View source for Supersingular elliptic curve

{{Short description|Mathematical concept}}
In [[algebraic geometry]], '''supersingular elliptic curves''' form a certain class of [[elliptic curve]]s over a [[field (algebra)|field]] of characteristic <math>p>0</math> with unusually large [[endomorphism ring]]s. Elliptic curves over such fields which are not supersingular are called ''ordinary'' and these two classes of elliptic curves behave fundamentally differently in many aspects. {{harvtxt|Hasse|1936}} discovered supersingular elliptic curves during his work on the Riemann hypothesis for elliptic curves by observing that positive characteristic elliptic curves could have endomorphism rings of unusually large rank 4, and {{harvtxt|Deuring|1941}} developed their basic theory.

The term "supersingular" has nothing to do with [[Singular point of a curve|singular points of curves]], and all supersingular elliptic curves are non-singular.  It comes from the phrase "[[Singular moduli|singular values]] of the <math>j</math>-invariant" used for values of the [[j-invariant|{{mvar|j}}-invariant]] for which a complex elliptic curve has [[complex multiplication]]. The complex elliptic curves with complex multiplication are those for which the endomorphism ring has the maximal possible rank 2. In positive [[Characteristic (algebra)|characteristic]] it is possible for the endomorphism ring to be even larger: it can be an [[order (ring theory)|order]] in a [[quaternion algebra]] of dimension 4, in which case the elliptic curve is supersingular. 

If an elliptic curve defined over the integers becomes supersingular when reduced mod <math>p</math>, we say <math>p</math> is a [[Supersingular_prime_(algebraic_number_theory)|supersingular prime]] for that particular elliptic curve.  There is also another meaning of "supersingular prime": primes <math>p</math> such that every supersingular elliptic curve in characteristic <math>p</math> can be defined over the prime subfield <math>\mathbb{F}_p</math> rather than <math>\mathbb{F}_{p^m}</math> are called [[Supersingular_prime_(moonshine_theory)|supersingular primes]].  There are only 15 such primes.

==Definition==

There are many different but equivalent ways of defining supersingular elliptic curves that have been used. Some of the ways of defining them are given below. Let <math>K</math> be a field with [[algebraic closure]] <math>\overline{K}</math> and <math>E</math> an [[elliptic curve]] over <math>K</math>.

*The <math>\overline{K}</math>-valued points <math>E(\overline{K})</math> have the structure of an [[abelian group]]. For every <math>n</math>, we have a multiplication map <math>[n]: E\to E</math>. Its kernel is denoted by <math>E[n]</math>. Now assume that the characteristic of <math>K</math> is <math>p>0</math>. Then one can show that either
:<math> E[p^r](\overline{K}) \cong \begin{cases} 0, \,\mbox{ or}\\ \mathbb{Z}/p^r\mathbb{Z} \end{cases}</math>
:for <math>r=1,2,3,\dots</math> In the first case, <math>E</math> is called ''supersingular''.  Otherwise it is called ''ordinary''. In other words, an elliptic curve is supersingular if and only if the group of geometric points of order <math>p</math> is trivial.

*Supersingular elliptic curves have many endomorphisms over the algebraic closure <math>\overline{K}</math> in the sense that an elliptic curve is supersingular if and only if its endomorphism algebra (over <math>\overline{K}</math>) is an order in a quaternion algebra. Thus, their endomorphism algebra (over <math>\overline{K}</math>)  has rank 4, while the endomorphism group of every other elliptic curve has only rank 1 or&nbsp;2. The endomorphism ring of a supersingular elliptic curve can have rank less than 4, and it may be necessary to take a finite extension of the base field ''K'' to make the rank of the endomorphism ring 4. In particular the endomorphism ring of an elliptic curve over a field of prime order is never of rank 4, even if the elliptic curve is supersingular.
* Let ''G'' be the [[formal group]] associated to&nbsp;''E''. Since ''K'' is of positive characteristic, we can define its [[formal group#The height of a formal group law|height]] ht(''G''), which is 2 if and only if E is supersingular and else is&nbsp;1.
*We have a [[Frobenius morphism]] <math>F: E\to E</math>, which induces a map in cohomology

:<math>F^*: H^1(E, \mathcal{O}_E) \to H^1(E,\mathcal{O}_E)</math>.

