Supersingular Isogeny Graphs from Algebraic Modular Curves

Nadir Hajouji

2023-11-26

Abstract:We describe and compare algorithms for computing supersingular isogeny graphs. Along the way, we obtain a formula for the trace of the adjacency matrix of a general supersingular isogeny graph, and we prove a conjecture recently posed by Nakaya.

Number Theory,Algebraic Geometry

What problem does this paper attempt to address?

On the Zeta functions of supersingular isogeny graphs and modular curves

Antonio Lei,Katharina Müller

2023-10-24

Abstract:Let $p$ and $q$ be distinct prime numbers, with $q\equiv 1\pmod{12}$. Let $N$ be a positive integer that is coprime to $pq$. We prove a formula relating the Hasse--Weil zeta function of the modular curve $X_0(qN)_{\mathbb{F}_q}$ to the Ihara zeta function of the $p$-isogeny graphs of supersingular elliptic curves defined over $\overline{\mathbb{F}_q}$ equipped with a $\Gamma_0(N)$-level structure. When $N=1$, this recovers a result of Sugiyama.

Number Theory,Combinatorics
Spectral Theory of Isogeny Graphs

Giulio Codogni,Guido Lido

2024-07-04

Abstract:We consider finite graphs whose vertexes are supersingular elliptic curves, possibly with level structure, and edges are isogenies. They can be applied to the study of modular forms and to isogeny based cryptography. The main result of this paper is an upper bound on the modules of the eigenvalues of their adjacency matrices, which in particular implies that these graphs are Ramanujan. We also study the asymptotic distribution of the eigenvalues of the adjacency matrices, the number of connected components, the automorphisms of the graphs, and the connection between the graphs and modular forms.

Number Theory,Algebraic Geometry
Supersingular Curves With Small Non-integer Endomorphisms

Jonathan Love,Dan Boneh

DOI: https://doi.org/10.48550/arXiv.1910.03180

2020-06-24

Abstract:We introduce a special class of supersingular curves over $\mathbb{F}_{p^2}$, characterized by the existence of non-integer endomorphisms of small degree. A number of properties of this set is proved. Most notably, we show that when this set partitions into subsets in such a way that curves within each subset have small-degree isogenies between them, but curves in distinct subsets have no small-degree isogenies between them. Despite this, we show that isogenies between these curves can be computed efficiently, giving a technique for computing isogenies between certain prescribed curves that cannot be reasonably connected by searching on $\ell$-isogeny graphs.

Number Theory,Cryptography and Security
Computing isogenies from modular equations in genus two

Jean Kieffer,Aurel Page,Damien Robert

2024-12-23

Abstract:We present an algorithm solving the following problem: given two genus 2 curves over a field k with isogenous Jacobians, compute such an isogeny explicitly. This isogeny can be either an l-isogeny or, in the real multiplication case, an isogeny with cyclic kernel; we require that k have large enough characteristic and that the curves be sufficiently generic. Our algorithm uses modular equations for these isogeny types, and makes essential use of an explicit Kodaira--Spencer isomorphism in genus 2.

Algebraic Geometry,Number Theory
Supersingular elliptic curves, quaternion algebras and applications to cryptography

Eyal Z. Goren,Jonathan R. Love

2024-10-08

Abstract:This paper contains a survey of supersingular isogeny graphs associated to supersingular elliptic curves and their various applications to cryptography. Within limitation of space, we attempt to address a broad audience and make this part widely accessible. For those graphs we also present three recent results and sketch their proofs. We then discuss a generalization to superspecial isogeny graphs associated to superspecial abelian varieties with real multiplication. These graphs were introduced by Charles, Goren and Lauter and so our discussion is brief. Motivated by their cryptographic applications, we prove a general theorem concerning generation of lattices over totally real fields by elements of specified norm. Throughout the paper we have attempted to clarify certain considerations that are either vaguely stated in the literature, or are folklore. We hope this paper will be useful both to a novice wishing to familiarize themselves with this very active area, and to the expert who may enjoy some vignettes and an overview of some new results.

Number Theory
Automorphisms of the Supersingular Isogeny Graph

Sam Mayo

DOI: https://doi.org/10.1016/j.ffa.2023.102314

2023-11-29

Abstract:We provide a condition for which the supersingular $l$-isogeny graph in characteristic $p$ has only one nontrivial automorphism, given by the action of Frobenius. For a fixed $p$, our condition is known to hold for a density 1 set of primes $l$.

