Counting hyperelliptic curves that admit a Koblitz model

Let k be a finite field of odd characteristic. We find a closed formula for the number of k-isomorphism classes of pointed, and non-pointed, hyperelliptic curves of genus g over k, admitting a Koblitz model. These numbers are expressed as a polynomial in the cardinality q of k, with integer coefficients (for pointed curves) and rational coefficients (for non-pointed curves). The coefficients depend on g and the set of divisors of q-1 and q+1. These formulas show that the number of hyperelliptic curves of genus g suitable (in principle) of cryptographic applications is asymptotically (1-e^{-1})2q^{2g-1}, and not 2q^{2g-1} as it was believed. The curves of genus g=2 and g=3 are more resistant to the attacks to the DLP; for these values of g the number of curves is respectively (91/72)q^3+O(q^2) and (3641/2880)q^5+O(q^4)

Elliptic Curves over Real Quadratic Fields are Modular

We prove that all elliptic curves defined over real quadratic fields are modular.Comment: 38 pages. Magma scripts available as ancillary files with this arXiv versio

The Cassels-Tate pairing on polarized abelian varieties

Let (A,\lambda) be a principally polarized abelian variety defined over a global field k, and let \Sha(A) be its Shafarevich-Tate group. Let \Sha(A)_\nd denote the quotient of \Sha(A) by its maximal divisible subgroup. Cassels and Tate constructed a nondegenerate pairing \Sha(A)_\nd \times \Sha(A)_\nd \rightarrow \Q/\Z. If A is an elliptic curve, then by a result of Cassels the pairing is alternating. But in general it is only antisymmetric. Using some new but equivalent definitions of the pairing, we derive general criteria deciding whether it is alternating and whether there exists some alternating nondegenerate pairing on \Sha(A)_\nd. These criteria are expressed in terms of an element c \in \Sha(A)_\nd that is canonically associated to the polarization \lambda. In the case that A is the Jacobian of some curve, a down-to-earth version of the result allows us to determine effectively whether \#\Sha(A) (if finite) is a square or twice a square. We then apply this to prove that a positive proportion (in some precise sense) of all hyperelliptic curves of even genus g \ge 2 over \Q have a Jacobian with nonsquare \#\Sha (if finite). For example, it appears that this density is about 13% for curves of genus 2. The proof makes use of a general result relating global and local densities; this result can be applied in other situations.Comment: 41 pages, published versio

The orbifold cohomology of moduli of hyperelliptic curves

We study the inertia stack of [M_{0,n}/S_n], the quotient stack of the moduli space of smooth genus 0 curves with n marked points via the action of the symmetric group S_n. Then we see how from this analysis we can obtain a description of the inertia stack of H_g, the moduli stack of hyperelliptic curves of genus g. From this, we can compute additively the Chen-Ruan (or orbifold) cohomology of H_g.Comment: 15 pages. We correct an error in Proposition 3.3 of the published paper, and its consequence