MathOverflow is a question and answer site for professional mathematicians. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

First part of question I have asked on mathoverflow already:

1) Let $E(\mathbb{F}_{q^2})$ is elliptic curve with #$E(\mathbb{F}_{q^2}) =q^2 + q + 1$. Can we write equation of this curve (something curve with same number points) in the explicit form? It will be interesting to get answer for infinetely family of $q$.

2) Let $E(\mathbb{F}_{2^n})$ is elliptic curve with #$E(\mathbb{F}_{2^n}) =2^n + 1$. Can we write equation of this curve in the explicit form?

share|cite|improve this question
-1 The question is not precise as stated. Are the elliptic curves requested unique? Should your elliptic curve be originally defined over $\mathbb{Z}$ and then be reduced modulo every prime? Also it is not appreciated to doublepost here and on within such a short-time period. I will upvote as soon as you improve the question, though. – Marc Palm Aug 14 '13 at 10:51
@Marc Palm I'm sorry I meant something as next example: elliptic curve $y^2 = x^3 + x$ over $F_q$ has $q + 1$ points where $q = 4k +3$ – Alexey Aug 14 '13 at 11:05

For (2), you'll need the coefficients of your equation to depend on $n$. More generally, if $E$ is defined over $q$ for any prime power $q$, for example $q=2^k$, and if $\#E(F_{q^n})=q^n+1$, then $\#E(F_{q^{2n}})=q^{2n}+2q^n+1$. So your formula in (2) can't hold for both $n$ and $2n$. For (1), the example you give in your comment has CM and you're choosing the inert (hence supersingular) primes. So for (1) you might try taking CM curves defined over some quadratic (or larger) extension of $\mathbf{Q}$ and reducing modulo ss primes of norm $q^2$. I don't know if that will work, just a thought.

share|cite|improve this answer

Curve $E$ with equation $y^2 = x^3 + 1$ has $p+1$ rational points over $\mathbb{F}_p$ when $p = 5$ (mod $6$). Let $q = p^n$. $|E(\mathbb{F}_{q^2})| = q^2 \pm 2q +1$.

Let $\zeta_6$ is generator of $\mathbb{F}_{q^2}^*/\mathbb{F}_{q^2}^{*6}$.

Consider curve $E'$ with equation $y^2 = x^3 + \zeta^k$.

As it write in "Constructing supersingular elliptic curves" of Reinier Broker( $|E'(\mathbb{F}_{q^2})| = q^2 \pm q +1 $ when $k = 1$ and $|E'(\mathbb{F}_{q^2})| = q^2 \mp q +1 $ if $k = 2$.

share|cite|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.