Number Theory
Failing to hash into supersingular isogeny graphs

Jeremy Booher,Ross Bowden,Javad Doliskani,Tako Boris Fouotsa,Steven D. Galbraith,Sabrina Kunzweiler,Simon-Philipp Merz,Christophe Petit,Benjamin Smith,Katherine E. Stange,Yan Bo Ti,Christelle Vincent,José Felipe Voloch,Charlotte Weitkämper,Lukas Zobernig

2024-05-09

Abstract:An important open problem in supersingular isogeny-based cryptography is to produce, without a trusted authority, concrete examples of "hard supersingular curves" that is, equations for supersingular curves for which computing the endomorphism ring is as difficult as it is for random supersingular curves. A related open problem is to produce a hash function to the vertices of the supersingular $\ell$-isogeny graph which does not reveal the endomorphism ring, or a path to a curve of known endomorphism ring. Such a hash function would open up interesting cryptographic applications. In this paper, we document a number of (thus far) failed attempts to solve this problem, in the hope that we may spur further research, and shed light on the challenges and obstacles to this endeavour. The mathematical approaches contained in this article include: (i) iterative root-finding for the supersingular polynomial; (ii) gcd's of specialized modular polynomials; (iii) using division polynomials to create small systems of equations; (iv) taking random walks in the isogeny graph of abelian surfaces; and (v) using quantum random walks.

Number Theory,Cryptography and Security
Constructing all genus 2 curves with supersingular Jacobian

Andreas Pieper

DOI: https://doi.org/10.1007/s40993-022-00330-z

2022-05-19

Research in Number Theory

Abstract:L. Moret-Bailly constructed families of genus 2 curves with supersingular Jacobian. In this paper we first classify the reducible fibers of a Moret-Bailly family using linear algebra over a quaternion algebra. The main result is an algorithm that exploits properties of two reducible fibers to compute a hyperelliptic model for any irreducible fiber of a Moret-Bailly family.

English Else
On the supersingular locus of the Siegel modular variety of genus 3 or 4

Ryosuke Shimada,Teppei Takamatsu

2024-03-28

Abstract:We study the supersingular locus of the Siegel modular variety of genus 3 or 4. More concretely, we decompose the supersingular locus into a disjoint union of the product of a Deligne-Lusztig variety of Coxeter type and a finite-dimensional affine space after taking perfection.

Number Theory
Loops of Isogeny Graphs of Supersingular Elliptic Curves at J = 0

Yi Ouyang,Zheng Xu

DOI: https://doi.org/10.1016/j.ffa.2019.04.002

IF: 1.655

2019-01-01

Finite Fields and Their Applications

Abstract:We improve Adj et al.'s bound in [1, Theorem 12] from p>4ℓ to p>3ℓ for the loops of E0:y2=x3+1 in the ℓ-isogeny graph Gℓ(Fp2,−2p) of supersingular elliptic curves over Fp2 with trace −2p.
Computing Isogenies at Singular Points of the Modular Polynomial

William E. Mahaney,Travis Morrison

2024-02-03

Abstract:In this paper we present a method which, given a singular point $(j_1, j_2)$ on $Y_0(\ell)$ with $j_1, j_2 \neq 0, 1728$ and an elliptic curve $E$ with $j$-invariant ${j_1}$, returns an elliptic curve $\widetilde{E}$ with $j$-invariant ${j_2}$ that admits a normalized $\ell$-isogeny $\phi\colon E\to \widetilde{E}$. The isogeny $\phi$ can then be efficiently computed from $E$ and $\widetilde{E}$ using an algorithm of Bostan, Morain, Salvy, and Schost.

Number Theory
Neighborhood of vertices in the isogeny graph of principally polarized superspecial abelian surfaces

Zheng Xu,Yi Ouyang,Zijian Zhou

DOI: https://doi.org/10.48550/arXiv.2309.14963

2024-03-12

Abstract:For two supersingular elliptic curves $E$ and $E'$ defined over $\mathbb{F}_{p^2}$, let $[E \times E']$ be the superspecial abelian surface with the principal polarization $\{0\} \times E' + E \times \{0\}$. We determine local structure of the vertices $[E \times E']$ in the $(\ell, \ell)$-isogeny graph of principally polarized superspecial abelian surfaces where either $E$ or $E'$ is defined over $\mathbb{F}_p$. We also present a simple new proof of the main theorem in \cite{LOX20}.

