Elliptic curve

In mathematics, an elliptic curve is a plane curve defined by an equation of the form
 y^{2} = x^{3} + a x + b,
which is nonsingular; that is, its graph has no cusps or selfintersections. One finds that elliptic curves correspond to embeddings of the torus into the complex projective plane; such embeddings generalize to arbitrary fields, and so it is said that elliptic curves are nonsingular projective algebraic curves of genus 1 over a field K, together with a distinguished point defined over K.
Elliptic curves are especially important in number theory, and constitute a major area of current research; for example, they were used in the proof of Fermat's last theorem. They also find applications in cryptography (see the article elliptic curve cryptography) and integer factorization.
An elliptic curve is not the same as an ellipse: see elliptic integral for the origin of the term.
The natural group structure of a torus manifests itself as a curious geometric way on an elliptic curve; the set of points of the curve form an abelian group.
Contents 
Elliptic curves over the real numbers
Although the formal definition of an elliptic curve is fairly technical and requires some background in algebraic geometry, it is possible to describe some features of elliptic curves over the real numbers using only high school algebra and geometry.
In this context, an elliptic curve is a plane curve defined by an equation of the form
 y^{2} = x^{3} + a x + b,
where a and b are real numbers. This type of equation is called a Weierstrass equation.
For example, the following graphs illustrate the elliptic curves given by the equations y^{2} = x^{3} − x and y^{2} = x^{3} − x + 1.
The definition of elliptic curve also requires that the curve be nonsingular. Geometrically, this means that the graph has no cusps or selfintersections. Algebraically, this involves calculating the discriminant,
 Δ = −16(4a^{3} + 27b^{2}).
The curve is nonsingular if the discriminant is not equal to zero. (Although the factor −16 seems irrelevant here, it turns out to be convenient in more advanced study of elliptic curves.)
If the curve is nonsingular, then its graph has two components if the discriminant is positive, and one component if it is negative. For example, in the graphs shown above, the discriminant in the first case is 64, and in the second case is −368.
The group law
By adding a "point at infinity", we obtain the projective version of this curve. If P and Q are two points on the curve, then we can uniquely describe a third point which is the intersection of the curve with the line through P and Q. If the line is tangent to the curve at a point, then that point is counted twice; and if the line is parallel to the yaxis, we define the third point as the point "at infinity". Exactly one of these conditions then holds for any pair of points on an elliptic curve.
Missing image
ECClines.png
image:ECClines.png
It is then possible to introduce a group operation, "+", on the curve with the following properties: we consider the point at infinity to be 0, the identity of the group; and if a straight line intersects the curve at the points P, Q and R, then we require that P + Q + R = 0 in the group. One can check that this turns the curve into an abelian group, and thus into an abelian variety. It can be shown that the set of Krational points (including the point at infinity) forms a subgroup of this group. If the curve is denoted by E, then this subgroup is often written as E(K).
The above group can be described algebraically as well as geometrically. Given the curve y^{2} = x^{3} − px − q over the field K (whose characteristic we assume to be neither 2 nor 3), and points P = (x_{P}, y_{P}) and Q = (x_{Q}, y_{Q}) on the curve, assume first that x_{P} ≠ x_{Q}. Let s = (y_{P} − y_{Q})/(x_{P} − x_{Q}); since K is a field, s is welldefined. Then we can define R = P + Q = (x_{R}, y_{R}) by
 <math>x_R = s^2  x_P  x_Q<math>
 <math>y_R = y_P + s(x_P  x_R)<math>
If x_{P} = x_{Q}, then there are two options: if y_{P} = −y_{Q}, then the sum is defined as 0; thus, the inverse of each point on the curve is found by reflecting it across the xaxis. If y_{P} = y_{Q} ≠ 0, then R = P + P = 2P = (x_{R}, y_{R}) is given by
 <math>s = {(3{x_P}^2  p)}/{(2y_P)}<math>
 <math>x_R = s^2  2x_P<math>
 <math>y_R = y_P + s(x_P  x_R)<math>
If y_{P} = y_{Q} = 0, then P + P = 0.
