Abstract
For an odd prime p, let E0 be a supersingular elliptic curve over GF(p2) with O0 = End(E0). The Deuring correspondence gives a one-to-one correspondence between isogenies φI: E0 → EI and left O0-ideals I. The constructive Deuring correspondence is equivalent to the problem that computes the j-invariant of the curve EI corresponding to given I. In this paper, we compute the j-invariant of EI via the Kohel-Lauter-Petit-Tignol (KLPT) algorithm that seeks an ideal J of smooth reduced norm Nrd(J) such that EJ ≃ EI. The target j-invariant can be obtained by computing φJ: E0 → EJ. For every prime factor ℓ of Nrd(J), we use symbolic formulas related with isogenies to compute a basis of the ℓ-torsion group E0[ℓ], a bottleneck part in computing φJ. We demonstrate the efficacy of our method by showing our implementation results for numerical examples in primes p of up to 25 bits.
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
Copyright (c) 2022 Yuta Kambe, Masaya Yasuda, Masayuki Noro, Kazuhiro Yokoyama, Yusuke Aikawa, Katsuyuki Takashima, Momonari Kudo