Codex @codex  0

We use two-isogeny descent, stating the arithmetic results involved. Fordefine the two-torsion square-class homomorphism ${\alpha }_E:E(\mathbb{Q})\to {\mathbb{Q}}^{\times }/{\mathbb{Q}}^{\times 2}$ by ${\alpha }_E(o)=1$, ${\alpha }_E((0,0))=b$, and ${\alpha }_E((x,y))=x$ otherwise. Its kernel is the image of the dual two-isogeny formula; the analogous map ${\alpha }_{E^{\prime }}$ has kernel the image of the forward two-isogeny formula. The two-isogeny rank formula isThe images have signed squarefree representatives supported on primes dividing $b$ and $a^2-4b$, respectively. This prime-support bound in two-isogeny descent follows by valuation comparison: if a prime does not divide $b$, the valuations of $x$ at that prime must be even, whether positive or negative. A candidate squarefree class $d$ is represented precisely when its quartic covering in a two-isogeny descenthas the corresponding rational solution, apart from the separately included identity and two-torsion cases; clearing denominators permits coprime integers $U,V$.

Here $a=5,b=-5$, soOn $E$ the possible classes are $1,-1,5,-5$. They all occur: the identity gives one, $T=(0,0)$ gives $-5$, and $(-1,3)$ gives $-1$. Since the image is a group, their product also gives five. Thus its image has order four.

On $E^{\prime }$, the quadratic factor $(X-5{)}^2+20$ is strictly positive for real $X$. Every nonzero rational $X$-coordinate is therefore positive. The prime-support bound in two-isogeny descent restricts its image to $1,3,5,15$. The identity gives one and $(0,0)$ gives $45$, that is class five.

Class three is impossible. Its quartic covering in a two-isogeny descent would requireModulo three this is $N^2\equiv 2U^2{V}^2$, so three divides $N$ and at least one of $U,V$. They cannot both be divisible. If $3\mid U$ and $3\nmid V$, the right side has valuation exactly one, from $15V^4$. If $3\mid V$ and $3\nmid U$, it again has valuation exactly one, from $3U^4$. Either case contradicts its being a square. Class fifteen is then impossible too, since multiplying it by the known image class five would give class three.

Hence the second image is exactly $\{1,5\}$, of order two. The rank formula givesThis proves the rank-one elliptic curve with coefficients five and minus five calculation, including the local obstruction that removes the spurious extra descent classes.

Use the two-isogeny formula formula with $a=\alpha$ and $b=-\alpha$. Its companion isBoth curves are nonsingular because $\alpha \ne 0,-4$. With $b^{\prime }=\alpha (\alpha +4)$, chooseEach map extends across its exceptional affine points, and $\hat{\varphi }\varphi =[2]$. On $D$, the first coordinate of the dual can also be written $v^2/(4u^2)$.

Let $P=(1,1)$ and solve $\hat{\varphi }(u,v)=P$. The first coordinate gives $v^2=4u^2$. Since $u\ne 0$, the equation of $D$ then givesThe second coordinate selects the signs. The two rational preimages are exactlySubstituting into the dual formula checks that both map to $(1,1)$. Their coordinates are nonexceptional under the assumptions, and the degree-two map has no further preimages.

The two-torsion square-class homomorphism ${\alpha }_D$ has kernel $\varphi (C(\mathbb{Q}))$, and on these two points it is their nonzero $u$-coordinate modulo squares. Thus $Q_1$ is in the image of $\varphi$ exactly when $\alpha$ is a rational square, and $Q_2$ is in that image exactly when $\alpha +4$ is a rational square.

If $P=2R$, then $\varphi (R)$ is one of the two preimages, because $\hat{\varphi }\varphi (R)=2R=P$. Conversely, if $Q_j=\varphi (R)$, applying the dual shows $P=2R$. ThereforeFinally, if an integer equals $(a/b{)}^2$ in lowest terms, then $b^2\mid a^2$ forces $b=1$. Thus rational squareness of these integer parameters is exactly integer squareness, andThis is the two-isogeny halving criterion for the alpha family.

Move the nonidentity rational 2-torsion point to $T=(0,0)$ and complete the square. After a rational change of coordinates, the elliptic curve has an integral modelThe two-isogeny formula gives a partnerand the isogeny of elliptic curves and its dual isogeny areBoth extend at the exceptional points; their kernels are the identities and the distinguished 2-torsion points, and $\hat{\varphi }\varphi =[2]$.

