The yoga of the Cassels-Tate pairing

Tom Fisher,Edward F. Schaefer,Michael Stoll

DOI: https://doi.org/10.1112/S1461157010000185

2007-10-11

Abstract:Cassels has described a pairing on the 2-Selmer group of an elliptic curve which shares some properties with the Cassels-Tate pairing. In this article, we prove that the two pairings are the same.

Number Theory

What problem does this paper attempt to address?

On a comparison of Cassels pairings of different elliptic curves

Shenxing Zhang

2023-03-09

Abstract:Let $e_1,e_2,e_3$ be nonzero integers satisfying $e_1+e_2+e_3=0$. Let $(a,b,c)$ be a primitive triple of odd integers satisfying $e_1a^2+e_2b^2+e_3c^2=0$. Denote by $E: y^2=x(x-e_1)(x+e_2)$ and $\mathcal E: y^2=x(x-e_1a^2)(x+e_2b^2)$. Assume that the $2$-Selmer groups of $E$ and $\mathcal E$ are minimal. Let $n$ be a positive square-free odd integer, where the prime factors of $n$ are nonzero quadratic residues modulo each odd prime factor of $e_1e_2e_3abc$. Then under certain conditions, the $2$-Selmer group and the Cassels pairing of the quadratic twist $E^{(n)}$ coincide with those of $\mathcal E^{(n)}$. As a corollary, $E^{(n)}$ has Mordell-Weil rank zero without order $4$ element in its Shafarevich-Tate group, if and only if these holds for $\mathcal E^{(n)}$. We also give some applications for the congruent elliptic curve.

Number Theory
Computing the Cassels-Tate pairing on the 2-Selmer group of a genus 2 Jacobian

Tom Fisher,Jiali Yan

2023-06-10

Abstract:We describe a method for computing the Cassels-Tate pairing on the 2-Selmer group of the Jacobian of a genus 2 curve. This can be used to improve the upper bound coming from 2-descent for the rank of the group of rational points on the Jacobian. Our method remains practical regardless of the Galois action on the Weierstrass points of the genus 2 curve. It does however depend on being able to find a rational point on a certain twisted Kummer surface. The latter does not appear to be a severe restriction in practice. In particular, we have used our method to unconditionally determine the ranks of all genus 2 Jacobians in the L-functions and modular forms database (LMFDB).

Number Theory
Computing the Cassels-Tate Pairing in the Case of a Richelot Isogeny

Jiali Yan

DOI: https://doi.org/10.48550/arXiv.2109.08257

2021-09-17

Abstract:In this paper, we study the Cassels-Tate pairing on Jacobians of genus two curves admitting a special type of isogenies called Richelot isogenies. Let $\phi: J \rightarrow \widehat{J}$ be a Richelot isogeny between two Jacobians of genus two curves. We give an explicit formula as well as a practical algorithm to compute the Cassels-Tate pairing on $\text{Sel}^{\widehat{\phi}}(\widehat{J}) \times \text{Sel}^{\widehat{\phi}}(\widehat{J})$ where $\widehat{\phi}$ is the dual isogeny of $\phi$. The formula and algorithm are under the simplifying assumption that all two torsion points on $J$ are defined over $K$. We also include a worked example demonstrating we can turn the descent by Richelot isogeny into a 2-descent via computing the Cassels-Tate pairing.

Number Theory
Computing the Cassels-Tate Pairing for Genus Two Jacobians with Rational Two Torsion Points

Jiali Yan

DOI: https://doi.org/10.48550/arXiv.2109.08258

2021-09-17

Abstract:In this paper, we give an explicit formula as well as a practical algorithm for computing the Cassels-Tate pairing on $\text{Sel}^{2}(J) \times \text{Sel}^{2}(J)$ where $J$ is the Jacobian variety of a genus two curve under the assumption that all points in $J[2]$ are $K$-rational. We also give an explicit formula for the Obstruction map $\text{Ob}: H^1(G_K, J[2]) \rightarrow \text{Br}(K)$ under the same assumption. Finally, we include a worked example demonstrating we can indeed improve the rank bound given by a 2-descent via computing the Cassels-Tate pairing.

Number Theory
Sesquilinear pairings on elliptic curves

Katherine E. Stange

2024-06-24

Abstract:Let $E$ be an elliptic curve with complex multiplication by a ring $R$, where $R$ is an order in an imaginary quadratic field or quaternion algebra. We define sesquilinear pairings ($R$-linear in one variable and $R$-conjugate linear in the other), taking values in an $R$-module, generalizing the Weil and Tate-Lichtenbaum pairings.

