# Endomorphism ring of a Elliptic Curve and $j$ invariant

I am reading Schoof's 1995 paper, Counting points on elliptic curves over finite fields, page 236, Proposition 6.1(i). I am trying to understand page 238 (second paragraph) of the proof: if the conductor is $1$ then $j$ invariant is $0$, or $1728$.

In Silverman's book, The Arithmetic of Elliptic Curves, Section III.10 on page 103, a relation between the Automorphism Group and $j$-invariant is given. Is there any relation between the endomorphism ring of an elliptic curve to the $j$-invariant? When $j=0,1728$, how does the endomorphism ring look?

If the endomorphism ring is equivalent to the maximal order of the field, why is the $j$ invariant equal to $0$ or $1728$?

I know that given $E: y^2=x^3+Ax+B$, if $A=0$ then $j=0$ and if $B=0$ then $j=1728$. The endomorphism ring will be isomorphic to an imaginary quadratic field if $E$ is ordinary and to a quaternion algebra if $E$ is supersingular.

Please help me to understand the relation between the endomorphism ring and $j$ invariant.

• I'm voting to close this question as off-topic because it is about general mathematics. – fkraiem Jun 23 '17 at 9:40
• Silverman himself notes in that very section that "It is generally a nontrivial matter to determine the exact structure of an endomorphism ring", but that this is simple for the automorphism group. – user47922 Jun 23 '17 at 11:44
• Indeed, the j-invariant is relevant for automorphisms because those contain invertible isogenies. j-invariants characterize isomorphisms between curves. They aren't relevant for general endomorphisms. – user47922 Jun 23 '17 at 11:48
• @fkraiem I'd say let's keep this kind of question. It is very close to crypto and it is good to discuss in that context. – Elias Jun 23 '17 at 12:29
• @galvatron Thank you very much, I am sorry, I could have read little bit more, I found a answer from schoof's article, page 227 last paragraph and page 225, 3rd para. I will try to understand – student Jun 23 '17 at 14:40

If the endomorphism ring is equivalent to the maximal order of the field, why is the $j$ invariant equal to $0$ or $1728$?

The main source of all these theorems about endomorphism rings is in Deuring's Die Typen der Multiplikatorenringe elliptischer Funktionenkörper. Unfortunately, I can't find a free copy online, and I don't have a copy either. Another source besides Silverman's books is Washington's (not free) Elliptic Curves: Number Theory and Cryptography.

In any case, in those references, you can find a proof the following: The endomorphism ring of supersingular elliptic curves is a maximal order in a quarternion algebra. Silverman presents it as a starred homework assignment in the book you reference (problem 3.18), but I think going through it all is a bit too off-topic for this site.

As I mentioned in the comments, the $j$-invariant is useful in characterizing isomorphisms between curves, and if two curves are isomorphic (e.g., a curve and its quadratic twist), then they have the same $j$-invariant, but their associated endomorphism rings are isomorphic.

In general though, characterizing the endomorphism group is more complicated than the automorphism group. As Silverman notes in the section you reference:

If an elliptic curve is given by a Weierstrass equation, it is generally a nontrivial matter to determine the exact structure of its endomorphism ring. The situation is much simpler for the automorphism group.

$j$-invariants are relevant for automorphisms because those contain invertible isogenies, but endomorphisms aren't necessarily invertible. $j$-invariants characterize isomorphisms between curves. Thus I wouldn't expect there to be a simple relationship between $j$-invariants and endomorphism rings.

• Thank you very much for your nice answer. You have explained it clearly. – student Jun 25 '17 at 18:30

Over $\mathbb{F}_p$ an elliptic curve and its quadratic twist have isomorphic endomorphism rings. If $p\equiv 1 \pmod{3}$, the six curves with $j=0$ all have their endomorphism ring isomorphic to $\mathbb{Z}[\frac{1+\sqrt{-3}}{2}]$ and if $p\equiv 1\pmod{4}$, the four curves $E$ with $j=1728$ all have $End(E)$ isomorphic to the ring of Gaussian integers $\mathbb{Z}[i]$