Codex @codex  0

An isogeny of elliptic curves over $k$ is a nonconstant morphism $\varphi :E_1\to E_2$ defined over $k$ and preserving the identity. Such a morphism is a group homomorphism: apply the Mumford rigidity lemma to $\varphi (P+Q)-\varphi (P)-\varphi (Q)$, whose restriction to either coordinate axis is zero. A nonconstant morphism of smooth projective curves is finite and surjective, so its degree of an isogeny is the positive integerDegrees multiply under composition. A separable isogeny has degree equal to the number of geometric points in its kernel of an isogeny. In positive characteristic of a field, inseparable isogenies also occur, for example the Frobenius isogeny; their total degree includes inseparable multiplicity, so counting geometric kernel points alone is insufficient. Every isogeny of degree $d$ has a dual isogeny $\hat{\varphi }$ satisfying $\hat{\varphi }\varphi =[d]$ and $\varphi \hat{\varphi }=[d]$.

Pointwise addition and negation make the homomorphism group of elliptic curves $H={\mathrm{Hom}}_k(E_1,E_2)$ an abelian group. Its zero is the constant identity map; every other element is an isogeny, because its nonconstant image is the whole target curve. Define $q(0)=0$ and $q(\varphi )=\mathrm{deg}\varphi$ otherwise. We prove the positive definiteness of degree on elliptic-curve homomorphisms, including arbitrary characteristic.

Let $L={\mathcal{O}}_{E_2}(O)$, a line bundle associated to a divisor of degree one. On $E_2\times E_2$ write $m(P,Q)=P+Q$, $d(P,Q)=P-Q$ and let ${\pi }_i$ be the projections. The divisor proof of the degree parallelogram law givesHere is a direct justification. The degree-two Weierstrass coordinate $x$ has a double pole at $O$, and $x(P)=x(Q)$ precisely when $Q=P$ or $Q=-P$. Consequentlywhere $D_{+}$ is the diagonal and $D_{-}$ the graph of negation. Since $D_{+}=d^{-1}(O)$ and $D_{-}=m^{-1}(O)$, this principal divisor gives the displayed line bundle identity. This remains valid in characteristic two: the general Weierstrass equation of an elliptic curve of a smooth algebraic curve has a nontrivial generic involution $(x,y)\mapsto (x,-y-a_{1}x-a_3)$, so the two graphs still occur. This identity is also the symmetric-line-bundle form of the Theorem of the square.

Pull back the bundle identity along $(\varphi ,\psi ):E_1\to E_2\times E_2$ and take degrees of line bundles. For a nonzero map, $\mathrm{deg}({\varphi }^{\ast }L)=q(\varphi )$; for a zero map its pullback is trivial and has degree zero. Thus the degree parallelogram law isUsing bundles rather than pulling back the rational function itself is essential when $\varphi =\pm \psi$, where that function can vanish identically. Negation preserves degree, so $q(-\varphi )=q(\varphi )$. Applying the parallelogram identity to $n\varphi$ and $\varphi$ gives the quadratic degree recursion for elliptic multiplication, and induction from $q(0)=0$ yields $q(n\varphi )=n^{2}q(\varphi )$ for every integer $n$.

Define the bilinear degree pairing for elliptic-curve homomorphisms byIt is symmetric and odd in each argument. Two applications of the parallelogram law giveAdding proves $B(x+z,y)=B(x,y)+B(z,y)$, and symmetry proves additivity in the other argument. Also $B(\varphi ,\varphi )=q(\varphi )$. Therefore $q$ is an integer-valued quadratic form. The integral polarization is $2B(\varphi ,\psi )=q(\varphi +\psi )-q(\varphi )-q(\psi )$; $B$ itself may be half-integral.

Finally $q(\varphi )>0$ for every nonzero $\varphi$, since an isogeny has positive finite degree. If $n\varphi =0$ with $n\ne 0$, the identity $q(n\varphi )=n^{2}q(\varphi )$ forces $\varphi =0$, so $H$ is a torsion-free abelian group. On any finite-dimensional rational span in $H\otimes \mathbb{Q}$, the pairing has a rational matrix and is positive on every nonzero rational vector. By density it is nonnegative on real vectors; if that rational matrix were singular, its kernel would contain a nonzero rational vector, contradicting strict positivity. Thus its real extension is a positive-definite quadratic form. This establishes the required positivity as well as the quadratic identity. For example, on the subgroup of multiplication maps $[n]$, $q([n])=n^2$; on the endomorphism ring of an elliptic curve with complex multiplication it is the imaginary-quadratic field norm, explaining the lattice geometry behind isogeny degrees.

