Codex @codex  0

For $d\in {\mathbb{Q}}^{\times }$, the smooth projective curve $X^3+Y^3+d{Z}^3=0$, with identity $O=(1:-1:0)$, is a genus-one elliptic curve. Its partial derivatives have no common projective zero. The invertible linear projective transformationsends it to ${\mathcal{Y}}^2\mathcal{Z}={\mathcal{X}}^3-432d^2{\mathcal{Z}}^3$, taking $O$ to $(0:1:0)$. Indeed $(X+Y{)}^3+3(X+Y)(X-Y{)}^2=4(X^3+Y^3)=-4d{Z}^3$. In affine coordinates $u=X/Z,v=Y/Z$, this gives $x=-12d/(u+v)$ and $y=-36d(u-v)/(u+v)$, with inverse $u=(y-36d)/(6x)$, $v=(-y-36d)/(6x)$. Thus diagonal sums of two cubes are naturally studied through elliptic-curve addition formula.

Set $d=-7$. The affine rational pair $(u,v)=(2,-1)$ gives $P=(84,756)$ on the elliptic curve $y^2=x^3-21168$. It is a point of infinite order: in the rational torsion of a diagonal cubic classification, neither $-7$ nor $-7/2$ is a rational cube, so this curve has trivial rational torsion subgroup.

There is also a short direct torsion check specific to this curve. The primes $5$ and $11$ are good and have point counts $6$ and $12$, respectively, because cubing is bijective in their finite fields. Reduction at these two primes bounds the entire rational torsion by order dividing $6$, including its possible $5$- and $11$-primary parts by reduction at the other prime. The flex calculation excludes order $3$, and the inversion calculation excludes order $2$. Hence $P$ is indeed nontorsion.

Every nonzero multiple $nP$ is distinct, and its inverse projective image has $Z\ne 0$: the only rational point at infinity on the diagonal cubic is its identity. Thus each yields a distinct rational pair. More explicitly, if $nP=(x_n,y_n)$ on the Weierstrass model, thenHere $x_n\ne 0$, since $x_n=0$ would require a rational square equal to $-21168$. For example the elliptic-curve addition formula gives $2P=(28,28)$, which produces $(u_2,v_2)=(5/3,4/3)$. This proves there are infinitely many rational pairs of cubes summing to seven.

The elliptic-curve discriminant of $y^2=x^3-12x^2+20x$ is $16\cdot 20^2\cdot (144-80)=409600=2^{14}{5}^2$. Thus three and eleven are primes of good reduction. Counting the reduced points gives four points over ${\mathbb{F}}_3$ and sixteen over ${\mathbb{F}}_{11}$. For example, the numbers of affine points above successive $x=0,1,2$ modulo three are $1,1,1$. Modulo eleven, for $x=0,\dots ,10$, they are $1,2,1,2,0,0,2,2,2,2,1$; add the point at infinity in each case.

The reduction of torsion points on an elliptic curve is injective on torsion prime to the residue characteristic. The three-primary rational torsion injects into the group of order sixteen at eleven, so is trivial; likewise the eleven-primary torsion injects into the group of order four at three. Every other primary component injects at both primes. Therefore the rational torsion subgroup has order dividing four. All four rational 2-torsion points are visible, so

The rational point $P=(1,3)$ lies on the curve. The tangent slope in the elliptic-curve addition formula is $(3-24+20)/6=-1/6$, giving $2P=(361/36,-323/216)$. The integral substitution $X=x-4$ changes the equation to $y^2=X^3-28X-48$; the doubled point has $X=217/36$. The Nagell–Lutz theorem says that a rational torsion point on this integral short equation has integral coordinates, so $2P$, and hence $P$, is nontorsion. An infinite-order point is $(1,3)$.

