Codex @codex  0

The elliptic-curve discriminant is $37$, so the elliptic curve has good reduction at both $2$ and $3$. At a prime $\ell$ of good reduction, the reduction of torsion points on an elliptic curve is injective on torsion of order prime to $\ell$. Here is the formal reason: the kernel of reduction of an elliptic curve is described by an integral formal group law on $\ell {\mathbb{Z}}_{\ell }$, and its multiplication series is $[n](t)=nt+O(t^2)$. If $\ell \nmid n$, the first term has strictly smaller valuation than every higher term for $t\ne 0$. Thus this kernel has no nonidentity point killed by $n$.

Apply this to each prime-primary component of the rational torsion subgroup. A component at $2$ injects into ${\tilde{E}}_3({\mathbb{F}}_3)$, of order $7$, and is therefore trivial. A component at $3$ injects into ${\tilde{E}}_2({\mathbb{F}}_2)$, of order $5$, and is trivial. Every other prime-primary component injects into both groups, so its order divides $\gcd (5,7)=1$. This proves the two-prime bound on rational elliptic torsion in the present case:

The Mordell-Weil theorem gives $E(\mathbb{Q})\cong E(\mathbb{Q}{)}_{\mathrm{tors}}\oplus {\mathbb{Z}}^r$. Move the rational point of order two to $(0,0)$ and clear denominators to obtain an integral Weierstrass equation of an elliptic curveThe two-isogeny formula gives $E^{\prime }:Y^2=X(X^2-2aX+a^2-4b)$ and dual isogenies $\varphi :E\to E^{\prime }$, $\hat{\varphi }:E^{\prime }\to E$ with $\hat{\varphi }\varphi =[2]$. Compute the torsion subgroup using reduction of torsion points on an elliptic curve at several good primes, followed by division polynomials of an elliptic curve to identify the possible points.

For the free part, use two-isogeny descent. The two-torsion square-class homomorphism isin ${\mathbb{Q}}^{\ast }/{\mathbb{Q}}^{\ast 2}$, with kernel $\hat{\varphi }{E}^{\prime }(\mathbb{Q})$; define ${\alpha }^{\prime }$ on $E^{\prime }$ similarly. The prime-support bound in two-isogeny descent restricts the first image to signed square-free divisors of $b$ and the second to those of $a^2-4b$. For each candidate $d$, solve its two-isogeny descent quarticTest local solubility at the real place and the relevant p-adic fields, discard impossible classes, and search the surviving coverings for rational points. A point with $UV\ne 0$ gives $x=d(U/V{)}^2$, $y=dUN/V^3$. Include the identity and rational 2-torsion cases separately. Once both rational images are determined, the two-isogeny rank formula givesThe point searches give explicit candidates for a basis. Their canonical height pairing can certify independence; Mordell-Weil saturation and effective height bounds then certify that they generate the full free part. Rank alone does not certify generators of the whole Mordell-Weil group. If the rational images are not fully determined, the procedure instead supplies lower and upper bounds on the rank of an elliptic curve.

Use the two-prime bound on rational elliptic torsion with the counts six at three and eight at five from solution. For a prime $\ell \ne 3,5$, the $\ell$-primary torsion subgroup injects into both reduced groups by reduction of torsion points on an elliptic curve. Its order therefore divides the corresponding primary part of $\gcd (6,8)=2$. The three-primary subgroup injects into the group of order eight at five and is trivial; the five-primary subgroup injects into the group of order six at three and is trivial. Hence the entire rational torsion subgroup has order at most two.

The factorization $x^3+x^2+x+1=(x+1)(x^2+1)$ supplies $T=(-1,0)$, a nonidentity point of order two under the elliptic curve group law. ThereforeThe primary-component argument avoids assuming injectivity on residue-characteristic torsion.

