Cryptography Reference
In-Depth Information
Let
x 1 = u 1
1 = 1
u 2 ,
so ( x 1 ,y 1 ) ∈ E ( Q ). We claim that 2( x 1 ,y 1 )= ± ( x, y ).
Equation 8.3 implies that
u 2 ,
u 0 = Au 2
u 1
x 1
2 y 1
= A
.
2 u 2
Substituting this into (8.1) yields
x = x 1 2 Ax 1 8 Bx 1 + A 2
4 y 1
.
This is the x -coordinate of 2( x 1 ,y 1 ) (see Theorem 3.6). The y -coordinate is
determined up to sign by the x -coordinate, so 2( x 1 ,y 1 )=( x, ±y )= ± ( x, y ).
It follows that ( x, y )=2( x 1 ,y 1 )or2( x 1 , −y 1 ). In particular, ( x, y ) 2 E ( Q ).
Example 8.6
We continue with Example 8.5. For the curve y 2 = x ( x − 2)( x +2), we have
φ ( )=(1 , 1 , 1) ,
(0 , 0) = ( 1 , − 2 , 2) ,
φ (2 , 0) = (2 , 2 , 1) ,
(
2 , 0) = (
2 ,
1 , 2)
(we used the fact that 4 and 1 are equivalent mod squares to replace 4 by 1).
We eliminated the triple ( a, b, c )=(1 , 2 , 2) by working mod powers of 2. We
now show how to eliminate ( 1 , − 1 , 1) , (2 , 1 , 2) , ( 2 , − 2 , 1). Suppose there is
apoint P with φ ( P )=( 1 , − 1 , 1). Then
φ ( P +(0 , 0)) = φ ( P ) φ (0 , 0) = (
1 ,
1 , 1)(
1 ,
2 , 2) = (1 , 2 , 2) .
But we showed that (1 , 2 , 2) does not come from a point in E ( Q ). Therefore,
P does not exist. The two other triples are eliminated similarly.
Theorem 8.14 has a very important corollary.
THEOREM 8.15 (Weak Mordell-Weil Theorem)
Let E be an elliptic curve defined over Q .Then
E ( Q ) / 2 E ( Q )
is finite.
PROOF We give the proof in the case that e 1 ,e 2 ,e 3 Q .Asremarked
earlier, we may assume that e 1 ,e 2 ,e 3 Z .Themap φ in Theorem 8.14 gives
 
Search WWH ::




Custom Search