Elliptic Curves and Mordell s Theorem

Similar documents
Algebraic Geometry: Elliptic Curves and 2 Theorems

Elliptic Curves, Factorization, and Cryptography

A WHIRLWIND TOUR BEYOND QUADRATICS Steven J. Wilson, JCCC Professor of Mathematics KAMATYC, Wichita, March 4, 2017

Some Highlights along a Path to Elliptic Curves

Torsion Points of Elliptic Curves Over Number Fields

ELLIPTIC CURVES BJORN POONEN

RATIONAL POINTS ON CURVES. Contents

Introduction to Arithmetic Geometry

Elliptic Curves and Public Key Cryptography

AN INTRODUCTION TO ARITHMETIC AND RIEMANN SURFACE. We describe points on the unit circle with coordinate satisfying

x = x y and y = x + y.

CONGRUENT NUMBERS AND ELLIPTIC CURVES

On the Torsion Subgroup of an Elliptic Curve

Elliptic Curves: Theory and Application

Elliptic Curves. Dr. Carmen Bruni. November 4th, University of Waterloo

2.1 Affine and Projective Coordinates

Grade 11/12 Math Circles Elliptic Curves Dr. Carmen Bruni November 4, 2015

Systems of Equations and Inequalities. College Algebra

SKILL BUILDER TEN. Graphs of Linear Equations with Two Variables. If x = 2 then y = = = 7 and (2, 7) is a solution.

INTRODUCTION TO ELLIPTIC CURVES

Elliptic Curves: An Introduction

Solving Cubic Equations: An Introduction to the Birch and Swinnerton-Dyer Conjecture

Lesson 2 The Unit Circle: A Rich Example for Gaining Perspective

Hans Wenzl. 4f(x), 4x 3 + 4ax bx + 4c

Irrationality of 2 and Arakelov Geometry

Pythagoras = $1 million problem. Ken Ono Emory University

Arithmetic Progressions Over Quadratic Fields

Counting points on elliptic curves: Hasse s theorem and recent developments

Outline of the Seminar Topics on elliptic curves Saarbrücken,

Elliptic Curves and the abc Conjecture

LECTURE 7, WEDNESDAY

An Introduction to Elliptic Curves Dr. Reza Akhtar Algebra Short Course (SUMSRI) Miami University Summer 2002

Introduction: Pythagorean Triplets

LECTURE 2 FRANZ LEMMERMEYER

Points of Finite Order

Factoring the Duplication Map on Elliptic Curves for use in Rank Computations

Algebra I Unit Report Summary

FINITE GROUPS AND EQUATIONS OVER FINITE FIELDS A PROBLEM SET FOR ARIZONA WINTER SCHOOL 2016

Algebraic Varieties. Chapter Algebraic Varieties

CALCULUS BASIC SUMMER REVIEW

On a Problem of Steinhaus

Projective space. There are some situations when this approach seems to break down; for example with an equation like f(x; y) =y 2 (x 3 5x +3) the lin

The ABC Conjecture and its Consequences on Curves

Two Types of Equations. Babylonians. Solving Certain Cubic Equations: An Introduction to the Birch and Swinnerton-Dyer Conjecture

PYTHAGOREAN TRIPLES KEITH CONRAD

Diophantine equations and beyond

Beyond Fermat s Last Theorem

Table of Contents. 2013, Pearson Education, Inc.

Introduction to Arithmetic Geometry Fall 2013 Lecture #24 12/03/2013

Explicit Computations of the Frozen Boundaries of Rhombus Tilings of Polygonal Domains

Congruent Number Problem and Elliptic curves

Congruent number elliptic curves of high rank

Some new families of positive-rank elliptic curves arising from Pythagorean triples

Distance and Midpoint Formula 7.1

Rational Points on Conics, and Local-Global Relations in Number Theory

Curves with many points Noam D. Elkies

Theorem 6.1 The addition defined above makes the points of E into an abelian group with O as the identity element. Proof. Let s assume that K is

Math 445 Handy facts since the second exam

Equal Compositions of Rational Functions

Elliptic curves and Hilbert s Tenth Problem

Introduction to Algebraic Geometry. Franz Lemmermeyer

Elliptic Curve Cryptography

Parameterizing the Pythagorean Triples

24/10/ Dr Ray Adams

LECTURE 22, WEDNESDAY in lowest terms by H(x) = max{ p, q } and proved. Last time, we defined the height of a rational number x = p q

Definition: A "system" of equations is a set or collection of equations that you deal with all together at once.