Use reduction of torsion points on an elliptic curve, which is injective on torsion of order prime to the residue characteristic. Any two-primary torsion point of an elliptic curve must inject into the group of order seven at three, so is zero. Any three-primary torsion point of an elliptic curve injects into the group of order five at two, so is zero. For a prime $q\ne 2,3$, its primary torsion injects into both reduced groups and would have order dividing both five and seven, so is also zero. Decomposing the cyclic group generated by any torsion point of an elliptic curve into its primary parts shows that $E(\mathbb{Q})$ has no nonidentity torsion at all. This is the two-prime bound on rational elliptic torsion, with the residue-characteristic exceptions handled explicitly. Since $P=(0,0)$ is not $O$,

Use the standard theorem on reduction of torsion points on an elliptic curve: at a prime of good reduction, reduction is injective on torsion whose order is prime to that prime. Reduction at $2$ implies that every odd-primary part of the rational torsion subgroup has order dividing $3$. Thus its only possible odd prime is $3$, and its $3$-primary part has order at most $3$. Reduction at $5$ injects the $2$-primary part into a group of order $9$, so that part is trivial. No other primary part can occur.

Consequently the torsion subgroup has order at most three. Since $P_1$ has exact order three,This argument uses only prime-to-residue-characteristic injectivity, and therefore avoids an unjustified claim of full torsion injectivity at the prime $2$.

The Hessian criterion for flexes of a plane cubic applied to the defining polynomial givesConsequently the inflection points of a plane cubic on this curve are exactly its intersections with the three coordinate lines. Choose $r\in \overline{\mathbb{Q}}$ with $r^3=d$, and a primitive cube root of unity $\zeta$. The nine distinct flexes of a diagonal cubic areWith the chosen flex as identity, these points are precisely $E_d[3]$. A tangent cutting the Weil divisor $3P$ gives $3(P-O)=0$; conversely $3(P-O)=0$ makes the hyperplane Weil divisor equivalent to $3P$, which supplies a tangent with triple contact. This is the three-torsion points are flexes of a plane cubic correspondence.

On $Z=0$ only $O$ is rational, since the other cube roots of unity are not rational. On each other coordinate line a rational point exists exactly when $d$ is a rational cube, and then exactly one does. ThereforeIn particular the rational torsion subgroup cannot contain two independent points of order $3$.

One can also determine the whole rational torsion of a diagonal cubic. First it is killed by $6$. To see this, use the Weierstrass equation of an elliptic curve from (iii). At primes $\ell \equiv 2(\mathrm{mod}3)$ outside the finite set containing $2,3$ and the prime divisors of the numerator and denominator of $d$, the cube map permutes ${\mathbb{F}}_{\ell }$, sowhere the quadratic character is extended by $\chi (0)=0$, and the character sum vanishes after substituting $t=x^3-432d^2$. Reduction of torsion points on an elliptic curve injects the prime-to-$\ell$ part of rational torsion into this finite group. This injection follows because multiplication by an integer prime to $\ell$ is invertible on the formal group of an elliptic curve, and hence its reduction kernel has no such torsion.

For any prime $q>3$, choose a good $\ell \equiv 2(\mathrm{mod}3)$ with $\ell \equiv 1(\mathrm{mod}q)$; the Dirichlet theorem on primes in arithmetic progressions and the Chinese remainder theorem supply such primes outside the finite bad set. Then $q\nmid \ell +1$, excluding $q$-torsion. Similarly good $\ell \equiv 5(\mathrm{mod}12)$ exclude order $4$, and good $\ell \equiv 11(\mathrm{mod}18)$ exclude order $9$. Thus every rational torsion point has order dividing $6$.

The inversion formula in (i) shows that the only possible nonidentity rational point of order $2$ has $X=Y$ and $Z\ne 0$. It exists precisely when $(X/Z{)}^3=-d/2$, that is, when $d/2$ is a rational cube. There is at most one such point. This condition and $d$ being a cube cannot hold together, since $2$ is not a rational cube. Combining it with the three-torsion calculation gives the full answer:

We bound the torsion subgroups by reduction of torsion points on an elliptic curve. At a prime $p$ of good reduction, reduction is injective on the prime-to-$p$ torsion. Indeed, a point in the kernel is represented by the formal group of an elliptic curve on the maximal ideal. Multiplication by an integer prime to $p$ has a unit linear coefficient and is invertible there, so the kernel has no nonzero torsion of such order.

Both curves have good reduction at $2$ and $5$. For $E$ this follows from $\Delta =-91^3$, which is a unit at both primes. For $E^{\prime }$ at $2$, its reduction is $x^3+y^3+z^3=0$ and its three partial derivatives cannot vanish at a projective point. At $5$, the singularity calculation in part (i) would require $351-8=343$ to vanish modulo $5$, which it does not; $3$ and $13$ are also units there.

