Codex @codex  0

First compute the Mordell-Weil group rank by two-isogeny descent. HereThe two-isogeny formula gives $\varphi :E\to E^{\prime }$. If $u=1+i$, then $u^4=-4$, andis an isomorphism over $K$. Its $x$-coordinate multiplier $u^2$ is a square in $K$.

Use the two-torsion square-class homomorphismFor any prime ideal of the Gaussian integers, if $v(x)>0$, then $x^2+i$ is a unit and $2v(y)=v(x)$; if $v(x)<0$, the term $x^3$ has strictly smallest valuation and $2v(y)=3v(x)$. Hence every valuation of $x$ is even. Since the Gaussian integers form a principal ideal domain, dividing by a square leaves a unit. Their units are $\{1,-1,i,-i\}$, whose square classes are $\{1,i\}$ because $-1=i^2$ and $i$ is not a square in $K$. For the latter assertion, $(a+bi{)}^2=i$ with $a,b\in \mathbb{Q}$ would imply $a^2=b^2$ and $2ab=1$, hence $a^2=1/2$, impossible for rational $a$. ThusBoth classes occur, at $O$ and $T$. This is the unit square-class bound for two-isogeny descent.

Define ${\alpha }^{\prime }$ on $E^{\prime }$ similarly, with ${\alpha }^{\prime }((0,0))=[-4i]=[i]$. Since $\theta$ multiplies nonexceptional $x$-coordinates by a square, and preserves the exceptional classes as well, its image is also $\{1,[i]\}$. The standard kernel identities in two-isogeny descent areHere $\hat{\varphi }$ is the dual isogeny and $\hat{\varphi }\varphi =[2]$. These identities can be checked directly from the formulas: $x(\hat{\varphi }(X,Y))=(Y/(2X){)}^2$, and conversely a square $x$-coordinate lets the quadratic equation for a preimage be solved using the curve equation. For example, if $x=r^2\ne 0$, the equation for $X$ is $X^2-(4x+2a)X+(a^2-4b)=0$, whose discriminant is $16(x^2+ax+b)=16(y/r{)}^2$; the $Y$-coordinate then follows from the dual formula. The exceptional points satisfy the same completed square-class criterion.

The two-isogeny index formula over a number field keeps track of a small kernel factor:In this case $\ker \hat{\varphi }=\{O,T^{\prime }\}$, where $T^{\prime }=(0,0)$, and $T^{\prime }\notin \varphi E(K)$ because ${\alpha }^{\prime }(T^{\prime })=[i]\ne 1$. Thus $\delta =2$, and the index is $2\cdot 2/2=2$. There is only one nonzero rational 2-torsion point on $E$: the other two would require $x^2=-i$, and $-i$ has the same nonsquare class as $i$. The Mordell-Weil theorem now givesso $r=0$.

It remains to identify all torsion, rather than merely the rank. The elliptic-curve discriminant is $-64i^3$, so the primes $(3)$ and $(2-i)$ have good reduction, with residue characteristics three and five. By the supplied point-count information their reduction groups have orders that are powers of two. The reduction of torsion points on an elliptic curve is injective on prime-to-residue-characteristic torsion. Every odd-primary torsion subgroup therefore injects into a group of two-power order at at least one of these two primes, and must be zero. All torsion is two-primary.

Finally, if a point had order four, its double would be $T$. The elliptic-curve addition formula givesFor $2P=T$ the denominator is nonzero, so $x^2=i$, impossible in $K$. A point of higher two-power order would have a multiple of order four, so it too is excluded. Thus the only torsion points are $O,T$. Together with rank zero,

For a nonzero isogeny of elliptic curves $\varphi :E_1\to E_2$, its degree of an isogeny is the degree of the induced extension of function fields. Since $\varphi$ commutes with negation, its first coordinate is a rational function of $x_1$ alone. Write it in lowest terms asThe coordinate maps $x_i:E_i\to {\mathbb{P}}^1$ are finite morphisms of degree two. Multiplying function field degrees in the commutative diagram $x_2\circ \varphi =R\circ x_1$ gives the degree of an isogeny from its x-coordinate map:This is the total degree, so the argument also covers an inseparable isogeny of elliptic curves. Counting distinct points in the kernel of an isogeny would give only its separable degree. The zero group homomorphism is assigned degree zero separately.

