Sesquilinear pairings on elliptic curves

Katherine E. Stange

2024-06-24

Abstract:Let $E$ be an elliptic curve with complex multiplication by a ring $R$, where $R$ is an order in an imaginary quadratic field or quaternion algebra. We define sesquilinear pairings ($R$-linear in one variable and $R$-conjugate linear in the other), taking values in an $R$-module, generalizing the Weil and Tate-Lichtenbaum pairings.

Number Theory,Algebraic Geometry

What problem does this paper attempt to address?

Extending class group action attacks via sesquilinear pairings

Joseph Macula,Katherine E. Stange

2024-10-01

Abstract:We introduce a new tool for the study of isogeny-based cryptography, namely pairings which are sesquilinear (conjugate linear) with respect to the $\mathcal{O}$-module structure of an elliptic curve with CM by an imaginary quadratic order $\mathcal{O}$. We use these pairings to study the security of problems based on the class group action on collections of oriented ordinary or supersingular elliptic curves. This extends work of both (Castryck, Houben, Merz, Mula, Buuren, Vercauteren, 2023) and (De Feo, Fouotsa, Panny, 2024).

Number Theory,Cryptography and Security
The explicit duality correspondence of (Sp(p,q),O∗(2n))

Jian-Shu Li,Annegret Paul,Eng-Chye Tan,Chen-Bo Zhu

DOI: https://doi.org/10.1016/S0022-1236(02)00079-4

IF: 1.891

2003-01-01

Journal of Functional Analysis

Abstract:We investigate the type I dual pairs over the quaternion algebra H, namely the family of dual pairs (Sp(p,q),O∗(2n)). We give a complete and explicit description of duality correspondence for p+q⩽n as well as some of the cases for p+q>n, in terms of the Langlands parameters.
A Weil pairing on the $p$-torsion of ordinary elliptic curves over the dual numbers of $K$

Juliana V. Belding

DOI: https://doi.org/10.48550/arXiv.math/0703906

2007-03-30

Abstract:For an elliptic curve $E$ over any field $K$, the Weil pairing $e_n$ is a bilinear map on $n$-torsion. For $K$ of characteristic $p>0$, the map $e_n$ is degenerate if and only if $n$ is divisible by $p$. In this paper, we consider $E$ over the dual numbers $K[\epsilon]$ and define a non-degenerate ``Weil pairing on $p$-torsion" which shares many of the same properties of the Weil pairing. We also show that the discrete logarithm attacks on $p$-torsion subgroups of Semaev and Rück may be viewed as Weil-pairing-based attacks, just like the MOV attack. Finally, we describe an attack on the discrete logarithm problem on anomalous curves, analogous to that of Smart, using a lift of $E$ over the dual numbers of the finite field of $p$ elements.

Number Theory
Sheaf stable pairs, Quot-schemes, and birational geometry

Caucher Birkar,Jia Jia,Artan Sheshmani

2024-06-10

Abstract:In this paper we build bridges between moduli theory of sheaf stable pairs on one hand and birational geometry on the other hand. We will in particular treat moduli of sheaf stable pairs on smooth projective curves in detail and present some calculations in low degrees. We will also outline problems in various directions.

Algebraic Geometry
On a comparison of Cassels pairings of different elliptic curves

Shenxing Zhang

2023-03-09

Abstract:Let $e_1,e_2,e_3$ be nonzero integers satisfying $e_1+e_2+e_3=0$. Let $(a,b,c)$ be a primitive triple of odd integers satisfying $e_1a^2+e_2b^2+e_3c^2=0$. Denote by $E: y^2=x(x-e_1)(x+e_2)$ and $\mathcal E: y^2=x(x-e_1a^2)(x+e_2b^2)$. Assume that the $2$-Selmer groups of $E$ and $\mathcal E$ are minimal. Let $n$ be a positive square-free odd integer, where the prime factors of $n$ are nonzero quadratic residues modulo each odd prime factor of $e_1e_2e_3abc$. Then under certain conditions, the $2$-Selmer group and the Cassels pairing of the quadratic twist $E^{(n)}$ coincide with those of $\mathcal E^{(n)}$. As a corollary, $E^{(n)}$ has Mordell-Weil rank zero without order $4$ element in its Shafarevich-Tate group, if and only if these holds for $\mathcal E^{(n)}$. We also give some applications for the congruent elliptic curve.