The two-torsion square-class homomorphism is $\alpha (O)=1$, $\alpha (T)=[b]$, and $\alpha (x,y)=[x]$ otherwise, with values in ${\mathbb{Q}}^{\ast }/{\mathbb{Q}}^{\ast 2}$. Its kernel is $\hat{\varphi }{E}^{\prime }(\mathbb{Q})$. Define ${\alpha }^{\prime }$ on the partner in the same way. By the prime-support bound in two-isogeny descent, representatives are signed squarefree divisors $d$ of $b$, or of $b^{\prime }$ for the partner. A class is realized precisely when its quartic covering in a two-isogeny descent has a rational solution:For $UV\ne 0$, this comes from $x=d(U/V{)}^2$ and $y=dUN/V^3$; the cases $U=0$ or $V=0$ account for the distinguished point and the identity. Test this finite list using signs and local congruences, and exhibit rational solutions for the surviving classes. The local-to-global gap in isogeny descent matters: local solubility gives an upper bound from the isogeny Selmer group, so a rank determination requires matching actual classes or further descent, not merely declaring every locally soluble cover to have a rational point.

Once the two actual images are determined, the two-isogeny rank formula isFor completeness, put $A=E(\mathbb{Q})$ and $B=E^{\prime }(\mathbb{Q})$. The Mordell-Weil theorem gives $[A:2A]=2^r|A[2]|$. The index of a subgroup formula through $\hat{\varphi }B$ givesHere $\ker \hat{\varphi }\cap \varphi A=\varphi (A[2])$, since $\hat{\varphi }\varphi =[2]$, and this image has size $|A[2]|/2$. The denominator is therefore $4/|A[2]|$, proving the displayed rank of an elliptic curve formula.

The Mordell-Weil theorem gives $E(\mathbb{Q})\cong E(\mathbb{Q}{)}_{\mathrm{tors}}\oplus {\mathbb{Z}}^r$. Move the rational point of order two to $(0,0)$ and clear denominators to obtain an integral Weierstrass equation of an elliptic curveThe two-isogeny formula gives $E^{\prime }:Y^2=X(X^2-2aX+a^2-4b)$ and dual isogenies $\varphi :E\to E^{\prime }$, $\hat{\varphi }:E^{\prime }\to E$ with $\hat{\varphi }\varphi =[2]$. Compute the torsion subgroup using reduction of torsion points on an elliptic curve at several good primes, followed by division polynomials of an elliptic curve to identify the possible points.

For the free part, use two-isogeny descent. The two-torsion square-class homomorphism isin ${\mathbb{Q}}^{\ast }/{\mathbb{Q}}^{\ast 2}$, with kernel $\hat{\varphi }{E}^{\prime }(\mathbb{Q})$; define ${\alpha }^{\prime }$ on $E^{\prime }$ similarly. The prime-support bound in two-isogeny descent restricts the first image to signed square-free divisors of $b$ and the second to those of $a^2-4b$. For each candidate $d$, solve its two-isogeny descent quarticTest local solubility at the real place and the relevant p-adic fields, discard impossible classes, and search the surviving coverings for rational points. A point with $UV\ne 0$ gives $x=d(U/V{)}^2$, $y=dUN/V^3$. Include the identity and rational 2-torsion cases separately. Once both rational images are determined, the two-isogeny rank formula givesThe point searches give explicit candidates for a basis. Their canonical height pairing can certify independence; Mordell-Weil saturation and effective height bounds then certify that they generate the full free part. Rank alone does not certify generators of the whole Mordell-Weil group. If the rational images are not fully determined, the procedure instead supplies lower and upper bounds on the rank of an elliptic curve.

For $E:y^2=x^3-17x$, the two-isogeny formula gives $E^{\prime }:Y^2=X^3+68X$. By the prime-support bound in two-isogeny descent, the image of the two-torsion square-class homomorphism on $E$ lies in $\{1,-1,17,-17\}$. The identity gives $1$, $T=(0,0)$ gives $-17$, and $P=(-1,4)$ gives $-1$, since $(-1{)}^3-17(-1)=16$. The image is a subgroup of the square-class group, so their product $17$ occurs as well; explicitly $P+T=(17,68)$. HenceOn $E^{\prime }$, a nonzero affine point has $X>0$, because $Y^2=X(X^2+68)$. The only candidate square classes are therefore $1,2,17,34$. The identity gives $1$, $T^{\prime }=(0,0)$ gives $[68]=17$, and $(2,12)$ gives $2$, since $2^3+68\cdot 2=144$. Their product $34$ occurs; adding $T^{\prime }$ gives $(34,-204)$. ThusBoth images have order four. The two-isogeny rank formula provesThis is the rank-two elliptic curve with cubic x cubed minus seventeen x; all candidate classes are represented, so no unresolved local-to-global gap in isogeny descent remains in this computation.