CHMC: Finite Fields 9/23/17

Fermat s Last Theorem

Chapter 2 notes from powerpoints

9.1 Circles and Parabolas. Copyright Cengage Learning. All rights reserved.

Quadratics. Shawn Godin. Cairine Wilson S.S Orleans, ON October 14, 2017

Name: AK-Nummer: Ergänzungsprüfung January 29, 2016

Topics in Number Theory: Elliptic Curves

ON TORSION POINTS ON AN ELLIPTIC CURVES VIA DIVISION POLYNOMIALS

Notes: Pythagorean Triples

History of Mathematics

Elliptic curve cryptography. Matthew England MSc Applied Mathematical Sciences Heriot-Watt University

Modern Number Theory: Rank of Elliptic Curves

Test 2. Monday, November 12, 2018

The Group Structure of Elliptic Curves Defined over Finite Fields

Tuesday, 3/28 : Ch. 9.8 Cubic Functions ~ Ch. 9 Packet p.67 #(1-6) Thursday, 3/30 : Ch. 9.8 Rational Expressions ~ Ch. 9 Packet p.

King Fahd University of Petroleum and Minerals Prep-Year Math Program Math Term 161 Recitation (R1, R2)

Circles. Example 2: Write an equation for a circle if the enpoints of a diameter are at ( 4,5) and (6, 3).

Beginning Algebra. 1. Review of Pre-Algebra 1.1 Review of Integers 1.2 Review of Fractions

Bjorn Poonen. MSRI Introductory Workshop on Rational and Integral Points on Higher-dimensional Varieties. January 17, 2006

Unit 1 PreCalculus Review & Limits

Greenwich Public Schools Mathematics Curriculum Objectives. Calculus

Each is equal to CP 1 minus one point, which is the origin of the other: (C =) U 1 = CP 1 the line λ (1, 0) U 0

Mathematics Notes for Class 12 chapter 7. Integrals

Math Academy I Fall Study Guide. CHAPTER ONE: FUNDAMENTALS Due Thursday, December 8

Chapter 1: Precalculus Review

Diophantine equations

1. Projective geometry

Diophantine and tropical geometry

Explicit Methods in Algebraic Number Theory

. In particular if a b then N(

Number Fields Generated by Torsion Points on Elliptic Curves

Sect Polynomial and Rational Inequalities

A Library of Functions

Math123 Lecture 1. Dr. Robert C. Busby. Lecturer: Office: Korman 266 Phone :

Transcription:

Elliptic Curves and Mordell s Theorem Aurash Vatan, Andrew Yao MIT PRIMES December 16, 2017

Diophantine Equations Definition (Diophantine Equations) Diophantine Equations are polynomials of two or more variables with solutions restricted to Z or Q. For two variables, D.E. define plane curves

Diophantine Equations Definition (Diophantine Equations) Diophantine Equations are polynomials of two or more variables with solutions restricted to Z or Q. For two variables, D.E. define plane curves So rational solutions correspond to points with rational coordinates

Diophantine Equations Definition (Diophantine Equations) Diophantine Equations are polynomials of two or more variables with solutions restricted to Z or Q. For two variables, D.E. define plane curves So rational solutions correspond to points with rational coordinates Ex. Fermat s theorem: x n + y n = 1, n > 2, x, y Q equivalent to x n + y n = z n, x, y, z, Z

The Rational Points on Fermat Curves Two examples of Diophantine equations with rational solutions marked: x 4 + y 4 = 1 and x 5 + y 5 = 1.

Diophantine Equations Definition (Diophantine Equations) Diophantine Equations are polynomials of two or more variables with solutions restricted to Z or Q. For two variables, D.E. define plane curves So rational solutions correspond to points with rational coordinates Ex. Fermat s theorem: x n + y n = 1, n > 2, x, y Q equivalent to x n + y n = z n, x, y, z, Z Question: finite or infinite number of rational points?

