I've read that an elliptic curve is supersingular if and only if its endomorphism ring is an order in a quaternion algebra. Does anyone have a simple explanation of this?