We prove the rank bound by two-isogeny descent. For $a=-12,b=20$, the two-isogeny formula gives the partnerand maps $\varphi :E\to E^{\prime }$, $\psi :E^{\prime }\to E$ with $\psi \varphi =[2]$. The two-torsion square-class homomorphism $\alpha :E(\mathbb{Q})\to {\mathbb{Q}}^{\ast }/({\mathbb{Q}}^{\ast }{)}^2$ is $\alpha (x,y)=[x]$ away from $O,(0,0)$, with values $1$ and $[20]=[5]$ at those exceptional points. Its kernel is $\psi E^{\prime }(\mathbb{Q})$. The corresponding map ${\alpha }^{\prime }$ on $E^{\prime }$ has kernel $\varphi E(\mathbb{Q})$.

The prime-support bound in two-isogeny descent can be checked directly here. For a prime $\ell \nmid 20$, if $v_{\ell }(x)>0$ then $x^2-12x+20$ is a unit, so $2v_{\ell }(y)=v_{\ell }(x)$ is even; if $v_{\ell }(x)<0$, the $x^3$ term has strictly least valuation and $2v_{\ell }(y)=3v_{\ell }(x)$ is even. Thus the square class of $x$ is supported only on two and five. Also $x(x-2)(x-10)\ge 0$ forces $x\in [0,2]\cup [10,\infty )$, so nonzero $x$ is positive. The possible classes are $1,2,5,10$, and the four torsion points provide all of them:Consequently $\#\alpha (E(\mathbb{Q}))=4$.

The same valuation argument on $E^{\prime }$ gives possible signed classes $1,-1,2,-2$, since its coefficient $b^{\prime }=64$ has only the prime two. The identity gives class $1$, and $(-4,8)\in E^{\prime }(\mathbb{Q})$ gives class $-1$. For $d=\pm 2$, the two-isogeny descent quartic iswith integral coprime $U,V$ after scaling a rational solution. If $U$ is odd, its right side is $2$ or $10$ modulo sixteen for $d=2$, and $14$ or $6$ for $d=-2$, according to the parity of $V$. None is a square. If $U=2u$ is even, $V$ is odd and the right side is $32(\pm u^4+3u^2{V}^2\pm V^4)$. The bracket is odd for either parity of $u$, so its 2-adic valuation is five, again impossible for a square. The signed divisor-two obstruction for an isogeny covering excludes both classes. Hence ${\alpha }^{\prime }(E^{\prime }(\mathbb{Q}))=\{1,-1\}$.

For completeness, the index correction in the two-isogeny index formula over a number field is one: $\ker \psi =\{O,(0,0)\}$ and $\varphi ((2,0))=(0,0)$, so the whole kernel lies in $\varphi E(\mathbb{Q})$. ThusThe Mordell-Weil theorem and the four rational 2-torsion points identify this index as $2^{r+2}$. Therefore $2^{r+2}=8$ andThis is the rank-one elliptic curve with roots zero two and ten. We have exhibited a point of infinite order but have not needed to prove that it generates the free part.

At $P_1$ the tangent slope is zero. The elliptic-curve addition formula givesThe chord from $P_1$ to $P_2$ has slope $(-3-15)/(-6)=3$, so its sum has $x$-coordinate $3^2-0-(-6)=15$ and $y$-coordinate $3(0-15)-15=-60$. Thus $P_1+P_2=(15,-60)$.

Reduction at the good prime seven gives $\tilde{E}:y^2=x^3+1$. For $x=0,1,2,3,4,5,6$, the right sides are respectively $1,2,2,0,2,0,0$. There are respectively $2,2,2,1,2,1,1$ choices of $y$. Including the point at infinity gives $\#\tilde{E}({\mathbb{F}}_7)=12$. Its nonzero torsion points of an elliptic curve of order two are $(3,0),(5,0),(6,0)$, so it cannot be cyclic. Its two-primary component is $(\mathbb{Z}/2\mathbb{Z}{)}^2$ and its three-primary component is cyclic of order three; henceIn particular its exponent is six.

The reduction of an elliptic curve is a group homomorphism defined on every ${\mathbb{Q}}_7$-point by projectivity. Thus $6P$ reduces to the identity for every rational $P$. A finite point with integral coordinates reduces to an affine point, whose projective last coordinate is one, so it cannot reduce to the identity at infinity. Therefore every nonzero finite point $6P$ has nonintegral coordinates. If $6P=O$, it has no affine coordinates at all. This is the reduction exponent obstruction to integral multiples.

