Finding Orientations of Supersingular Elliptic Curves and Quaternion Orders

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Arpin, Sarah, Clements, James, Dartois, Pierrick, Eriksen, Jonathan Komada, Kutas, Péter, Wesolowski, Benjamin
Format: Preprint
Published: 2023
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915184538288128
author Arpin, Sarah
Clements, James
Dartois, Pierrick
Eriksen, Jonathan Komada
Kutas, Péter
Wesolowski, Benjamin
author_facet Arpin, Sarah
Clements, James
Dartois, Pierrick
Eriksen, Jonathan Komada
Kutas, Péter
Wesolowski, Benjamin
contents Orientations of supersingular elliptic curves encode the information of an endomorphism of the curve. Computing the full endomorphism ring is a known hard problem, so one might consider how hard it is to find one such orientation. We prove that access to an oracle which tells if an elliptic curve is $\mathfrak{O}$-orientable for a fixed imaginary quadratic order $\mathfrak{O}$ provides non-trivial information towards computing an endomorphism corresponding to the $\mathfrak{O}$-orientation. We provide explicit algorithms and in-depth complexity analysis. We also consider the question in terms of quaternion algebras. We provide algorithms which compute an embedding of a fixed imaginary quadratic order into a maximal order of the quaternion algebra ramified at $p$ and $\infty$. We provide code implementations in Sagemath which is efficient for finding embeddings of imaginary quadratic orders of discriminants up to $O(p)$, even for cryptographically sized $p$.
format Preprint
id arxiv_https___arxiv_org_abs_2308_11539
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle Finding Orientations of Supersingular Elliptic Curves and Quaternion Orders
Arpin, Sarah
Clements, James
Dartois, Pierrick
Eriksen, Jonathan Komada
Kutas, Péter
Wesolowski, Benjamin
Number Theory
Orientations of supersingular elliptic curves encode the information of an endomorphism of the curve. Computing the full endomorphism ring is a known hard problem, so one might consider how hard it is to find one such orientation. We prove that access to an oracle which tells if an elliptic curve is $\mathfrak{O}$-orientable for a fixed imaginary quadratic order $\mathfrak{O}$ provides non-trivial information towards computing an endomorphism corresponding to the $\mathfrak{O}$-orientation. We provide explicit algorithms and in-depth complexity analysis. We also consider the question in terms of quaternion algebras. We provide algorithms which compute an embedding of a fixed imaginary quadratic order into a maximal order of the quaternion algebra ramified at $p$ and $\infty$. We provide code implementations in Sagemath which is efficient for finding embeddings of imaginary quadratic orders of discriminants up to $O(p)$, even for cryptographically sized $p$.
title Finding Orientations of Supersingular Elliptic Curves and Quaternion Orders
topic Number Theory
url https://arxiv.org/abs/2308.11539