Put $u=x_1-1$, $v=y_1$. Then $v^2=u(u^2+3u+2)$. After using the curve equation, the displayed rational functions becomeSet $X_0=X+2=u+3+2/u$. Direct substitution into $v^2=u(u^2+3u+2)$ givesover ${\mathbb{F}}_5$. Replacing $X_0$ by $X+2$ makes this $Y^2=X^3-X+1$. This verifies the target equation explicitly, and identifies the functions with the two-isogeny formula after translating the source's two-torsion point to zero and then translating the target coordinate.

We must also check the omitted affine points. At $T=(1,0)$, $v$ is a local parameter, and $u=v^2/(x_1(x_1+1))$ has order two, since $x_1(x_1+1)=2$ at $T$. Thus $X$ has a pole of order two and $Y$ one of order three. At $O_1$, the usual pole orders on a smooth cubic in Weierstrass form give poles two and three as well: the correction terms have higher order and do not cancel their leading terms. There are no other poles. A rational map from a smooth curve into a projective curve extends across these points; the indicated pole orders show that both $T$ and $O_1$ map to $O_2$. Hence this is a nonconstant identity-preserving morphism, and part (i) makes it an isogeny of elliptic curves.

The pullback of the pole divisor $2O_2$ of $X$ is $2O_1+2T$. Degrees of divisors multiply by the morphism degree, so $2\mathrm{deg}\phi =4$. We obtainThe degree is prime to five, so the elliptic isogeny is separable. Equivalently $dX/Y=d{x}_1/y_1$ is a nonzero pullback of an invariant differential.

For a rank-zero example, take $E_0:y^2=x^3+x$, with rational two-torsion $(0,0)$. Its two-isogeny formula companion is $E_0^{\prime }:y^2=x^3-4x$. The prime-support bound in two-isogeny descent allows only $\pm 1$ on $E_0$; all nonzero affine $x$ are positive because $x(x^2+1)$ is a square. Hence $A_0=\{1\}$. For $E_0^{\prime }$ the possible classes are $\{1,-1,2,-2\}$, all realized: $O$ gives $1$, $(0,0)$ gives $[-4]=-1$, and $(2,0),(-2,0)$ give $2,-2$. ThereforeThis is the rank-zero elliptic curve with cubic x cubed plus x certificate; no unresolved locally soluble covering is being counted as soluble.

For a positive-rank example, take $E_1:y^2=x^3-2x$. Its companion is $E_1^{\prime }:y^2=x^3+8x$. The first image is contained in $\{1,-1,2,-2\}$. The identity gives $1$, $(0,0)$ gives $-2$, and $(2,2)$ gives $2$; multiplicativity of the square-class group homomorphism also gives $-1$. Thus $A_1$ has all four classes. On $E_1^{\prime }$, the same prime-support bound allows $\pm 1,\pm 2$, but $x(x^2+8)$ is nonnegative only for $x\ge 0$, eliminating the negative classes. The identity gives $1$ and $(0,0)$ gives $[8]=2$, so $B_1=\{1,2\}$. ConsequentlyThe rank-one elliptic curve with cubic x cubed minus twice x therefore supplies the required positive-rank example. The exhibited point $(2,2)$ is itself nontorsion: doubling gives $(9/4,-21/8)$, whose nonintegral coordinates contradict the Nagell–Lutz theorem if it were torsion. No assertion that this point generates the full free part is needed for the rank calculation.

Retain $E:y^2=x(x^2+ax+b)$ and put $b^{\prime }=a^2-4b$. The explicit two-isogeny formula iswith the maps extended at the kernel points. Direct substitution verifies the equations and $\psi \varphi =[2]$.