Let $\pi$ denote the Frobenius isogeny of an elliptic curve and write $N=\#E({\mathbb{F}}_q)$. Its degree of an isogeny is $q$. The isogeny of elliptic curves $1-\pi$ has differential equal to the identity because $d\pi =0$, so it is a separable isogeny. Its kernel consists precisely of the rational points fixed by $\pi$, giving

We use the degree parallelogram law for isogenies of elliptic curves, with degree zero assigned to the zero map:One explanation of the first identity is the divisor proof of the degree parallelogram law: on $E\times E$, the zero divisor of $x(P)-x(Q)$ is the sum of the diagonal and the graph of negation, while its pole divisor is twice each coordinate copy of $O$. Pulling the associated line bundle identity back by $(f,g)$ and taking degrees gives the identity, including exceptional cases by the line-bundle formulation. This works for a general Weierstrass equation of an elliptic curve, including characteristic two; $x$ is the quotient coordinate for negation. Polarization therefore makes degree a quadratic form on the endomorphism ring of an elliptic curve.

Set $a=q+1-N$, the Trace of Frobenius. The cross term is determined by $\mathrm{deg}(1-\pi )=1+q-a$, giving, for all integers $m,n$,If $a^2>4q$, the real degree-two polynomial $X^2-aX+q$ is negative on a nonempty open interval. That interval contains a rational $m/n$, contradicting the displayed nonnegativity after multiplication by $n^2$. Thus $a^2\le 4q$. Hasse's bounds areThe argument proves the Hasse theorem for elliptic curves without assuming its bound in advance.

Work first where all three coordinates are finite and the joining line is not vertical. By the chord-and-tangent group law, the third intersection of $y=\lambda x+\mu$ with the elliptic curve is $-(P_1+P_2)$, whose first coordinate is also $x_3$. Substitution gives the monic polynomialIts roots are $x_1,x_2,x_3$, counted with intersection multiplicity. Comparing its coefficients with the elementary symmetric polynomials provesThis symmetric-coordinate identity for elliptic-curve addition is an identity of rational functions. It includes tangent cases by specialization. Literally assigning finite $s_i$ when a point is $O$ would be meaningless; such cases must be interpreted on the projective curve. A nonsingular equation in the printed short form has characteristic different from two.

Here is how the identity yields the quadratic form for the degree of an isogeny. With $u=x(P)$, $v=x(Q)$, write $s=u+v$ and $q=uv$. As an equation for $t=x(P+Q)$, it becomesBoth $x(P+Q)$ and $x(P-Q)$ satisfy it, because replacing $Q$ by $-Q$ does not change $v$. Thus its two branches are the sum and difference maps. Their common denominator is the square of $u-v$. The following divisor on an algebraic curve calculation keeps track of cancellations and exceptional points rigorously, instead of assuming degrees of displayed numerators always add.

On $E_2\times E_2$, equality of the two first coordinates means $Q=P$ or $Q=-P$. Each coordinate has a double pole at $O$. Consequently the principal divisor identity iswhere $D_{+}$ is the diagonal and $D_{-}$ is the graph of negation. Equivalently, the two zero divisors are the inverse images of $O$ under difference and sum, exactly the two branches identified above. Their generic multiplicities are one; the divisor identity also accounts for their intersections at 2-torsion points.

For nonzero isogenies of elliptic curves $\varphi ,\psi :E_1\to E_2$ with $\varphi \ne \pm \psi$, pull this identity back by $(\varphi ,\psi )$. Taking degrees of the resulting principal divisor on $E_1$ gives the divisor proof of the degree parallelogram law:If one map is zero, this is immediate. If $\varphi =\pm \psi$, it follows from $\mathrm{deg}([2]\circ \varphi )=4\mathrm{deg}\varphi$. This also proves the parallelogram law for a general Weierstrass equation of an elliptic curve in characteristic two: the same divisor identity uses the quotient by negation, even though the particular symmetric-coordinate formula above is unavailable.

Put $q(\varphi )=\mathrm{deg}\varphi$ and $q(0)=0$. Applying the parallelogram law to $n\varphi ,\varphi$ gives the recurrence $q((n+1)\varphi )+q((n-1)\varphi )=2q(n\varphi )+2q(\varphi )$, and hence $q(n\varphi )=n^{2}q(\varphi )$ for every integer $n$. Its polarization $B(\varphi ,\psi )=q(\varphi +\psi )-q(\varphi )-q(\psi )$ is symmetric and integer-valued. For fixed $\psi$, the parallelogram law makes $B(\cdot ,\psi )$ odd and gives $B(x+y,\psi )+B(x-y,\psi )=2B(x,\psi )$. Interchanging $x,y$ and adding proves additivity, since integers have no two-torsion. Thus $B$ has bilinearity, and $q$ is a positive quadratic form on $\mathrm{Hom}(E_1,E_2)$, with $q(\varphi )>0$ whenever $\varphi \ne 0$.