English

Connecting Kani's Lemma and path-finding in the Bruhat-Tits tree to compute supersingular endomorphism rings

Number Theory 2026-01-22 v2 Cryptography and Security

Abstract

We give a deterministic polynomial time algorithm to compute the endomorphism ring of a supersingular elliptic curve in characteristic p, provided that we are given two noncommuting endomorphisms and the factorization of the discriminant of the ring O0\mathcal{O}_0 they generate. At each prime qq for which O0\mathcal{O}_0 is not maximal, we compute the endomorphism ring locally by computing a q-maximal order containing it and, when qpq \neq p, recovering a path to End(E)Zq\text{End}(E) \otimes \mathbb{Z}_q in the Bruhat-Tits tree. We use techniques of higher-dimensional isogenies to navigate towards the local endomorphism ring. Our algorithm improves on a previous algorithm which requires a restricted input and runs in subexponential time under certain heuristics. Page and Wesolowski give a probabilistic polynomial time algorithm to compute the endomorphism ring on input of a single non-scalar endomorphism. Beyond using techniques of higher-dimensional isogenies to divide endomorphisms by a scalar, our methods are completely different.

Keywords

Cite

@article{arxiv.2402.05059,
  title  = {Connecting Kani's Lemma and path-finding in the Bruhat-Tits tree to compute supersingular endomorphism rings},
  author = {Kirsten Eisentraeger and Gabrielle Scullard},
  journal= {arXiv preprint arXiv:2402.05059},
  year   = {2026}
}

Comments

33 pages. Revised and expanded; added an example to Section 8