Number Theory
Linear algebra over T-pairs

Marianne Akian,Stephane Gaubert,Louis Rowen

2024-03-22

Abstract:This paper treats linear algebra over a semiring pair, in a wide range of applications to tropical algebra and related areas such as hyperrings and fuzzy rings. First we present a more general category of ``pairs'' with their morphisms, called ``weak morphisms,'' paying special attention to supertropical pairs, hyperpairs, and the doubling functor. Then we turn to matrices and the question of whether the row rank, column rank, and submatrix rank of a matrix are equal. Often the submatrix rank is less than or equal to the row rank and the column rank, but there is a counterexample to equality, discovered some time ago by the second author, which we provide in a more general setting (``pairs of the second kind'') that includes the hyperfield of signs. Additional positive results include a version of Cramer's rule, and we find situations when equality holds, encompassing results by Akian, Gaubert, Guterman, Izhakian, Knebusch, and Rowen. We pay special attention to the question of whether $n+1$ vectors of length $n$ need be dependent. At the end, we introduce a category with stronger morphisms, that preserve a surpassing relation.

Rings and Algebras,Commutative Algebra
Pairing Computation on Elliptic Curves of Jacobi Quartic Form.

wang,hong,kunpeng,zhang,lijun,li,bao

IF: 1.019

2011-01-01

Chinese Journal of Electronics

Abstract:This paper proposes explicit formulae for the addition step and doubling step in Miller's algorithm to compute Tate pairing on Jacobi quartic curves. We present a geometric interpretation of the group law on Jacobi quartic curves, which leads to formulae for Miller's algorithm. The doubling step formula is competitive with that for Weierstrass curves and Edwards curves. Moreover, by carefully choosing the coefficients, there exist quartic twists of Jacobi quartic curves from which pairing computation can benefit a lot. Finally, we provide some examples of supersingular and ordinary pairing friendly Jacobi quartic curves.
The Canonical Quadratic Pair on Clifford Algebras over Schemes

Cameron Ruether

2023-09-06

Abstract:Working over an arbitrary base scheme $S$, we define the canonical quadratic pair on the Clifford algebra associated to an Azumaya algebra with quadratic pair. Given an Azumaya algebra $\mathcal{A}$ with quadratic pair, i.e., with an orthogonal involution and a semi-trace, its associated Clifford algebra's canonical involution is only orthogonal in certain cases, namely when $\mathrm{deg}(\mathcal{A})$ is divisible by $8$ or when both $2=0$ over $S$ and $\mathrm{deg}(\mathcal{A})$ is divisible by $4$. When $\mathrm{deg}(\mathcal{A}) \geq 8$, our definition of the canonical quadratic pair on the Clifford algebra is extended from previous work of Dolphin and Quéguiner-Mathieu, who worked over fields of characteristic $2$. When $\mathrm{deg}(\mathcal{A})=4$, we show that no canonical quadratic pair exists.

Algebraic Geometry
Non-perfect pairings between Hecke algebra and modular forms over function fields

Cécile Armana

2024-08-21

Abstract:We study two analogs, for modular forms over $\mathbb{F}_{q}(T)$, of the pairing between Hecke algebra and cusp forms given by the first coefficient in the expansion. For Drinfeld modular forms, the $\mathbb{C}_{\infty}$-pairing is provided by the first coefficient of their $t$-expansion at infinity. For $\mathbb{Z}$-valued harmonic cochains, the $\mathbb{Z}$-pairing is given by their Fourier coefficient with respect to the trivial ideal. We prove that, contrarily to classical cusp forms, both pairings in weight $2$ are not perfect in a quite general setting, namely for the congruence subgroup $\Gamma_0(\mathfrak{n})$ with any prime ideal $\mathfrak{n}$ in $\mathbb{F}_{q}[T]$ of degree $\geq 5$. We show it by exhibiting a common element of the Hecke algebra in the kernels of both pairings and proving that it is non-zero using computations with modular symbols over $\mathbb{F}_{q}(T)$. Finally we present computational data on other kernel elements of these pairings.

