Cryptography Reference
In-Depth Information
Therefore, the number of points on C is less than or equal to the number of
points on E . By Hasse's theorem,
q +1+2 q.
1) = N
2( q
This may be rearranged to obtain
( q
1) 2
4 ,
which yields q ≤ 9. Therefore, if q ≥ 11, we must have N =0.
It remains to treat the cases q =3 , 5 , 7. First, suppose p is a square mod
q . There are no points on C 1 ,p,p with coordinates in F 3 , for example, so we
introduce denominators. Let's try
u = u 1 /q,
v =1 /q,
w = w 1 /q.
Then we want to solve
w 1 =1+4 q 2 ,
1 = p +2 pq 2 .
Since p is assumed to be a square mod q , Hensel's lemma implies that there
are q -adic solutions u 1 ,w 1 .
Now suppose that p is not a square mod q . Divide the second equation in
(8.15) by p to obtain
1
w 2
− v 2 =4 ,
p u 2
− v 2 =2 .
nx 2
Let n be any fixed quadratic nonresidue mod q ,andwrite1 /p
(mod q ).
Letting u 1 = xu ,weobtain
w 2
v 2 =4 ,
v 2 =2 .
n
1
For q =3and q =5,wemaytake n = 2 and obtain
w 2
− v 2
2 u 1 − v 2
4 ,
2(mod q ) .
This has the solution ( u 1 ,v,w )=(1 , 0 , 2). As above, Hensel's lemma yields a
q -adic solution.
For q =7,take n = 3 to obtain
w 2
v 2
3 u 1
v 2
4 ,
2(mod .
This has the solution ( u 1 ,v,w )=(3 , 2 , 1), which yields a 7-adic solution.
Therefore, we have shown that there is a q -adic solution for all q
≤∞
.This
completes the proof of Theorem 8.28.
 
Search WWH ::




Custom Search