Elliptic curves are nonsingular, meaning they don't have cusps or selfintersections, and a binary operation can be defined for their points in a natural geometric fashion, thus turning the set of points into an abelian group.
Typical elliptic curves over the field of real numbers are given by the equations y^{2} = x^{3}  x and y^{2} = x^{3}  x + 1.
Elliptic curves can be defined over any field K; the formal definition of an elliptic curve is a nonsingular projective algebraic curve over K with genus 1.
If the characteristic of K is neither 2 nor 3, then every elliptic curve over K can be written in the form
One typically takes the curve to be the set of all points (x,y) which satisfy the above equation and such that both x and y are elements of the algebraic closure of K. Points of the curve whose coordinates both belong to K are called Krational points.
By adding a point "at infinity", we obtain the projective version of this curve. If P and Q are two points on the curve, then we can uniquely describe a third point which is the intersection of the curve with the line through P and Q. If the line is tangent to the curve at a point, then that point is counted twice; and if the line is parallel to the yaxis, we define the third point as the point "at infinity". Exactly one of these conditions then holds for any pair of points on an elliptic curve.
It is then possible to introduce a group operation, "+", on the curve with the following properties: we consider the point at infinity to be 0, the identity of the group; and if a straight line intersects the curve at the points P, Q and R, then we require that P + Q + R = 0 in the group. One can check that this turns the curve into an abelian group, and thus into an abelian variety. It can be shown that the set of Krational points (including the point at infinity) forms a subgroup of this group. If the curve is denoted by E, then this subgroup is often written as E(K).
The above group can be described algebraically as well as geometrically. Given the curve y^{2} = x^{3}  px  q over the field K (whose characteristic we assume to be neither 2 nor 3), and points P = (x_{P}, y_{P}) and Q = (x_{Q}, y_{Q}) on the curve, assume first that x_{P} ≠ x_{Q}. Let s = (y_{P}  y_{Q})/(x_{P}  x_{Q}); since K is a field, s is welldefined. Then we can define R = P + Q = (x_{R}, y_{R}) by
If x_{P} = x_{Q}, then there are two options: if y_{P} = y_{Q}, then the sum is defined as 0; thus, the inverse of each point on the curve is found by reflecting it across the xaxis. If y_{P} = y_{Q} ≠ 0, then R = P + P = 2P = (x_{R}, y_{R}) is given by
If y_{P} = y_{Q} = 0, then P + P = 0.
The MordellWeil theorem[?] states that if the underlying field K is the field of rational numbers (or more generally a number field[?]), then the group of Krational points is finitely generated. While it is relatively easily to determine the torsion subgroup of E(K), no general algorithm is known to compute its rank. A formula for this rank is given by the Birch and SwinnertonDyer conjecture[?].
The recent proof of Fermat's last theorem proceeded by proving a special case of the deep TaniyamaShimura conjecture relating elliptic curves over the rationals to modular forms[?]; this conjecture has since been completely proved.
If the underlying field K is the field of complex numbers, then every elliptic curve can be parametrized by a certain elliptic function and its derivative. Specifically, to every elliptic curve E there exists a lattice L and a corresponding Weierstrass elliptic function[?] p, such that the map
Elliptic curves over finite fields are used in some cryptographic applications (elliptic curve cryptography) as well as for integer factorization (Lenstra Elliptic Curve Factorization). Typically, the general idea in these applications is that a known algorithm which makes use of certain finite groups is rewritten to use the groups of rational points of elliptic curves.
While the exact number of rational points of an elliptic curve E over a finite field F_{p} is in general rather difficult to compute, a theorem of Hasse implies
Search Encyclopedia

Featured Article
