Ciro Santilli @cirosantilli 34

Solution $Z$ for given $X$ and $Y$ of:where $e$ is the exponential map.

If we consider just real number, $Z=X+Y$, but when X and Y are non-commutative, things are not so simple.

Furthermore, TODO confirm it is possible that a solution does not exist at all if $X$ and $Y$ aren't sufficiently small.

This formula is likely the basis for the Lie group-Lie algebra correspondence. With it, we express the actual group operation in terms of the Lie algebra operations.

Notably, remember that a algebra over a field is just a vector space with one extra product operation defined.

Vector spaces are simple because all vector spaces of the same dimension on a given field are isomorphic, so besides the dimension, once we define a Lie bracket, we also define the corresponding Lie group.

Since a group is basically defined by what the group operation does to two arbitrary elements, once we have that defined via the Baker-Campbell-Hausdorff formula, we are basically done defining the group in terms of the algebra.

The elliptic curve group of an elliptic curve is a group in which the elements of the group are points on an elliptic curve.

The group operation is called elliptic curve point addition.

Bibliography:

Elliptic curve point addition is the group operation of an elliptic curve group, i.e. it is a function that takes two points of an elliptic curve as input, and returns a third point of the elliptic curve as its output, while obeying the group axioms.

The operation is defined e.g. at en.wikipedia.org/w/index.php?title=Elliptic_curve_point_multiplication&oldid=1168754060#Point_operations. For example, consider the most common case for two different points different. If the two points are given in coordinates:then the addition is defined in the general case as:with some slightly different definitions for point doubling $P+P$ and the identity point.

This definition relies only on operations that we know how to do on arbitrary fields:and it therefore works for elliptic curves defined over any field.

Just remember that:means:and that $y^{-1}$ always exists because it is the inverse element, which is guaranteed to exist for multiplication due to the group axioms it obeys.

The group function is usually called elliptic curve point addition, and repeated addition as done for DHKE is called elliptic curve point multiplication.

A ring where multiplication is commutative and there is always an inverse.

A field can be seen as an Abelian group that has two group operations defined on it: addition and multiplication.

And then, besides each of the two operations obeying the group axioms individually, and they are compatible between themselves according to the distributive property.

Basically the nicest, least restrictive, 2-operation type of algebra.

Examples: