^{p,q}$ as a current of type $(p,q)$ . We have an inclusion map

$\displaystyle A^{p,q}\rightarrow D^{p,q}$

mapping a differential form $\omega$ of type $(p,q)$ to a current $[\omega]$ of type $(p,q)$ , given by

$\displaystyle [\omega](\alpha)=\int_{X}\omega\wedge\alpha$

for all $\alpha\in A^{d-p,d-q}(X)$ .

The differential operators $\partial$ , $\bar{\partial}$ , $d$ , and induce maps $\partial'$ , $\bar{\partial}'$ , and $d'$ on $D^{p,q}$ . We define the maps $\partial$ , $\bar{\partial}$ , and $d$ on $D^{p,q}$ by

$\displaystyle \partial=(-1)^{n+1}\partial'$

$\displaystyle \bar{\partial}=(-1)^{n+1}\bar{\partial}'$

$\displaystyle d=(-1)^{n+1}d'$

We also define

$\displaystyle d^{c}=(4\pi i)^{-1}(\partial-\bar{\partial})$ .

For every irreducible analytic subvariety $i:Y\hookrightarrow X$ of codimension $p$ , we define the current $\delta_{Y}\in D^{p,p}$ by

$\displaystyle \delta_{Y}(\alpha):=\int_{Y^{ns}}i^{*}\alpha$

for all $\alpha\in A^{d-p,d-q}$ , where $Y^{ns}$ is the nonsingular locus of $Y$ .

A Green current $g$ for a codimension $p$ analytic subvariety $Y$ is defined to be an element of $D^{p-1,p-1}(X)$ such that

$\displaystyle dd^{c}g+\delta_{Y}=[\omega]$

for some $\omega\in A^{p,p}(X)$ .

Let $\tilde{X}$ be the resolution of singularities of $X$ . This means that there exists a proper map $\pi: \tilde{X}\rightarrow X$ such that $\tilde X$ is smooth, $E:=\pi^{-1}(Y)$ is a divisor with normal crossings (this means that each irreducible component of $E$ is nonsingular, and whenever they meet at a point their local equations are linearly independent) whenever $Y\subset X$ contains the singular locus of $X$ , and $\pi: \tilde{X}\setminus E\rightarrow X\setminus Y$ is an isomorphism.

A smooth form $\alpha$ on $X\setminus Y$ is said to be of logarithmic type along $Y$ if there exists a projective map $\pi:\tilde{X}\rightarrow X$ such that $E:= \pi^{-1}(Y)$ is a divisor with normal crossings, $\pi:\tilde{X}\setminus E\rightarrow X\setminus Y$ is smooth, and $\alpha$ is the direct image by $\pi$ of a form $\beta$ on $X\setminus E$ satisfying the following equation

$\displaystyle \beta=\sum_{i=1}^{k}\alpha_{i}\text{log}|z_{i}|^{2}+\gamma$

where $z_{1}z_{2} ... z_{k}=0$ is a local equation of $E$ for every $x$ in $X$ , $\alpha_{i}$ are $\partial$ and $\bar{\partial}$ closed smooth forms, and $\gamma$ is a smooth form.

For every irreducible subvariety $Y\subset X$ there exists a smooth form $g_{Y}$ on $X\setminus Y$ of logarithmic type along $Y$ such that $[g_{Y}]$ is a Green current for $Y$ :

$\displaystyle dd^{c}[g_{Y}]+\delta_{Y}=[\omega]$

where w is smooth on X. We say that $[g_{Y}]$ is a Green current of logarithmic type.

We now proceed to discuss this intersection theory on the arithmetic scheme. We consider a vector bundle $E$ on the arithmetic scheme $X$ , a holomorphic vector bundle (a complex vector bundle $E_{\infty}$ such that the projection map is holomorphic) on the fibers $X_{\infty}$ at the infinite prime, and a smooth hermitian metric (a sesquilinear form $h$ with the property that $h(u,v)=\overline{h(v,u)}$ ) on $E_{\infty}$ which is invariant under the complex conjugation on $X_{\infty}$ . We refer to this collection of data as a hermitian vector bundle $\bar{E}$ on $X$ .

Given an arithmetic scheme $X$ and a hermitian vector bundle $\bar{E}$ on $X$ , we can define associated “arithmetic”, or “Arakelov-theoretic” (i.e. taking into account the infinite prime) analogues of the algebraic cycles and Chow groups that we discussed in Algebraic Cycles and Intersection Theory.

An arithmetic cycle on $X$ is a pair $(Z,g)$ where $Z$ is an algebraic cycle on $X$ , i.e. a linear combination $\displaystyle \sum_{i}n_{i}Z_{i}$ of closed irreducible subschemes $Z_{i}$ of $X$ , of some fixed codimension $p$ , with integer coefficients $n_{i}$ , and $g$ is a Green current for $Z$ , i.e. $g$ satisfies the equation

$\displaystyle dd^{c}g+\delta_{Z}=[\omega]$

where

$\displaystyle \delta_{Z}(\eta)=\sum_{i}n_{i}\int_{Z_{i}}\eta$

for differential forms $\omega$ and $\eta$ of appropriate degree.

We define the arithmetic Chow group $\widehat{CH}^{p}(X)$ as the group of arithmetic cycles $\widehat{Z}^{p}(X)$ modulo the subgroup $\widehat{R}^{p}(X)$ generated by the pairs $(0,\partial u+\bar{\partial}v)$ and $(\text{div}(f),-\text{log}(|f|^{2}))$ , where $u$ and $v$ are currents of appropriate degree and $f$ is some rational function on some irreducible closed subscheme of codimension $p-1$ in $X$ .