Number Theory
Elliptic curves over Hasse pairs

Eleni Agathocleous,Antoine Joux,Daniele Taufer

2024-06-05

Abstract:We call a pair of distinct prime powers $(q_1,q_2) = (p_1^{a_1},p_2^{a_2})$ a Hasse pair if $|\sqrt{q_1}-\sqrt{q_2}| \leq 1$. For such pairs, we study the relation between the set $\mathcal{E}_1$ of isomorphism classes of elliptic curves defined over $\mathbb{F}_{q_1}$ with $q_2$ points, and the set $\mathcal{E}_2$ of isomorphism classes of elliptic curves over $\mathbb{F}_{q_2}$ with $q_1$ points. When both families $\mathcal{E}_i$ contain only ordinary elliptic curves, we prove that their isogeny graphs are isomorphic. When supersingular curves are involved, we describe which curves might belong to these sets. We also show that if both the $q_i$'s are odd and $\mathcal{E}_1 \cup \mathcal{E}_2 \neq \emptyset$, then $\mathcal{E}_1 \cup \mathcal{E}_2$ always contains an ordinary elliptic curve. Conversely, if $q_1$ is even, then $\mathcal{E}_1 \cup \mathcal{E}_2$ may contain only supersingular curves precisely when $q_2$ is a given power of a Fermat or a Mersenne prime. In the case of odd Hasse pairs, we could not rule out the possibility of an empty union $\mathcal{E}_1 \cup \mathcal{E}_2$, but we give necessary conditions for such a case to exist. In an appendix, Moree and Sofos consider how frequently Hasse pairs occur using analytic number theory, making a connection with Andrica's conjecture on the difference between consecutive primes.

Number Theory,Cryptography and Security
Sequences associated to elliptic curves

Betül Gezer

DOI: https://doi.org/10.48550/arXiv.1909.12654

2019-09-27

Abstract:Let $E$ be an elliptic curve defined over a field $K$ (with $char(K)\neq 2$) given by a Weierstrass equation and let $P=(x,y)\in E(K)$ be a point. Then for each $n$ $\geq 1$ and some $\gamma \in K^{\ast }$ we can write the $x$- and $y$-coordinates of the point $[n]P$ as \begin{equation*} \lbrack n]P=\left( \frac{\phi_n(P)}{\psi_n^2(P)}, \frac{\omega_n(P) }{\psi_n^3(P)} \right) =\left( \frac{\gamma^2 G_n(P)}{F_n^2(P)}, \frac{\gamma^3 H_n(P)}{F_n^3(P)}\right) \end{equation*} where $\phi_n,\psi_n,\omega_n \in K[x,y]$, $\gcd (\phi_n,\psi_n^2)=1$ and \begin{equation*} F_n(P) = \gamma^{1-n^2}\psi_n(P), G_n(P) = \gamma ^{-2n^{2}}\phi_{n}(P),H_{n}(P) = \gamma ^{-3n^{2}} \omega_n(P) \end{equation*} are suitably normalized division polynomials of $E$. In this work we show the coefficients of the elliptic curve $E$ can be defined in terms of the sequences of values $(G_{n}(P))_{n\geq 0}$ and $(H_{n}(P))_{n\geq 0}$ of the suitably normalized division polynomials of $E$ evaluated at a point $P \in E(K)$. Then we give the general terms of the sequences $(G_{n}(P))_{n\geq 0}$ and $(H_{n}(P))_{n\geq 0}$ associated to Tate normal form of an elliptic curve. As an application of this we determine square and cube terms in these sequences.

Number Theory
Odd and Even Elliptic Curves with Complex Multiplication

Yuri G. Zarhin

2024-08-04

Abstract:We call an order $O$ in a quadratic field $K$ odd (resp. even) if its discriminant is an odd (resp. even) integer. We call an elliptic curve $E$ over the field $C$ of complex numbers with CM odd (resp. even) if its endomorphism ring $End(E)$ is an odd (resp. even) order in the corresponding imaginary quadratic field. Suppose that $j(E)$ is a real number and let us consider the set $J(R,E)$ of all $j(E')$ where $E'$ is any elliptic curve that enjoys the following properties. 1) $E'$ is isogenous to $E$; 2) $j(E')$ is a real number; 3) $E'$ has the same parity as $E$. We prove that the closure of $J(R,E)$ in the set $R$ of real numbers is the closed semi-infinite interval $(-\infty,1728]$ (resp. the whole $R$) if $E$ is odd (resp. even). This paper was inspired by a question of Jean-Louis Colliot-Thélène and Alena Pirutka about the distribution of $j$-invariants of certain elliptic curves of CM type.