:The elliptic curve ''E'' is supersingular if and only if <math>F^*</math> equals 0.
*We have a [[Verschiebung operator]] <math>V: E\to E</math>, which induces a map on the global 1-forms

:<math>V^*: H^0(E, \Omega^1_E) \to H^0(E,\Omega^1_E)</math>.

:The elliptic curve ''E'' is supersingular if and only if <math>V^*</math> equals 0.

*An elliptic curve is supersingular if and only if its [[Hasse invariant of an elliptic curve|Hasse invariant]] is 0.
*An elliptic curve is supersingular if and only if the group scheme of points of order ''p'' is connected.
*An elliptic curve is supersingular if and only if the dual of the Frobenius map is purely inseparable.
*An elliptic curve is supersingular if and only if the "multiplication by ''p''" map is purely inseparable and the ''j''-invariant of the curve lies in a quadratic extension of the prime field of ''K'', a finite field of order ''p''<sup>2</sup>.
*Suppose ''E'' is in [[Legendre form]], defined by the equation <math>y^2 = x(x-1)(x-\lambda)</math>, and ''p'' is odd. Then for <math>\lambda \neq 0, 1</math>, ''E'' is supersingular if and only if the sum

:<math>\sum_{i=0}^n {n\choose{i}}^2\lambda^i</math>

:vanishes, where <math>n = (p-1)/2</math>. Using this formula, one can show that there are only finitely many supersingular elliptic curves over ''K'' (up to isomorphism).

*Suppose ''E'' is given as a cubic curve in the projective plane given by a homogeneous cubic polynomial ''f''(''x'',''y'',''z''). Then ''E'' is supersingular if and only if the coefficient of (''xyz'')<sup>''p''–1</sup> in ''f''<sup>''p''–1</sup> is zero.
*If the field ''K'' is a finite field of order ''q'', then an elliptic curve over ''K'' is supersingular if and only if the trace of the ''q''-power Frobenius endomorphism is congruent to zero modulo ''p''.
:When ''q''=''p'' is a prime greater than 3 this is equivalent to having the trace of Frobenius equal to zero (by the [[Hasse bound]]); this does not hold for ''p''=2 or 3.

==Examples==
*If ''K'' is a field of characteristic 2, every curve defined by an equation of the form

:<math>y^2+a_3y = x^3+a_4x+a_6</math>

:with ''a''<sub>3</sub> nonzero is a supersingular elliptic curve, and conversely every supersingular curve is isomorphic to one of this form (see Washington2003, p.&nbsp;122).
*Over the field with 2 elements any supersingular elliptic curve is isomorphic to exactly one of the supersingular elliptic curves
:<math>y^2+y = x^3+x+1</math>
:<math>y^2+y = x^3+1</math>
:<math>y^2+y = x^3+x</math>
:with 1, 3, and 5 points. This gives examples of supersingular elliptic curves over a prime field with different numbers of points.
*Over an algebraically closed field of characteristic 2 there is (up to isomorphism) exactly one supersingular elliptic curve, given by
:<math>y^2+y=x^3</math>,
:with ''j''-invariant 0. Its ring of endomorphisms is the ring of [[Hurwitz quaternions]], generated by the two automorphisms <math>x\rightarrow x\omega</math> and <math>y\rightarrow y+x+\omega,x\rightarrow x+1</math> where <math>\omega^2+\omega+1=0</math> is a primitive cube root of unity. Its group of automorphisms is the group of units of the Hurwitz quaternions, which has order 24, contains a normal subgroup of order 8 isomorphic to the [[quaternion group]], and is the [[binary tetrahedral group]]

*If ''K'' is a field of characteristic 3, every curve defined by an equation of the form

:<math>y^2 = x^3+a_4x+a_6</math>

:with ''a''<sub>4</sub> nonzero is a supersingular elliptic curve, and conversely every supersingular curve is isomorphic to one of this form (see Washington2003, p.&nbsp;122).

