Supersingular elliptic curve

Short description: Mathematical concept

This article includes a list of references, related reading or external links, but its sources remain unclear because it lacks inline citations. Please help to improve this article by introducing more precise citations. (February 2026) (Learn how and when to remove this template message)

|

In algebraic geometry, supersingular elliptic curves form a certain class of elliptic curves over a field of characteristic p>0 with unusually large endomorphism rings. Elliptic curves over such fields which are not supersingular are called ordinary and these two classes of elliptic curves behave fundamentally differently in many aspects. (Hasse 1936) discovered supersingular elliptic curves during his work on the Riemann hypothesis for elliptic curves by observing that positive characteristic elliptic curves could have endomorphism rings of unusually large rank 4, and (Deuring 1941) developed their basic theory.

The term "supersingular" has nothing to do with singular points of curves, and all supersingular elliptic curves are non-singular. It comes from the phrase "singular values of the j-invariant" used for values of the j-invariant for which a complex elliptic curve has complex multiplication. The complex elliptic curves with complex multiplication are those for which the endomorphism ring has the maximal possible rank 2. In positive characteristic it is possible for the endomorphism ring to be even larger: it can be an order in a quaternion algebra of dimension 4, in which case the elliptic curve is supersingular.

Given an elliptic curve defined over the rationals and p a prime of good reduction (that is, the curve remains an elliptic curve when reduced mod p) such that the curve becomes supersingular when reduced mod p, we say p is a supersingular prime for that particular elliptic curve. There is also another meaning of "supersingular prime": primes p such that every supersingular elliptic curve in characteristic p can be defined over the prime subfield 𝔽p rather than 𝔽pm are called supersingular primes. There are only 15 such primes.

## Contents

* 1 Definition
* 2 Examples
* 3 Classification
* 4 See also
* 5 References

## Definition

There are many different but equivalent ways of defining supersingular elliptic curves that have been used. Some of the ways of defining them are given below. Let K be a field with algebraic closure K‾ and E an elliptic curve over K.

* The K‾-valued points E(K‾) have the structure of an abelian group. For every n, we have a multiplication map [n]:E->E. Its kernel is denoted by E[n]. Now assume that the characteristic of K is p>0. Then one can show that either

E[pr](K‾)≅{0, orℤ/prℤ
for r=1,2,3,… In the first case, E is called supersingular. Otherwise it is called ordinary. In other words, an elliptic curve is supersingular if and only if the group of geometric points of order p is trivial.

* Supersingular elliptic curves have many endomorphisms over the algebraic closure K‾ in the sense that an elliptic curve is supersingular if and only if its endomorphism algebra (over K‾) is an order in a quaternion algebra. Thus, their endomorphism algebra (over K‾) has rank 4, while the endomorphism group of every other elliptic curve has only rank 1 or 2\. The endomorphism ring of a supersingular elliptic curve can have rank less than 4, and it may be necessary to take a finite extension of the base field K to make the rank of the endomorphism ring 4. In particular the endomorphism ring of an elliptic curve over a field of prime order is never of rank 4, even if the elliptic curve is supersingular.
* Let G be the formal group associated to E. Since K is of positive characteristic, we can define its height ht(G), which is 2 if and only if E is supersingular and else is 1.
* We have a Frobenius morphism F:E->E, which induces a map in cohomology

F*:H1(E,𝒪E)->H1(E,𝒪E).

The elliptic curve E is supersingular if and only if F* equals 0.

* We have a Verschiebung operator V:E->E, which induces a map on the global 1-forms

V*:H0(E,ΩE1)->H0(E,ΩE1).

The elliptic curve E is supersingular if and only if V* equals 0.

* An elliptic curve is supersingular if and only if its Hasse invariant is 0.
* An elliptic curve is supersingular if and only if the group scheme of points of order p is connected.
* An elliptic curve is supersingular if and only if the dual of the Frobenius map is purely inseparable.
* An elliptic curve is supersingular if and only if the "multiplication by p" map is purely inseparable and the j-invariant of the curve lies in a quadratic extension of the prime field of K, a finite field of order p2.
* Suppose E is in Legendre form, defined by the equation y2=x(x−1)(x−λ), and p is odd. Then for λ≠0,1, E is supersingular if and only if the sum

∑i=0n(ni)2λi

vanishes, where n=(p−1)/2. Using this formula, one can show that there are only finitely many supersingular elliptic curves over K (up to isomorphism).

* Suppose E is given as a cubic curve in the projective plane given by a homogeneous cubic polynomial f(x,y,z). Then E is supersingular if and only if the coefficient of (xyz)p–1 in fp–1 is zero.
* If the field K is a finite field of order q, then an elliptic curve over K is supersingular if and only if the trace of the q-power Frobenius endomorphism is congruent to zero modulo p.