Diophantine Equations Definition (Diophantine Equations) Diophantine Equations are polynomials of two or more variables with solutions restricted to Z or Q. For two variables, D.E. define plane curves So rational solutions correspond to points with rational coordinates Ex. Fermat s theorem: x n + y n = 1, n > 2, x, y Q equivalent to x n + y n = z n, x, y, z, Z Question: finite or infinite number of rational points? Question: given some known rational points on a curve, can we generate more?

Diophantine Equations Definition (Diophantine Equations) Diophantine Equations are polynomials of two or more variables with solutions restricted to Z or Q. For two variables, D.E. define plane curves So rational solutions correspond to points with rational coordinates Ex. Fermat s theorem: x n + y n = 1, n > 2, x, y Q equivalent to x n + y n = z n, x, y, z, Z Question: finite or infinite number of rational points? Question: given some known rational points on a curve, can we generate more? Mordell s Theorem: finite number of rational points generate all rational points for a class of cubic curves (elliptic curves)

Rational Points on Conics Definition General Rational Conic: Ax 2 + Bxy + Cy 2 + Dx + Ey + F = 0, A, B, C, D, E, F Q. Theorem Take a general conic with rational coefficients and a rational point O. A point P on the conic is rational if and only if the line through P and O has rational slope. Theorem gives geometric method for generating rational points Method can be described algebraically

An Application: Generating Pythagorean Triples Examples Take the unit circle with O = ( 1, 0). ( The line ) through O with rational slope t intersects the circle again at 1 t 2 2t,. 1+t 2 1+t 2 Theorem (Generation of Pythagorean Triples) (a, b, c) is an in integer solution to x 2 + y 2 = z 2 if and only if (a, b, c) = (n 2 m 2, 2mn, n 2 + m 2 ) for n, m Z. Pythagorean triples correspond to rational points on x 2 + y 2 = 1

An Application: Generating Pythagorean Triples Examples Take the unit circle with O = ( 1, 0). ( The line ) through O with rational slope t intersects the circle again at 1 t 2 2t,. 1+t 2 1+t 2 Theorem (Generation of Pythagorean Triples) (a, b, c) is an in integer solution to x 2 + y 2 = z 2 if and only if (a, b, c) = (n 2 m 2, 2mn, n 2 + m 2 ) for n, m Z. Pythagorean triples correspond to rational points on x 2 + y 2 = 1 We already have a c = 1 t2 and b 1+t 2 c = 2t 1+t 2

An Application: Generating Pythagorean Triples Examples Take the unit circle with O = ( 1, 0). ( The line ) through O with rational slope t intersects the circle again at 1 t 2 2t,. 1+t 2 1+t 2 Theorem (Generation of Pythagorean Triples) (a, b, c) is an in integer solution to x 2 + y 2 = z 2 if and only if (a, b, c) = (n 2 m 2, 2mn, n 2 + m 2 ) for n, m Z. Pythagorean triples correspond to rational points on x 2 + y 2 = 1 We already have a c = 1 t2 and b 1+t 2 c = 2t 1+t 2 Plugging in t = m n, a c = n2 m 2 n 2 + m 2, b c = 2mn n 2 + m 2

An Application: Generating Pythagorean Triples Examples Take the unit circle with O = ( 1, 0). ( The line ) through O with rational slope t intersects the circle again at 1 t 2 2t,. 1+t 2 1+t 2 Theorem (Generation of Pythagorean Triples) (a, b, c) is an in integer solution to x 2 + y 2 = z 2 if and only if (a, b, c) = (n 2 m 2, 2mn, n 2 + m 2 ) for n, m Z. Pythagorean triples correspond to rational points on x 2 + y 2 = 1 We already have a c = 1 t2 and b 1+t 2 c = 2t 1+t 2 Plugging in t = m n, a c = n2 m 2 n 2 + m 2, b c = 2mn n 2 + m 2 We see that this implies c = n 2 + m 2 and the rest follows

Rational Points on y 2 = x 3 + c Moving to cubics, our method for conics fails Given one rational point on a cubic curve, can we get more? Bachet studied rational solutions to C : y 2 = x 3 + c for c Z Discovered formula in (1621!) that takes one rational point on C and returns another

Bachet s Formula Theorem (Bachet s Formula) Bachet s formula says that for a cubic C : y 2 ( = x 3 + c with c Z, if (x 1, y 1 ) is a rational solution of C, then so is x 4 8cx, x6 20cx 3 +8c ). 2 4y 2 8y 3 There is a geometric procedure equivalent to applying Bachet: find the second intersection of the tangent at (x 1, y 1 ) and C.