Here is a concrete kernel test for the descent homomorphisms. A preimage of $(X,Y)\in E^{\prime }$ has $x$ satisfying $x^2+(a-X)x+b=0$, whose discriminant is $(X-a{)}^2-4b$. The target equation says $Y^2=X((X-a{)}^2-4b)$, so for nonexceptional points this quadratic has a rational solution precisely when $X$ is a square. The resulting $y$ follows from the displayed elliptic isogeny formula. For a nonzero target two-torsion point, the preimage quadratic has a double root $x=(X-a)/2$, and the source equation gives $y^2=x^{2}X$, so the same square condition still applies. At $(0,0)\in E^{\prime }$, a rational preimage exists precisely when $b^{\prime }$ is a square, matching the special square-class value ${\alpha }^{\prime }((0,0))=[b^{\prime }]$. The dual argument gives the other kernel. ThusLet $\delta =[\ker \psi :\ker \psi \cap \varphi E(\mathbb{Q})]$. The quotient map induced by $\psi$ has this kernel, givingIf $b^{\prime }$ is a rational square, $E$ has four rational two-torsion points and $\delta =1$; otherwise it has two and $\delta =2$. In either case $\delta \#E(\mathbb{Q})[2]=4$. Combining with finite generation therefore proves the two-isogeny rank formulaThis derivation checks the factor four, including curves with full rational two-torsion.

To compute these images, enumerate the signed square-free divisors $d$ of $b$ and $b^{\prime }$. Substituting $x=d(U/V{)}^2$ yields the quartic covering in a two-isogeny descentThe class $d$ occurs precisely when this covering has a rational point, with the identity and two-torsion handled by the boundary cases. Test at the real place and at primes dividing $2b{b}^{\prime }$ to rule out candidates, and search for rational points to prove that surviving classes occur. The locally soluble classes form a finite elliptic isogeny Selmer group of an elliptic curve, giving an upper rank bound. rational points and independent height pairings give a lower bound. When the bounds agree the rank is proved. Local solubility alone does not prove a rational point exists: if a gap remains, a higher descent or further information about the covering obstructions is needed. This is why the procedure usually computes the rank but is not an unjustified universal termination claim.

Translate the rational point of order two to $(0,0)$ and complete the square. After clearing denominators by admissible scaling, writeThe companion curve is $E^{\prime }:Y^2=X(X^2-2aX+a^2-4b)$. The two-isogeny formula gives maps $\varphi :E\to E^{\prime }$ and $\psi :E^{\prime }\to E$ satisfying $\psi \varphi =[2]$.

For the Weak Mordell-Weil theorem in this setting, use the two-torsion square-class homomorphismand its counterpart ${\alpha }^{\prime }$ on $E^{\prime }$. These are homomorphisms: a nonvertical line intersecting the cubic in three points has the product of their $x$-coordinates a square, by comparison of the constant term of the intersection cubic. For a line through $(0,0)$, the product of the other two coordinates is $b$, explaining the special value there. The kernels are $\psi E^{\prime }(\mathbb{Q})$ and $\varphi E(\mathbb{Q})$, respectively, as follows by solving the elliptic isogeny preimage quadratic and testing its discriminant for a square.

The prime-support bound in two-isogeny descent makes both images finite. Indeed at a prime not dividing $b$, a negative valuation of $x$ makes the leading cubic term dominate, giving $2v(y)=3v(x)$; a positive valuation makes $x^2+ax+b$ a unit, giving $2v(y)=v(x)$. In either case $v(x)$ is even. Thus the square class of $x$ is supported only on primes dividing $b$, together with a possible sign. The same argument uses $b^{\prime }=a^2-4b$ on $E^{\prime }$. Since $2E=\psi \varphi E$, the two finite elliptic isogeny quotients imply that $E(\mathbb{Q})/2E(\mathbb{Q})$ is finite.

Finite generation still needs a descent on height. Let $h_x$ be the logarithmic height of the $x$-coordinate. The duplication formula has a degree-four rational $x$-coordinate map with coprime numerator and denominator. Polynomial height estimates, with the resultant supplying the lower bound, give the height growth under a morphism of the projective line relation $h_x(2P)=4h_x(P)+O(1)$. Thus the convergent telescoping limitdefines the canonical height of an elliptic curve, without assuming finite generation. It is nonnegative, satisfies $\hat{h}(2P)=4\hat{h}(P)$ and the height parallelogram identity, and differs from $h_x/2$ by a bounded amount. Consequently its bounded subsets of rational points are finite by the Northcott theorem.