Number Theory,Algebraic Geometry
Fast tate pairing computation on twisted Jacobi intersections curves

Xusheng Zhang,Shan Chen,Dongdai Lin

DOI: https://doi.org/10.1007/978-3-642-34704-7_16

2011-01-01

Abstract:Recently there are lots of studies on the Tate pairing computation with different coordinate systems, such as twisted Edwards curves and Hessian curves coordinate systems. However, Jacobi intersections curves coordinate system, as another useful one, is overlooked in pairing-based cryptosystems. This paper proposes the explicit formulae for the doubling and addition steps in Miller's algorithm to compute the Tate pairing on twisted Jacobi intersections curves, as a larger class containing Jacobi intersections curves. Although these curves are not plane elliptic curves, our formulae are still very efficient and competitive with others. When the embedding degree is even, our doubling formulae are the fastest except for the formulae on Hessian/Selmer curves, and the parallel execution of our formulae are even more competitive with the Selmer curves case in the parallel manner. Besides, we give the detailed analysis of the fast variants of our formulae with other embedding degrees, such as the embedding degree 1, and the embedding degree dividing 4 and 6. At last, we analyze the relation between the Tate pairings on two isogenous elliptic curves, and show that the Tate pairing on twisted Jacobi intersections curves can be substituted for the Tate pairing on twisted Edwards curves completely.
Elliptic curves over Hasse pairs

Eleni Agathocleous,Antoine Joux,Daniele Taufer

2024-06-05

Abstract:We call a pair of distinct prime powers $(q_1,q_2) = (p_1^{a_1},p_2^{a_2})$ a Hasse pair if $|\sqrt{q_1}-\sqrt{q_2}| \leq 1$. For such pairs, we study the relation between the set $\mathcal{E}_1$ of isomorphism classes of elliptic curves defined over $\mathbb{F}_{q_1}$ with $q_2$ points, and the set $\mathcal{E}_2$ of isomorphism classes of elliptic curves over $\mathbb{F}_{q_2}$ with $q_1$ points. When both families $\mathcal{E}_i$ contain only ordinary elliptic curves, we prove that their isogeny graphs are isomorphic. When supersingular curves are involved, we describe which curves might belong to these sets. We also show that if both the $q_i$'s are odd and $\mathcal{E}_1 \cup \mathcal{E}_2 \neq \emptyset$, then $\mathcal{E}_1 \cup \mathcal{E}_2$ always contains an ordinary elliptic curve. Conversely, if $q_1$ is even, then $\mathcal{E}_1 \cup \mathcal{E}_2$ may contain only supersingular curves precisely when $q_2$ is a given power of a Fermat or a Mersenne prime. In the case of odd Hasse pairs, we could not rule out the possibility of an empty union $\mathcal{E}_1 \cup \mathcal{E}_2$, but we give necessary conditions for such a case to exist. In an appendix, Moree and Sofos consider how frequently Hasse pairs occur using analytic number theory, making a connection with Andrica's conjecture on the difference between consecutive primes.

Number Theory,Cryptography and Security
Pairing Computation on Elliptic Curves of Jacobi Quartic Form.

wang,hong,kunpeng,zhang,lijun,li,bao

IF: 1.019

2011-01-01

Chinese Journal of Electronics

Abstract:This paper proposes explicit formulae for the addition step and doubling step in Miller's algorithm to compute Tate pairing on Jacobi quartic curves. We present a geometric interpretation of the group law on Jacobi quartic curves, which leads to formulae for Miller's algorithm. The doubling step formula is competitive with that for Weierstrass curves and Edwards curves. Moreover, by carefully choosing the coefficients, there exist quartic twists of Jacobi quartic curves from which pairing computation can benefit a lot. Finally, we provide some examples of supersingular and ordinary pairing friendly Jacobi quartic curves.
Torsion Points and the Latte'S Family

Laura DeMarco,Xiaoguang Wang,Hexi Ye

DOI: https://doi.org/10.1353/ajm.2016.0026

IF: 1.835

2016-01-01

American Journal of Mathematics

Abstract:We give a dynamical proof of a result of Masser and Zannier [MZ2, MZ3] about torsion points on the Legendre family of elliptic curves. Our methods also treat points of small height. A key ingredient is the arithmetic equidistribution theorem on $\mathbb{P}^1$ of Baker-Rumely, Chambert-Loir, and Favre-Rivera-Letelier. Torsion points on the elliptic curve coincide with preperiodic points for the degree-4 Lattes family of rational functions. Our main new results concern properties of the bifurcation measures for this Lattes family associated to marked points.
Height pairings for algebraic cycles on the product of a curve and a surface

Shou-Wu Zhang

2024-05-01

Abstract:For the product $X=C\times S$ of a curve and a surface over a number field, we construct unconditionally a Beilinson--Bloch type height pairing for homologically trivial algebraic cycles on $X$. Then for an embedding $f: C\to S$, we define an arithmetic diagonal cycle modified from the graph of $f$. This work extends previous work of Gross and Schoen when $S$ is the product of two curves, and is based on our recent work which relates the height pairings and the standard conjectures.

