44 research outputs found
On the evaluation of modular polynomials
We present two algorithms that, given a prime ell and an elliptic curve E/Fq,
directly compute the polynomial Phi_ell(j(E),Y) in Fq[Y] whose roots are the
j-invariants of the elliptic curves that are ell-isogenous to E. We do not
assume that the modular polynomial Phi_ell(X,Y) is given. The algorithms may be
adapted to handle other types of modular polynomials, and we consider
applications to point counting and the computation of endomorphism rings. We
demonstrate the practical efficiency of the algorithms by setting a new
point-counting record, modulo a prime q with more than 5,000 decimal digits,
and by evaluating a modular polynomial of level ell = 100,019.Comment: 19 pages, corrected a typo in equation (8) and added equation (9
Modular polynomials via isogeny volcanoes
We present a new algorithm to compute the classical modular polynomial Phi_n
in the rings Z[X,Y] and (Z/mZ)[X,Y], for a prime n and any positive integer m.
Our approach uses the graph of n-isogenies to efficiently compute Phi_n mod p
for many primes p of a suitable form, and then applies the Chinese Remainder
Theorem (CRT). Under the Generalized Riemann Hypothesis (GRH), we achieve an
expected running time of O(n^3 (log n)^3 log log n), and compute Phi_n mod m
using O(n^2 (log n)^2 + n^2 log m) space. We have used the new algorithm to
compute Phi_n with n over 5000, and Phi_n mod m with n over 20000. We also
consider several modular functions g for which Phi_n^g is smaller than Phi_n,
allowing us to handle n over 60000.Comment: corrected a typo in equation (14), 31 page
Tate-Shafarevich groups of constant elliptic curves and isogeny volcanos
We describe the structure of Tate-Shafarevich groups of a constant elliptic
curves over function fields by exploiting the volcano structure of isogeny
graphs of elliptic curves over finite fields
Pairing the Volcano
Isogeny volcanoes are graphs whose vertices are elliptic curves and whose
edges are -isogenies. Algorithms allowing to travel on these graphs were
developed by Kohel in his thesis (1996) and later on, by Fouquet and Morain
(2001). However, up to now, no method was known, to predict, before taking a
step on the volcano, the direction of this step. Hence, in Kohel's and
Fouquet-Morain algorithms, many steps are taken before choosing the right
direction. In particular, ascending or horizontal isogenies are usually found
using a trial-and-error approach. In this paper, we propose an alternative
method that efficiently finds all points of order such that the
subgroup generated by is the kernel of an horizontal or an ascending
isogeny. In many cases, our method is faster than previous methods. This is an
extended version of a paper published in the proceedings of ANTS 2010. In
addition, we treat the case of 2-isogeny volcanoes and we derive from the group
structure of the curve and the pairing a new invariant of the endomorphism
class of an elliptic curve. Our benchmarks show that the resulting algorithm
for endomorphism ring computation is faster than Kohel's method for computing
the -adic valuation of the conductor of the endomorphism ring for small
Isogeny graphs of ordinary abelian varieties
Fix a prime number . Graphs of isogenies of degree a power of
are well-understood for elliptic curves, but not for higher-dimensional abelian
varieties. We study the case of absolutely simple ordinary abelian varieties
over a finite field. We analyse graphs of so-called -isogenies,
resolving that they are (almost) volcanoes in any dimension. Specializing to
the case of principally polarizable abelian surfaces, we then exploit this
structure to describe graphs of a particular class of isogenies known as
-isogenies: those whose kernels are maximal isotropic subgroups
of the -torsion for the Weil pairing. We use these two results to write
an algorithm giving a path of computable isogenies from an arbitrary absolutely
simple ordinary abelian surface towards one with maximal endomorphism ring,
which has immediate consequences for the CM-method in genus 2, for computing
explicit isogenies, and for the random self-reducibility of the discrete
logarithm problem in genus 2 cryptography.Comment: 36 pages, 4 figure