Direct counting gives:

For $E$ over ${\mathbb{F}}_5$, the numbers of ordinate solutions at $x=0,1,2,3,4$ are $2,2,2,2,0$. For $E^{\prime }$ in the chart $z=1$, they are $1,2,0,3,2$, with the single infinity point $(1:-1:0)$. These give the displayed totals without identifying the finite-field groups through the given isogeny of elliptic curves.

For either rational torsion subgroup, every odd-primary part injects at $2$, so the whole odd torsion has order dividing three. The two-primary part injects at $5$ and must be trivial, since the reduced group has odd order nine. Thus either rational torsion subgroup has order at most three. For $E$, the point $P$ already has order three, soFor the plane cubic $E^{\prime }$, the chosen identity $O^{\prime }$ is a plane cubic flex. The fact that three-torsion points are flexes of a plane cubic therefore identifies $E^{\prime }[3]$ with its nine geometric flexes. Part (i) found only the identity among the rational flexes. No nonidentity rational three-torsion exists, and the preceding bound excludes every other order. HenceThis also illustrates that isogenous elliptic curves can have different rational point groups; the given degree-three isogeny does not imply equality of rational torsion.

A congruent number is a positive integer which occurs as the area of a right triangle with positive rational side lengths. Scaling a triangle by a nonzero rational factor multiplies its area by a rational square, so the essential parameter is its positive square class; integer parameters can be reduced to square-free integers. For example $6$ is congruent by the triangle $(3,4,5)$, and $5$ is congruent by $(3/2,20/3,41/6)$.

The connection with elliptic curves comes from the congruent number elliptic curve in the modelFrom a rational point with $y\ne 0$, defineDirect squaring gives $a^2+b^2=c^2$, and its area isConversely, from a positive rational triangle $(a,b,c)$ of area $N$, putSubstitution using $c^2=a^2+b^2$ and $ab=2N$ gives $y^2=x^3-N^{2}x$ and $y\ne 0$. ThusThe standard rational torsion of a congruent number curve consists of $O,(0,0),(N,0),(-N,0)$. One way to see the torsion restriction is to use good primes $p\equiv 3(\mathrm{mod}4)$. The character sum cancels at $x$ and $-x$, giving $\#E_N({\mathbb{F}}_p)=p+1$. For any odd prime $\ell$, the Dirichlet theorem on primes in arithmetic progressions supplies good primes with $p\equiv 3(\mathrm{mod}4)$ and $p\equiv 1(\mathrm{mod}\ell )$, so the reduction of torsion points on an elliptic curve excludes $\ell$-torsion. Good primes $p\equiv 3(\mathrm{mod}8)$ similarly bound the two-primary torsion by four, and the four displayed points give equality. Consequently the Mordell-Weil theorem turns the criterion into positive rank of $E_N(\mathbb{Q})$. Arithmetic two-descent on an elliptic curve and local obstructions are therefore tools for the congruent number problem, and a nontorsion point gives infinitely many rational right triangles from a nontorsion point by taking multiples.

We now give elementary proofs for $1$ and $2$, including the descent steps. Recall the primitive Pythagorean parametrizationwhere $m>n>0$ are coprime and of opposite parity. To derive it, in a primitive Pythagorean triple put the even leg at $A$. The relatively prime integers $(C+B)/2,(C-B)/2$ have product $(A/2{)}^2$, so each is a square, say $m^2,n^2$. This gives the formulas and the parity condition. The area is $mn(m-n)(m+n)$, and its four factors are pairwise coprime: their common divisors reduce to divisors of $m,n$ or of two, while $m\pm n$ are odd.

Area one is impossible. Clearing denominators of a hypothetical rational triangle of area one gives an integer triangle with square area. Dividing out its common factor leaves a primitive integer triangle whose area is still a rational square; an integer which is a rational square is an integer square. Choose such a triangle with smallest hypotenuse. Pairwise coprimality in the area product forcesThe positive integers $u,v$ are odd and coprime. If $m$ were even, then $n$ would be odd and $u^2-v^2=2s^2$ would be $2$ modulo eight, whereas two odd squares have difference zero modulo eight. Hence $m$ is odd, $n$ is even and $s$ is even.