*Over the field with 3 elements any supersingular elliptic curve is isomorphic to exactly one of the supersingular elliptic curves
:<math>y^2 = x^3-x</math>
:<math>y^2 = x^3-x+1</math>
:<math>y^2 = x^3-x+2</math>
:<math>y^2 = x^3+x</math>

*Over an algebraically closed field of characteristic 3 there is (up to isomorphism) exactly one supersingular elliptic curve, given by
:<math>y^2=x^3-x</math>,
:with ''j''-invariant 0. Its ring of endomorphisms is the ring of quaternions of the form ''a''+''bj'' with ''a'' and ''b'' [[Eisenstein integer]]s. , generated by the two automorphisms <math>x\rightarrow x+1</math> and <math>y\rightarrow iy,x\rightarrow -x</math> where ''i'' is a primitive fourth root of unity. Its group of automorphisms is the group of units of these quaternions, which has order 12 and contains a normal subgroup of order 3 with quotient a cyclic group of order 4.
*For <math>\mathbb{F}_p</math> with p>3 the elliptic curve defined by <math>y^2 = x^3+1</math> with ''j''-invariant 0 is supersingular if and only if <math>p\equiv 2 \text{(mod 3)}</math> and the elliptic curve defined by <math>y^2 = x^3+x</math> with ''j''-invariant 1728 is supersingular if and only if <math>p\equiv 3 \text{(mod 4)}</math>  (see Washington2003, 4.35).
*The elliptic curve given by <math>y^2 = x(x-1)(x+2)</math> is nonsingular over <math>\mathbb{F}_p</math> for <math>p\neq 2,3</math>. It is supersingular for p = 23 and ordinary for every other <math>p\leq 73</math> (see Hartshorne1977, 4.23.6).
*The [[modular curve]] ''X''<sub>0</sub>(11) has ''j''-invariant −2<sup>12</sup>11<sup>−5</sup>31<sup>3</sup>, and is isomorphic to the curve ''y''<sup>2</sup> + ''y'' = ''x''<sup>3</sup> − ''x''<sup>2</sup> − 10''x'' − 20. The primes ''p'' for which it is supersingular are those for which the coefficient of ''q''<sup>''p''</sup> in η(τ)<sup>2</sup>η(11τ)<sup>2</sup> vanishes mod ''p'', and are given by the list
:2, 19, 29, 199, 569, 809, 1289, 1439, 2539, 3319, 3559, 3919, 5519, 9419, 9539, 9929,... {{oeis|A006962}}
*If an elliptic curve over the rationals has complex multiplication then the set of primes for which it is supersingular has density 1/2. If it does not have complex multiplication then [[Jean-Pierre Serre|Serre]] showed that the set of primes for which it is supersingular has density zero. {{harvtxt|Elkies|1987}} showed that any elliptic curve defined over the rationals is supersingular for an infinite number of primes.

==Classification==

For each positive characteristic there are only a finite number of possible ''j''-invariants of supersingular elliptic curves.  Over an algebraically closed field ''K'' an elliptic curve is determined by its ''j''-invariant, so there are only a finite number of supersingular elliptic curves. If each such curve is weighted by 1/|Aut(''E'')| then the total weight of the supersingular curves is (''p''–1)/24. Elliptic curves have automorphism groups of order 2 unless their ''j''-invariant is 0 or 1728, so the supersingular elliptic curves are classified as follows.
There are exactly ⌊''p''/12⌋ supersingular elliptic curves with automorphism groups of order 2. In addition if ''p''≡3 mod 4 there is a supersingular  elliptic curve  (with ''j''-invariant 1728) whose automorphism group is cyclic or order 4 unless ''p''=3 in which case it has order 12, and if ''p''≡2 mod 3 there is a supersingular  elliptic curve (with ''j''-invariant 0) whose automorphism group is cyclic of order 6 unless ''p''=2 in which case it has order 24.

