J-line: Difference between revisions
en>Michael Hardy No edit summary |
en>Epicgenius mNo edit summary |
||
Line 1: | Line 1: | ||
{{cleanup|date=January 2011}} | |||
A [[hyperelliptic curve]] is a class of [[algebraic curve]]s. Hyperelliptic curves exist for every [[genus]] <math>g \geq 1</math>. The general formula of Hyperelliptic curve over a finite field <math>K</math> is given by | |||
:<math>C : y^2 + h(x) y = f(x) \in K[x,y]</math> | |||
where <math>h(x), f(x) \in K</math> satisfy certain conditions. There are two types of hyperelliptic curves: '''real hyperelliptic curves''' and [[imaginary hyperelliptic curve]]s which differ by the number of points at infinity. In this page, we describe more about real hyperelliptic curves, these are curves having two points at infinity while imaginary hyperelliptic curves have one [[infinity point|point at infinity]]. | |||
==Definition== | |||
A real hyperelliptic curve of genus ''g'' over ''K'' is defined by an equation of the form <math>C:y^2+h(x)y=f(x)</math> where <math>h(x) \in K</math> has degree not larger than ''g+1'' while <math>f(x) \in K</math> must have degree ''2g+1'' or ''2g+2''. This curve is a non singular curve where no point <math>(x,y)</math> in the [[algebraic closure]] of <math>K</math> satisfies the curve equation <math>y^2+h(x)y=f(x)</math> and both [[partial derivative]] equations: <math>2y+h(x)=0</math> and <math>h'(x)y=f'(x)</math>. | |||
The set of (finite) <math> K</math>–rational points on ''C'' is given by | |||
:<math>C(K) = \{ (a,b) \in K^2 | b^2 + h(a) b = f(a) \} \cup S </math> | |||
Where <math>S</math> is the set of points at infinity. For real hyperelliptic curves, there are two points at infinity, <math>\infty_1</math> and <math>\infty_2</math>. For any point <math>P(a,b)\in C(K)</math>, the opposite point of <math>P</math> is given by <math>\overline{P} = (a, -b-h)</math>; it is the other point with ''x''-coordinate ''a'' that also lies on the curve. | |||
==Example== | |||
Let <math>C: y^2=f(x)</math> where | |||
: <math>f(x)=x^6+3x^5-5x^4-15x^3+4x^2+12x=x(x-1)(x-2)(x+1)(x+2)(x+3) \,</math> | |||
over <math>R</math>. Since <math>\deg f(x) = 2g+2</math> and <math>f(x)</math> has degree 6, thus <math>C</math> is a curve of genus ''g = 2''. | |||
<!-- Deleted image removed: [[File:Example of real curve.jpg|thumb|Figure 1: Example of a real hyperelliptic curve]] --> | |||
The [[Homogeneous coordinates|homogenous]] version of the curve equation is given by | |||
: <math>Y^2Z^4=X^6+3X^5Z-5X^4Z^2-15X^3Z^3+4X^2Z^4+12XZ^5</math>. | |||
It has a single point at infinity given by (0:1:0) but this point is singular. The [[blowup]] of <math>C</math> has 2 different points at infinity, which we denote <math>\infty_1 </math>and <math>\infty_2 </math>. Hence this curve is an example of a real hyperelliptic curve. | |||
In general, every curve given by an equation where ''f'' has even degee has two points at infinity and is a real hyperelliptic curve while those where ''f'' has odd degree have only a single point in the blowup over (0:1:0) and are thus [[imaginary hyperelliptic curve]]s. In both cases this assumes that the affine part of the curve is nonsingular (see the conditions on the derivatives above) | |||
==Arithmetic in a real hyperelliptic curve== | |||
In real hyperelliptic curve, addition is no longer defined on points as in [[elliptic curve]]s but on [[Imaginary hyperelliptic curve#The divisor and the Jacobian|divisors and the Jacobian]]. Let <math>C</math> be a hyperelliptic curve of genus ''g'' over a finite field ''K''. A divisor <math>D</math> on <math>C</math> is a formal finite sum of points <math>P</math> on <math>C</math>. We write | |||
:<math>D = \sum_{P \in C}{n_P P}</math> where <math>n_P \in\Z</math> and <math>n_p=0</math> for almost all <math>P</math>. | |||
The degree of <math>D= \sum_{P \in C}{n_P P}</math> is defined by | |||
:<math>\deg(D) = \sum_{P \in C}{n_P}</math> . | |||