Next we want to have an intersection product on Chow groups, i.e. a bilinear pairing

$\displaystyle \widehat{CH}^{p}(X)\times\widehat{CH}^{q}(X)\rightarrow\widehat{CH}^{p+q}(X)$

We now define this intersection product. Let $[Y,g_{Y}]\in\widehat{CH}^{p}(X)$ and $[Z,g_{Z}]\in\widehat{CH}^{q}$ . Assume that $Y$ and $Z$ are irreducible. Let $Y_{\mathbb{Q}}=Y\otimes_{\text{Spec}(\mathbb{Z})}\text{Spec}(\mathbb{Q})$ , and $Z_{\mathbb{Q}}=Z\otimes_{\text{Spec}(\mathbb{Z})}\text{Spec}(\mathbb{Q})$ . If $Y_{\mathbb{Q}}$ and $Z_{\mathbb{Q}}$ intersect properly, i.e. $\text{codim}(Y_{\mathbb{Q}}\cap Z_{\mathbb{Q}})=p+q$ , then we have

$\displaystyle [(Y,g_{Y})]\cdot [(Z,g_{Z})]:=[[Y]\cdot[Z],g_{Y}*g_{Z}]$

where $[Y]\cdot[Z]$ is just the usual intersection product of algebraic cycles, and $g_{Y}*g_{Z}$ is the $*$ -product of Green currents, defined for a Green current of logarithmic type $g_{Y}$ and a Green current $g_{Z}$ , where $Y$ and $Z$ are closed irreducible subsets of $X$ with $Z$ not contained in $Y$ , as

$\displaystyle g_{Y}*g_{Z}:=[\tilde{g}_{Y}]*g_{Z}\text{ mod }(\text{im}(\partial)+\text{im}(\bar{\partial}))$

where

$\displaystyle [g_{Y}]*g_{Z}:=[g_{Y}]\wedge\delta_{Z}+[\omega_{Y}]\wedge g_{Z}$

and

$[g_{Y}]\wedge\delta_{Z}:=q_{*}[q^{*}g_{Y}]$

for $q:\tilde{Z}\rightarrow X$ is the resolution of singularities of $Z$ composed with the inclusion of $Z$ into $X$ .

In the case that $Y_{\mathbb{Q}}$ and $\mathbb{Q}$ do not intersect properly, there is a rational function $f_{y}$ on $y\in X_{\mathbb{Q}}^{p-1}$ such that $\displaystyle Y+\sum_{y}\text{div}(f_{y})$ and $Z$ intersect properly, and if $g_{y}$ is another rational function such that $\displaystyle Y+\sum_{y}\text{div}(f_{y})_{\mathbb{Q}}$ and $Z_{\mathbb{Q}}$ intersect properly, the cycle

$\displaystyle (\sum_{y}\widehat{\text{div}}(f_{y})-\sum_{y}\widehat{\text{div}}(g_{y}))\cdot(Z,g_{Z})$

is in the subgroup $\widehat{R}^{p}(X)$ . Here the notation $\widehat{\text{div}}(f_{y})$ refers to the pair $(\text{div}(f),-\text{log}(|f|^{2}))$ .

This concludes our little introduction to arithmetic intersection theory. We now give a short discussion what else can be done with such a theory. The mathematicians Henri Gillet and Christophe Soule used this arithmetic intersection theory to construct arithmetic analogues of Chern classes, Chern characters, Todd classes, and the Grothendieck-Riemann-Roch theorem (see Chern Classes and Generalized Riemann-Roch Theorems). These constructions are not so straightforward – for instance, one has to deal with the fact that unlike the classical case, the arithmetic Chern character is not additive on exact sequences. This failure to be additive on exact sequences is measured by the Bott-Chern character. The Bott-Chern character plays a part in defining the arithmetic analogue of the Grothendieck group $\widehat{K}_{0}(X)$ .

In order to define the arithmetic analogue of the Grothendieck-Riemann-Roch theorem, one must then define the direct image map $f_{*}:\widehat{K}_{0}(X)\rightarrow\widehat{K}_{0}(Y)$ for a proper flat map $f:X\rightarrow Y$ of arithmetic varieties. This involves constructing a canonical line bundle $\lambda(E)$ on $Y$ , whose fiber at $y$ is the determinant of cohomology of $X_{y}=f^{-1}(y)$ , i.e.

$\displaystyle \lambda(E)_{y}=\bigotimes_{q\geq 0}(\text{det}(H^{q}(X_{y},E))^{(-1)^{q}}$

as well as a metric $h_{Q}$ , called the Quillen metric, on $\lambda(E)$ . With such a direct image map we can now give the statement of the arithmetic Grothendieck-Riemann-Roch theorem. It was originally stated by Gillet and Soule in terms of components of degree one in the arithmetic Chow group $\widehat{CH}(Y)\otimes_{\mathbb{Z}}\mathbb{Q}$ :

$\widehat{c}_{1}(\lambda(E),h_{Q})=f_{*}(\widehat{\text{ch}}(E,h)\widehat{\text{Td}}(Tf,h_{f})-a(\text{ch}(E)_{\mathbb{C}}\text{Td}(Tf_{\mathbb{C}})R(Tf_{\mathbb{C}})))^{(1)}$

where $\widehat{\text{ch}}$ denotes the arithmetic Chern character, $\widehat{\text{Td}}$ denotes the arithmetic Todd class, $Tf$ is the relative tangent bundle of $f$ , $a$ is the map from

$\displaystyle \tilde{A}(X)=\bigoplus_{p\geq 0}A^{p,p}(X)/(\text{im}(\partial)+\text{im}(\bar{\partial}))$

to $\widehat{CH}(X)$ sending the element $\eta$ in $\tilde{A}(X)$ to the class of $(0,\eta)$ in $\widehat{CH}(X)$ , and

$\displaystyle R(L)=\sum_{m\text{ odd, }\geq 1}(2\zeta'(-m)+\zeta(m)(1+\frac{1}{2}+...+\frac{1}{m}))\frac{c_{1}(L)^{m}}{m!}$ .

Later on Gillet and Soule formulated the arithmetic Grothendieck-Riemann-Roch theorem in higher degree as

$\displaystyle \widehat{\text{ch}}(f_{*}(x))=f_{*}(\widehat{\text{Td(g)}}\cdot(1-a(R(Tf_{\mathbb{C}})))\cdot\widehat{\text{ch}}(x))$

for $x\in\widehat{K}_{0}(X)$ .

Aside from the work of Gillet and Soule, there is also the work of the mathematician Amaury Thuillier making use of ideas from $p$ -adic geometry, constructing a nonarchimedean potential theory on curves that allows the finite primes and the infinite primes to be treated on a more equal footing, at least for arithmetic surfaces. The work of Thuillier is part of ongoing efforts to construct an adelic geometry, which is hoped to be the next stage in the evolution of Arakelov geometry.

References:

Arakelov Theory on Wikipedia

Arithmetic Intersection Theory by Henri Gillet and Christophe Soule

Theorie de l’Intersection et Theoreme de Riemann-Roch Arithmetiques by Jean-Benoit Bost

An Arithmetic Riemann-Roch Theorem in Higher Degrees by Henri Gillet and Christophe Soule

Theorie du Potentiel sur les Courbes en Geometrie Analytique Non Archimedienne et Applications a la Theorie d’Arakelov by Amaury Thuillier

Explicit Arakelov Geometry by Robin de Jong

Notes on Arakelov Theory by Alberto Camara

Lectures in Arakelov Theory by C. Soule, D. Abramovich, J.-F. Burnol, and J. Kramer

Introduction to Arakelov Theory by Serge Lang

SEAMS School Manila 2017: Topics on Elliptic Curves

July 30, 2017July 30, 2017 / Anton Hilado / Leave a comment

A few days ago, from July 17 to 25, I attended the SEAMS (Southeast Asian Mathematical Society) School held at the Institute of Mathematics, University of the Philippines Diliman, discussing topics on elliptic curves. The school was also partially supported by CIMPA (Centre International de Mathematiques Pures et Appliquees, or International Center for Pure and Applied Mathematics), and I believe also by the Roman Number Theory Association and the Number Theory Foundation. Here’s the official website for the event:

Southeast Asian Mathematical Society (SEAMS) School Manila 2017: Topics on Elliptic Curves

There were many participants from countries all over Southeast Asia, including Indonesia, Malaysia, Philippines, and Vietnam, as well as one participant from Austria and another from India. The lecturers came from Canada, France, Italy, and Philippines.

Jerome Dimabayao and Michel Waldschmidt started off the school, introducing the algebraic and analytic aspects of elliptic curves, respectively. We have tackled these subjects in this blog, in Elliptic Curves and The Moduli Space of Elliptic Curves, but the school discussed them in much more detail; for instance, we got a glimpse of how Karl Weierstrass might have come up with the function named after him, which relates the equation defining an elliptic curve to a lattice in the complex plane. This requires some complex analysis, which unfortunately we have not discussed that much in this blog yet.

Francesco Pappalardi then discussed some important theorems regarding rational points on elliptic curves, such as the Nagell-Lutz theorem and the famous Mordell-Weil theorem. Then, Julius Basilla discussed the counting of points of elliptic curves over finite fields, often making use of the Hasse-Weil inequality which we have discussed inThe Riemann Hypothesis for Curves over Finite Fields, and the applications of this theory to cryptography. Claude Levesque then introduced to us the fascinating theory of quadratic forms, which can be used to calculate the class number of a quadratic number field (see Algebraic Numbers), and the relation of this theory to elliptic curves.

Richell Celeste discussed the reduction of elliptic curves modulo primes, a subject which we have also discussed here in the post Reduction of Elliptic Curves Modulo Primes, and two famous problems related to elliptic curves, Fermat’s Last Theorem, which was solved by Andrew Wiles in 1995, and the still unsolved Birch and Swinnerton-Dyer conjecture regarding the rank of the group of rational points of elliptic curves. Fidel Nemenzo then discussed the classical problem of finding “congruent numbers“, rational numbers forming the sides of a right triangle whose area is given by an integer, and the rather surprising connection of this problem to elliptic curves.

On the last day of the school, Jerome Dimabayao discussed the fascinating connection between elliptic curves and Galois representations, which we have given a passing mention to at the end of the post Elliptic Curves. Finally, Jared Guissmo Asuncion gave a tutorial on the software PARI which we can use to make calculations related to elliptic curves.

Participants were also given the opportunity to present their research work or topics they were interested in. I gave a short presentation discussing certain aspects of algebraic geometry related to number theory, focusing on the spectrum of the integers, and a mention of related modern mathematical research, such as Arakelov theory, and the view of the integers as a curve (under the Zariski topology) and as a three-dimensional manifold (under the etale topology).

Aside from the lectures, we also had an excursion to the mountainous province of Rizal, which is a short distance away from Manila, but provides a nice getaway from the environment of the big city. We visited a couple of art museums (one of which was also a restaurant serving traditional Filipino cuisine), an underground cave system, and a waterfall. We used this time to relax and talk with each other, for instance about our cultures, and many other things. Of course we still talked about mathematics, and during this trip I learned about many interesting things from my fellow participants, such as the class field theory problem and the subject of real algebraic geometry .

I believe lecture notes will be put up on the school website at some point by some of the participants of the school. For now, some of the lecturers have put up useful references for their lectures.

SEAMS School Manila 2017 was actually the first summer school or conference of its kind that I attended in mathematics, and I enjoyed very much the time I spent there, not only in learning about elliptic curves but also making new friends among the mathematicians in attendance. At some point I also hope to make some posts on this blog regarding the interesting things I have learned at that school.

Reduction of Elliptic Curves Modulo Primes

March 7, 2017June 19, 2022 / Anton Hilado / 2 Comments

We have discussed elliptic curves over the rational numbers, the real numbers, and the complex numbers in Elliptic Curves. In this post, we discuss elliptic curves over finite fields of the form $\mathbb{F}_{p}$ , where $p$ is a prime, obtained by “reducing” an elliptic curve over the integers modulo $p$ (see Modular Arithmetic and Quotient Sets).

We recall that in Elliptic Curves we gave the definition of an elliptic curve as a polynomial equation that we may write as

$\displaystyle y^{2}=x^{3}-ax+b$

with $a$ and $b$ satisfying the condition that

$\displaystyle 4a^{3}+27b^{2}\neq 0$ .

Still, we claimed that we will not be able to write the equation of the elliptic curve when the coefficients of the elliptic curve are of characteristic equal to $2$ or $3$ , as is the case for the finite fields $\mathbb{F}_{2}$ or $\mathbb{F}_{3}$ , therefore we will give more general forms for the equation of the elliptic curve later, along with the appropriate conditions. To help us with the latter, we will first look at the case of curves over the real numbers, where we can still make use of the equations above, and see what happens when the conditions on $a$ and $b$ are not satisfied.

Let both $a$ and $b$ both be equal to $0$ , in which case the condition is not satisfied. Then our curve (which is not an elliptic curve) is given by the equation

$\displaystyle y^{2}=x^{3}$

whose graph in the $x$ – $y$ plane is given by the following figure (plotted using the WolframAlpha software):

msp8421ceh7049d511806600001ha509ah5dee52ed

Next let $a=-3$ and $b=2$ . Once again the condition is not satisfied. Our curve is given by

$\displaystyle y^{2}=x^{3}-3x+2$

and whose graph is given by the following figure (again plotted using WolframAlpha):

msp51201b91cb194c07ih2g0000670ibac2gfha7c42

Note also that in both cases, the right hand side of the equations of the curves are polynomials in $x$ with a double or triple root; for $y^{2}=x^{3}$ , the right hand side, $x^{3}$ , has a triple root at $x=0$ , while for $y^{2}=x^{3}-3x+2$ , the right hand side, $x^{3}-3x+2$ , factors into $y^{2}=(x-1)^{2}(x+2)$ and therefore has a double root at $x=1$ .