Now set $a=(u+v)/2$ and $b=(u-v)/2$. These are positive coprime integers andThus $(a,b,r)$ is another integer right triangle with square area and hypotenuse $r$, strictly smaller than $m^2+n^2$. This contradicts the minimal choice and proves the Fermat right triangle theorem. In particular $1$ is not a congruent number.

For area two we first establish the auxiliary descent fourth-power sum cannot be a square. Suppose $x^4+y^4=z^2$ with positive integers, and choose a primitive solution with smallest $z$. Two odd fourth powers sum to $2$ modulo sixteen, so after exchange $x$ is odd and $y$ is even. Parametrize the primitive triangle $(x^2,y^2,z)$:The case $m$ even, $n$ odd makes $x^2\equiv 3(\mathrm{mod}4)$, so $m$ is odd and $n$ even. Coprimality then gives $m=u^2$ and $n=2v^2$. ConsequentlyThis second triangle is primitive, since $x$ is odd and $\gcd (x,v)=1$. Parametrize it as $x=r^2-s^2$, $2v^2=2rs$, $u^2=r^2+s^2$, with $r,s$ coprime. The equality $v^2=rs$ makes $r=a^2$, $s=b^2$. Thusa new positive solution with smaller hypotenuse $u<z=u^4+4v^4$. This contradicts infinite descent, proving the auxiliary assertion.

Area two is also impossible. Clearing denominators and removing a common factor now gives a primitive integer triangle with area twice an integer square. Indeed, if an integer is $2(a/b{)}^2$ with $\gcd (a,b)=1$, then $b^2$ divides two, forcing $b=1$. Its area product would satisfyThe odd factors must be squares and the unique even factor twice a square. As in the preceding modulo-eight argument, $m$ even would force $m+n=c^2$, $m-n=d^2$ and $n=b^2$ odd, with $c^2-d^2=2b^2$, impossible modulo eight. ThusThe integers $u=(c+d)/2$ and $v=(c-d)/2$ are positive and coprime, and $uv=(c^2-d^2)/4=b^2$. Hence $u=r^2$, $v=s^2$. Butcontradicting the auxiliary descent. This proves two is not a congruent number, and concludesThe two obstructions are global arithmetic descents. The elliptic-curve correspondence organizes the wider problem, but by itself is not a substitute for proving these particular nonexistence assertions.

The elliptic-curve discriminant of $y^2=x^3-12x^2+20x$ is $16\cdot 20^2\cdot (144-80)=409600=2^{14}{5}^2$. Thus three and eleven are primes of good reduction. Counting the reduced points gives four points over ${\mathbb{F}}_3$ and sixteen over ${\mathbb{F}}_{11}$. For example, the numbers of affine points above successive $x=0,1,2$ modulo three are $1,1,1$. Modulo eleven, for $x=0,\dots ,10$, they are $1,2,1,2,0,0,2,2,2,2,1$; add the point at infinity in each case.

The reduction of torsion points on an elliptic curve is injective on torsion prime to the residue characteristic. The three-primary rational torsion injects into the group of order sixteen at eleven, so is trivial; likewise the eleven-primary torsion injects into the group of order four at three. Every other primary component injects at both primes. Therefore the rational torsion subgroup has order dividing four. All four rational 2-torsion points are visible, so

The rational point $P=(1,3)$ lies on the curve. The tangent slope in the elliptic-curve addition formula is $(3-24+20)/6=-1/6$, giving $2P=(361/36,-323/216)$. The integral substitution $X=x-4$ changes the equation to $y^2=X^3-28X-48$; the doubled point has $X=217/36$. The Nagell–Lutz theorem says that a rational torsion point on this integral short equation has integral coordinates, so $2P$, and hence $P$, is nontorsion. An infinite-order point is $(1,3)$.

We prove the rank bound by two-isogeny descent. For $a=-12,b=20$, the two-isogeny formula gives the partnerand maps $\varphi :E\to E^{\prime }$, $\psi :E^{\prime }\to E$ with $\psi \varphi =[2]$. The two-torsion square-class homomorphism $\alpha :E(\mathbb{Q})\to {\mathbb{Q}}^{\ast }/({\mathbb{Q}}^{\ast }{)}^2$ is $\alpha (x,y)=[x]$ away from $O,(0,0)$, with values $1$ and $[20]=[5]$ at those exceptional points. Its kernel is $\psi E^{\prime }(\mathbb{Q})$. The corresponding map ${\alpha }^{\prime }$ on $E^{\prime }$ has kernel $\varphi E(\mathbb{Q})$.