Algebraic Geometry,Number Theory
Efficient Pairing Computation on Elliptic Curves in Hessian Form

Haihua Gu,Dawu Gu,WenLu Xie

DOI: https://doi.org/10.1080/01611194.2014.915259

2015-01-01

Cryptologia

Abstract:Pairings in elliptic curve cryptography are functions which map a pair of elliptic curve points to a non-zero element of a finite field. In recent years, many useful cryptographic protocols based on pairings have been proposed. The fast implementations of pairings have become a subject of active research areas in cryptology.In this paper, we give the geometric interpretation of the group law on Hessian curves. Furthermore, we propose the first algorithm for computing the Tate pairing on elliptic curves in Hessian form. Analysis indicates that it is faster than all algorithms of Tate pairing computation known so far for Weierstrass and Edwards curves excepted for the very special elliptic curves with a(4) = 0, a(6) = b(2).
Extending class group action attacks via sesquilinear pairings

Joseph Macula,Katherine E. Stange

2024-10-01

Abstract:We introduce a new tool for the study of isogeny-based cryptography, namely pairings which are sesquilinear (conjugate linear) with respect to the $\mathcal{O}$-module structure of an elliptic curve with CM by an imaginary quadratic order $\mathcal{O}$. We use these pairings to study the security of problems based on the class group action on collections of oriented ordinary or supersingular elliptic curves. This extends work of both (Castryck, Houben, Merz, Mula, Buuren, Vercauteren, 2023) and (De Feo, Fouotsa, Panny, 2024).

Number Theory,Cryptography and Security
C-pairs and their morphisms

Stefan Kebekus,Erwan Rousseau

2024-07-15

Abstract:This paper surveys Campana's theory of C-pairs (or "geometric orbifolds") in the complex-analytic setting, to serve as a reference for future work. Written with a view towards applications in hyperbolicity, rational points, and entire curves, it introduces the fundamental definitions of C-pair-theory systematically. In particular, it establishes an appropriate notion of "morphism", which agrees with notions from the literature in the smooth case, but is better behaved in the singular setting and has functorial properties that relate it to minimal model theory.

Algebraic Geometry,Complex Variables
Omega Pairing on Hyperelliptic Curves

Shan Chen,Kunpeng Wang,Dongdai Lin,Tao Wang

DOI: https://doi.org/10.1007/978-3-319-12087-4_11

2014-01-01

Abstract:The omega pairing is proposed as a variant of Weil pairing on special elliptic curves using automorphisms. In this paper, we generalize the omega pairing to general hyperelliptic curves and use the pairing lattice to construct the optimal omega pairing which has short Miller loop length and simple final exponentiation. On some special hyperelliptic curves, the optimal omega pairing could be super-optimal.
Efficient pairing computation on ordinary elliptic curves of embedding degree 1 and 2

Xusheng Zhang,Dongdai Lin

DOI: https://doi.org/10.1007/978-3-642-25516-8_19

2011-01-01

Abstract:In pairing-based cryptography, most researches are focused on elliptic curves of embedding degrees greater than six, but less on curves of small embedding degrees, although they are important for pairing-based cryptography over composite-order groups. This paper analyzes efficient pairings on ordinary elliptic curves of embedding degree 1 and 2 from the point of shortening Miller's loop. We first show that pairing lattices presented by Hess can be redefined on composite-order groups. Then we give a simpler variant of the Weil pairing lattice which can also be regarded as an Omega pairing lattice, and extend it to ordinary curves of embedding degree 1. In our analysis, the optimal Omega pairing, as the super-optimal pairing on elliptic curves of embedding degree 1 and 2, could be more efficient than Weil and Tate pairings. On the other hand, elliptic curves of embedding degree 2 are also very useful for pairings on elliptic curves over RSA rings proposed by Galbraith and McKee. So we analyze the construction of such curves over RSA rings, and redefine pairing lattices over RSA rings. Specially, modified Omega pairing lattices over RSA rings can be computed without knowing the RSA trapdoor. Furthermore, for keeping the trapdoor secret, we develop an original idea of evaluating pairings without leaking the group order.
Geometric Casselman-Shalika in mixed characteristic

Ashwin Iyengar,Milton Lin,Konrad Zou

2024-08-15

Abstract:We establish a geometric analog of the Casselman-Shalika formula for a split connected reductive group over a mixed characteristic local field. In particular, we construct sheaves on the Witt vector affine Grassmannian which geometrize the Fourier coefficients of spherical Hecke operators, and compute their cohomology.