Number Theory,Algebraic Geometry
On $12$-congruences of elliptic curves

Sam Frengley

2023-09-14

Abstract:We construct infinite families of pairs of (geometrically non-isogenous) elliptic curves defined over $\mathbb{Q}$ with $12$-torsion subgroups that are isomorphic as Galois modules. This extends previous work of Chen and Fisher where it is assumed that the underlying isomorphism of $12$-torsion subgroups respects the Weil pairing. Our approach is to compute explicit birational models for the modular diagonal quotient surfaces which parametrise such pairs of elliptic curves. A key ingredient in the proof is to construct simple (algebraic) conditions for the $2$, $3$, or $4$-torsion subgroups of a pair of elliptic curves to be isomorphic as Galois modules. These conditions are given in terms of the $j$-invariants of the pair of elliptic curves.

Number Theory
Azumaya Algebras and Obstructions to Quadratic Pairs over a Scheme

Philippe Gille,Erhard Neher,Cameron Ruether

2023-10-23

Abstract:We investigate quadratic pairs for Azumaya algebras with involutions over a base scheme S as defined by Calm{è}s and Fasel, generalizing the case of quadratic pairs on central simple algebras over a field (Knus, Merkurjev, Rost, Tignol). We describe a cohomological obstruction for an Azumaya algebra over S with orthogonal involution to admit a quadratic pair. When S is affine this obstruction vanishes, however it is non-trivial in general. In particular, we construct explicit examples with non-trivial obstructions.

Algebraic Geometry,Rings and Algebras
Moduli of $\mathbb{Q}$-Gorenstein pairs and applications

Stefano Filipazzi,Giovanni Inchiostro

DOI: https://doi.org/10.1090/jag/823

2023-07-05

Abstract:We develop a framework to construct moduli spaces of $\mathbb{Q}$-Gorenstein pairs. To do so, we fix certain invariants; these choices are encoded in the notion of $\mathbb{Q}$-stable pair. We show that these choices give a proper moduli space with projective coarse moduli space and they prevent some pathologies of the moduli space of stable pairs when the coefficients are smaller than $\frac{1}{2}$. Lastly, we apply this machinery to provide an alternative proof of the projectivity of the moduli space of stable pairs.

Algebraic Geometry
Quaternary Legendre pairs II

I.S. Kotsireas,C. Koutschan,A. Winterhof

2024-08-29

Abstract:Quaternary Legendre pairs are pertinent to the construction of quaternary Hadamard matrices and have many applications, for example in coding theory and communications. In contrast to binary Legendre pairs, quaternary ones can exist for even length $\ell$ as well. It is conjectured that there is a quaternary Legendre pair for any even $\ell$. Before, the smallest open case had been $\ell=28$ and $\ell=38$ was the only length $\le 60$ resolved before. Here we provide constructions for $\ell=28,30,32$, and $34$. In parallel and independently, Jedwab and Pender found a construction of quaternary Legendre pairs of length $\ell=(q-1)/2$ for any prime power $q\equiv 1\bmod 4$, which in particular covers $\ell=30$, $36$, and $40$, so that now $\ell=42$ is the smallest unresolved case. The main new idea of this paper is a way to separate the search for the subsequences along even and odd indices which substantially reduces the complexity of the search algorithm. In addition, we use Galois theory for cyclotomic fields to derive conditions which improve the PSD test.

Combinatorics
Weil pairing on twisted curves

Ashwin Deopurkar

2023-10-13

Abstract:We define and study the Weil pairing on the moduli of twisted curves. If $X$ is a twisted curve, then we can combinatorially describe a certain subgroup and a quotient group of $\text{Pic}(X)[2]$ that are Weil dual. Moreover, the pairing between them can be realized as combinatorial integration-homology pairing on the dual graph of $X$. We also prove that the kernel of the tropicalization is isotropic for the Weil pairing.