<math>D</math> is said to be defined over <Math>K</Math> if <Math>D^\sigma=\sum_{P \in C}n_P P^\sigma=D</Math> for all [[automorphisms]] σ of <math>\overline{K}</math> over <math>K</math> . The set <math>Div(K)</math> of divisors of <math>C</math> defined over <math>K</math> forms an additive [[abelian group]] under the addition rule | |||
:<math>\sum a_PP + \sum b_PP = \sum {(a_P + b_P) P}</math>. | |||
The set <math>Div^0 (K)</math> of all degree zero divisors of <math>C</math> defined over <math>K</math> is a subgroup of <math>Div(K)</math>. | |||
We take an example: | |||
Let <math>D_1=6P_1+ 4P_2</math> and <math>D_2=1P_1+ 5P_2</math>. If we add them then <math>D_1+ D_2=7P_1+ 9P_2</math>. The degree of <math>D_1</math> is <math>\deg(D_1)=6+4=10</math> and the degree of <math>D_2</math> is <math>\deg(D_2)=1+5=6</math>. | |||
Then, <math>\deg(D_1+D_2)=deg(D_1)+deg(D_2)=16.</math> | |||
For polynomials <math>G\in K[C]</math>, the divisor of <math>G</math> is defined by | |||
: <math>\mathrm{div}(G)=\sum_{P\in C} {\mathrm{ord}}_P(G)P</math>. If the function | |||
<math>G</math> has a pole at a point <math>P</math> then <math>-{\mathrm{ord}}_P (G)</math> is the order of vanishing of <math>G</math> at <math>P</math>. Assume <math>G, H </math> are polynomials in <math>K[C]</math>; the divisor of the rational function <math>F=G/H</math> is called a principal divisor and is defined by <math>\mathrm{div}(F)=\mathrm{div}(G)-\mathrm{div}(H)</math>. We denote the group of principal divisors by <math>P(K)</math>, i.e. <math>P(K)={\mathrm{div}(F)|F \in K(C)}</math>. The Jacobian of <math>C</math> over <math>K</math> is defined by <math>J=Div^0/P</math>. The factor group <math>J</math> is also called the divisor class group of <math>C</math>. The elements which are defined over <math>K</math> form the group <math>J(K)</math>. We denote by <math>\overline{D}\in J(K)</math> the class of <math>D</math> in <math>Div^0 (K)/P(K)</math>. | |||
There are two canonical ways of representing divisor classes for real hyperelliptic curves <math>C</math> which have two points infinity <math>S=\{\infty_1,\infty_2 \}</math>. The first one is to represent a degree zero divisor by <math> \bar{D}</math>such that <math>D=\sum_{i=1}^r P_i-r\infty_2</math>, where <Math>P_i \in C(\bar{\mathbb{F}}_q)</Math>,<math>P_i\not= \infty_2</math>, and <math>P_i\not=\bar{P_j} </Math> if <Math> i\not=j </Math> The representative <math>D</math> of <math>\bar{D}</math> is then called semi reduced. If <math>D</math> satisfies the additional condition <math>r \leq g</math> then the representative <math>D</math> is called reduced.<ref>[http://math.ucsd.edu/~erickson/research/pdf/ejsss-waifi.pdf.Stefan Erickson, Michael J. Jacobson, Jr., Ning Shang, Shuo Shen, and Andreas Stein, Explicit formulas for real hyperelliptic curves of genus 2 in affine representation]</ref> Notice that <math>P_i=\infty_1</math> is allowed for some i. It follows that every degree 0 divisor class contain a unique representative <math>\bar{D}</math> with | |||
:<math>D= D_x-deg(D_x ) \infty_2+v_1 (D)(\infty_1-\infty_2)</math>, | |||
where <math>D_x</math> is divisor that is coprime with both | |||
:<math>\infty_1</math> and <math>\infty_2</math>, and <math> 0\leq deg(D_x )+v_1(D)\leq g</math>. | |||
The other representation is balanced at infinity. | |||
Let <math>D_\infty=\infty_1+\infty_2 </math>, note that this divisor is <math>K</math>-rational even if the points <math>\infty_1 </math> and <math>\infty_2 </math> are not independently so. Write the representative of the class <math>\bar{D}</math> as <math>D=D_1+D_\infty</math>, | |||
where <math>D_1</math> is called the affine part and does not contain <math>\infty_1</math> and <math>\infty_2</math>, and let <math>d=\deg(D_1)</math>. If <math>d</math> is even then | |||
: <math>D_\infty= \frac{d}{2}(\infty_1+\infty_2)</math>. | |||
If <math>d</math> is odd then | |||
