Affine Short Weierstrass form

Let FF be a finite field of characteristic q>3q > 3, and let a,bFa, b ∈ F be two field elements such that the so-called discriminant 4a3+27b24a^3 + 27b^2 is not equal to zero. Then a Short Weierstrass elliptic curve Ea,b(F)E_{a,b}(F) over FF in its affine representation is the set of all pairs of field elements (x,y)F×F(x, y) ∈ F × F that satisfy the Short Weierstrass cubic equation y2=x3+ax+by^2 = x^3 + a · x + b, together with a distinguished symbol OO, called the point at infinity:

Ea,b(F)={(x,y)F×Fy2=x3+ax+b}{O}E_{a,b}(F) = \{(x, y) ∈ F × F | y^2 = x^3 + a · x + b\} \cup \{O\}

The equation 4a3+27b204a^3 + 27b^2 \neq 0 ensures that the curve is non-singular, which loosely means that the curve has no cusps or self-intersections in the geometric sense, if seen as an actual curve. Cusps and self-intersections would make the group law potentially ambiguous.

Isomorphic affine Short Weierstrass curves

Let FF be a field, and let (a,b)(a, b) and (a,b)(a', b') be two pairs of parameters such that there is an invertible field element cFc ∈ F^∗ such that a=ac4a' = a · c^4 and b=bc6b' = b · c^6 hold. Then the elliptic curves Ea,b(F)E_{a,b}(F) and Ea,b(F)E_{a',b'} (F) are isomorphic, and there is a map that maps the curve points of Ea,b(F)E_{a,b}(F) onto the curve points of Ea,b(F)E_{a',b'} (F):

I:Ea,b(F)Ea,b(F):{(x,y)O{(c2x,c3y)OI : E_{a,b}(F) \to E_{a',b'}(F): \begin{cases} (x,y) \\ O \end{cases} \to \begin{cases} (c^2 \cdot x,c^3 \cdot y) \\ O \end{cases}

This map is a 1:11:1 correspondence, and its inverse map is given by mapping the point at infinity onto the point at infinity, and mapping each curve point (x,y)(x, y) onto the curve point (c2x,c4y)(c^{−2} \cdot x, c^{−4} \cdot y).

Last updated