When q=p is a prime greater than 3 this is equivalent to having the trace of Frobenius equal to zero (by the Hasse bound); this does not hold for p=2 or 3.

## Examples

* If K is a field of characteristic 2, every curve defined by an equation of the form

y2+a3y=x3+a4x+a6

with a3 nonzero is a supersingular elliptic curve, and conversely every supersingular curve is isomorphic to one of this form (see Washington2003, p. 122).

* Over the field with 2 elements any supersingular elliptic curve is isomorphic to exactly one of the supersingular elliptic curves

y2+y=x3+x+1
y2+y=x3+1
y2+y=x3+x
with 1, 3, and 5 points. This gives examples of supersingular elliptic curves over a prime field with different numbers of points.

* Over an algebraically closed field of characteristic 2 there is (up to isomorphism) exactly one supersingular elliptic curve, given by

y2+y=x3,
with j-invariant 0. Its ring of endomorphisms is the ring of Hurwitz quaternions, generated by the two automorphisms x->xω and y->y+x+ω,x->x+1 where ω2+ω+1=0 is a primitive cube root of unity. Its group of automorphisms is the group of units of the Hurwitz quaternions, which has order 24, contains a normal subgroup of order 8 isomorphic to the quaternion group, and is the binary tetrahedral group

* If K is a field of characteristic 3, every curve defined by an equation of the form

y2=x3+a4x+a6

with a4 nonzero is a supersingular elliptic curve, and conversely every supersingular curve is isomorphic to one of this form (see Washington2003, p. 122).

* Over the field with 3 elements any supersingular elliptic curve is isomorphic to exactly one of the supersingular elliptic curves

y2=x3−x
y2=x3−x+1
y2=x3−x+2
y2=x3+x

* Over an algebraically closed field of characteristic 3 there is (up to isomorphism) exactly one supersingular elliptic curve, given by

y2=x3−x,
with j-invariant 0. Its ring of endomorphisms is the ring of quaternions of the form a+bj with a and b Eisenstein integers. , generated by the two automorphisms x->x+1 and y->iy,x->−x where i is a primitive fourth root of unity. Its group of automorphisms is the group of units of these quaternions, which has order 12 and contains a normal subgroup of order 3 with quotient a cyclic group of order 4.

* For 𝔽p with p>3 the elliptic curve defined by y2=x3+1 with j-invariant 0 is supersingular if and only if p≡2(mod 3) and the elliptic curve defined by y2=x3+x with j-invariant 1728 is supersingular if and only if p≡3(mod 4) (see Washington2003, 4.35).
* The elliptic curve given by y2=x(x−1)(x+2) is nonsingular over 𝔽p for p≠2,3. It is supersingular for p = 23 and ordinary for every other p≤73 (see Hartshorne1977, 4.23.6).
* The modular curve X0(11) has j-invariant −21211−5313, and is isomorphic to the curve y2 \+ y = x3 − x2 − 10x − 20. The primes p for which it is supersingular are those for which the coefficient of qp in η(τ)2η(11τ)2 vanishes mod p, and are given by the list

2, 19, 29, 199, 569, 809, 1289, 1439, 2539, 3319, 3559, 3919, 5519, 9419, 9539, 9929,... OEIS: A006962

* If an elliptic curve over the rationals has complex multiplication then the set of primes for which it is supersingular has density 1/2. If it does not have complex multiplication then Serre showed that the set of primes for which it is supersingular has density zero. (Elkies 1987) showed that any elliptic curve defined over the rationals is supersingular for an infinite number of primes.

## Classification

For each positive characteristic there are only a finite number of possible j-invariants of supersingular elliptic curves. Over an algebraically closed field K an elliptic curve is determined by its j-invariant, so there are only a finite number of supersingular elliptic curves. If each such curve is weighted by 1/|Aut(E)| then the total weight of the supersingular curves is (p–1)/24. Elliptic curves have automorphism groups of order 2 unless their j-invariant is 0 or 1728, so the supersingular elliptic curves are classified as follows. There are exactly ⌊p/12⌋ supersingular elliptic curves with automorphism groups of order 2. In addition if p≡3 mod 4 there is a supersingular elliptic curve (with j-invariant 1728) whose automorphism group is cyclic or order 4 unless p=3 in which case it has order 12, and if p≡2 mod 3 there is a supersingular elliptic curve (with j-invariant 0) whose automorphism group is cyclic of order 6 unless p=2 in which case it has order 24.