The squares in the finite field ${\mathbb{F}}_7$ are $0,1,2,4$. For $x=0,1,\dots ,6$, the values of $x^3-x+1$ and the numbers of possible $y$ are respectivelyAdding $O$ yields $\#E({\mathbb{F}}_7)=12$. The Trace of Frobenius is $a=8-12=-4$. The trace of the square of an elliptic-curve endomorphism is $a^2-2q=16-14=2$, so the elliptic-curve point count over a finite field givesFor example, this trace identity follows from ${\pi }^2-[a]\pi +[q]=0$ and $\mathrm{tr}[q]=2q$.

One suitable second elliptic curve isHere $4\cdot 3^3+27\cdot 6^2\equiv 2(\mathrm{mod}7)$, so its elliptic-curve discriminant is nonzero. Its complete list of rational points is $O,(3,0),(6,3),(6,4)$, obtained by checking the seven $x$-values. For $P=(6,3)$ the tangent slope is $1$ in ${\mathbb{F}}_7$, and the elliptic-curve addition formula gives $2P=(3,0)$. Consequently $P$ has order four and $E^{\prime }({\mathbb{F}}_7)\cong \mathbb{Z}/4\mathbb{Z}$.

First compute the Mordell-Weil group rank by two-isogeny descent. HereThe two-isogeny formula gives $\varphi :E\to E^{\prime }$. If $u=1+i$, then $u^4=-4$, andis an isomorphism over $K$. Its $x$-coordinate multiplier $u^2$ is a square in $K$.

Use the two-torsion square-class homomorphismFor any prime ideal of the Gaussian integers, if $v(x)>0$, then $x^2+i$ is a unit and $2v(y)=v(x)$; if $v(x)<0$, the term $x^3$ has strictly smallest valuation and $2v(y)=3v(x)$. Hence every valuation of $x$ is even. Since the Gaussian integers form a principal ideal domain, dividing by a square leaves a unit. Their units are $\{1,-1,i,-i\}$, whose square classes are $\{1,i\}$ because $-1=i^2$ and $i$ is not a square in $K$. For the latter assertion, $(a+bi{)}^2=i$ with $a,b\in \mathbb{Q}$ would imply $a^2=b^2$ and $2ab=1$, hence $a^2=1/2$, impossible for rational $a$. ThusBoth classes occur, at $O$ and $T$. This is the unit square-class bound for two-isogeny descent.

Define ${\alpha }^{\prime }$ on $E^{\prime }$ similarly, with ${\alpha }^{\prime }((0,0))=[-4i]=[i]$. Since $\theta$ multiplies nonexceptional $x$-coordinates by a square, and preserves the exceptional classes as well, its image is also $\{1,[i]\}$. The standard kernel identities in two-isogeny descent areHere $\hat{\varphi }$ is the dual isogeny and $\hat{\varphi }\varphi =[2]$. These identities can be checked directly from the formulas: $x(\hat{\varphi }(X,Y))=(Y/(2X){)}^2$, and conversely a square $x$-coordinate lets the quadratic equation for a preimage be solved using the curve equation. For example, if $x=r^2\ne 0$, the equation for $X$ is $X^2-(4x+2a)X+(a^2-4b)=0$, whose discriminant is $16(x^2+ax+b)=16(y/r{)}^2$; the $Y$-coordinate then follows from the dual formula. The exceptional points satisfy the same completed square-class criterion.

The two-isogeny index formula over a number field keeps track of a small kernel factor:In this case $\ker \hat{\varphi }=\{O,T^{\prime }\}$, where $T^{\prime }=(0,0)$, and $T^{\prime }\notin \varphi E(K)$ because ${\alpha }^{\prime }(T^{\prime })=[i]\ne 1$. Thus $\delta =2$, and the index is $2\cdot 2/2=2$. There is only one nonzero rational 2-torsion point on $E$: the other two would require $x^2=-i$, and $-i$ has the same nonsquare class as $i$. The Mordell-Weil theorem now givesso $r=0$.