:<math>D_\infty= \frac{d+1}{2} \infty_1+\frac{d-1}{2} \infty_2</math>.<ref>[https://springerlink3.metapress.com/content/a756w8627q87235n/resource-secured/?target=fulltext.pdf&sid=enznx245vkwt53futvixzk55&sh=www.springerlink.com.Steven D. Galbraith, Michael Harrison, and David J. Mireles Morales, Efficient Hyperelliptic Arithmetic Using Balanced Representation for Divisors]</ref> | |||
For example, let the affine parts of two divisors be given by | |||
:<math>D_1=6P_1+ 4P_2 </math> and <math>D_2=1P_1+ 5P_2 </math> | |||
then the balanced divisors are | |||
:<math>D_1=6P_1+ 4P_2- 5D_{\infty_1} -5D_{\infty_2} </math> and <math>D_2=1P_1+ 5P_2- 3D_{\infty_1} -3D_{\infty_2} </math> | |||
==Transformation from real hyperelliptic curve to imaginary hyperelliptic curve== | |||
Let <math>C</math> be a real quadratic curve over a field <math>K</math>. If there exists a ramified prime divisor of degree 1 in <math>K</math> then we are able to perform a [[birational transformation]] to an imaginary quadratic curve. | |||
A (finite or infinite) point is said to be ramified if it is equal to its own opposite. It means that <math>P =(a,b) = \overline{P}=(a, -b-h(a))</math>, i.e. that <math>h(a)+ 2b=0</math>. If <math>P</math> is ramified then <math>D=P-\infty_1</math> is a ramified prime divisor.<ref>[http://eprint.iacr.org/2010/125.pdf M. J. JACOBSON, JR., R. SCHEIDLER, AND A. STEIN, Cryptographic Aspects of Real Hyperelliptic Curves]</ref> | |||
The real hyperelliptic curve <math>C:y^2+h(x)y=f(x)</math> of genus <math>g</math> with a ramified <math>K</math>-rational finite point <math>P=(a,b)</math> is birationally equivalent to an imaginary model <math>C':y'^2+\bar{h}(x')y'=\bar{f}(x')</math> of genus <math>g</math>, i.e. <math>\deg(\bar{f})=2g+1</math> and the function fields are equal <math>K(C)=K(C')</math>.<ref>[http://eprint.iacr.org/2008/250.pdf.Steven D. Galbraith, Xibin Lin, and David J. Mireles Morales, Pairings on Hyperelliptic Curves with a Real Model]</ref> Here: | |||
: <math>x'= \frac{1}{x-a}</math> and <math>y'= \frac{y+b}{(x-a)^{g+1}} </math> … (i) | |||
In our example <math>C: y^2=f(x)</math> where <math>f(x)=x^6+3x^5-5x^4-15x^3+4x^2+12x</math>, ''h(x)'' is equal to 0. For any point <math>P=(a,b)</math>, <math>h(a)</math> is equal to 0 and so the requirement for ''P'' to be ramified becomes <math>b=0</math>. Substituting <math>h(a)</math> and <math>b</math>, we obtain <math>f(a)=0</math>, where <math>f(a)=a(a-1)(a-2)(a+1)(a+2)(a+3)</math>, i.e. <math>a\in\{0,1,2,-1,-2,-3\}</math>. | |||
From (i), we obtain <math>x= \frac {ax'+1}{x'} </math> and <math>y= \frac{y'}{x'^{g+1}}</math> . For g=2, we have <math>y= \frac{y'}{x'^3}</math> | |||
For example, let <math>a=1</math> then <math>x= \frac{x'+1}{x'} </math> and <math>y= \frac{y'}{x'^3} </math>, we obtain | |||
:<math>\left(\frac{y'}{x'^3 }\right)^2=\frac {x'+1}{x'} \left(\frac {x'+1}{x'}+1\right)\left(\frac {x'+1}{x'}+2\right)\left(\frac {x'+1}{x'}+3\right)\left(\frac {x'+1}{x'}-1\right)\left(\frac {x'+1}{x'}-2\right)</math>. | |||
To remove the denominators this expression is multiplied by <math>x^6</math>, then: | |||
:<math> y'^2=(x'+1)(2x'+1)(3x'+1)(4x'+1)(1)(1-x') \,</math> | |||
giving the curve | |||
:<math>C' : y'^2=\bar{f}(x')</math> where <math> \bar{f}(x')=(x'+1)(2x'+1)(3x'+1)(4x'+1)(1)(1-x')= -24x'^5-26x'^4+15x'^3+25x'^2+9x'+1 </math>. | |||
<math>C'</math> is an imaginary quadratic curve since <math>\bar{f}(x')</math> has degree <math>2g+1</math>. | |||
==References== | |||
{{reflist}} | |||
{{DEFAULTSORT:Real Hyperelliptic Curve}} | |||
[[Category:Algebraic curves]] |
Revision as of 15:58, 6 June 2013
A hyperelliptic curve is a class of algebraic curves. Hyperelliptic curves exist for every genus . The general formula of Hyperelliptic curve over a finite field is given by
where satisfy certain conditions. There are two types of hyperelliptic curves: real hyperelliptic curves and imaginary hyperelliptic curves which differ by the number of points at infinity. In this page, we describe more about real hyperelliptic curves, these are curves having two points at infinity while imaginary hyperelliptic curves have one point at infinity.