Algebraic Geometry,Number Theory,Representation Theory
Theorem of Cassels and sums of squares of regular functions

Tomasz Kowalczyk

2024-07-30

Abstract:Let $C$ be an irreducible nonsingular curve over a formally real field $K$ and let $f$ be a regular function which is a sum of squares in the ring of regular functions of the surface $C \times \mathbb{A}_K$. We show that the (sum of squares) length of $f$ is the same in the ring of regular functions of $C \times \mathbb{A}_K$ and in the field of rational functions of $C \times \mathbb{A}_K$. With this we are able to show that the Pythagoras number of the ring of regular functions is the same as the Pythagoras number of the field of rational functions, for some product algebraic surfaces. This shows that the Pythagoras number of the ring of regular functions of the real plane is 4, which was not known before.

Algebraic Geometry
The Dual Pair $\mathrm{Aut}(C)\times F_{4}$ ($p$-adic case)

Edmund Karasiewicz,Gordan Savin

2023-12-06

Abstract:We study the local theta correspondence for dual pairs of the form $\mathrm{Aut}(C)\times F_{4}$ over a $p$-adic field, where $C$ is a composition algebra of dimension 2 or 4, by restricting the minimal representation of a group of type $E$. We investigate this restriction through the computation of maximal parabolic Jacquet modules and the Fourier-Jacobi functor. As a consequence of our results we prove a multiplicity one result for the $\mathrm{Spin}(9)$-invariant linear functionals of irreducible representations of $F_{4}$ and classify the $\mathrm{Spin}(9)$-distinguished representations.

Representation Theory,Number Theory
On $12$-congruences of elliptic curves

Sam Frengley

2023-09-14

Abstract:We construct infinite families of pairs of (geometrically non-isogenous) elliptic curves defined over $\mathbb{Q}$ with $12$-torsion subgroups that are isomorphic as Galois modules. This extends previous work of Chen and Fisher where it is assumed that the underlying isomorphism of $12$-torsion subgroups respects the Weil pairing. Our approach is to compute explicit birational models for the modular diagonal quotient surfaces which parametrise such pairs of elliptic curves. A key ingredient in the proof is to construct simple (algebraic) conditions for the $2$, $3$, or $4$-torsion subgroups of a pair of elliptic curves to be isomorphic as Galois modules. These conditions are given in terms of the $j$-invariants of the pair of elliptic curves.

Number Theory
Bailey pairs and an identity of Chern-Li-Stanton-Xue-Yee

Shashank Kanade,Jeremy Lovejoy

2024-10-20

Abstract:We show how Bailey pairs can be used to give a simple proof of an identity of Chern, Li, Stanton, Xue, and Yee. The same method yields a number of related identities as well as false theta companions.

Classical Analysis and ODEs,Combinatorics

The yoga of the Cassels-Tate pairing

On a comparison of Cassels pairings of different elliptic curves

Computing the Cassels-Tate pairing on the 2-Selmer group of a genus 2 Jacobian

Computing the Cassels-Tate Pairing in the Case of a Richelot Isogeny

Computing the Cassels-Tate Pairing for Genus Two Jacobians with Rational Two Torsion Points

Sesquilinear pairings on elliptic curves

Fast tate pairing computation on twisted Jacobi intersections curves

Elliptic curves over Hasse pairs

Pairing Computation on Elliptic Curves of Jacobi Quartic Form.

Torsion Points and the Latte'S Family

Height pairings for algebraic cycles on the product of a curve and a surface

Efficient Pairing Computation on Elliptic Curves in Hessian Form

Extending class group action attacks via sesquilinear pairings

C-pairs and their morphisms

Omega Pairing on Hyperelliptic Curves

Efficient pairing computation on ordinary elliptic curves of embedding degree 1 and 2

Geometric Casselman-Shalika in mixed characteristic

Theorem of Cassels and sums of squares of regular functions

The Dual Pair $\mathrm{Aut}(C)\times F_{4}$ ($p$-adic case)

On $12$-congruences of elliptic curves

Bailey pairs and an identity of Chern-Li-Stanton-Xue-Yee