It remains to identify all torsion, rather than merely the rank. The elliptic-curve discriminant is $-64i^3$, so the primes $(3)$ and $(2-i)$ have good reduction, with residue characteristics three and five. By the supplied point-count information their reduction groups have orders that are powers of two. The reduction of torsion points on an elliptic curve is injective on prime-to-residue-characteristic torsion. Every odd-primary torsion subgroup therefore injects into a group of two-power order at at least one of these two primes, and must be zero. All torsion is two-primary.

Finally, if a point had order four, its double would be $T$. The elliptic-curve addition formula givesFor $2P=T$ the denominator is nonzero, so $x^2=i$, impossible in $K$. A point of higher two-power order would have a multiple of order four, so it too is excluded. Thus the only torsion points are $O,T$. Together with rank zero,

Work in characteristic different from two, as in the number-field application below. Nonsingularity is equivalent to $b(a^2-4b)\ne 0$. The chord through $P=(x,y)$ and $T=(0,0)$ has slope $y/x$. Using $y^2/x^2=x+a+b/x$ in the elliptic-curve addition formula givesThese formulas hold for $P\ne O,T$; addition interchanges $O$ and $T$.

It follows that $\xi =x+a+b/x=y^2/x^2$ and $\eta =y(1-b/x^2)$. The relation isFor a direct verification, observe thatTherefore the two-isogeny formula isThe target elliptic curve is nonsingular because its corresponding coefficient product is $16b(a^2-4b)\ne 0$. The rational map of projective varieties extends over the exceptional points to a morphism of smooth projective algebraic curves; at both $O$ and $T$ its affine coordinates tend to infinity, giving the displayed values. A nonconstant morphism between elliptic curves sending $O$ to $O$ is a group homomorphism, so this is an isogeny of elliptic curves.

One can also see the quotient directly: translation by $T$ leaves $\xi ,\eta$ invariant. The equation $x^2+(a-\xi )x+b=0$ makes the source function field a degree-two extension of the target function field; its nontrivial automorphism is translation by $T$. Equivalently, the degree of an isogeny from its x-coordinate map is two. The kernel of an isogeny is precisely $\{O,T\}$. Thus $\varphi$ is a separable isogeny of degree two.

Start with an elliptic curve having a rational point $T$ of order $2$. Move that point to $(0,0)$ and take an integral modelPut $b^{\prime }=a^2-4b$ andThe two-isogeny formula and its dual areThey extend to the projective curves, with kernels $\{O,T\}$ and $\{O,T^{\prime }\}$, where $T^{\prime }=(0,0)\in E^{\prime }$. Substitution verifies their target equations, and the elliptic-curve addition formula verifies $\hat{\varphi }\varphi =[2]$ and $\varphi \hat{\varphi }=[2]$. The division by $4,8$ in the dual identifies the twice-transformed curve, with coefficients $4a,16b$, with $E$.

Define the two-torsion square-class homomorphismsQuestion 1(ii) proves these are homomorphisms, since $f^{\prime }(0)=b$. Their kernels areFor completeness, the first coordinate of the dual is $Y^2/(4X^2)$, so a nonexceptional dual image has square $x$-coordinate. Conversely, if $x=u^2\ne 0$, the preimage equation iswhose discriminant is $16(x^2+ax+b)=16(y/u{)}^2$. The roots $X=2x+a\pm 2y/u$ are rational and nonzero. Choosing $Y=\pm 2uX$ gives a point on $E^{\prime }$, and a choice of sign makes its dual image exactly $(x,y)$. The point $T$ has a rational dual preimage precisely when $b$ is a square, as seen from the roots $a\pm 2\sqrt{b}$ of the nonzero two-torsion polynomial on $E^{\prime }$. The identity is already a dual image. Applying this argument to the transformed curve proves the second kernel assertion as well, because scaling an $x$-coordinate by $4$ does not change its square class.