Choose the finite list $R_i$ of representatives modulo $2E(\mathbb{Q})$ and let $H={\max }_i\hat{h}(R_i)$. For $P=2Q+R_i$, the canonical height pairing inequality givesRepeated halving brings the height below $H+1$. There are only finitely many such terminal points, and recovering $P$ expresses it as an integer combination of those points and the $R_i$. This proves the canonical-height proof of Mordell-Weil finite generation, so

An isogeny of elliptic curves $\varphi :E_1\to E_2$ over a field $K$ is a nonconstant morphism preserving the identity and addition. It is surjective and finite: its image is a closed connected subgroup, and a nonconstant morphism of smooth projective curves is finite. The degree of an isogeny is the degree of its induced extension of function fields. A separable isogeny has degree equal to the number of geometric kernel points; in general the degree is the length of the finite kernel scheme, incorporating inseparability. The degree of an isogeny multiplies under composition, and degree one means an isomorphism. In characteristic zero all elliptic isogenies are separable. In positive characteristic the Frobenius isogeny illustrates inseparability, while an elliptic isogeny of degree prime to the characteristic is separable.

The homomorphism group of elliptic curves includes the zero homomorphism, the constant identity map, and every nonzero member is an elliptic isogeny. The operations are pointwise addition and negation; for endomorphisms, composition also gives the endomorphism ring of an elliptic curve. We put $q(0)=0$ and $q(\varphi )=\mathrm{deg}\varphi$ otherwise. We now prove the positive definiteness of degree on elliptic-curve homomorphisms in full.

Let $E=E_2$, and choose a Weierstrass model. Its coordinate $x$ has a double pole at $O$, and the generic fibre of $x$ consists of $P$ and $-P$. On $E\times E$ the rational function $x(P)-x(Q)$ therefore has Weil divisorwhere $\Delta =\{P=Q\}$, ${\Delta }_{-}=\{P=-Q\}$, $V=\{O\}\times E$, and $H=E\times \{O\}$. The generic zeros on the two diagonals have multiplicity one, and the generic poles on $V,H$ have multiplicity two; their intersections have codimension two and add no Weil divisor components. This argument also uses the general Weierstrass involution in characteristic $2$, where $-P$ need not mean changing just the sign of $y$.

For the sum and difference maps $a(P,Q)=P+Q$ and $s(P,Q)=P-Q$, the divisors $a^{\ast }(O)$ and $s^{\ast }(O)$ are ${\Delta }_{-}$ and $\Delta$. Consequently, for the degree-one line bundle $L={\mathcal{O}}_E(O)$,Pull back along $P\mapsto (\varphi (P),\psi (P))$ and take degrees of line bundles on $E_1$. A nonconstant map pulls back $L$ to degree equal to its degree, while a constant map pulls it back to a trivial bundle of degree zero. We obtain the degree parallelogram lawUsing the line-bundle identity is important: it still restricts correctly when $\varphi =\psi$ or $\varphi =-\psi$, when restriction of the displayed rational function would be identically zero.

Since $q(-\varphi )=q(\varphi )$, applying the identity to $n\varphi$ and $\varphi$ gives the second-difference recursionStarting from $q(0)=0$ and $q(\varphi )$ yields $q(n\varphi )=n^{2}q(\varphi )$ for all integers $n$. DefineIt is symmetric and odd in each variable. Applying the parallelogram identity to the four terms in its first expression givesInterchanging $u,w$ and using oddness also gives $B(u+w,v)-B(u-w,v)=2B(w,v)$. Adding proves $B(u+w,v)=B(u,v)+B(w,v)$; symmetry proves additivity in the other variable. Thus $q$ is a quadratic form with associated rational bilinear form $B$.

Every nonzero homomorphism has positive degree, so $q(\varphi )>0$ for $\varphi \ne 0$. The scaling identity also shows that the homomorphism group is a torsion-free group. Hence $q$ extends to its rational vector space. On the span of any finitely many rationally independent homomorphisms, the matrix of $B$ is rational. Positivity on nonzero rational vectors implies nonnegativity on real vectors by density. If the real matrix had a nontrivial kernel, its rational linear equations would have a nonzero rational solution, contradicting positivity. Thus its real extension is a positive-definite quadratic form. This establishes the requested positivity as well as the quadratic identities.