Bachet s Formula Take the example C : y 2 = x 3 + 3. One rational point by inspection is (1, 2). Applying Bachet s formula yields (1, 2) ( 23 16, 11 ) ( 64 2540833 7744, 4050085583 681472 ) And so on... This formula almost always generates infinitely many rational points. Can often find one solution by inspection, so being able to generate infinitely many is a huge improvement. But Bachet does not generate all solutions.

But! Bachet is Not Enough y 2 = x 3 26 has two easy rational roots: (3, 1) and (35, 207). Applying Bachet to each repeatedly: (3, 1) ( 705 4, 18719 ) ( 8 247043235585 5606415376, 122770338185379457 ) 419785957693376...

But! Bachet is Not Enough y 2 = x 3 26 has two easy rational roots: (3, 1) and (35, 207). Applying Bachet to each repeatedly: (3, 1) ( 705 4, 18719 ) ( 8 247043235585 5606415376, 122770338185379457 ) 419785957693376... (35, 207) ( 167545 19044, 67257971 ) ( 2628072 1028695651552397952865 344592394091494400016, 6396737528620859270011033599936) 4970551157449683117229613279377...

But! Bachet is Not Enough y 2 = x 3 26 has two easy rational roots: (3, 1) and (35, 207). Applying Bachet to each repeatedly: (3, 1) ( 705 4, 18719 ) ( 8 247043235585 5606415376, 122770338185379457 ) 419785957693376... (35, 207) ( 167545 19044, 67257971 ) ( 2628072 1028695651552397952865 344592394091494400016, 6396737528620859270011033599936) 4970551157449683117229613279377... The ( line through (3, 1) (blue) and (35, 207) (green) intersects C at 881 256, 15735 ) 4096 (orange).

But! Bachet is Not Enough (3, 1) ( 705 4, 18719 ) ( 8 247043235585 (35, 207) ( ) 167545 5606415376, 122770338185379457 419785957693376 ( 19044, 67257971 2628072 1028695651552397952865 344592394091494400016, 4970551157449683117229613279377 ( 881 256, 15735 4096 6396737528620859270011033599936)... ) does not show up in either sequence )...

But! Bachet is Not Enough (3, 1) ( 705 4, 18719 ) ( 8 247043235585 (35, 207) ( ) 167545 5606415376, 122770338185379457 419785957693376 ( 19044, 67257971 2628072 1028695651552397952865 344592394091494400016, 4970551157449683117229613279377 )... 6396737528620859270011033599936)... ( 881 256, 15735 ) 4096 does not show up in either sequence But it can be generated from (3, 1) and (35, 207)

But! Bachet is Not Enough (3, 1) ( 705 4, 18719 ) ( 8 247043235585 (35, 207) ( ) 167545 5606415376, 122770338185379457 419785957693376 ( 19044, 67257971 2628072 1028695651552397952865 344592394091494400016, 4970551157449683117229613279377 )... 6396737528620859270011033599936)... ( 881 256, 15735 ) 4096 does not show up in either sequence But it can be generated from (3, 1) and (35, 207) We need a method for generating new rational points from 2 inputs

Group Law Definition (The Group Law on Rational Points in C) Let distinct A, B C have coordinates in Q. Define A + B as the reflection over the x axis of the third intersection point, A B, of line AB with C. If A = B, we define A + B as the reflection of the second intersection point of the tangent line to C at A with C. The Identity We define the identity as O. If A and B share a x-coordinate, we say AB intersects C at infinity at O.