Elliptic curves over the complex numbers
The formulation of elliptic curves as the embedding of a torus in the complex projective plane follows naturally from a curious property of Weierstrass's elliptic functions. These functions and thier first derivative are related by the formula
 <math>\wp'(z)^2 = 4\wp(z)^3 g_2\wp(z)  g_3<math>
Here, <math>g_2<math> and <math>g_3<math> are constants; <math>\wp(z)<math> is the Weierstrass elliptic function and <math>\wp'(z)<math> its derivative. It should be clear that this relation is in the form of an elliptic curve (over the complex numbers). The Weierstrass functions are doublyperiodic; that is, they are period with respect to a lattice Λ; in essence, the Weierstrass functions are naturally defined on a torus <math>T=\mathbb{C}/\Lambda<math>. This torus may be embedded in the complex projective plane by means of the map
 <math>z\to (1,\wp(z), \wp'(z))<math>.
This map is a group isomorphism, carrying the natural group structure of the torus into the projective plane. It is also an isomorphism of Riemann surfaces, and so topologically, a given elliptic curve looks like a torus. If the lattice Λ is related to a lattice cΛ by multiplication by a nonzero complex number c, then the corresponding curves are isomorphic. Isomorphism classes of elliptic curves are specified by the jinvariant.
The isomorphism classes can be understood in a simpler way as well. The constants <math>g_2<math> and <math>g_3<math>, called the modular invariants, are uniquely determined by the lattice, that is, by the structure of the torus. However, the complex numbers are the splitting field for polynomials, and so the elliptic curve may be written as
 <math>y^2=x(x1)(x\lambda)<math>
One finds that
 <math>g_2 = \frac{4^{1/3}}{3} (\lambda^2\lambda+1)<math>
and
 <math>g_3=\frac{1}{27} (\lambda+1)(2\lambda^25\lambda+2)<math>
so that the modular discriminant is
 <math>\Delta = g_2^327g_3^2 = \lambda^2(\lambda1)^2<math>
Here, λ is sometimes called the modular lambda function.
Note that the uniformization theorem states that every compact Riemann surface of genus one can be represented as a torus.
Elliptic curves over a general field
Elliptic curves can be defined over any field K; the formal definition of an elliptic curve is a nonsingular projective algebraic curve over K with genus 1 with a given point defined over K.
If the characteristic of K is neither 2 nor 3, then every elliptic curve over K can be written in the form
 y^{2} = x^{3} − px − q
where p and q are elements of K such that the right hand side polynomial x^{3} − px − q does not have any double roots. If the characteristic is 2 or 3, then more terms need to be kept.
One typically takes the curve to be the set of all points (x,y) which satisfy the above equation and such that both x and y are elements of the algebraic closure of K. Points of the curve whose coordinates both belong to K are called Krational points.
Connections to number theory
The MordellWeil theorem states that if the underlying field K is the field of rational numbers (or more generally a number field), then the group of Krational points is finitely generated. While it is relatively easily to determine the torsion subgroup of E(K), no general algorithm is known to compute its rank. A formula for this rank is given by the Birch and SwinnertonDyer conjecture.
The recent proof of Fermat's last theorem proceeded by proving a special case of the deep TaniyamaShimura conjecture relating elliptic curves over the rationals to modular forms; this conjecture has since been completely proved.
While the precise number of rational points of an elliptic curve E over a finite field F_{p} is in general rather difficult to compute, Hasse's theorem on elliptic curves tells us
 <math> \left \sharp E( \mathbb{F} )  p  1 \right < 2 \sqrt{p} <math>
This fact can be understood and proven with the help of some general theory; see local zeta function, Étale cohomology. The number of points on a specific curve can be computed with Schoof's algorithm.
For further developments see arithmetic of abelian varieties.
Algorithms that use elliptic curves
Elliptic curves over finite fields are used in some cryptographic applications as well as for integer factorization. Typically, the general idea in these applications is that a known algorithm which makes use of certain finite groups is rewritten to use the groups of rational points of elliptic curves. For more see also:
External links
 The Mathematical Atlas: 14H52 Elliptic Curves (http://www.math.niu.edu/~rusin/knownmath/index/14H52.html)de:Elliptische Kurve
es:Curvas elípticas fr:courbe elliptique pl:Krzywe eliptyczne zh:椭圆曲线 he:עקום אליפטי