Number Theory,Algebraic Geometry
Gauss-Manin Connection in Disguise: Genus Two Curves

Jin Cao,Hossein Movasati,Shing-Tung Yau

DOI: https://doi.org/10.1016/j.aim.2021.107684

IF: 1.675

2021-01-01

Advances in Mathematics

Abstract:We describe an algebra of meromorphic functions on the Siegel domain of genus two which contains Siegel modular forms for an arithmetic index six subgroup of the symplectic group, which is closed under three canonical derivations of the Siegel domain. The main ingredients of our study are the moduli of enhanced genus two curves, Gauss-Manin connection and the modular vector fields living on such moduli spaces.
Listing superspecial curves of genus three by using Richelot isogeny graph

Ryo Ohashi,Hiroshi Onuki,Momonari Kudo,Ryo Yoshizumi,Koji Nuida

2024-06-26

Abstract:In algebraic geometry, superspecial curves are important research objects. While the number of superspecial genus-3 curves in characteristic $p$ is known, the number of hyperelliptic ones among them has not been determined even for small $p$. In this paper, in order to compute the latter number, we give an algorithm for computing the Richelot isogeny graph of superspecial abelian threefolds by using theta functions. Our algorithm enables us to efficiently list superspecial genus-3 curves, and we succeeded in counting hyperelliptic curves among them when $11 \leq p < 100$ by executing our algorithm in Magma.

Algebraic Geometry
3- and 5-Isogenies of Supersingular Edwards Curves

Anatoly Bessalov,Evgeniy Grubiyan,Volodymyr Sokolov,Pavlo Skladannyi

DOI: https://doi.org/10.28925/2663-4023.2020.8.621

2020-06-29

Abstract:An analysis is made of the properties and conditions for the existence of 3- and 5-isogenies of complete and quadratic supersingular Edwards curves. For the encapsulation of keys based on the SIDH algorithm, it is proposed to use isogeny of minimal odd degrees 3 and 5, which allows bypassing the problem of singular points of the 2nd and 4th orders, characteristic of 2-isogenies. A review of the main properties of the classes of complete, quadratic, and twisted Edwards curves over a simple field is given. Equations for the isogeny of odd degrees are reduced to a form adapted to curves in the form of Weierstrass. To do this, use the modified law of addition of curve points in the generalized Edwards form, which preserves the horizontal symmetry of the curve return points. Examples of the calculation of 3- and 5-isogenies of complete Edwards supersingular curves over small simple fields are given, and the properties of the isogeny composition for their calculation with large-order kernels are discussed. Equations are obtained for upper complexity estimates for computing isogeny of odd degrees 3 and 5 in the classes of complete and quadratic Edwards curves in projective coordinates; algorithms are constructed for calculating 3- and 5-isogenies of Edwards curves with complexity 6M + 4S and 12M + 5S, respectively. The conditions for the existence of supersingular complete and quadratic Edwards curves of order 4x3mx5n and 8x3mx5n are found. Some parameters of the cryptosystem are determined when implementing the SIDH algorithm at the level of quantum security of 128 bits.

Cryptography and Security
On towers of Isogeny graphs with full level structure

Antonio Lei,Katharina Müller

2023-09-01

Abstract:Let $p,q,l$ be three distinct prime numbers and let $N$ be a positive integer coprime to $pql$. For an integer $n\ge 0$, we define the directed graph $X_l^q(p^nN)$ whose vertices are given by isomorphism classes of elliptic curves over a finite field of characteristic $q$ equipped with a level $p^nN$ structure. The edges of $X_l^q(p^nN)$ are given by $l$-isogenies. We are interested in when the connected components of $X_l^q(p^nN)$ give rise to a tower of Galois covers as $n$ varies. We show that only in the supersingular case we do get a tower of Galois covers. We also study similar towers of isogeny graphs given by oriented supersingular curves, as introduced by Colò-Kohel, enhanced with a level structure.

