SUPERSINGULAR ZEROS OF DIVISOR POLYNOMIALS OF ELLIPTIC CURVES OF PRIME CONDUCTOR MATIJA KAZALICKI AND DANIEL KOHEN Abstract. For a prime number p we study the zeros modulo p of divisor polynomials of rational elliptic curves E of conductor p. Ono [8, p. 118] made the observation that these zeros of are often j-invariants of supersingular elliptic curves over Fp. We show that these supersingular zeros are in bijection with zeros modulo p of an associated quaternionic modular form vE . This allows us to prove that if the root number of E is −1 then all supersingular j-invariants of elliptic curves defined over Fp are zeros of the corresponding divisor polynomial. If the root number is 1 we study the discrepancy between rank 0 and higher rank elliptic curves, as in the latter case the amount of supersingular zeros in Fp seems to be larger. In order to partially explain this phenomenon, we conjecture that when E has positive rank the values of the coefficients of vE corresponding to supersingular elliptic curves defined over Fp are even. We prove this conjecture in the case when the discriminant of E is positive, and obtain several other results that are of independent interest. 1. Introduction Let E be a rational elliptic curve of prime conductor p. Denote by fE(τ) 2 S2(Γ0(p)) the newform associated to E by the Shimura-Taniyama correspondence. Serre [11, Theorem 11] showed that there is an isomorphism between modular forms modulo p of weight p + 1 and level 1 and modular forms modulo p of weight 2 and level p. More precisely he proved that fE(τ) ≡ FE(τ) (mod p), where Γ0(p) p−1 FE(τ) = Trace fE(τ) · (Ep−1(τ) − p Ep−1(pτ)) 2 Sp+1(SL2( )); SL2(Z) Z and Ep−1(τ) is the normalized Eisenstein series of weight p − 1. Given k 2 Z define 8 > 1 if k ≡ 0 mod 12; > > > 2 > E4(τ) E6(τ) if k ≡ 2 mod 12; > > > <> E4(τ) if k ≡ 4 mod 12; arXiv:1611.05623v1 [math.NT] 17 Nov 2016 E~k(τ) = > E6(τ) if k ≡ 6 mod 12; > > > 2 > E4(τ) if k ≡ 8 mod 12; > > > : E4(τ)E6(τ) if k ≡ 10 mod 12; where E4(τ) and E6(τ) are the classical Eisenstein series of weight 4 and 6 respectively. 2010 Mathematics Subject Classification. Primary: 11G18 , Secondary:11F11. Key words and phrases. Divisor polynomial, supersingular elliptic curves. MK acknowledges support from the QuantiXLie Center of Excellence. DK was partially supported by a CONICET doctoral fellowship. 1 2 MATIJA KAZALICKI AND DANIEL KOHEN Moreover, consider 8 k if k 6≡ 2 mod 12; < 12 m(k) = : k 12 − 1 if k ≡ 2 mod 12: ~ Given any g 2 Mk(SL2(Z)) we obtain a rational function F (g; x) which is characterized by the formula g(τ) = F~(g; j(τ)); m(k) ∆(τ) E~k(τ) where ∆ is the only weight 12 and level 1 cuspform and j is the classical j-invariant. In order to define a polynomial and not just a rational function, define 8 > 1 if k ≡ 0 mod 12; > > > 2 > x (x − 1728) if k ≡ 2 mod 12; > > > <> x if k ≡ 4 mod 12; hk(x) = > > x − 1728 if k ≡ 6 mod 12; > > > 2 > x if k ≡ 8 mod 12; > > :> x(x − 1728) if k ≡ 10 mod 12: The divisor polynomial is F (g; x) = hk(x)F~(g; x): Ono [8, p. 118] made the observation that the zeros of F (FE; x) mod p 2 Fp[x] (in Fp) are often supersingular j-invariants (i.e. j-invariants of supersingular elliptic curves over Fp), and asked for an explanation for this. For example, if E83 is the elliptic curve of conductor 83 given by 2 3 2 E83 : y + xy + y = x + x + x; then 18 2 15 3 12 FE83 (τ) ≡ ∆(τ)E4(τ) + 19∆(τ) E4(τ) + 21∆(τ) E4(τ) 4 9 5 6 6 3 + 58∆(τ) E4(τ) + 21∆(τ) E4(τ) + 60∆(τ) E4(τ) (mod 83): 3 Since j(τ) = E4(τ) =∆(τ), it follows that F (FE83 ; x) ≡ x(x + 15)(x + 16)(x + 33)(x + 55)(x + 66) (mod 83): In this case, the roots of F (FE83 ; x) in F83 are precisely the supersingular j-invariants that lie in F83. It is worth noting that the root number of E83 is −1. The behavior of the roots of the divisor polynomial is explained by the following theorem. Theorem 1.1. Let E=Q be an elliptic curve of prime conductor p with root number −1, and let F (FE; x) be the corresponding divisor polynomial. If j 2 Fp is a supersingular j-invariant mod p, then F (FE; j) ≡ 0 (mod p). SUPERSINGULAR ZEROS OF DIVISOR