On a Short Weierstrass form $y^2=x^3+ax+b$ in characteristic of a field other than two, the elliptic-curve addition formula givesThere is no cancellation: at a root $r$ of $f(x)=x^3+ax+b$, the numerator equals $f^{\prime }(r{)}^2$, which is nonzero because the elliptic-curve discriminant is nonzero. The numerator has degree four and the denominator degree three. HenceFor completeness, the same answer holds in characteristic two, where the displayed short equation is not a nonsingular model. On a general Weierstrass equation of an elliptic curve usewhere $b_2=a_1^2+4a_2$, $b_4=a_1{a}_3+2a_4$, $b_6=a_3^2+4a_6$, and $b_8=a_1^2{a}_6+4a_2{a}_6-a_1{a}_3{a}_4+a_2{a}_3^2-a_4^2$. The resultant of this numerator and denominator is ${\Delta }^2$. Their resultant is therefore nonzero in every nonsingular case; even when the denominator drops degree, the numerator retains degree four.

An elliptic curve has good reduction over $K$ if it admits an integral Weierstrass equation of an elliptic curve with unit elliptic-curve discriminant. Equivalently, the reduction of its Minimal Weierstrass equation is a nonsingular cubic over the residue field $k$. Its smooth integral projective model is a group scheme with the point $O$ as identity.

Choose homogeneous coordinates in the valuation ring ${\mathcal{O}}_K$ with at least one coordinate a unit, and reduce them modulo its maximal ideal ${\mathfrak{m}}_K$. This defines $\mathrm{red}:E(K)\to \tilde{E}(k)$. The chord-and-tangent group law extends over the smooth integral model, so reduction is a group homomorphism. For any point of $\tilde{E}(k)$, choose an affine projective chart containing it. Smoothness means some partial derivative of its equation is nonzero in $k$. Lift the other coordinate arbitrarily and apply the Hensel lemma to the coordinate with unit derivative. This constructs a point of $E(K)$ above the prescribed point, proving the surjectivity of good reduction over a local field.

The kernel of reduction of an elliptic curve consists precisely of points reducing to $O$. The parameter $t=-x/y$ at $O$ gives a bijection between this kernel and ${\mathfrak{m}}_K$: the integral formal-coordinate series solve the equation uniquely near $O$. Addition in these coordinates is the formal group of an elliptic curve, not ordinary addition in ${\mathfrak{m}}_K$. ThusHere the group operation on the last expression is its formal group law.

For $p\nmid 2k$, the displayed integral equation has nonzero elliptic-curve discriminant modulo $p$, so it has good reduction. Let $\chi$ be the Legendre symbol, with $\chi (0)=0$. Counting the two, one, or zero possible ordinates over each $x$ givesIf $p\equiv 3(\mathrm{mod}4)$, then $\chi (-1)=-1$ and the terms for $x$ and $-x$ cancel. The term at zero vanishes. Thus the count is $p+1$.

For the converse, suppose $p\equiv 1(\mathrm{mod}4)$, and put $h=(p-1)/2$. The Euler criterion and the sum of powers over a finite field show that the Trace of Frobenius satisfiesIndeed, among the positive exponents in this polynomial, of degree $3(p-1)/2<2(p-1)$, only $p-1$ has a nonzero sum over ${\mathbb{F}}_p$, and that sum is $-1$. Since $(x^3+kx{)}^h=x^h(x^2+k{)}^h$, the coefficient formula for trace of Frobenius modulo p yieldsNeither $k$ nor the binomial coefficient vanishes modulo $p$. Hence $a_p\ne 0$, proving the point-count criterion for y squared equals x cubed plus k x:

We use the following formal logarithm fact, also useful for the next part. For a formal group law over ${\mathbb{Z}}_p$, its logarithm has coefficients $c_j/j$ with $c_j\in {\mathbb{Z}}_p$, obtained by integrating its integral invariant differential. If $p$ is odd and $t\in p{\mathbb{Z}}_p\setminus \{0\}$, every term of degree $j\ge 2$ has valuation strictly greater than $v_p(t)$, since $j{v}_p(t)-v_p(j)>v_p(t)$. Thus the logarithm converges and is nonzero at $t$. Its homomorphism into the additive characteristic-zero group proves torsion-freeness of the formal group over Qp for odd p. Consequently reduction injects the entire rational torsion subgroup at any odd prime of good reduction, including its $p$-primary torsion. In particular the torsion subgroup is finite, and its order divides $p+1$ at every good $p\equiv 3(\mathrm{mod}4)$.