The two curves, $y^{2}=x^{3}$ and $y^{2}=x^{3}-3x+2$ , are examples of singular curves. It is therefore a requirement for a curve to be an elliptic curve, that it must be nonsingular.

We now introduce the general form of an elliptic curve, applicable even when the coefficients belong to fields of characteristic $2$ or $3$ , along with the general condition for it to be nonsingular. We note that the elliptic curve has a “point at infinity“; in order to make this idea explicit, we make use of the notion of projective space (see Projective Geometry) and write our equation in homogeneous coordinates $X$ , $Y$ , and $Z$ :

$\displaystyle Y^{2}Z+a_{1}XYZ+a_{3}YZ^{2}=X^{3}+a_{2}XZ^{2}+a_{4}X^{2}Z+a_{6}Z^{3}$

This equation is called the long Weierstrass equation. We may also say that it is in long Weierstrass form.

We can now define what it means for a curve to be singular. Let

$\displaystyle F=Y^{2}Z+a_{1}XYZ+a_{3}YZ^{2}-X^{3}-a_{2}XZ^{2}-a_{4}X^{2}Z-a_{6}Z^{3}$

Then a singular point on this curve $F$ is a point with coordinates $a$ , $b$ , and $c$ such that

$\displaystyle \frac{\partial F}{\partial X}(a,b,c)=\frac{\partial F}{\partial Y}(a,b,c)=\frac{\partial F}{\partial Z}(a,b,c)=0$

It might be difficult to think of calculus when we are considering, for example, curves over finite fields, where there are a finite number of points on the curve, so we might instead just think of the partial derivatives of the curve as being obtained “algebraically” using the “power rule” of basic calculus,

$\displaystyle \frac{d(x^{n})}{dx}=nx^{n-1}$

and applying it, along with the usual rules for partial derivatives and constant factors, to every term of the curve. Such is the power of algebraic geometry; it allows us to “import” techniques from calculus and other areas of mathematics which we would not ordinarily think of as being applicable to cases such as curves over finite fields.

If a curve has no singular points, then it is called a nonsingular curve. We may also say that the curve is smooth. In order for a curve written in long Weierstrass form to be an elliptic curve, we require that it be a nonsingular curve as well.

If the coefficients of the curve are not of characteristic equal to $2$ , we can make a projective transformation of variables to write its equation in a simpler form, known as the short Weierstrass equation, or short Weierstrass form:

$Y^{2}Z=X^{3}+a_{2}X^{2}Z+a_{4}XZ^{2}+a_{6}Z^{3}$

In this case the condition for the curve to be nonsingular can be written in the following form:

$\displaystyle -4a_{2}^{3}a_{6}+a_{2}^{2}a_{4}^{2}+18a_{4}a_{2}a_{6}-4a_{4}^{3}-27a_{6}^{2}=0$

The quantity

$\displaystyle D=-4a_{2}^{3}a_{6}+a_{2}^{2}a_{4}^{2}+18a_{4}a_{2}a_{6}-4a_{4}^{3}-27a_{6}^{2}$

is called the discriminant of the curve.

We note now, of course, that the usual expressions for the elliptic curve, in what we call affine coordinates $x$ and $y$ , can be recovered from our expression in terms of homogeneous coordinates $X$ , $Y$ , and $Z$ simply by setting $x=\frac{X}{Z}$ and $y=\frac{Y}{Z}$ . The case $Z=0$ of course corresponds to the “point at infinity”.

We now consider an elliptic curve whose equation has coefficients which are rational numbers. We can make a projective transformation of variables to rewrite the equation into one which has integers as coefficients. Then we can reduce the coefficients modulo a prime $p$ and investigate the points of the elliptic curve considered as having coordinates in the finite field $\mathbb{F}_{p}$ .

It may happen that when we reduce an elliptic curve modulo $p$ , the resulting curve over the finite field $\mathbb{F}_{p}$ is no longer nonsingular. In this case we say that it has bad reduction at $p$ . Consider, for example, the following elliptic curve (written in affine coordinates):

$\displaystyle y^{2}=x^{3}-4x^{2}+16$

Let us reduce this modulo the prime $p=11$ . Then, since $-4\equiv 7 \text{mod }11$ and $16\equiv 5 \text{mod }11$ , we obtain the curve

$\displaystyle y^{2}=x^{3}+7x^{2}+5$

over $\mathbb{F}_{11}$ . The right hand side actually factors into $(x+1)^{2}(x+5)$ over $\mathbb{F}_{11}$ , which means that it has a double root at $x=10$ (which is equivalent to $x=-1$ modulo $11$ ), and has discriminant equal to zero over $\mathbb{F}_{11}$ , hence, this curve over $\mathbb{F}_{11}$ is singular, and the elliptic curve given by $y^{2}=x^{3}+7x^{2}+5$ has bad reduction at $p=11$ . It also has bad reduction at $p=2$ ; in fact, we mentioned earlier that we cannot even write an elliptic curve in the form $y^{2}=x^{3}+a_{2}x^{2}+a_{4}x+a_{6}$ when the field of coefficients have characteristic equal to $2$ . This is because such a curve will always be singular over such a field. The curve $y^{2}=x^{3}+7x^{2}+5$ remains nonsingular over all other primes, however; we also say that the curve has good reduction over all primes $p$ except for $p=2$ and $p=11$ .

In the case that an elliptic curve has bad reduction at $p$ , we say that it has additive reduction if there is only one tangent line at the singular point (we also say that the singular point is a cusp), for example in the case of the curve $y^{2}=x^{3}$ , and we say that it has multiplicative reduction if there are two distinct tangent lines at the singular point (in this case we say that the singular point is a node), for example in the case of the curve $y^{2}=x^{3}-3x+2$ . If the slope of these tangent lines are given by elements of the same field as the coefficients of the curve (in our case rational numbers), we say that it has split multiplicative reduction, otherwise, we say that it has nonsplit multiplicative reduction. We note that since we are working with finite fields, what we describe as “tangent lines” are objects that we must define “algebraically”, as we have done earlier when describing the notion of a curve being singular.