The two-isogeny descent is finite because an image square class has a signed square-free integer representative dividing $b$. Indeed, if $\ell \nmid b$ and $v_{\ell }(x)>0$, the other factor $x^2+ax+b$ is a unit, so $v_{\ell }(y^2)=v_{\ell }(x)$ forces an even valuation. If $v_{\ell }(x)<0$, the term $x^2$ dominates that factor and $v_{\ell }(y^2)=3v_{\ell }(x)$, again forcing even valuation. Thus odd valuations can occur only at primes dividing $b$. The same argument applies to $b^{\prime }$ on $E^{\prime }$.

For each candidate signed squarefree divisor $d\mid b$, put $x=d(U/V{)}^2$, with coprime integers $U,V$. The curve equation becomes the two-isogeny descent quarticA solution with $UV\ne 0$ yields $x=d{U}^2/V^2$ and $y=dUN/V^3$. Conversely, every point in that class gives such a primitive integer solution, since a rational square root of an integer is integral. The boundary solutions $U=0$ and $V=0$ account respectively for the classes of $T$ and $O$. Rational solutions prove that a class occurs; a real or congruence obstruction excludes it. Merely finding local solutions everywhere does not automatically prove a rational solution.

To extract the rank, write $A=\alpha (E(\mathbb{Q}))$ and $A^{\prime }={\alpha }^{\prime }(E^{\prime }(\mathbb{Q}))$. The Mordell-Weil theorem givesThe isogeny factorization gives the index $|A|$ for the first quotient by $\hat{\varphi }{E}^{\prime }$. For the remaining index, apply $\hat{\varphi }$ to $E^{\prime }/\varphi E$. Its kernel has size $2/e$, whereThe equality follows because $\hat{\varphi }(\varphi P)=2P$. Consequentlyand cancellation yields the two-isogeny rank formulaThis formula is valid whether there is just one rational nonzero two-torsion point or all three.

For the first curve, $a=-1,b=1$, and the isogenous curve isThe only candidate square classes on $E$ are $1,-1$. Since $x^2-x+1>0$ for every real $x$, a real affine point has $x\ge 0$; the exceptional torsion class is $[b]=1$. ThusOn $E^{\prime }$, the candidates are $1,-1,3,-3$. They all occur: the identity gives $1$, $T^{\prime }$ gives $-3$, $(3,6)$ gives $3$, and $(-1,2)$ gives $-1$. Hence $|A^{\prime }|=4$, andThe product in the rank formula is $1\cdot 4=4$, not $1\cdot 2$; all four classes on the companion curve are essential.

For the second curve, $a=5,b=-6$, andThe candidate classes on $E$ are $\{\pm 1,\pm 2,\pm 3,\pm 6\}$. The identity, $T$, $(2,4)$ and $(-3,6)$ show thatThis is a subgroup of order $4$. Its other coset is $\{3,6,-1,-2\}$, so it suffices to exclude the representative $3$.

The modulo-eight obstruction to a two-isogeny descent class uses the corresponding two-isogeny descent quartic,If both $U,V$ are odd, its right side is $6$ modulo $8$. If $U$ is odd and $V$ even, it is $3$ or $7$ modulo $8$. If $U$ is even and $V$ odd, it is $6$ or $2$ modulo $8$. These are all primitive parity cases, and none is a square modulo $8$. Hence the class $3$ is impossible. Since $A$ is a subgroup, every class in its coset is impossible, and thereforeOn the companion curve, the only candidates are $\pm 1,\pm 7$. Its quadratic factor is $(X-5{)}^2+24>0$, so every nonzero real affine $X$ is positive. The exceptional value $[49]$ is $1$, and the point $(7,14)$ supplies the class $7$. ThusThe rank formula gives $2^r=4\cdot 2/4=2$, soEvery included class has an explicit rational representative and every excluded coset has a proved real or congruence obstruction, so these are exact ranks rather than bounds obtained from a point search.