Rational Elliptic Curves We can generalize Bachet s formula to more general cubics, namely rational elliptic curves. Definition (Rational Elliptic Curves) We define rational elliptic curves as non-singular algebraic plane curves described by polynomials of the form y 2 = x 3 + ax 2 + bx + c, a, b, c Q, plus a point at infinity O. Definition The group of rational points on an elliptic curve C is denoted by C(Q).

Examples Below are the graphs of two elliptic curves in R 2 : y 2 = x 3 + x 2 + 1 and y 2 = x 3 2x 2 + 1.

Non-Examples These curves are singular and therefore are not elliptic curves: y 2 = x 3 and y 2 = x 3 + x 2. Notice that all have either a cusp, or self-intersection (node).

Finite Generation We are interested in the generation of C(Q). Definition A group G is finitely generated if there exists a finite set {g 1, g 2,..., g n } G such that for all a G there exist {a 1...a n } Z such that a = n i=0 g ia i.

Mordell s Theorem Theorem (Mordell s Theorem) Let C be a non-singular cubic curve given by an equation C : y 2 = x 3 + ax 2 + bx, with a, b Z. Then C(Q), the group of rational points on C, is a finitely generated abelian group. Restricted to elliptic curves with a root at (0, 0). This means there exists a finite set of points so that all rational points can be obtained by inductively applying the group law.

Proof of Mordell s Theorem: Consider the subgroup 2C(Q) of C(Q). Then take representatives A 1, A 2,... of its cosets.

Proof of Mordell s Theorem: Consider the subgroup 2C(Q) of C(Q). Then take representatives A 1, A 2,... of its cosets. For any P, there are some points P 1 and A i such that P = 2P 1 + A i.

Proof of Mordell s Theorem: Consider the subgroup 2C(Q) of C(Q). Then take representatives A 1, A 2,... of its cosets. For any P, there are some points P 1 and A i such that P = 2P 1 + A i. Repeat this process for P 1 to find a P 2, and then a P 3, and so forth.

Proof of Mordell s Theorem: Consider the subgroup 2C(Q) of C(Q). Then take representatives A 1, A 2,... of its cosets. For any P, there are some points P 1 and A i such that P = 2P 1 + A i. Repeat this process for P 1 to find a P 2, and then a P 3, and so forth. P = 2P 1 + A i1 P 1 = 2P 2 + A i2 P 2 = 2P 3 + A i3 P 3 = 2P 4 + A i4

Proof of Mordell s Theorem: Consider the subgroup 2C(Q) of C(Q). Then take representatives A 1, A 2,... of its cosets. For any P, there are some points P 1 and A i such that P = 2P 1 + A i. Repeat this process for P 1 to find a P 2, and then a P 3, and so forth. P = 2P 1 + A i1 P 1 = 2P 2 + A i2 P 2 = 2P 3 + A i3 P 3 = 2P 4 + A i4 Repeating m times and back-substituting, P = A i1 + 2A i2 + 4A i3 +... + 2 m 1 A im + 2 m P m

Proof of Mordell s Theorem: Lemma finite S independent of P such that for large enough m, P m S.

Proof of Mordell s Theorem: Lemma finite S independent of P such that for large enough m, P m S. Take the Elliptic Curve y 2 = x 3 2. Pick starting point ( 30732610574763 P = 160280942564521, 4559771683571581358275 ) 2029190552145716973931

Proof of Mordell s Theorem: Lemma finite S independent of P such that for large enough m, P m S. Take the Elliptic Curve y 2 = x 3 2. Pick starting point ( 30732610574763 P = 160280942564521, 4559771683571581358275 ) 2029190552145716973931 ( 2340922881 P = 58675600, 113259286337279 ) + (3, 5) 449455096000 ( 129 = 2 100, 383 ) + (3, 5) 1000

Proof of Mordell s Theorem: Lemma finite S independent of P such that for large enough m, P m S. Take the Elliptic Curve y 2 = x 3 2. Pick starting point ( 30732610574763 P = 160280942564521, 4559771683571581358275 ) 2029190552145716973931 ( 2340922881 P = 58675600, 113259286337279 ) + (3, 5) 449455096000 ( 129 = 2 100, 383 ) + (3, 5) 1000 ( 129 100, 383 ) = 2(3, 5) + 0 1000

Proof of Mordell s Theorem: Lemma finite S independent of P such that for large enough m, P m S. Now, ( 30732610574763 P = 160280942564521, 4559771683571581358275 ) 2029190552145716973931 ( 129 P 1 = 100, 383 ) 1000 P 2 = (3, 5).