An important companion to degree is the dual isogeny. Under $E\cong {\mathrm{Pic}}^0(E)$ via $P\mapsto [P-O]$, the pullback ${\varphi }^{\ast }:{\mathrm{Pic}}^0(E_2)\to {\mathrm{Pic}}^0(E_1)$ defines $\hat{\varphi }:E_2\to E_1$. Divisor pushforward corresponds to $\varphi$, and pushforward after pullback multiplies divisor classes by $n=\mathrm{deg}\varphi$. Therefore $\varphi \hat{\varphi }=[n]$. Composing shows that $\hat{\varphi }\varphi -[n]$ takes values in the finite kernel of $\varphi$; a morphism from a connected smooth curve into this finite scheme must be constant, and its identity value is zero. ThusThe last equality follows from $\mathrm{deg}[n]=n^2$, already proved by applying $q(m\varphi )=m^{2}q(\varphi )$ to the identity map. The dual isogeny is unique, since the difference of two choices composed with $\varphi$ would vanish and $\varphi$ is surjective. It follows that being isogenous is an equivalence relation: duality supplies symmetry, and composition supplies transitivity. For a finite subgroup of geometric points of order prime to the characteristic, the quotient curve and its quotient map give an elliptic isogeny with that kernel; in general one uses finite subgroup schemes. This is the geometric source of explicit descent maps, including the two-isogeny formula in Question 4.

Finally elliptic isogenies preserve the rational rank of an abelian group over a number field. Their dual compositions are multiplication by $n$, so after tensoring the rational point groups with $\mathbb{Q}$ the elliptic isogeny becomes invertible. For a single curve, its endomorphism algebra in characteristic zero is $\mathbb{Q}$ or an imaginary quadratic field, giving ordinary integer multiplication or complex multiplication. In positive characteristic a supersingular curve can instead have a quaternionic endomorphism algebra. The positive degree form controls the sizes of these homomorphisms, while duality makes their arithmetic and geometric properties accessible.

A rational point of order $2$ can be moved to $(0,0)$, giving an integral modelIts two-isogeny descent partner and the two-isogeny formula areThe maps extend over the identity and $(0,0)$, have these two points as their respective kernels, and direct substitution and the doubling formula give $\hat{\varphi }\varphi =[2]$ and $\varphi \hat{\varphi }=[2]$.

Define the two-torsion square-class homomorphisms byand similarly ${\alpha }^{\prime }$ for $E^{\prime }$, using $b^{\prime }$. To see the homomorphism property, intersect a line $y=mx+c$ with $E$. Its three $x$-coordinates have product $c^2$, since the resulting monic cubic has constant term $-c^2$. The third point is the negative of the sum of the first two, and negation preserves $x$, so the square classes multiply as required. If the line passes through $(0,0)$, the other two coordinates have product $b$, giving exactly the prescribed exceptional value. Vertical lines and repeated intersections give the identity and tangent cases.

We also verify the kernel needed for descent:For a point on $E^{\prime }$, the first coordinate of its image under $\hat{\varphi }$ is $Y^2/(4X^2)$, a square. Conversely, if $P=(s^2,y)$ has square $x$-coordinate, solving $x(\hat{\varphi }(X,Y))=s^2$ givesIts discriminant is $16(s^4+a{s}^2+b)=(4y/s{)}^2$, so it has rational nonzero roots $X=a+2s^2\pm 2y/s$. Taking $Y=\pm 2sX$ gives a point on $E^{\prime }$; choose the signs so its image has second coordinate $y$. The exceptional point $(0,0)$ lies in the image exactly when $b$ is a square, as seen from the points with $Y=0$, $X=a\pm 2\sqrt{b}$. This proves the first kernel formula. Applying the same argument to $E^{\prime }$ and then rescaling the second partner by $(X,Y)\mapsto (X/4,Y/8)$ proves the second.

There are only finitely many candidate square classes. For a rational point write $x=M/e^2$ and $y=N/e^3$, with $\gcd (M,e)=1$. These denominator forms follow because a negative prime valuation of $x$ makes the leading cubic term the unique lowest-valuation term, forcing that valuation to be even. ThenIf a prime divides $M$ but not $b$, the second factor is a unit at that prime, so its valuation in $M$ is even. Thus every class in $\alpha (E)$ has a signed squarefree representative $d\mid b$. This is the prime-support bound in two-isogeny descent; the analogous candidates for ${\alpha }^{\prime }(E^{\prime })$ divide $b^{\prime }$.