As we have already seen in The Riemann Hypothesis for Curves over Finite Fields, whenever we have a curve over some finite field $\mathbb{F}_{q}$ (where $q=p^{n}$ for some natural number $n$ ), our curve will also have a finite number of points, and these points will have coordinates in $\mathbb{F}_{q}$ . We denote the number of these points by $N_{q}$ . In our case, we are interested in the case $n=1$ , so that $q=p$ . When our elliptic curve has good reduction over $p$ , we define a quantity $a_{p}$ , sometimes called the $p$ -defect, or also known as the trace of Frobenius, as

$\displaystyle a_{p}=p+1-N_{p}$ .

We can now define the Hasse-Weil L-function of an elliptic curve $E$ as follows:

$\displaystyle L_{E}(s)=\prod_{p}L_{p}(s)$

where $p$ runs over all prime numbers, and

$\displaystyle L_{p}(s)=\frac{1}{(1-a_{p}p^{-s}+p^{1-2s})}$ if $E$ has good reduction at $p$

$\displaystyle L_{p}(s)=\frac{1}{(1-p^{-s})}$ if $E$ has split multiplicative reduction at $p$

$\displaystyle L_{p}(s)=\frac{1}{(1+p^{-s})}$ if $E$ has nonsplit multiplicative reduction at $p$

$\displaystyle L_{p}(s)=1$ if $E$ has additive reduction at $p$ .

The Hasse-Weil L-function encodes number-theoretic information related to the elliptic curve, and much of modern mathematical research involves this function. For example, the Birch and Swinnerton-Dyer conjecture says that the rank of the group formed by the rational points of the elliptic curve (see Elliptic Curves), also known as the Mordell-Weil group, is equal to the order of the zero of the Hasse-Weil L-function at $s=1$ , i.e. we have the following Taylor series expansion of the Hasse-Weil L-function at $s=1$ :

$\displaystyle L_{E}(s)=c(s-1)^{r}+\text{higher order terms}$

where $c$ is a constant and $r$ is the rank of the elliptic curve.

Meanwhile, the Shimura-Taniyama-Weil conjecture, now also known as the modularity conjecture, central to Andrew Wiles’s proof of Fermat’s Last Theorem, states that the Hasse-Weil L-function can be expressed as the following series:

$\displaystyle L_{E}(s)=\sum_{n=1}^{\infty}\frac{a_{n}}{n^{s}}$

and the coefficients $a_{n}$ are also the coefficients of the Fourier series expansion of some modular form $f(E,\tau)$ (see The Moduli Space of Elliptic Curves):

$\displaystyle f(E,\tau)=\sum_{n=1}^{\infty}a_{n}e^{2\pi i \tau}$ .

For more on the modularity theorem and Wiles’s proof of Fermat’s Last Theorem, the reader is encouraged to read the award-winning article A Marvelous Proof by Fernando Q. Gouvea, which is freely and legally available online. A link to this article (hosted on the website of the Mathematical Association of America) is provided among the list of references below.

References:

Elliptic Curve on Wikipedia

Hasse-Weil Zeta Function on Wikipedia

Birch and Swinnerton-Dyer Conjecture on Wikipedia

Modularity Theorem on Wikipedia

Wiles’s Proof of Fermat’s Last Theorem on Wikipedia

The Birch and Swinnerton-Dyer Conjecture by Andrew Wiles

A Marvelous Proof by Fernando Q. Gouvea

A Friendly Introduction to Number Theory by Joseph H. Silverman

The Arithmetic of Elliptic Curves by Joseph H. Silverman

Advanced Topics in the Arithmetic of Elliptic Curves by Joseph H. Silverman

Invitation to the Mathematics of Fermat-Wiles by Yves Hellegouarch

A First Course in Modular Forms by Fred Diamond and Jerry Shurman

The Moduli Space of Elliptic Curves

February 16, 2017December 13, 2021 / Anton Hilado / 14 Comments

A moduli space is a kind of “parameter space” that “classifies” mathematical objects. Every point of the moduli space stands for a mathematical object, in such a way that mathematical objects which are more similar to each other are closer and those that are more different from each other are farther apart. We may use the notion of equivalence relations (see Modular Arithmetic and Quotient Sets) to assign several objects which are in some sense “isomorphic” to each other to a single point.

We have discussed on this blog before one example of a moduli space – the projective line (see Projective Geometry). Every point on the projective line corresponds to a geometric object, a line through the origin. Two lines which have almost the same value of the slope will be closer on the projective line compared to two lines which are almost perpendicular.

Another example of a moduli space is that for circles on a plane – such a circle is specified by three real numbers, two coordinates for the center and one positive real number for the radius. Therefore the moduli space for circles on a plane will consist of a “half-volume” of some sort, like 3D space except that one coordinate is restricted to be strictly positive. But if we only care about the circles up to “congruence”, we can ignore the coordinates for the center – or we can also think of it as simply sending circles with the same radius to a single point, even if they are centered at different points. This moduli space is just the positive real line. Every point on this moduli space, which is a positive real number, corresponds to all the circles with radius equal to that positive real number.

We now want to construct the moduli space of elliptic curves. In order to do this we will need to first understand the meaning of the following statement:

Over the complex numbers, an elliptic curve is a torus.

We have already seen in Elliptic Curves what an elliptic curve looks like when graphed in the $x$ – $y$ plane, where $x$ and $y$ are real numbers. This gives us a look at the points of the elliptic curve whose coordinates are real numbers, or to put it in another way, these are the real numbers $x$ and $y$ which satisfy the equation of the elliptic curve.

When we look at the points of the elliptic curve with complex coordinates, or in other words the complex numbers which satisfy the equation of the elliptic curve, the situation is more complicated. First off, what we actually have is not what we usually think of as a curve, but rather a surface, in the same way that the complex numbers do not form a line like the real numbers do, but instead form a plane. However, even though it is not easy to visualize, there is a function called the Weierstrass elliptic function which provides a correspondence between the (complex) points of an elliptic curve and the points in the “fundamental parallelogram” of a lattice in the complex plane. We can think of “gluing” the opposite sides of this fundamental parallelogram to obtain a torus. This is what we mean when we say that an elliptic curve is a torus. This also means that there is a correspondence between elliptic curves and lattices in the complex plane.