The prime-support bound in two-isogeny descent can be checked directly here. For a prime $\ell \nmid 20$, if $v_{\ell }(x)>0$ then $x^2-12x+20$ is a unit, so $2v_{\ell }(y)=v_{\ell }(x)$ is even; if $v_{\ell }(x)<0$, the $x^3$ term has strictly least valuation and $2v_{\ell }(y)=3v_{\ell }(x)$ is even. Thus the square class of $x$ is supported only on two and five. Also $x(x-2)(x-10)\ge 0$ forces $x\in [0,2]\cup [10,\infty )$, so nonzero $x$ is positive. The possible classes are $1,2,5,10$, and the four torsion points provide all of them:Consequently $\#\alpha (E(\mathbb{Q}))=4$.

The same valuation argument on $E^{\prime }$ gives possible signed classes $1,-1,2,-2$, since its coefficient $b^{\prime }=64$ has only the prime two. The identity gives class $1$, and $(-4,8)\in E^{\prime }(\mathbb{Q})$ gives class $-1$. For $d=\pm 2$, the two-isogeny descent quartic iswith integral coprime $U,V$ after scaling a rational solution. If $U$ is odd, its right side is $2$ or $10$ modulo sixteen for $d=2$, and $14$ or $6$ for $d=-2$, according to the parity of $V$. None is a square. If $U=2u$ is even, $V$ is odd and the right side is $32(\pm u^4+3u^2{V}^2\pm V^4)$. The bracket is odd for either parity of $u$, so its 2-adic valuation is five, again impossible for a square. The signed divisor-two obstruction for an isogeny covering excludes both classes. Hence ${\alpha }^{\prime }(E^{\prime }(\mathbb{Q}))=\{1,-1\}$.

For completeness, the index correction in the two-isogeny index formula over a number field is one: $\ker \psi =\{O,(0,0)\}$ and $\varphi ((2,0))=(0,0)$, so the whole kernel lies in $\varphi E(\mathbb{Q})$. ThusThe Mordell-Weil theorem and the four rational 2-torsion points identify this index as $2^{r+2}$. Therefore $2^{r+2}=8$ andThis is the rank-one elliptic curve with roots zero two and ten. We have exhibited a point of infinite order but have not needed to prove that it generates the free part.

First compute the Mordell-Weil group rank by two-isogeny descent. HereThe two-isogeny formula gives $\varphi :E\to E^{\prime }$. If $u=1+i$, then $u^4=-4$, andis an isomorphism over $K$. Its $x$-coordinate multiplier $u^2$ is a square in $K$.

Use the two-torsion square-class homomorphismFor any prime ideal of the Gaussian integers, if $v(x)>0$, then $x^2+i$ is a unit and $2v(y)=v(x)$; if $v(x)<0$, the term $x^3$ has strictly smallest valuation and $2v(y)=3v(x)$. Hence every valuation of $x$ is even. Since the Gaussian integers form a principal ideal domain, dividing by a square leaves a unit. Their units are $\{1,-1,i,-i\}$, whose square classes are $\{1,i\}$ because $-1=i^2$ and $i$ is not a square in $K$. For the latter assertion, $(a+bi{)}^2=i$ with $a,b\in \mathbb{Q}$ would imply $a^2=b^2$ and $2ab=1$, hence $a^2=1/2$, impossible for rational $a$. ThusBoth classes occur, at $O$ and $T$. This is the unit square-class bound for two-isogeny descent.

