Endomorphism rings of supersingular elliptic curves over Fp

2020 ◽  
Vol 62 ◽  
pp. 101619
Author(s):  
Songsong Li ◽  
Yi Ouyang ◽  
Zheng Xu
2020 ◽  
Vol 4 (1) ◽  
pp. 215-232
Author(s):  
Kirsten Eisenträger ◽  
Sean Hallgren ◽  
Chris Leonardi ◽  
Travis Morrison ◽  
Jennifer Park

2021 ◽  
Vol 15 (1) ◽  
pp. 454-464
Author(s):  
Guanju Xiao ◽  
Lixia Luo ◽  
Yingpu Deng

Abstract Loops and cycles play an important role in computing endomorphism rings of supersingular elliptic curves and related cryptosystems. For a supersingular elliptic curve E defined over 𝔽 p 2 , if an imaginary quadratic order O can be embedded in End(E) and a prime L splits into two principal ideals in O, we construct loops or cycles in the supersingular L-isogeny graph at the vertices which are next to j(E) in the supersingular ℓ-isogeny graph where ℓ is a prime different from L. Next, we discuss the lengths of these cycles especially for j(E) = 1728 and 0. Finally, we also determine an upper bound on primes p for which there are unexpected 2-cycles if ℓ doesn’t split in O.


2014 ◽  
Vol 17 (A) ◽  
pp. 71-91 ◽  
Author(s):  
Ilya Chevyrev ◽  
Steven D. Galbraith

AbstractLet $\def \xmlpi #1{}\def \mathsfbi #1{\boldsymbol {\mathsf {#1}}}\let \le =\leqslant \let \leq =\leqslant \let \ge =\geqslant \let \geq =\geqslant \def \Pr {\mathit {Pr}}\def \Fr {\mathit {Fr}}\def \Rey {\mathit {Re}}\mathcal{O}$ be a maximal order in the quaternion algebra $B_p$ over $\mathbb{Q}$ ramified at $p$ and $\infty $. The paper is about the computational problem: construct a supersingular elliptic curve $E$ over $\mathbb{F}_p$ such that ${\rm End}(E) \cong \mathcal{O}$. We present an algorithm that solves this problem by taking gcds of the reductions modulo $p$ of Hilbert class polynomials.New theoretical results are required to determine the complexity of our algorithm. Our main result is that, under certain conditions on a rank three sublattice $\mathcal{O}^T$ of $\mathcal{O}$, the order $\mathcal{O}$ is effectively characterized by the three successive minima and two other short vectors of $\mathcal{O}^T\! .$ The desired conditions turn out to hold whenever the $j$-invariant $j(E)$, of the elliptic curve with ${\rm End}(E) \cong \mathcal{O}$, lies in $\mathbb{F}_p$. We can then prove that our algorithm terminates with running time $O(p^{1+\varepsilon })$ under the aforementioned conditions.As a further application we present an algorithm to simultaneously match all maximal order types with their associated $j$-invariants. Our algorithm has running time $O(p^{2.5 + \varepsilon })$ operations and is more efficient than Cerviño’s algorithm for the same problem.


Author(s):  
Yuto KAWAHARA ◽  
Tetsutaro KOBAYASHI ◽  
Gen TAKAHASHI ◽  
Tsuyoshi TAKAGI

2011 ◽  
Vol 60 (2) ◽  
pp. 266-281 ◽  
Author(s):  
Jean-Luc Beuchat ◽  
Jeremie Detrey ◽  
Nicolas Estibals ◽  
Eiji Okamoto ◽  
Francisco Rodriguez Henriquez

Sign in / Sign up

Export Citation Format

Share Document