We will discuss more about lattices later on in this post, but first, just in case the preceding discussion seems a little contrived, we elaborate a bit on the Weierstrass elliptic function. We must first discuss the concept of a holomorphic function. We have discussed in An Intuitive Introduction to Calculus the concept of the derivative of a function. Now not all functions have derivatives that exist at all points; in the case that the derivative of the function does exist at all points, we refer to the function as a differentiable function.

The concept of a holomorphic function in complex analysis (analysis is the term usually used in modern mathematics to refer to calculus and its related subjects) is akin to the concept of a differentiable function in real analysis. The derivative is defined as the limit of a certain ratio as the numerator and the denominator both approach zero; on the real line, there are limited ways in which these quantities can approach zero, but on the complex plane, they can approach zero from several different directions; for a function to be holomorphic, the expression for its derivative must remain the same regardless of the direction by which we approach zero.

In previous posts on topology on this blog we have been treating two different topological spaces as essentially the same whenever we can find a bijective and continuous function (also known as a homeomorphism) between them; similarly, we have been treating different algebraic structures such as groups, rings, modules, and vector spaces as essentially the same whenever we can find a bijective homomorphism (an isomorphism) between two such structures. Following these ideas and applying them to complex analysis, we may treat two spaces as essentially the same if we can find a bijective holomorphic function between them.

The Weierstrass elliptic function is not quite holomorphic, but is meromorphic – this means that it would have been holomorphic everywhere if not for the “lattice points” where there exist “poles”. But it is alright for us, because such a lattice point is to be mapped to the “point at infinity”. All in all, this allows us to think of the complex points of the elliptic curve as being essentially the same as a torus, following the ideas discussed in the preceding paragraph.

Moreover, the torus has a group structure of its own, considered as the direct product group $\text{U}(1)\times\text{U}(1)$ where $\text{U}(1)$ is the group of complex numbers of magnitude equal to $1$ with the law of composition given by the multiplication of complex numbers. When the complex points of the elliptic curve get mapped by the Weierstrass elliptic function to the points of the torus, the group structure provided by the “tangent and chord” or “tangent and secant” construction becomes the group structure of the torus. In other words, the Weierstrass elliptic function provides us with a group isomorphism.

All this discussion means that the study of elliptic curves becomes the study of lattices in the complex plane. Therefore, what we want to construct is the moduli space of lattices in the complex plane, up to a certain equivalence relation – two lattices are to be considered equivalent if one can be obtained by multiplying the other by a complex number (this equivalence relation is called homothety). Going back to elliptic curves, this corresponds to an isomorphism of elliptic curves in the sense of algebraic geometry.

Now given two complex numbers $\omega_{1}$ and $\omega_{2}$ , a lattice $\Lambda$ in the complex plane is given by

$\Lambda=\{m\omega_{1}+n\omega_{2}|m,n\in\mathbb{Z}\}$

For example, setting $\omega_{1}=1$ and $\omega_{2}=i$ , gives a “square” lattice. This lattice is also the set of all Gaussian integers. The fundamental parallelogram is the parallelogram formed by the vertices $0$ , $\omega_{1}$ , $\omega_{2}$ , and $\omega_{1}+\omega_{2}$ . Here is an example of a lattice, courtesy of Alvaro Lozano-Robledo:

The fundamental parallelogram is in blue. Here is another, courtesy of Sam Derbyshire:

Because we only care about lattices up to homothety, we can “rescale” the lattice by multiplying it with a complex number equal to $\frac{1}{\omega_{1}}$ , so that we have a new lattice equivalent under homothety to the old one, given by

$\Lambda=\{m+n\omega|m,n\in\mathbb{Z}\}$

where

$\displaystyle \tau=\frac{\omega_{2}}{\omega_{1}}$ .

We can always interchange $\omega_{1}$ and $\omega_{2}$ , but we will fix our convention so that the complex number $\tau=\frac{\omega_{2}}{\omega_{1}}$ , when written in polar form $\tau=re^{i\theta}$ always has a positive angle $\theta$ between 0 and 180 degrees. If we cannot obtain this using our choice of $\omega_{1}$ and $\omega_{2}$ , then we switch the two.

Now what this means is that a complex number $\omega$ , which we note is a complex number in the upper half plane $\mathbb{H}=\{z\in \mathbb{C}|\text{Im}(z)>0\}$ , because of our convention in choosing $\omega_{1}$ and $\omega_{2}$ , uniquely specifies a homothety class of lattices $\Lambda$ . However, a homothety class of lattices may not always uniquely specify such a complex number $\tau$ . Several such complex numbers may refer to the same homothety class of lattices.

What $\omega_{1}$ and $\omega_{2}$ specify is a choice of basis (see More on Vector Spaces and Modules) for the lattice $\Lambda$ ; we may choose several different bases to refer to the same lattice. Hence, the upper half plane is not yet the moduli space of all lattices in the complex plane (up to homothety); instead it is an example of what is called a Teichmuller space. To obtain the moduli space from the Teichmuller space, we need to figure out when two different bases specify lattices that are homothetic.

We will just write down the answer here; two complex numbers $\tau$ and $\tau'$ refer to homothetic lattices if there exists the following relation between them:

$\displaystyle \tau'=\frac{a\tau+b}{c\tau+d}$

for integers $a$ , $b$ , $c$ , and $d$ satisfying the identity

$\displaystyle ad-bc=1$ .

We can “encode” this information into a $2\times 2$ matrix (see Matrices) which is an element of the group (see Groups) called $\text{SL}(2,\mathbb{Z})$ . It is the group of $2\times 2$ matrices with integer entries and determinant equal to $1$ . Actually, the matrix with entries $a$ , $b$ , $c$ , and $d$ and the matrix with entries $-a$ , $-b$ , $-c$ , and $-d$ specify the same transformation, therefore what we actually want is the group called $\text{PSL}(2,\mathbb{Z})$ , also known as the modular group, and also written $\Gamma(1)$ , obtained from the group $\text{SL}(2,\mathbb{Z})$ by considering two matrices to be equivalent if one is the negative of the other.

We now have the moduli space that we want – we start with the upper half plane $\mathbb{H}$ , and then we identify two points if we can map one point into the other via the action of an element of the modular group, as we have discussed earlier. In technical language, we say that they belong to the same orbit. We can write our moduli space as $\Gamma(1)\backslash\mathbb{H}$ (the notation means that the group $\Gamma(1)$ acts on $\mathbb{H}$ “on the left”).