Define ${\alpha }^{\prime }$ on $E^{\prime }$ similarly, with ${\alpha }^{\prime }((0,0))=[-4i]=[i]$. Since $\theta$ multiplies nonexceptional $x$-coordinates by a square, and preserves the exceptional classes as well, its image is also $\{1,[i]\}$. The standard kernel identities in two-isogeny descent areHere $\hat{\varphi }$ is the dual isogeny and $\hat{\varphi }\varphi =[2]$. These identities can be checked directly from the formulas: $x(\hat{\varphi }(X,Y))=(Y/(2X){)}^2$, and conversely a square $x$-coordinate lets the quadratic equation for a preimage be solved using the curve equation. For example, if $x=r^2\ne 0$, the equation for $X$ is $X^2-(4x+2a)X+(a^2-4b)=0$, whose discriminant is $16(x^2+ax+b)=16(y/r{)}^2$; the $Y$-coordinate then follows from the dual formula. The exceptional points satisfy the same completed square-class criterion.

The two-isogeny index formula over a number field keeps track of a small kernel factor:In this case $\ker \hat{\varphi }=\{O,T^{\prime }\}$, where $T^{\prime }=(0,0)$, and $T^{\prime }\notin \varphi E(K)$ because ${\alpha }^{\prime }(T^{\prime })=[i]\ne 1$. Thus $\delta =2$, and the index is $2\cdot 2/2=2$. There is only one nonzero rational 2-torsion point on $E$: the other two would require $x^2=-i$, and $-i$ has the same nonsquare class as $i$. The Mordell-Weil theorem now givesso $r=0$.

It remains to identify all torsion, rather than merely the rank. The elliptic-curve discriminant is $-64i^3$, so the primes $(3)$ and $(2-i)$ have good reduction, with residue characteristics three and five. By the supplied point-count information their reduction groups have orders that are powers of two. The reduction of torsion points on an elliptic curve is injective on prime-to-residue-characteristic torsion. Every odd-primary torsion subgroup therefore injects into a group of two-power order at at least one of these two primes, and must be zero. All torsion is two-primary.

Finally, if a point had order four, its double would be $T$. The elliptic-curve addition formula givesFor $2P=T$ the denominator is nonzero, so $x^2=i$, impossible in $K$. A point of higher two-power order would have a multiple of order four, so it too is excluded. Thus the only torsion points are $O,T$. Together with rank zero,

The elliptic-curve discriminant is supported at $2$ and $3$, so $5$ and $7$ are primes of good reduction. Direct point counts giveFor example, summing $1+{\chi }_p(x(x+1)(x+4))$ over $x\in {\mathbb{F}}_p$ and adding the point at infinity gives these values.

The reduction of torsion points on an elliptic curve at the two primes shows that $|E(\mathbb{Q}{)}_{\mathrm{tors}}|$ divides eight. Part (a) shows that $P_2$ has order four, and $P_1$ is an independent point of order two because it does not lie in $⟨P_2⟩$. They already generate eight points, so

For $E:y^2=x^3-x^2+25x$, the addition formulas giveIn particular, $[2]Q=T$ and $Q$ has order four, while the nonintegral coordinate of $[2]P=(144/25,-2172/125)$ and part (a) show that $P$ has infinite order.

For two-isogeny descent, writeThe rational point $(0,0)$ is the kernel of a degree-two isogeny $E\to E^{\prime }$. The square-class maps send an affine point with $x\ne 0$ to $[x]\in {\mathbb{Q}}^{\ast }/{\mathbb{Q}}^{\ast 2}$, send $O$ to $1$, and send $(0,0)$ to $[b]$ or $[a^2-4b]$ on the two curves. Their images determine the rank through

HereOn $E$, the possible square classes divide $25$; real solubility excludes the negative classes, while $P$ and $Q$ exhibit $1$ and $5$. Thus $\alpha (E(\mathbb{Q}))=\{1,5\}$. On $E^{\prime }$, the pointsexhibit the classes $-11,-1,11$, along with $1$. The remaining candidate classes are divisible by $3$. Their homogeneous spaceshave no primitive solution modulo $9$: reduction modulo $3$ first forces $3\mid UV$, and then the equation is congruent to $3$ or $6$ modulo $9$. HenceThe rank formula gives $2^r=2\cdot 4/4=2$, so $r=1$.

At the good primes $7$ and $19$, direct counts giveThe reduction of torsion points on an elliptic curve injects rational torsion into both groups, so its order divides $\gcd (12,16)=4$. Since $Q$ has order four, the torsion subgroup is $\mathbb{Z}/4\mathbb{Z}$. Thereforeso $t=1$, $d_1=4$, and $r=1$.