{{harvtxt|Birch|Kuyk|1975}} give a table of all ''j''-invariants of supersingular curves for primes up to 307. For the first few primes the supersingular elliptic curves are given as follows.  The number of supersingular values of j other than 0 or 1728 is the integer part of (p−1)/12.
{|class="wikitable" style="margin: 1em auto; text-align: center;"
!prime
!supersingular j invariants
|-
|2
|0
|-
|3
|1728
|-
|5
|0
|-
|7
|1728
|-
|11
|0, 1728
|-
|13
|5
|-
|17
|0,8
|-
|19
|7, 1728
|-
|23
|0, 19, 1728
|-
|29
|0, 2, 25
|-
|31
|2, 4, 1728
|-
|37
|8, 3±√15
|}

All primes ''p'' < 37 are [[Supersingular_prime_(moonshine_theory)|supersingular]] in the sense that every supersingular elliptic curve in characteristic ''p'' can be defined over the prime subfield <math>F_p</math> rather than <math>F_{p^m}</math> for larger <math>m</math>.  The prime 37 is the first prime that is not supersingular in this sense.  This is why it is the first with a supersingular elliptic curve whose ''j''-invariant is not a (rational) integer.

==See also==
*[[Supersingular prime (for an elliptic curve)|Supersingular prime (algebraic number theory)]]
*[[Supersingular prime (moonshine theory)]]
*[[Supersingular variety]]

==References==
*{{Citation | editor1-last=Birch | editor1-first=B. J. | editor-link=Bryan John Birch | editor2-last=Kuyk | editor2-first=W. | title=Modular functions of one variable. IV | publisher=[[Springer-Verlag]] | location=Berlin, New York | series=Lecture Notes in Mathematics | isbn=978-3-540-07392-5 | doi=10.1007/BFb0097591 | mr=0376533 | year=1975 | volume=476 | chapter=Table 6 | pages=142–144 | zbl=0315.14014 }}
*{{citation|MR=0005125|last=Deuring|first= Max|authorlink=Max Deuring|title=Die Typen der Multiplikatorenringe elliptischer Funktionenkörper
|journal=Abh. Math. Sem. Univ. Hamburg |volume=14|year=1941|pages=197–272|doi=10.1007/BF02940746}}
*{{Citation | last=Elkies | first=Noam D. | authorlink=Noam Elkies | title=The existence of infinitely many supersingular primes for every elliptic curve over Q | doi=10.1007/BF01388985 | mr=903384 | zbl=0631.14024 | year=1987 | journal=[[Inventiones Mathematicae]] | issn=0020-9910 | volume=89 | issue=3 | pages=561–567}}
* [[Robin Hartshorne]] (1977), ''Algebraic Geometry'', Springer. {{ISBN|1-4419-2807-3}}
*{{citation|last=Hasse|authorlink=Helmut Hasse|title=Zur Theorie der abstrakten elliptischen Funktionenkörper I. Die Struktur der Gruppe der Divisorenklassen endlicher Ordnung.  II. Automorphismen und Meromorphismen. Das Additionstheorem. III. Die Struktur des Meromorphismenrings. Die Riemannsche Vermutung.|journal=J. Reine Angew. Math. |volume=175|pages= 55–62, 69–88, 193–208 |year=1936|url=http://gdz.sub.uni-goettingen.de/en/dms/loader/toc/?PPN=PPN243919689_0175}}
* [[Joseph H. Silverman]] (2009), ''The Arithmetic of Elliptic Curves'', Springer. {{ISBN|0-387-09493-8}}
* [[Lawrence C. Washington]] (2003), ''Elliptic Curves'', Chapman&Hall. {{ISBN|1-58488-365-0}}

{{Algebraic curves navbox}}

[[Category:Elliptic curves]]