Weierstrass equation long vs. normal form

3k Views Asked by At

So I am studying elliptic curves over finite fields and I am a little confused about something. In some texts I see a "long" Weierstrass equation and in some I see a "short" Weierstrass equation, what is the difference between the two? Are they equivalent?

"normal" form Weierstrass equation: $$y^2=x^3+ax+b$$ where $$a,b ∈Z$$

Also since I am considering finite fields should $a,b∈F_q$?

long Weierstrass equation: $$E:y^2+a_1 xy+a_3 y=x^3+a_2 x^2+a_4 x+a_6$$ where $$a_1,a_2,a_3,a_4,a_5,a_6∈F_q$$

Thanks for the clarification!

2

There are 2 best solutions below

0
On BEST ANSWER

The correct transformations are the following (assuming the characteristic of the field of definition is not $2$ or $3$). First change $y\longrightarrow y-(a_1x+a_3)/2$, so the new equation has the form $$y^2=x^3+Ax^2+Bx+C.$$ And now change $x\longrightarrow x-A/3$, so that the new equation has the form $$y^2=x^3+ax+b.$$ Clearly, both changes of variables are invertible, so their composition is also invertible. This means that the rational points on both equations are in bijective correspondence.

Be warned that if your field of definition is $\mathbb{F}_q$ and $q$ is divisible by $2$ or $3$, then it may not be possible to find a short Weierstrass form for your elliptic curve. Clearly, the first change of variables above may not work in char 2, and the second one may not work in char 3.

1
On

You can go from the "long" form to the short form by the transformation $$z=y+\frac12 a_1 x$$

Since you will be interested in rational solutions, and since $a_1$ is rational, studying the short form tells you what you need to know about the long form as well.