Cryptography Reference
In-Depth Information
PROOF
g 1
φ ( P + T g 1 g 2 )= g 1 φ g 1 g 2 ( P )
= φ g 2 ( g 1 P )(by . 19))
= φ ( g 1 P + T g 2 )(by . 21))
= g 1
1
φ g 1 ( P + g 1 T g 2 )(by . 19))
1
= g 1
φ ( P + g 1 T g 2 + T g 1 )(by . 21)) .
1
Applying g 1 then φ 1 yields
T g 1 g 2 = g 1 T g 2 + T g 1 .
This is the desired relation.
C i ,for i =1 , 2, as above.
We say that the pairs ( C 1 1 )and( C 2 2 )are eq uivalent if there is a map
θ : C 1
Suppose we have curves C i and maps φ i : E
C 2 defined over Q and a point P 0
E ( Q ) such that
φ 1
θφ 1 ( P )= P + P 0
(8.23)
2
for all P
E ( Q ). In other words, if we identify C 1 and C 2 with E via φ 1 and
φ 2 ,then θ is simply translation by P 0 .
PROPOSITION 8.33
Thepairs ( C 1 1 ) and ( C 2 2 ) are equivalent ifand onlyifthe cocycles τ φ 1
and τ φ 2 di er by a coboundary. T hismeansthat there isapoint P 1
E ( Q )
su ch that
τ φ 1 ( g )
τ φ 2 ( g )= gP 1
P 1
for all g ∈ G .
For i =1 , 2, denote τ φ i ( g )= T g ,so
φ i ( P )= φ i ( P + T g )
PROOF
(8.24)
for all P
E ( Q ). Suppose the pairs ( C 1 1 )and( C 2 2 ) a reequivalent,so
there exists θ : C 1
C 2 and P 0 as above. For any P
E ( Q ), we have
P + T g + P 0 = φ 1
θφ 1 ( P + T g )(by . 23))
2
θφ 1 ( P )(by . 24))
= φ 1
2
2 φ 2 ( φ 2 θφ 1 ) g ( P ) in e θ g = θ )
=( φ 2 θφ 1 ) g ( P )+ T g (by (8 . 20))
= g ( φ 2 θφ 1 )( g 1 P )+ T g
= φ 1
(by (8 . 19))
= g ( g 1 P + P 0 )+ T g
(by (8 . 23))
= P + gP 0 + T g .
 
Search WWH ::




Custom Search