When dealing with quotient sets, which are sets of equivalence classes, we have seen in Modular Arithmetic and Quotient Sets that we can choose from an equivalence class one element to serve as the “representative” of this equivalence class. For our moduli space $\Gamma(1)\backslash\mathbb{H}$ , we can choose for the representative of an equivalence class a point from the “fundamental domain” for the modular group. Any point on the upper half plane can be obtained by acting on a point from the fundamental domain with an element of the modular group. The following diagram, courtesy of user Fropuff on Wikipedia, shows the fundamental domain in gray:

The other parts of the diagram show where the fundamental domain gets mapped to by certain special elements, in particular the “generators” of the modular group, which are the two elements where $a=0$ , $b=-1$ , $c=1$ , and $d=-1$ , and $a=1$ , $b=1$ , $c=1$ , and $d=0$ . We will not discuss too much of these concepts for now. Instead we will give a preview of some concepts related to this moduli space. Topologically, this moduli space looks like a sphere with a missing point; in order to make the moduli space into a sphere (topologically), we take the union of the upper half plane $\mathbb{H}$ with the projective line (see Projective Geometry) $\mathbb{P}^{1}(\mathbb{Q})$ . This projective line may be thought of as the set of all rational numbers $\mathbb{Q}$ together with a “point at infinity.” The modular group also acts on this projective line, so we can now take the quotient of $\mathbb{H}\cup\mathbb{P}^{1}(\mathbb{Q})$ (denoted $\mathbb{H}^{*}$ by the same equivalence relation as earlier; this new space, topologically equivalent to the sphere, is called the modular curve $X(1)$ .

The functions and “differential forms” on the modular curve $X(1)$ are of special interest. They can be obtained from functions on the upper half plane (with the “point at infinity”) satisfying certain conditions related to the modular group. If they are holomorphic everywhere, including the “point at infinity”, they are called modular forms. Modular forms are an interesting object of study in themselves, and their generalizations, automorphic forms, are a very active part of modern mathematical research.

Moduli Space on Wikipedia

Elliptic Curve on Wikipedia

Weierstrass’s Elliptic Functions on Wikipedia

Fundamental Pair of Periods on Wikipedia

Modular Group on Wikipedia

Fundamental Domain on Wikipedia

Modular Form on Wikipedia

Automorphic Form on Wikipedia

Image by Alvano Lozano Robledo on Wikipedia

Image by Sam Derbyshire on Wikipedia

Image by User Fropuff of Wikipedia

Advanced Topics in the Arithmetic of Elliptic Curves by Joseph H. Silverman

A First Course in Modular Forms by Fred Diamond and Jerry Shurman

Elliptic Curves

February 12, 2017June 19, 2022 / Anton Hilado / 6 Comments

An elliptic curve (not to be confused with an ellipse) is a certain kind of polynomial equation which can usually be expressed in the form

$\displaystyle y^{2}=x^{3}+ax+b$

where $a$ and $b$ are numbers (more precisely, elements of some field) which satisfy the condition that the quantity

$\displaystyle 4a^{3}+27b^{2}$

is not equal to zero. This is not the most general form of an elliptic curve, as it will not hold for coefficients of “finite characteristic” equal to $2$ or $3$ ; however, for our present purposes, this definition will suffice.

Examples of elliptic curves are the following:

$\displaystyle y^{2}=x^{3}-x$

$\displaystyle y^{2}=x^{3}-x+1$

which, for real $x$ and $y$ may be graphed in the “Cartesian” or “ $x$ – $y$ ” plane as follows (image courtesy of user YassineMrabet of Wikipedia):

This rather simple mathematical object has very interesting properties which make it a central object of study in many areas of modern mathematical research.

In this post we focus mainly on one of these many interesting properties, which is the following:

The points of an elliptic curve form a group.

A group is a set with a law of composition which is associative, and the set contains an “identity element” under this law of composition, and every element of this set has an “inverse” (see Groups). Now this law of composition applies whether the points of the elliptic curve have rational numbers, real numbers, or complex numbers for coordinates, and it is always given by the same formula. It is perhaps most visible if we consider real numbers, since in that case we can plot it on the $x$ – $y$ plane as we have done earlier. The law of composition is also often called the “tangent and chord” or “tangent and secant” construction.

We now expound on this construction. Given two points on the elliptic curve $P$ and $Q$ on the curve, we draw a line passing through both of them. In most cases, this line will pass through another point $R$ on the curve. Then we draw a vertical line that passes through the point $R$ . This vertical line will pass through another point $R'$ on the curve. This gives us the law of composition of the points of the elliptic curve, and we write $P+Q=R'$ . Here is an image courtesy of user SuperManu of Wikipedia:

The usual case that we have described is on the left; the other three images show other different cases where the line drawn does not necessarily go through three points. This happens, for example, when the line is tangent to the curve at some point $Q$ , as in the second picture; in this case, we think of the line as passing through $Q$ twice. Therefore, when we compute $P+Q$ , the third point is $Q$ itself, and it is through $Q$ that we draw our vertical line to locate $Q'$ , which is equal to $P+Q$ .

The second picture also shows another computation, that of $Q+Q$ , or $2Q$ . Again, since this necessitates taking a line that passes through the point $Q$ twice, this means that the line must be tangent to the elliptic curve at $Q$ . The third point that it passes through is the point $P$ , and we draw the vertical line through $P$ to find the point $P'$ , which is equal to $2Q$ .

Now we discuss the case described by the third picture, where the line going through the two points $P$ and $Q$ which we want to “add” is a vertical line. To explain what happens, we need the notion of a “point at infinity” (see Projective Geometry). We write the point at infinity as $0$ , expressing the idea that it is the identity element of our group. We cannot find this point at infinity in the $x$ – $y$ plane, but we can think of it as the third point that the vertical line passes through aside from $P$ and $Q$ . In this case, of course, there is no need to draw another vertical line – we simply write $P+Q=0$ .

Finally we come to the case described by the fourth picture; this is simply a combination of the earlier cases we have described above. The vertical line is tangent to the curve at the point $P$ , so we can think of it as passing through $P$ twice, and the third point is passes through is the point at infinity $0$ , so we can write $2P=0$ .