(Birch Kuyk) give a table of all j-invariants of supersingular curves for primes up to 307. For the first few primes the supersingular elliptic curves are given as follows. The number of supersingular values of j other than 0 or 1728 is the integer part of (p−1)/12.

prime  | supersingular j invariants

|

2  | 0
3  | 1728
5  | 0
7  | 1728
11  | 0, 1728
13  | 5
17  | 0,8
19  | 7, 1728
23  | 0, 19, 1728
29  | 0, 2, 25
31  | 2, 4, 1728
37  | 8, 3±√15

All primes p < 37 are supersingular in the sense that every supersingular elliptic curve in characteristic p can be defined over the prime subfield Fp rather than Fpm for larger m. The prime 37 is the first prime that is not supersingular in this sense. This is why it is the first with a supersingular elliptic curve whose j-invariant is not a (rational) integer.

## See also

* Supersingular prime (algebraic number theory)
* Supersingular prime (moonshine theory)
* Supersingular variety

## References

* Birch, B. J.; Kuyk, W., eds. (1975), "Table 6", Modular functions of one variable. IV, Lecture Notes in Mathematics, 476, Berlin, New York: Springer-Verlag, pp. 142–144, doi:10.1007/BFb0097591, ISBN 978-3-540-07392-5
* Deuring, Max (1941), "Die Typen der Multiplikatorenringe elliptischer Funktionenkörper", Abh. Math. Sem. Univ. Hamburg 14: 197–272, doi:10.1007/BF02940746
* Elkies, Noam D. (1987), "The existence of infinitely many supersingular primes for every elliptic curve over Q", Inventiones Mathematicae 89 (3): 561–567, doi:10.1007/BF01388985, ISSN 0020-9910
* Robin Hartshorne (1977), Algebraic Geometry, Springer. ISBN 1-4419-2807-3
* Hasse (1936), "Zur Theorie der abstrakten elliptischen Funktionenkörper I. Die Struktur der Gruppe der Divisorenklassen endlicher Ordnung. II. Automorphismen und Meromorphismen. Das Additionstheorem. III. Die Struktur des Meromorphismenrings. Die Riemannsche Vermutung.", J. Reine Angew. Math. 175: 55–62, 69–88, 193–208, http://gdz.sub.uni-goettingen.de/en/dms/loader/toc/?PPN=PPN243919689_0175
* Joseph H. Silverman (2009), The Arithmetic of Elliptic Curves, Springer. ISBN 0-387-09493-8
* Lawrence C. Washington (2003), Elliptic Curves, Chapman&Hall. ISBN 1-58488-365-0

* v
* t
* e

Topics in algebraic curves

Rational curves|

* Five points determine a conic
* Projective line
* Rational normal curve
* Riemann sphere
* Twisted cubic

Elliptic curves|

| Analytic theory|

* Elliptic function
* Elliptic integral
* Fundamental pair of periods
* Modular form

|

Arithmetic theory|

* Counting points on elliptic curves
* Division polynomials
* Hasse's theorem on elliptic curves
* Mazur's torsion theorem
* Modular elliptic curve
* Modularity theorem
* Mordell–Weil theorem
* Nagell–Lutz theorem
* Supersingular elliptic curve
* Schoof's algorithm
* Schoof–Elkies–Atkin algorithm

Applications|

* Elliptic curve cryptography
* Elliptic curve primality

Higher genus|

* De Franchis theorem
* Faltings's theorem
* Hurwitz's automorphisms theorem
* Hurwitz surface
* Hyperelliptic curve

Plane curves|

* AF+BG theorem
* Bézout's theorem
* Bitangent
* Cayley–Bacharach theorem
* Conic section
* Cramer's paradox
* Cubic plane curve
* Fermat curve
* Genus–degree formula
* Hilbert's sixteenth problem
* Nagata's conjecture on curves
* Plücker formula
* Quartic plane curve
* Real plane curve

Riemann surfaces|

* Belyi's theorem
* Bring's curve
* Bolza surface
* Compact Riemann surface
* Dessin d'enfant
* Differential of the first kind
* Klein quartic
* Riemann's existence theorem
* Riemann–Roch theorem
* Teichmüller space
* Torelli theorem

Constructions|

* Dual curve
* Polar curve
* Smooth completion

Structure of curves|

| Divisors on curves|

* Abel–Jacobi map
* Brill–Noether theory
* Clifford's theorem on special divisors
* Gonality of an algebraic curve
* Jacobian variety
* Riemann–Roch theorem
* Weierstrass point
* Weil reciprocity law

|

Moduli|

* ELSV formula
* Gromov–Witten invariant
* Hodge bundle
* Moduli of algebraic curves
* Stable curve

Morphisms|

* Hasse–Witt matrix
* Riemann–Hurwitz formula
* Prym variety
* Weber's theorem

Singularities|

* Acnode
* Crunode
* Cusp
* Delta invariant
* Tacnode

Vector bundles|

* Birkhoff–Grothendieck theorem
* Stable vector bundle
* Vector bundles on algebraic curves

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/Supersingular elliptic curve. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=Supersingular_elliptic_curve&oldid=4297196"
*[v]: View this template
*[t]: Discuss this template
*[e]: Edit this template