Solution

ID: past-exam-of-the-mathematics-course-of-the-university-of-cambridge/2002/iii/paper-24/1/a/solution

Let be the point at infinity of the Weierstrass equation of an elliptic curve. It is the identity element for the elliptic curve group law. For an affine rational point , the inverse is
Indeed, the two affine intersections with the vertical line have these ordinates, since their sum as roots of the quadratic in is . This reflection is valid for a generalized Weierstrass equation of an elliptic curve in every characteristic of a field.
For distinct , draw their line; for , draw the tangent line. Let be its third intersection with the elliptic curve, counted with intersection multiplicity. Then the sum is the reflection of the third intersection:
A vertical line has third intersection , so . If a tangent has third intersection , then . Define addition with by ; these conventions include all exceptional cases of the affine construction.
The construction is defined over the coefficient field: after two known intersections, the remaining root is rational over that field. It gives a commutative group operation. To see why it is associative, use the elliptic curve group law from Riemann-Roch: the map identifies the elliptic curve with its degree-zero divisor class group. A line has intersection divisor linearly equivalent to , the divisor of the line at infinity. Thus . The geometric sum agrees with addition of divisor classes, which is associative.

New to topics? Read the docs here!