Algebraic Geometry
Families of Prime-Order Endomorphism-Equipped Embedded Curves on Pairing-Friendly Curves

Antonio Sanso,Youssef El Housni

DOI: https://doi.org/10.1007/s00145-024-09514-5

2024-10-10

Journal of Cryptology

Abstract:This paper presents a procedure to construct parameterized families of prime-order endomorphism-equipped elliptic curves that are defined over the scalar field of pairing-friendly elliptic curve families such as Barreto–Lynn–Scott (BLS), Barreto–Naehrig (BN) and Kachisa–Schaefer–Scott (KSS), providing general formulas derived from the curves' seeds. These so-called "embedded curves" are of major interest in SNARK applications that prove statements involving elliptic curve arithmetic i.e. digital signatures. In this paper, the mathematical groundwork is laid, and advantages of these embeddings are discussed. Additionally, practical examples in the case of BN and BLS families are included and impossibility results regarding KSS families are explained.

computer science, theory & methods,engineering, electrical & electronic,mathematics, applied
Pairing Powers of Pythagorean Pairs

Lorenz Halbeisen,Norbert Hungerbühler,Arman Shamsi Zargar

2024-04-24

Abstract:A pair $(a, b)$ of positive integers is a pythagorean pair if $a^2 + b^2$ is a square. A pythagorean pair $(a, b)$ is called a pythapotent pair of degree $h$ if there is another pythagorean pair $(k,l)$, which is not a multiple of $(a,b)$, such that $(a^hk, b^hl)$ is a pythagorean pair. To each pythagorean pair $(a, b)$ we assign an elliptic curve $\Gamma_{a^h ,b^h}$ for $h\ge 3$ with torsion group isomorphic to $\mathbb Z/2\mathbb Z \times \mathbb Z/4\mathbb Z$ such that $\Gamma_{a^h,b^h}$ has positive rank over $\mathbb Q$ if and only if $(a,b)$ is a pythapotent pair of degree $h$. As a side result, we get that if $(a, b)$ is a pythapotent pair of degree $h$, then there exist infinitely many pythagorean pairs $(k,l)$, not multiples of each other, such that $(a^hk,b^hl)$ is a pythagorean pair. In particular, we show that any pythagorean pair is always a pythapotent pair of degree 3. In a previous work, pythapotent pairs of degrees 1 and 2 have been studied.

Number Theory
Moduli of Q-Gorenstein pairs and applications

Stefano Filipazzi,Giovanni Inchiostro

DOI: https://doi.org/10.1090/jag/823

2024-01-02

Journal of Algebraic Geometry

Abstract:We develop a framework to construct moduli spaces of Q {\mathbb {Q}} -Gorenstein pairs. To do so, we fix certain invariants; these choices are encoded in the notion of Q {\mathbb {Q}} -stable pair . We show that these choices give a proper moduli space with projective coarse moduli space and they prevent some pathologies of the moduli space of stable pairs when the coefficients are smaller than 1 2 \frac {1}{2} . Lastly, we apply this machinery to provide an alternative proof of the projectivity of the moduli space of stable pairs.

mathematics

Sesquilinear pairings on elliptic curves

Extending class group action attacks via sesquilinear pairings

The explicit duality correspondence of (Sp(p,q),O∗(2n))

A Weil pairing on the $p$-torsion of ordinary elliptic curves over the dual numbers of $K$

Sheaf stable pairs, Quot-schemes, and birational geometry

On a comparison of Cassels pairings of different elliptic curves

Linear algebra over T-pairs

Pairing Computation on Elliptic Curves of Jacobi Quartic Form.

The Canonical Quadratic Pair on Clifford Algebras over Schemes

Non-perfect pairings between Hecke algebra and modular forms over function fields

Elliptic curves over Hasse pairs

Sequences associated to elliptic curves

Odd and Even Elliptic Curves with Complex Multiplication

On $12$-congruences of elliptic curves

Azumaya Algebras and Obstructions to Quadratic Pairs over a Scheme

Moduli of $\mathbb{Q}$-Gorenstein pairs and applications

Quaternary Legendre pairs II

Weil pairing on twisted curves

Families of Prime-Order Endomorphism-Equipped Embedded Curves on Pairing-Friendly Curves

Pairing Powers of Pythagorean Pairs

Moduli of Q-Gorenstein pairs and applications