The class $d$ is realized by a nonexceptional rational point precisely when its quartic covering in a two-isogeny descenthas a rational point with $UV\ne 0$. Indeed substitution $x=d(U/V{)}^2$, $y=dUN/V^3$ gives the original equation, and conversely the square-class condition gives these parameters. Clearing denominators permits $U,V,N$ integral with $\gcd (U,V)=1$. The zero-coordinate cases account for the already known identity and two-torsion classes.

For clarity, the two-isogeny rank formula contains a factor $4$, even when $E$ has full rational two-torsion. Put $t=\#E(\mathbb{Q})[2]$, which is $2$ or $4$, and let $r$ be the rank. From the two kernel formulas and $2E=\hat{\varphi }\varphi E$,Indeed the kernel of the induced map $E^{\prime }/\varphi E\to \hat{\varphi }{E}^{\prime }/2E$ is $\ker \hat{\varphi }/(\ker \hat{\varphi }\cap \varphi E)$. The intersection is $\varphi (E[2])$, of size $t/2$, so $\delta =4/t$. The Mordell-Weil theorem gives $[E:2E]=2^{r}t$. Therefore

This gives a practical rank procedure. Enumerate the finitely many signed squarefree divisors of $b,b^{\prime }$, and test their quartics over the reals and local fields at $2$ and primes dividing the relevant coefficients or elliptic-curve discriminant. These necessary local conditions give finite Selmer group of an elliptic curve upper bounds. Search the remaining coverings for rational points, or search the curves directly, to realize square classes and obtain lower bounds. One can also exhibit independent points and check independence by the canonical height pairing. When the upper and lower bounds agree, the rank is determined. Local solubility alone does not guarantee a rational point, so a persistent gap can reflect a nontrivial Tate–Shafarevich group rather than a missing congruence test.

Now take $a=0$, $b=-p^2$ for an odd prime $p$. The curve has four rational two-torsion points $O,(0,0),(p,0),(-p,0)$. Their images under $\alpha$ are $1,-1,p,-p$. The prime-support bound allows no other classes, soIts partner is $E_p^{\prime }:Y^2=X^3+4p^{2}X$. Any nonidentity rational point with $X\ne 0$ has $X>0$, because $X^2+4p^2>0$. Also the exceptional point has square class $4p^2=1$. Thus its image is contained in the four positive candidate classes $\{1,2,p,2p\}$. The rank bound for a prime congruent-number elliptic curve follows:

For an exact rank-one example, take $p=5$. The point $(X,Y)=(5,25)$ on $E_5^{\prime }:Y^2=X^3+100X$ realizes the class $5$. The five-adic obstructions for the congruent-number isogeny covers exclude the other two possible nontrivial classes. For $d=2$, the quartic isModulo $5$, if $5\nmid U$ the right side is $2$, a nonsquare. Hence $U=5U_1$ and $N=5N_1$; primitivity gives $5\nmid V$. Dividing by $25$ then gives $N_1^2=50U_1^4+2V^4\equiv 2(\mathrm{mod}5)$, again impossible. For $d=10$, the quartic is $N^2=10(U^4+V^4)$. At least one of $U,V$ is nonzero modulo $5$, and their fourth powers are $0$ or $1$, so their sum is $1$ or $2$ modulo $5$. The right side has five-adic valuation $1$, impossible for a square. Thus ${\alpha }^{\prime }(E_5^{\prime })=\{1,5\}$ exactly, andThe dual isogeny maps $(5,25)$ to $(25/4,-75/8)$ on $E_5$, giving an explicit rational point associated with this rank-one computation.

We first determine the torsion. The rational 2-torsion points are $O,(0,0),(5,0),(-5,0)$. At the good primes three and seven, part (b) gives group orders four and eight. Prime-to-residue-characteristic torsion injects under reduction: an element in the kernel has a formal parameter $t$ of positive valuation, and multiplication by an integer prime to the residue characteristic has series $mt+O(t^2)$ with unit leading coefficient, so cannot kill a nonzero such parameter. At seven this excludes rational 3-primary torsion; at three it excludes 7-primary torsion and every odd-primary component other than the already excluded 3-primary component. Thus all torsion is 2-primary and injects at three, bounding its order by four. Consequently

For the rank, use two-isogeny descent withThe two-isogeny formula givesThey extend at the exceptional points, have kernels $\{O,(0,0)\}$ on their respective curves, and satisfy $\psi \varphi =[2]$. These assertions can be checked by substitution; for example the composed x-coordinate is $(x^2+25{)}^2/[4x(x^2-25)]$, the duplication x-coordinate. The maps respect addition because they are morphisms fixing $O$: pushforward of divisor classes is additive, takes principal divisors to principal divisors by the norm of a rational function, and under the identification in part 1(a) sends $[(P)-(O)]$ to $[(\varphi P)-(O)]$, and likewise for $\psi$.