Definition
A real hyperelliptic curve of genus g over K is defined by an equation of the form where has degree not larger than g+1 while must have degree 2g+1 or 2g+2. This curve is a non singular curve where no point in the algebraic closure of satisfies the curve equation and both partial derivative equations: and . The set of (finite) –rational points on C is given by
Where is the set of points at infinity. For real hyperelliptic curves, there are two points at infinity, and . For any point , the opposite point of is given by ; it is the other point with x-coordinate a that also lies on the curve.
Example
over . Since and has degree 6, thus is a curve of genus g = 2.
The homogenous version of the curve equation is given by
It has a single point at infinity given by (0:1:0) but this point is singular. The blowup of has 2 different points at infinity, which we denote and . Hence this curve is an example of a real hyperelliptic curve.
In general, every curve given by an equation where f has even degee has two points at infinity and is a real hyperelliptic curve while those where f has odd degree have only a single point in the blowup over (0:1:0) and are thus imaginary hyperelliptic curves. In both cases this assumes that the affine part of the curve is nonsingular (see the conditions on the derivatives above)
Arithmetic in a real hyperelliptic curve
In real hyperelliptic curve, addition is no longer defined on points as in elliptic curves but on divisors and the Jacobian. Let be a hyperelliptic curve of genus g over a finite field K. A divisor on is a formal finite sum of points on . We write
is said to be defined over if for all automorphisms σ of over . The set of divisors of defined over forms an additive abelian group under the addition rule
The set of all degree zero divisors of defined over is a subgroup of .
We take an example:
Let and . If we add them then . The degree of is and the degree of is . Then,
For polynomials , the divisor of is defined by
has a pole at a point then is the order of vanishing of at . Assume are polynomials in ; the divisor of the rational function is called a principal divisor and is defined by . We denote the group of principal divisors by , i.e. . The Jacobian of over is defined by . The factor group is also called the divisor class group of . The elements which are defined over form the group . We denote by the class of in .
There are two canonical ways of representing divisor classes for real hyperelliptic curves which have two points infinity . The first one is to represent a degree zero divisor by such that , where ,, and if The representative of is then called semi reduced. If satisfies the additional condition then the representative is called reduced.[1] Notice that is allowed for some i. It follows that every degree 0 divisor class contain a unique representative with
where is divisor that is coprime with both
The other representation is balanced at infinity. Let , note that this divisor is -rational even if the points and are not independently so. Write the representative of the class as , where is called the affine part and does not contain and , and let . If is even then
- .[2]
For example, let the affine parts of two divisors be given by
then the balanced divisors are
Transformation from real hyperelliptic curve to imaginary hyperelliptic curve
Let be a real quadratic curve over a field . If there exists a ramified prime divisor of degree 1 in then we are able to perform a birational transformation to an imaginary quadratic curve. A (finite or infinite) point is said to be ramified if it is equal to its own opposite. It means that , i.e. that . If is ramified then is a ramified prime divisor.[3]
The real hyperelliptic curve of genus with a ramified -rational finite point is birationally equivalent to an imaginary model of genus , i.e. and the function fields are equal .[4] Here:
In our example where , h(x) is equal to 0. For any point , is equal to 0 and so the requirement for P to be ramified becomes . Substituting and , we obtain , where , i.e. .
From (i), we obtain and . For g=2, we have
For example, let then and , we obtain
To remove the denominators this expression is multiplied by , then:
giving the curve
is an imaginary quadratic curve since has degree .
References
43 year old Petroleum Engineer Harry from Deep River, usually spends time with hobbies and interests like renting movies, property developers in singapore new condominium and vehicle racing. Constantly enjoys going to destinations like Camino Real de Tierra Adentro.
- ↑ Erickson, Michael J. Jacobson, Jr., Ning Shang, Shuo Shen, and Andreas Stein, Explicit formulas for real hyperelliptic curves of genus 2 in affine representation
- ↑ D. Galbraith, Michael Harrison, and David J. Mireles Morales, Efficient Hyperelliptic Arithmetic Using Balanced Representation for Divisors
- ↑ M. J. JACOBSON, JR., R. SCHEIDLER, AND A. STEIN, Cryptographic Aspects of Real Hyperelliptic Curves
- ↑ D. Galbraith, Xibin Lin, and David J. Mireles Morales, Pairings on Hyperelliptic Curves with a Real Model