We will not prove explicitly that the points form a group under this law of composition, i.e. that the conditions for a set to form a group are satisfied by our procedure, but it is an interesting exercise to attempt to do so; readers may try it out for themselves or consult the references provided at the end of the post. It is worth mentioning that our group is also an abelian group, i.e. we have $P+Q=Q+P$ , and hence we have written our law of composition “additively”.

Now, to make the group law apply even when $x$ and $y$ are not real numbers, we need to write this procedure algebraically. This is a very powerful approach, since this allows us to operate with mathematical concepts even when we cannot visualize them.

Let $x_{P}$ and $y_{P}$ be the $x$ and $y$ coordinates of a point $P$ , and let $x_{Q}$ and $y_{Q}$ be the $x$ and $y$ coordinates of another point $Q$ . Let

$\displaystyle m=\frac{y_{Q}-y_{P}}{x_{Q}-x_{P}}$

be the slope of the line that connects the points $P$ and $Q$ . Then the point $P+Q$ has $x$ and $y$ coordinates given by the following formulas:

$\displaystyle x_{P+Q}=m^{2}-x_{P}-x_{Q}$

$\displaystyle y_{P+Q}=-y_{P}-m(x_{P+Q}-x_{P})$

In the case that $Q$ is the same point as $P$ , then we define the slope of the tangent line to the elliptic curve at the point $P$ using the formula

$\displaystyle m=\frac{3x_{P}^{2}+a}{2y_{P}}$

where $a$ is the coefficient of $x$ in the formula, of the elliptic curve, i.e.

$\displaystyle y^{2}=x^{3}+ax+b$ .

Then the $x$ and $y$ coordinates of the point $2P$ are given by the same formulas as above, appropriately modified to reflect the fact that now the points $P$ and $Q$ are the same:

$\displaystyle x_{2P}=m^{2}-2x_{P}$

$\displaystyle y_{2P}=-y_{P}-m(x_{2P}-x_{P})$

This covers the first two cases in the image above; for the third case, when $P$ and $Q$ are distinct points and $y_{P}=-y_{Q}$ , we simply set $P+Q=0$ . For the fourth case, when $P$ and $Q$ refer to the same point, and $y_{P}=0$ , we set $2P=0$ . The point at infinity itself can be treated as a mere point and play into our computations, by setting $P+0=P$ , reflecting its role as the identity element of the group.

The group structure on the points of elliptic curves have practical applications in cryptography, which is the study of “encrypting” information so that it cannot be deciphered by parties other than the intended recipients, for example in military applications, or when performing financial transactions over the internet.

On the purely mathematical side, the study of the group structure is currently a very active field of research. An important theorem called the Mordell-Weil theorem states that even though there may be an infinite number of points whose coordinates are given by rational numbers (called rational points), these points may all be obtained by performing the “tangent and chord” or “tangent and secant” construction on a finite number of points. In more technical terms, the group of rational points on an elliptic curve is finitely generated.

There is a theorem concerning finitely generated abelian groups stating that any finitely generated abelian group $G$ is isomorphic to the direct sum of $r$ copies of the integers and a finite abelian group called the torsion subgroup of $G$ . The number $r$ is called the rank of $G$ . The famous Birch and Swinnerton-Dyer conjecture, which currently carries a million dollar prize for its proof (or disproof), concerns the rank of the finitely generated abelian group of rational points on an elliptic curve.

Another thing that we can do with elliptic curves is use them to obtain representations of Galois groups (see Galois Groups). A representation of a group $G$ on a vector space $V$ over a field $K$ is a homomorphism from $G$ to $GL(V)$ , the group of bijective linear transformations of the vector space $V$ to itself. We know of course from Matrices that linear transformations of vector spaces can always be written as matrices (in our case the matrices must have nonzero determinant to ensure that the linear transformations are bijective). Representation theory allows us to study the objects of abstract algebra using the methods of linear algebra.

To any elliptic curve we can associate a certain algebraic number field (see Algebraic Numbers). The elements of these algebraic number fields are “generated” by the algebraic numbers that provide the coordinates of “ $p$ -torsion” points of the elliptic curve, i.e. those points $P$ for which $pP=0$ for some prime number $p$ .

The set of $p$ -torsion points of the elliptic curve is a $2$ -dimensional vector space over the finite field $\mathbb{Z}/p\mathbb{Z}$ (see Modular Arithmetic and Quotient Sets), also written as $\mathbb{F}_{p}$ . Among other things this means that we can choose two $p$ -torsion points $P$ and $Q$ of the elliptic curve such that any other $p$ -torsion point can be written as $aP+bQ$ for integers $a$ and $b$ between $0$ and $p-1$ . When an element of the Galois group of the algebraic number field generated by the coordinates of the $p$ -torsion points of the elliptic curve permutes the elements of the algebraic number field, it also permutes the $p$ -torsion points of the elliptic curve. This permutation can then be represented by a $2\times 2$ matrix with coefficients in $\mathbb{F}_{p}$ .

The connection between Galois groups and elliptic curves is a concept that is central to many developments and open problems in mathematics. It plays a part, for example in the proof of the famous problem called Fermat’s Last Theorem. It is also related to the open problem called the Kronecker Jugendtraum (which is German for Kronecker’s Childhood Dream, and named after the mathematician Leopold Kronecker), also known as Hilbert’s Twelfth Problem, which seeks a procedure for obtaining all field extensions of algebraic number fields whose Galois group is an abelian group. This problem has been solved only in the special case of imaginary quadratic fields, and the solution involves special kinds of “symmetries” of elliptic curves called complex multiplication (not to be confused with the multiplication of complex numbers). David Hilbert, who is one of the most revered mathematicians in history, is said to have referred to the theory of complex multiplication as “…not only the most beautiful part of mathematics but of all science.”

References:

Elliptic Curve on Wikipedia

Mordell-Weil Theorem on Wikipedia

Birch and Swinnerton-Dyer Conjecture on Wikipedia

Wiles’ Proof of Fermat’s Last Theorem on Wikipedia

Hilbert’s Twelfth Problem on Wikipedia

Complex Multiplication on Wikipedia

Image by User YassineMrabet of Wikipedia

Image by User SuperManu of Wikipedia

Fearless Symmetry: Exposing the Hidden Patterns of Numbers by Avner Ash and Robert Gross

Elliptic Tales: Curves, Counting, and Number Theory by Avner Ash and Robert Gross

Rational Points on Elliptic Curves by Joseph H. Silverman