Cryptography Reference
In-Depth Information
THEOREM 8.1
Let
E
be given by
y
2
=
x
3
+
Ax
+
B
with
A, B
∈
Z
.Let
p
be a primeand et
r
be a positive integer. T hen
1.
E
r
isasubgroupof
E
(
Q
)
.
2. If
(
x, y
)
∈ E
(
Q
)
,then
v
p
(
x
)
<
0
ifand onlyif
v
p
(
y
)
<
0
.Inthiscase,
there existsaninteger
r ≥
1
su ch that
v
p
(
x
)=
−
2
r
and
v
p
(
y
)=
−
3
r
.
3. T he m ap
λ
r
:
E
r
/E
5
r
→
Z
p
4
r
p
−r
x/y
(mod
p
4
r
)
(
x, y
)
→
∞ →
0
isaninjective hom om orphism (w here
Z
p
4
r
is a group under addition).
4. If
(
x, y
)
∈ E
r
but
(
x, y
)
∈ E
r
+1
,then
λ
r
(
x, y
)
≡
0(mod
p
)
.
REMARK 8.2
The map
λ
r
should be regarded as a logarithm for the
group
E
r
/E
5
r
since it changes the law of composition in the group to addition
in
Z
p
4
r
, just as the classical logarithm changes the composition law in the
multiplicative group of positive real numbers to addition in
R
.
PROOF
The denominator of
x
3
+
Ax
+
B
equals the denominator of
y
2
.
It is easy to see that the denominator of
y
is divisible by
p
if and only if
the denominator of
x
is divisible by
p
.If
p
j
,with
j>
0, is the exact power
of
p
dividing the denominator of
y
,then
p
2
j
is the exact power of
p
in the
denominator of
y
2
. Similarly, if
p
k
,with
k>
0, is the exact power of
p
dividing
the denominator of
x
, then denominator of
x
3
+
Ax
+
B
is exactly divisible
by
p
3
k
. Therefore, 2
j
=3
k
. It follows that there exists
r
with
j
=3
r
and
k
=2
r
. This proves (2). Also, we see that
{
(
x, y
)
∈ E
r
| v
p
(
x
)=
−
2
r, v
p
(
y
)=
−
3
r}
=
{
(
x, y
)
∈ E
r
| v
p
(
x/y
)=
r}
is the set of points in
E
r
not in
E
r
+1
. Thisproves(4). Moreover,if
λ
r
(
x, y
)
≡
0(mod
p
4
r
), then
v
p
(
x/y
)
≥
5
r
,so(
x, y
)
∈ E
5
r
. Thisprovesthat
λ
r
is
injective (as soon as we prove it is a homomorphism).
Let
t
=
x
1
y
.
y
,
s
=
Dividing the equation
y
2
=
x
3
+
Ax
+
B
by
y
3
yields
=
x
y
3
+
A
x
y
1
y
2
+
B
1
y
3
1
y
,
Search WWH ::
Custom Search