POLYNOMIALS OF ELLIPTIC CURVES OF PRIME CONDUCTOR 3 If the root number of E is 1, the supersingular zeros of divisor polynomials are harder to understand. Denote by sp the number of isomorphism classes of supersingular elliptic curves defined over Fp. Eichler proved that 8 1 h(−p) if p ≡ 1 (mod 4); <> 2 sp = 2h(−p) if p ≡ 3 (mod 8); :>h(−p) if p ≡ 7 (mod 8); p where h(−p) is the class number of the imaginary quadratic field Q( −p). See [4] for an excellent exposition of Eichler's work. Denote by Np(E) the number of Fp-supersingular zeros of the divisor polynomial F (FE; x), i.e. Np = #fj : j 2 Fp;F (FE; j) ≡ 0 mod p and j is supersingular j-invariantg: Figure 1 shows the graph of the function Np(E) where E ranges over all elliptic curves of root sp number 1 and conductor p where p < 10000. The elliptic curves of rank zero (158 of them) are colored in blue, while the elliptic curves of rank two (59 of them) are colored in red. Figure 1. Np for p < 10000. sp It would be interesting to understand this data. In particular, Questions. (1) Why are there "so many" Fp-supersingular zeros? (2) How can we explain the difference between rank 0 and rank 2 curves? (3) What about the outlying rank 0 curves (e.g. of conductor p = 4283 and p = 5303) with the "large" number of zeros? Remark. It seems that there is no obvious connection between the number of Fp2 -supersingular zeros of the divisor polynomial F (FE; x) and the rank of elliptic curve E. The key idea to study these questions is to show (following [13]) how to associate to FE a modular form vE on the quaternion algebra B over Q ramified at p and 1. Such modular form is a function on the (finite) set of isomorphism classes of supersingular elliptic curves over Fp. In order to explain this precisely we combine the expositions from [3] and [4]. 4 MATIJA KAZALICKI AND DANIEL KOHEN Let X0(p) be the curve over Spec Z that is a coarse moduli space for the Γ0(p)-moduli problem. The geometric fiber of X0(p) in characteristic p is the union of two rational curves meeting at n = g+1 ordinary double points: e1, e2,..., en (g is the arithmetic genus of the fibers of X0(p).) They are in bijective correspondence with the isomorphism classes of supersingular elliptic curves Ei=Fp. Denote by X the free Z-module of divisors supported on the ei. The action of Hecke correspondences on the set of ei induces an action on X . Explicitly, the action of the correspondence tm (m ≥ 1) is given by the transpose of the Brandt matrix B(m) n X tmei = Bij(m)ej: j=1 There is a correspondence between newforms of level p and weight 2 and modular forms for the P quaternion algebra B that preserves the action of the Hecke operators. Let vE = vE(ei)ei 2 X be P1 m an eigenvector for all tm corresponding to fE, i.e. tmvE = a(m)vE, where fE(τ) = m=1 a(m)q . We normalize vE (up to the sign) such that the greatest common divisor of all its entries is 1. We are now able to state the following crucial theorem. Theorem 1.2. Let j = j(Ei) be the j-invariant of the supersingular elliptic curve Ei. Then F (FE; j) ≡ 0 mod p () vE(ei) ≡ 0 mod p: This theorem allows us to give a more explicit description of the supersingular zeros of the divisor polynomial. Furthermore it enables us to obtain computational data in a much more efficient manner. The proof of Theorems 1.1 and 1.2 will be the main goal of Section 2. In order to prove them we will use both Serre's and Katz's theory of modular forms modulo p and the modular forms introduced in [13]. Now, let DE be the congruence number of fE, i.e. the largest integer such that there exists a weight two cusp for on Γ0(p), with integral coefficients, which is orthogonal to fE with respect to the Petersson inner product and congruent to fE modulo DE. The congruence number is closely related to deg φfE , the modular degree of fE, which is the degree of the minimal parametrization 0 0 0 φfE : X0(p) ! E of the strong Weil elliptic curve E =Q associated to fE (E is isogenous to E but they may not be equal). In general, deg φfE jDE, and if the conductor of E is prime, we have that deg φfE = DE (see [1]).