Cryptography Reference
In-Depth Information
This is the same equation we started with. Since
0
<t≤ t
4
=
m
2
<c,
(8.13)
we have proved that for every triple (
a, b, c
)with
a
4
+
b
4
=
c
2
, there is another
solution (
r, s, t
)with0
<t<c
. We therefore have an infinitely descending
sequence
c>t>...
of positive integers. This is impossible. Therefore, there
is no solution (
a, b, c
).
Observe that
m
2
>n
2
,so
c<
2
m
2
=2
t
4
. Combining this with (8.13) yields
t
4
<c<
2
t
4
.
This implies that the logarithmic height of
t
is approximately one fourth the
logarithmic height of
c
. Recall that the canonical height of 2
P
is four times
the height of
P
. Therefore, we suspect that Fermat's procedure amounts to
halving a point on an elliptic curve. We'll show that this is the case.
We showed in Section 2.5.3 that the transformation
x
=
2(
z
+1)
w
2
y
=
4(
z
+1)
w
3
,
maps the curve
C
:
w
2
=
z
4
+1
to the curve
E
:
y
2
=
x
3
−
4
x.
If we start with
a
4
+
b
4
=
c
2
,
then the point
(
z, w
)=(
a
b
,
c
b
2
)
lies on
C
. It maps to a point (
x, y
)on
E
,with
2(
c
b
2
+1)
(
a/b
)
2
=
2(
c
+
b
2
)
a
2
x
=
2(
t
4
+4
r
4
s
4
+(
r
4
− s
4
)
2
)
=
(2
rst
)
2
=
t
rs
2
.
This implies that
=
r
2
2
x −
2=
t
2
−
2
r
2
s
2
(
rs
)
2
− s
2
rs
=
r
2
+
s
2
rs
2
x
+2=
t
2
+2
r
2
s
2
(
rs
)
2
.
Search WWH ::
Custom Search