The discriminant is $1909=23\cdot 83$, so $3,5,7$ are primes of good reduction of an elliptic curve. The reduction of torsion points on an elliptic curve injects the prime-to-$p$ torsion into $\tilde{E}({\mathbb{F}}_p)$.

If a prime $\ell$ divided the order of $E(\mathbb{Q}{)}_{\mathrm{tors}}$, its primary subgroup would inject at every one of $3,5,7$ except possibly when $p=\ell$. For $\ell =3$, the counts at $5$ and $7$ have greatest common divisor one; for $\ell =5$ use the counts at $3$ and $7$; for $\ell =7$ use those at $3$ and $5$; every other $\ell$ would divide all three counts. Each possibility is excluded. Hence

An integral Weierstrass equation has good reduction outside the finitely many primes dividing its nonzero discriminant. This proves finiteness of the set of bad primes. To prove finiteness of rational torsion, choose two distinct good primes. The reduction of torsion points on an elliptic curve injects each primary component at a good prime of different residue characteristic, so the two finite reduced point groups bound every primary component of $E(\mathbb{Q}{)}_{\mathrm{tors}}$.

Forthe displayed equation is minimal andIts bad primes are therefore exactlyThe good reductions at $11$ and $13$ haveTheir coprime orders exclude every rational torsion primary component, including the residue-characteristic components by using the other prime. Hence

This elliptic curve has torsion subgroup $\{O,(0,0),(2,0),(10,0)\}\cong (\mathbb{Z}/2\mathbb{Z}{)}^2$ and the infinite-order point $(1,3)$. Good-reduction point counts at three and eleven are four and sixteen, which bound the torsion order by four using reduction of torsion points on an elliptic curve. Doubling $(1,3)$ gives $(361/36,-323/216)$; after the shift $X=x-4$ to $y^2=X^3-28X-48$, its nonintegral coordinate proves nontorsion by the Nagell–Lutz theorem. The two-isogeny formula gives the partner $Y^2=X^3+24X^2+64X$. The first two-torsion square-class homomorphism has image $\{1,2,5,10\}$, while the second has image $\{1,-1\}$ by the signed divisor-two obstruction for an isogeny covering. The two-isogeny rank formula therefore gives $2^r=4\cdot 2/4=2$, so the rank is one. The argument does not determine the index of the subgroup generated by $(1,3)$.

There are infinitely many rational pairs $(u,v)$ with $u^3+v^3=7$. The corresponding Weierstrass equation of an elliptic curve is $y^2=x^3-21168$, and $(u,v)=(2,-1)$ maps to $P=(84,756)$. The primes $5$ and $11$ are good, with point counts $6$ and $12$ because cubing is bijective in their residue fields. Reduction of torsion points on an elliptic curve bounds rational torsion by order dividing $6$. The flexes of a diagonal cubic exclude three-torsion for $d=-7$, while $d/2=-7/2$ is not a cube and hence excludes two-torsion. Thus $P$ has infinite order.

All nonzero multiples of $P$ map to distinct rational affine pairs, since the only rational point at infinity of the diagonal cubic is its identity. The inverse map is $u=(y+252)/(6x)$ and $v=(252-y)/(6x)$.

For positive integral $k$, the rational torsion subgroup of $y^2=x^3+kx$ has order dividing four. Indeed, torsion-freeness of the formal group over Qp for odd p, reduction of torsion points on an elliptic curve, and the point-count criterion for y squared equals x cubed plus k x bound its order by $p+1$ at all good primes $p\equiv 3(\mathrm{mod}4)$. The Dirichlet theorem on primes in arithmetic progressions excludes every odd torsion prime and bounds the two-primary part by four, by choosing $p\equiv 3(\mathrm{mod}8)$. There is exactly one nonzero rational 2-torsion point, namely $(0,0)$. A rational half of it must have $x^2=k$ by the elliptic-curve addition formula. Writing $k=s^2$ with $s>0$, its equation is $y^2=2s^3$, so $s=2t^2$ and $k=4t^4$. Conversely $(2t^2,4t^3)$ has order four. Thus the cyclic group of order four occurs exactly for $k=4t^4$, $t\ge 1$. The order bound itself holds for every nonzero integral $k$ of either sign: positivity was used only to classify the rational points of orders two and four.