Proof of Mordell s Theorem: Lemma finite S independent of P such that for large enough m, P m S. Now, ( 30732610574763 P = 160280942564521, 4559771683571581358275 ) 2029190552145716973931 ( 129 P 1 = 100, 383 ) 1000 P 2 = (3, 5). Notice numerators and denominators decrease as m increases

Proof of Mordell s Theorem: Lemma finite S independent of P such that for large enough m, P m S. Now, ( 30732610574763 P = 160280942564521, 4559771683571581358275 ) 2029190552145716973931 ( 129 P 1 = 100, 383 ) 1000 P 2 = (3, 5). Notice numerators and denominators decrease as m increases K Z dependent only on C such that for sufficiently large m, numerator and denominator of x-coordinate of P m less than K

Proof of Mordell s Theorem: Lemma finite S independent of P such that for large enough m, P m S. Now, ( 30732610574763 P = 160280942564521, 4559771683571581358275 ) 2029190552145716973931 ( 129 P 1 = 100, 383 ) 1000 P 2 = (3, 5). Notice numerators and denominators decrease as m increases K Z dependent only on C such that for sufficiently large m, numerator and denominator of x-coordinate of P m less than K S is the set of P C(Q) with x-coordinate s with numerator and denominator less than K

Proof of Mordell s Theorem: Lemma The number of cosets of 2C(Q) in C(Q) is finite.

Proof of Mordell s Theorem: Lemma The number of cosets of 2C(Q) in C(Q) is finite. Equivalent to the index (C(Q) : 2C(Q)) being finite. This result is known as Weak Mordell s Theorem

Proof of Mordell s Theorem: Lemma The number of cosets of 2C(Q) in C(Q) is finite. Equivalent to the index (C(Q) : 2C(Q)) being finite. This result is known as Weak Mordell s Theorem Note that P = A i1 + 2A i2 + 4A i3 +... + 2 m 1 A im + 2 m P m.

Proof of Mordell s Theorem: Lemma The number of cosets of 2C(Q) in C(Q) is finite. Equivalent to the index (C(Q) : 2C(Q)) being finite. This result is known as Weak Mordell s Theorem Note that P = A i1 + 2A i2 + 4A i3 +... + 2 m 1 A im + 2 m P m. Lemma 1 tells us there is a finite set S of P m.

Proof of Mordell s Theorem: Lemma The number of cosets of 2C(Q) in C(Q) is finite. Equivalent to the index (C(Q) : 2C(Q)) being finite. This result is known as Weak Mordell s Theorem Note that P = A i1 + 2A i2 + 4A i3 +... + 2 m 1 A im + 2 m P m. Lemma 1 tells us there is a finite set S of P m. Lemma 2 tells us that there is a finite set of A i.

Proof of Mordell s Theorem: Lemma The number of cosets of 2C(Q) in C(Q) is finite. Equivalent to the index (C(Q) : 2C(Q)) being finite. This result is known as Weak Mordell s Theorem Note that P = A i1 + 2A i2 + 4A i3 +... + 2 m 1 A im + 2 m P m. Lemma 1 tells us there is a finite set S of P m. Lemma 2 tells us that there is a finite set of A i. Thus, generating set G = S {A 1, A 2,...} is finite.

Generalizations Mordell s theorem holds for all rational elliptic curves, not only those with a root at (0, 0). Mordell made a conjecture about higher degree curves that was proved in 1983 by Falting. Theorem Falting s Theorem] A curve of genus greater than 1 has only finitely many rational points. Definition (Genus) The genus g of a non-singular curve can be defined in terms of its degree d as (d 1)(d 2) 2. Notice that elliptic curves therefore have genus 1.

Acknowledgements We would like to thank Our mentor, Andrew Senger

Acknowledgements We would like to thank Our mentor, Andrew Senger MIT PRIMES

Acknowledgements We would like to thank Our mentor, Andrew Senger MIT PRIMES Our parents