Cryptography Reference
In-Depth Information
every pair ( E,C ) of an elliptic curve over C and a cyclic subgroup C of order
N is isomorphic to a pair ( E τ ,C τ )forsome τ
. Therefore, the set of
isomorphism classes of these pairs is in one-to-one correspondence with the
points of
∈H
H
mod the action of Γ 0 ( N ). These are the noncuspidal points of
X 0 ( N ).
Of course, over arbitrary fields, we cannot work with the upper half plane
H , and it is much more dicult to show that the pairs ( E,C ) can be collected
together as the points on a curve X 0 ( N ). However, when this is done, it yields
a convenient way to work with the modular curve X 0 ( N ) and its reductions
mod primes.
For a nonsingular algebraic curve C over a field K ,let J ( C ) be the divisors
(over K ) of degree 0 modulo divisors of functions. It is possible to represent
J ( C ) as an algebraic variety, called the Jacobian of C .When C is an elliptic
curve E , we showed (Coroll ar y 11.4; see also the sequence (9.3)) that J ( E )
is a group isomorphic to E ( K ). When K = C ,wethusobtainedatorus. In
general, if K = C and C is a curve of genus g ,then J ( C ) is isomorphic to a
higher dimensional torus, namely, C g mod a lattice of rank 2 g . The Jacobian
of X 0 ( N ) is denoted J 0 ( N ).
The Jacobian J 0 ( N ) satisfies various functorial properties. In particular, a
nonconstant map φ : X 0 ( N ) → E induces a map φ : E → J 0 ( N ) obtained
by mapping a point P of E to the divisor on X 0 ( N ) formed by the sum of
the inverse images of P minustheinverseimagesof
∞∈
E :
φ : P
−→
[ Q ]
[ R ] .
φ ( Q )= P
φ ( R )=
Therefore, we can map E to a subgroup of J 0 ( N ) (this map might have a
nontrivial, but finite, kernel).
An equivalent formulation of the modularity of E is to say that there is a
nonconstant map from X 0 ( N )to E and therefore that E is isogenous to an
elliptic curve contained in some J 0 ( N ).
If p is a prime dividing N , there are two natural maps X 0 ( N ) → X 0 ( N/p ).
If ( E,C ) is a pair corresponding to a point in X 0 ( N ), then there is a unique
subgroup C ⊂ C of order N/p . Sowehaveamap
( E,C ) .
α :( E,C )
−→
(15.10)
However, there is also a unique subgroup P ⊂ C of order p .Itcanbeshown
that E/P is an elliptic curve and therefore ( E/P,C/P ) is a pair corresponding
to a point on X 0 ( N/p ). This gives a map
β :( E,C )
−→
( E/P,C/P ) .
(15.11)
These two maps can be interpreted in terms of the complex model of X 0 ( N ).
Since Γ 0 ( N ) Γ 0 ( N/p ), we can map H mod Γ 0 ( N )to H mod Γ 0 ( N/p )by
 
Search WWH ::




Custom Search