I've read that an elliptic curve is supersingular if and only if its endomorphism ring is an order in a quaternion algebra.  Does anyone have a simple explanation of this?