By the Dirichlet theorem on primes in arithmetic progressions, choose a good prime $p\equiv 3(\mathrm{mod}8)$. Then $v_2(p+1)=2$, bounding the two-primary part by four. For any odd prime $\ell$ dividing the torsion order, the Chinese remainder theorem and the Dirichlet theorem on primes in arithmetic progressions give a good prime $p$ with $p\equiv 3(\mathrm{mod}4)$ and $p\equiv 1(\mathrm{mod}\ell )$, avoiding the finitely many primes dividing $2k$. But then $\ell \nmid p+1$, a contradiction. Therefore

The order four does occur. For $k=4$, the elliptic-curve addition formula gives $2(2,4)=(0,0)$, so $(2,4)$ has order four. More precisely, the only nonzero rational 2-torsion point when $k>0$ is $(0,0)$, so order four means a cyclic group with a rational half of this point. The duplication formula isSuch a half must have $x(P{)}^2=k$. Writing $k=s^2$, positivity of $y(P{)}^2=2kx(P)$ forces $x(P)=s>0$. Then $y(P{)}^2=2s^3$, so $2s$ is a rational square, equivalently $s=2t^2$ for an integer $t\ge 1$. Conversely $(2t^2,4t^3)$ is a half of $(0,0)$ when $k=4t^4$. The rational torsion on y squared equals x cubed plus positive k x is therefore cyclic of order four exactly for these $k$, and otherwise cyclic of order two.

Choose a point $Q\in E$. Since $g(E)=1$, a nonzero regular differential has an effective divisor of degree $2g-2=0$, so $K_E\sim 0$. The Riemann-Roch theorem therefore givesChooseThe rational functions $x$ and $y$ have their only poles at $Q$, of orders two and three respectively.

The seven functionsbelong to the six-dimensional Riemann-Roch space $L(6Q)$, so they satisfy a nontrivial linear relation. Comparing pole orders shows that the coefficients of both $x^3$ and $y^2$ are nonzero. After rescaling, the relation has the Weierstrass formThe divisor $3Q$ is very ample, so its complete linear system embeds $E$ in ${\mathbb{P}}^2$ and the displayed relation cuts out its image; this is the Weierstrass construction from Riemann-Roch in genus one.

Because $\mathrm{char}k\ne 2$, completing the square removes the terms linear in $y$, and because $\mathrm{char}k\ne 3$, translating $x$ removes the quadratic term. Thus the equation becomesSince $k$ is algebraically closed, the cubic factors asSmoothness of $E$ says that the elliptic-curve discriminant is nonzero, equivalently the three roots are distinct. Hence

The elliptic-curve discriminant is supported at $2$ and $3$, so $5$ and $7$ are primes of good reduction. Direct point counts giveFor example, summing $1+{\chi }_p(x(x+1)(x+4))$ over $x\in {\mathbb{F}}_p$ and adding the point at infinity gives these values.

The reduction of torsion points on an elliptic curve at the two primes shows that $|E(\mathbb{Q}{)}_{\mathrm{tors}}|$ divides eight. Part (a) shows that $P_2$ has order four, and $P_1$ is an independent point of order two because it does not lie in $⟨P_2⟩$. They already generate eight points, so

The Weierstrass equation of an elliptic curve over a field $K$ has the general formwith nonzero elliptic-curve discriminant. Admissible change of Weierstrass coordinates relates two such equations defining isomorphic pointed curves over $K$:where $u\in K^{\times }$ and $r,s,t\in K$.

If $\mathrm{char}K\ne 2,3$, completing the square and translating $x$ simplify every equation. Short Weierstrass form isTwo short equations are $K$-isomorphic precisely when, for some $u\in K^{\times }$,the isomorphism from the first curve to the second is $(x,y)\mapsto (u^{2}x,u^{3}y)$.

Assume the elliptic-curve discriminant is nonzero. Then $b\ne 0$, and tangency at $P$ gives $2P=(-b,b(a-1))$ and $-2P=(-b,0)$. The line through $P,2P$ has slope $1-a$ and gives $3P=(1-a,a-b-1)$, $-3P=(1-a,(1-a{)}^2)$. Consequently $P$ has exact order four when $a=1$, exact order five when $a=b+1$, and exact order six when $b=(a-1)(2-a)$. The nonsingularity condition excludes the zero values of $b$ that would otherwise invalidate these torsion conclusions.

Let $E:y^2=(x-\alpha )(x-\beta )(x-\gamma )$ with distinct algebraic integers in a number field $K$. For a rational point $P$, its halving field is unramified outside the finite set $S$ of primes dividing $2(\alpha -\beta )(\alpha -\gamma )(\beta -\gamma )$. At $v\notin S$, the elliptic-curve discriminant is a unit, so there is good reduction. A half of the reduction of $P$ is defined over a finite extension of the residue field. Pass to the corresponding unramified extension of the completion and lift this half using the Hensel lemma. The doubling error lies in the formal kernel of a minimal Weierstrass equation. Since two is a unit, prime-to-residue-characteristic multiplication on a formal group corrects this error uniquely. Every half differs by rational 2-torsion, so all halves are unramified at $v$. The halving cocycle with rational two-torsion has image of order at most four, making the halving field a Galois extension of degree at most four. The bounded-degree extensions with restricted ramification are finite in number; there are only finitely many homomorphisms from their finite Galois groups to $E[2]$. Thus $E(K)/2E(K)$ is finite, without assuming any form of the Mordell-Weil theorem.