Number Theory,Combinatorics
Graphs of trigonal curves and rigid isotopies of singular real algebraic curves of bidegree $(4,3)$ on a hyperboloid

V.I. Zvonilov

2024-12-20

Abstract:A rigid isotopy of real algebraic curves of a certain class is a path in the space of curves of this class. The paper's study completes the rigid isotopic classification of nonsingular real algebraic curves of bidegree (4,3) on a hyperboloid, begun by the author in earlier works. There are given the missing proofs of the uniqueness of the connected components for 16 classes of real algebraic curves of bidegree (4,3) having a single node or a cusp. The main technical tools are graphs of real trigonal curves on Hirzebruch surfaces.

Algebraic Geometry,Combinatorics
The arithmetic-geometric mean and isogenies for curves of higher genus

Ron Donagi,Ron Livne

DOI: https://doi.org/10.48550/arXiv.alg-geom/9712027

1997-12-22

Abstract:Computation of Gauss's arithmetic-geometric mean involves iteration of a simple step, whose algebro-geometric interpretation is the construction of an elliptic curve isogenous to a given one, specifically one whose period is double the original period. A higher genus analogue should involve the explicit construction of a curve whose jacobian is isogenous to the jacobian of a given curve. The doubling of the period matrix means that the kernel of the isogeny should be a lagrangian subgroup of the group of points of order 2 in the jacobian. In genus 2 such a construction was given classically by Humbert and was studied more recently by Bost and Mestre. In this article we give such a construction for general curves of genus 3. We also give a similar but simpler construction for hyperelliptic curves of genus 3. We show that the hyperelliptic construction is a degeneration of the general one, and we prove that the kernel of the induced isogeny on jacobians is a lagrangian subgroup of the points of order 2. We show that for g at least 4 no similar construction exists, and we also reinterpret the genus 2 case in our setup. Our construction of these correspondences uses the bigonal and the trigonal constructions, familiar in the theory of Prym varieties.

Algebraic Geometry
Genera from an algebraic index theorem for supermanifolds

Araminta Amabel

2023-09-11

Abstract:We prove a super-version of Nest-Tsygan's algebraic index theorem. This work is inspired by the appearance of the same cobordism invariants in three related stories: index theory, trace methods in the deformation theory of algebras, and partition functions in quantum field theory. We show that one can recover the cobordism invariant appearing in supersymmetric quantum mechanics using trace methods for the associated deformation quantization problem.

Quantum Algebra,Algebraic Topology,Differential Geometry
On supercurves of genus 1 with an underlying odd spin structure

Alexander Polishchuk

2024-03-05

Abstract:We study the standard family of supercurves of genus 1 with an underlying odd spin structures. We give a simple algebraic description of this family and of the compactified family of stable supercurves with one Neveu-Schwarz puncture. We also describe the Gauss-Manin connection on the first de Rham cohomology of this family and compute the superperiods of global differentials.

Algebraic Geometry

Supersingular Isogeny Graphs from Algebraic Modular Curves

On the Zeta functions of supersingular isogeny graphs and modular curves

Spectral Theory of Isogeny Graphs

Supersingular Curves With Small Non-integer Endomorphisms

Computing isogenies from modular equations in genus two

Supersingular elliptic curves, quaternion algebras and applications to cryptography

Automorphisms of the Supersingular Isogeny Graph

Failing to hash into supersingular isogeny graphs

Constructing all genus 2 curves with supersingular Jacobian

On the supersingular locus of the Siegel modular variety of genus 3 or 4

Loops of Isogeny Graphs of Supersingular Elliptic Curves at J = 0

Computing Isogenies at Singular Points of the Modular Polynomial

Neighborhood of vertices in the isogeny graph of principally polarized superspecial abelian surfaces

Gauss-Manin Connection in Disguise: Genus Two Curves

Listing superspecial curves of genus three by using Richelot isogeny graph

3- and 5-Isogenies of Supersingular Edwards Curves

On towers of Isogeny graphs with full level structure

Graphs of trigonal curves and rigid isotopies of singular real algebraic curves of bidegree $(4,3)$ on a hyperboloid

The arithmetic-geometric mean and isogenies for curves of higher genus

Genera from an algebraic index theorem for supermanifolds

On supercurves of genus 1 with an underlying odd spin structure