For a nonzero isogeny of elliptic curves $\varphi :E_1\to E_2$, its degree of an isogeny is the degree of the induced extension of function fields. Since $\varphi$ commutes with negation, its first coordinate is a rational function of $x_1$ alone. Write it in lowest terms asThe coordinate maps $x_i:E_i\to {\mathbb{P}}^1$ are finite morphisms of degree two. Multiplying function field degrees in the commutative diagram $x_2\circ \varphi =R\circ x_1$ gives the degree of an isogeny from its x-coordinate map:This is the total degree, so the argument also covers an inseparable isogeny of elliptic curves. Counting distinct points in the kernel of an isogeny would give only its separable degree. The zero group homomorphism is assigned degree zero separately.

On a Short Weierstrass form $y^2=x^3+ax+b$ in characteristic of a field other than two, the elliptic-curve addition formula givesThere is no cancellation: at a root $r$ of $f(x)=x^3+ax+b$, the numerator equals $f^{\prime }(r{)}^2$, which is nonzero because the elliptic-curve discriminant is nonzero. The numerator has degree four and the denominator degree three. HenceFor completeness, the same answer holds in characteristic two, where the displayed short equation is not a nonsingular model. On a general Weierstrass equation of an elliptic curve usewhere $b_2=a_1^2+4a_2$, $b_4=a_1{a}_3+2a_4$, $b_6=a_3^2+4a_6$, and $b_8=a_1^2{a}_6+4a_2{a}_6-a_1{a}_3{a}_4+a_2{a}_3^2-a_4^2$. The resultant of this numerator and denominator is ${\Delta }^2$. Their resultant is therefore nonzero in every nonsingular case; even when the denominator drops degree, the numerator retains degree four.

For $p\nmid 2k$, the displayed integral equation has nonzero elliptic-curve discriminant modulo $p$, so it has good reduction. Let $\chi$ be the Legendre symbol, with $\chi (0)=0$. Counting the two, one, or zero possible ordinates over each $x$ givesIf $p\equiv 3(\mathrm{mod}4)$, then $\chi (-1)=-1$ and the terms for $x$ and $-x$ cancel. The term at zero vanishes. Thus the count is $p+1$.

For the converse, suppose $p\equiv 1(\mathrm{mod}4)$, and put $h=(p-1)/2$. The Euler criterion and the sum of powers over a finite field show that the Trace of Frobenius satisfiesIndeed, among the positive exponents in this polynomial, of degree $3(p-1)/2<2(p-1)$, only $p-1$ has a nonzero sum over ${\mathbb{F}}_p$, and that sum is $-1$. Since $(x^3+kx{)}^h=x^h(x^2+k{)}^h$, the coefficient formula for trace of Frobenius modulo p yieldsNeither $k$ nor the binomial coefficient vanishes modulo $p$. Hence $a_p\ne 0$, proving the point-count criterion for y squared equals x cubed plus k x:

We use the following formal logarithm fact, also useful for the next part. For a formal group law over ${\mathbb{Z}}_p$, its logarithm has coefficients $c_j/j$ with $c_j\in {\mathbb{Z}}_p$, obtained by integrating its integral invariant differential. If $p$ is odd and $t\in p{\mathbb{Z}}_p\setminus \{0\}$, every term of degree $j\ge 2$ has valuation strictly greater than $v_p(t)$, since $j{v}_p(t)-v_p(j)>v_p(t)$. Thus the logarithm converges and is nonzero at $t$. Its homomorphism into the additive characteristic-zero group proves torsion-freeness of the formal group over Qp for odd p. Consequently reduction injects the entire rational torsion subgroup at any odd prime of good reduction, including its $p$-primary torsion. In particular the torsion subgroup is finite, and its order divides $p+1$ at every good $p\equiv 3(\mathrm{mod}4)$.

