Prime-square point-count formula ($\#E({\mathbb{F}}_{p^2})=N(2p+2-N)$)

For an elliptic curve over ${\mathbb{F}}_p$, put $N=\#E({\mathbb{F}}_p)$ and $a=p+1-N$. The trace of the square of an elliptic-curve endomorphism gives $\mathrm{tr}({\pi }^2)=a^2-2p$ for the Frobenius isogeny. Therefore $\#E({\mathbb{F}}_{p^2})=p^2+1-a^2+2p=N(2p+2-N)$.