I am reading Schoof's 1995 paper, Counting points on elliptic curves over finite fields, page 236, Proposition 6.1(i). I am trying to understand page 238 (second paragraph) of the proof: if the conductor is $1$ then $j$ invariant is $0$, or $1728$.

In Silverman's book, The Arithmetic of Elliptic Curves, Section III.10 on page 103, a relation between the Automorphism Group and $j$-invariant is given. Is there any relation between the endomorphism ring of an elliptic curve to the $j$-invariant? When $j=0,1728$, how does the endomorphism ring look?

If the endomorphism ring is equivalent to the maximal order of the field, why is the $j$ invariant equal to $0$ or $1728$?

I know that given $E: y^2=x^3+Ax+B$, if $A=0$ then $j=0$ and if $B=0$ then $j=1728$. The endomorphism ring will be isomorphic to an imaginary quadratic field if $E$ is ordinary and to a quaternion algebra if $E$ is supersingular.

Please help me to understand the relation between the endomorphism ring and $j$ invariant.

  • $\begingroup$ I'm voting to close this question as off-topic because it is about general mathematics. $\endgroup$ – fkraiem Jun 23 '17 at 9:40
  • $\begingroup$ Silverman himself notes in that very section that "It is generally a nontrivial matter to determine the exact structure of an endomorphism ring", but that this is simple for the automorphism group. $\endgroup$ – user47922 Jun 23 '17 at 11:44
  • $\begingroup$ Indeed, the j-invariant is relevant for automorphisms because those contain invertible isogenies. j-invariants characterize isomorphisms between curves. They aren't relevant for general endomorphisms. $\endgroup$ – user47922 Jun 23 '17 at 11:48
  • 4
    $\begingroup$ @fkraiem I'd say let's keep this kind of question. It is very close to crypto and it is good to discuss in that context. $\endgroup$ – Elias Jun 23 '17 at 12:29
  • $\begingroup$ @galvatron Thank you very much, I am sorry, I could have read little bit more, I found a answer from schoof's article, page 227 last paragraph and page 225, 3rd para. I will try to understand $\endgroup$ – student Jun 23 '17 at 14:40

If the endomorphism ring is equivalent to the maximal order of the field, why is the $j$ invariant equal to $0$ or $1728$?

The main source of all these theorems about endomorphism rings is in Deuring's Die Typen der Multiplikatorenringe elliptischer Funktionenkörper. Unfortunately, I can't find a free copy online, and I don't have a copy either. Another source besides Silverman's books is Washington's (not free) Elliptic Curves: Number Theory and Cryptography.

In any case, in those references, you can find a proof the following: The endomorphism ring of supersingular elliptic curves is a maximal order in a quarternion algebra. Silverman presents it as a starred homework assignment in the book you reference (problem 3.18), but I think going through it all is a bit too off-topic for this site.

As I mentioned in the comments, the $j$-invariant is useful in characterizing isomorphisms between curves, and if two curves are isomorphic (e.g., a curve and its quadratic twist), then they have the same $j$-invariant, but their associated endomorphism rings are isomorphic.

In general though, characterizing the endomorphism group is more complicated than the automorphism group. As Silverman notes in the section you reference:

If an elliptic curve is given by a Weierstrass equation, it is generally a nontrivial matter to determine the exact structure of its endomorphism ring. The situation is much simpler for the automorphism group.

$j$-invariants are relevant for automorphisms because those contain invertible isogenies, but endomorphisms aren't necessarily invertible. $j$-invariants characterize isomorphisms between curves. Thus I wouldn't expect there to be a simple relationship between $j$-invariants and endomorphism rings.

  • 2
    $\begingroup$ Thank you very much for your nice answer. You have explained it clearly. $\endgroup$ – student Jun 25 '17 at 18:30

Over $\mathbb{F}_p$ an elliptic curve and its quadratic twist have isomorphic endomorphism rings. If $p\equiv 1 \pmod{3}$, the six curves with $j=0$ all have their endomorphism ring isomorphic to $\mathbb{Z}[\frac{1+\sqrt{-3}}{2}]$ and if $p\equiv 1\pmod{4}$, the four curves $E$ with $j=1728$ all have $End(E)$ isomorphic to the ring of Gaussian integers $\mathbb{Z}[i]$


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.