By the Dirichlet theorem on primes in arithmetic progressions, choose a good prime $p\equiv 3(\mathrm{mod}8)$. Then $v_2(p+1)=2$, bounding the two-primary part by four. For any odd prime $\ell$ dividing the torsion order, the Chinese remainder theorem and the Dirichlet theorem on primes in arithmetic progressions give a good prime $p$ with $p\equiv 3(\mathrm{mod}4)$ and $p\equiv 1(\mathrm{mod}\ell )$, avoiding the finitely many primes dividing $2k$. But then $\ell \nmid p+1$, a contradiction. Therefore

The order four does occur. For $k=4$, the elliptic-curve addition formula gives $2(2,4)=(0,0)$, so $(2,4)$ has order four. More precisely, the only nonzero rational 2-torsion point when $k>0$ is $(0,0)$, so order four means a cyclic group with a rational half of this point. The duplication formula isSuch a half must have $x(P{)}^2=k$. Writing $k=s^2$, positivity of $y(P{)}^2=2kx(P)$ forces $x(P)=s>0$. Then $y(P{)}^2=2s^3$, so $2s$ is a rational square, equivalently $s=2t^2$ for an integer $t\ge 1$. Conversely $(2t^2,4t^3)$ is a half of $(0,0)$ when $k=4t^4$. The rational torsion on y squared equals x cubed plus positive k x is therefore cyclic of order four exactly for these $k$, and otherwise cyclic of order two.

For this integral Weierstrass equation of an elliptic curve, computeIf an odd prime divides $m$ or $m^2-1$, then $c_4$ is a unit there and $\Delta$ is not. The j-invariant of an elliptic curve consequently has negative valuation. Since good reduction implies an integral j-invariant, such a prime cannot be a prime of good reduction, regardless of whether the displayed equation is minimal. Conversely, if it divides neither factor, this equation already has unit discriminant.

At five the good possibilities have $m\equiv \pm 2$, so $m^2\equiv 4$. At seven they have $m^2\equiv 2$ or $4$. Direct elliptic-curve point count over a finite field gives the following nonzero ordinates, together with the three zero-ordinate points and $O$:At either prime, torsion-freeness of the formal group over Qp for odd p makes reduction injective on all of $E(\mathbb{Q}{)}_{\mathrm{tors}}$, so its order is at most eight. Using only prime-to-$p$ injectivity here would leave an unjustified possible $p$-primary component.

All three nonzero 2-torsion points $(0,0),(-1,0),(-m^2,0)$ are rational. The rational point $P=(m,m(m+1))$ lies on the curve, since $m(m+1)(m+m^2)=m^2(m+1{)}^2$. For an equation $y^2=x(x^2+ax+b)$ the elliptic-curve addition formula givesHere $a=1+m^2$, $b=m^2$, so $2P=(0,0)$ and $P$ has order four. The point $(-1,0)$ is not in $⟨P⟩$, whose only nonzero point of order two is $(0,0)$. Therefore $P$ and $(-1,0)$ generate a subgroup of order eight isomorphic to $\mathbb{Z}/4\mathbb{Z}\times \mathbb{Z}/2\mathbb{Z}$. The upper bound proves the rational torsion in the family x times x plus one times x plus m squared:

On $y^2=x^3+5x^2+4x$, the slope through $P_1=(-1,0)$ and $P_2=(-2,2)$ is $-2$. The elliptic-curve addition formula givesFor doubling $P_2$, the tangent slope isand hence

For positive integral $k$, the rational torsion subgroup of $y^2=x^3+kx$ has order dividing four. Indeed, torsion-freeness of the formal group over Qp for odd p, reduction of torsion points on an elliptic curve, and the point-count criterion for y squared equals x cubed plus k x bound its order by $p+1$ at all good primes $p\equiv 3(\mathrm{mod}4)$. The Dirichlet theorem on primes in arithmetic progressions excludes every odd torsion prime and bounds the two-primary part by four, by choosing $p\equiv 3(\mathrm{mod}8)$. There is exactly one nonzero rational 2-torsion point, namely $(0,0)$. A rational half of it must have $x^2=k$ by the elliptic-curve addition formula. Writing $k=s^2$ with $s>0$, its equation is $y^2=2s^3$, so $s=2t^2$ and $k=4t^4$. Conversely $(2t^2,4t^3)$ has order four. Thus the cyclic group of order four occurs exactly for $k=4t^4$, $t\ge 1$. The order bound itself holds for every nonzero integral $k$ of either sign: positivity was used only to classify the rational points of orders two and four.