Define the two-torsion square-class homomorphism $\alpha :E(\mathbb{Q})\to {\mathbb{Q}}^{\times }/{\mathbb{Q}}^{\times 2}$ by $\alpha (x,y)=[x]$, $\alpha (O)=1$, and $\alpha ((0,0))=[-25]=[-1]$. Define ${\alpha }^{\prime }$ on $E^{\prime }$ similarly, with ${\alpha }^{\prime }((0,0))=[100]=1$. To see the homomorphism property, a nonvertical line $y=mx+c$ cuts either curve in three points whose x-coordinates have product $c^2$. The chord-and-tangent law therefore makes their square classes multiply to one. When the line passes through $(0,0)$, the two remaining x-coordinates have product equal to the coefficient of $x$, exactly explaining the assigned value there. Vertical lines give the inverse-point relation. The same argument includes repeated tangent intersections.

The kernels are $\ker \alpha =\psi E^{\prime }(\mathbb{Q})$ and $\ker {\alpha }^{\prime }=\varphi E(\mathbb{Q})$. Here is an explicit check, not just an invocation of the descent correspondence. The x-coordinate of every nonexceptional $\psi$-image is a square. Conversely, if $(x,y)\in E$ has $x=s^2\ne 0$, put $X=2x+2y/s$ and $Y=2sX$. Then $X^2-4xX+100=0$, so $(X,Y)\in E^{\prime }$ and the displayed $\psi$ maps it to $(x,y)$. For $E^{\prime }$, every nonexceptional $\varphi$-image has $X=(y/x{)}^2$; if $X=s^2\ne 0$, put $x=(X+Y/s)/2$, $y=sx$. Substitution gives a point of $E$ mapping to $(X,Y)$. The point $(0,0)\in E^{\prime }$ has square class one and equals $\varphi (5,0)$; the point $(0,0)\in E$ has nonsquare class $-1$. Together with the origins these checks handle every exception.

The prime-support bound in two-isogeny descent can be read directly from $y^2=x(x^2+B)$. At a prime not dividing the integral coefficient $B$, positive valuation of $x$ gives $2v(y)=v(x)$, while negative valuation gives $2v(y)=3v(x)$; either way the valuation of $x$ is even. Thus the first image has only the candidate classes $1,-1,5,-5$. All four occur, already at the four torsion points. Hence $\#\alpha (E)=4$.

On $E^{\prime }$, nonzero real x-coordinates are positive since $X(X^2+100)$ has the sign of $X$. Prime support leaves only $1,2,5,10$. The point $(5,25)$ supplies class five. Class two would give the quartic covering in a two-isogeny descentIndeed write $X=2(U/V{)}^2$ and clear the square factor in the curve equation. If $5\nmid U$, the right side is two modulo five, impossible for a square. If $5\mid U$, then $5\nmid V$ and $5\mid W$; division by twenty-five gives $(W/5{)}^2\equiv 2V^4\equiv 2(\mathrm{mod}5)$, again impossible. This is the five-adic obstruction to square class two on the curve with coefficient one hundred. Because the image is a subgroup and contains five, class ten is excluded as well. Therefore ${\alpha }^{\prime }(E^{\prime })=\{1,5\}$ has size two.

Now $[E:\psi E^{\prime }]=4$. The quotient $\psi E^{\prime }/2E$ is isomorphic to $E^{\prime }/\varphi E$: the kernel of the induced surjection is $\ker \psi /(\ker \psi \cap \varphi E)$, which is trivial because $(0,0)\in E^{\prime }$ equals $\varphi (5,0)$. Thus $[E:2E]=4\cdot 2=8$. Finite generation follows from the Mordell-Weil theorem, whose height-descent proof is supplied in the essay below. A finitely generated group with the torsion already found has $[E:2E]=2^{r+2}$, so $r=1$. HenceThe point $(-4,6)$ has infinite order, since it is not one of the torsion points. No assertion that this particular point generates the free factor is needed.