The Schoof–Elkies–Atkin algorithm (SEA) is an algorithm used for finding the order of or calculating the number of points on an elliptic curve over a finite field.
Its primary application is in elliptic curve cryptography.
The algorithm is an extension of Schoof's algorithm by Noam Elkies and A. O. L. Atkin to significantly improve its efficiency (under heuristic assumptions).
The Elkies-Atkin extension to Schoof's algorithm works by restricting the set of primes
considered to primes of a certain kind.
is called an Elkies prime if the characteristic equation:
Atkin showed how to combine information obtained from the Atkin primes with the information obtained from Elkies primes to produce an efficient algorithm, which came to be known as the Schoof–Elkies–Atkin algorithm.
The first problem to address is to determine whether a given prime is Elkies or Atkin.
In order to do so, we make use of modular polynomials
-isogenous elliptic curves in terms of their j-invariants (in practice alternative modular polynomials may also be used but for the same purpose).
is an Elkies prime, and we may compute a polynomial
whose roots correspond to points in the kernel of the
is a divisor of the corresponding division polynomial used in Schoof's algorithm, and it has significantly lower degree,
For Elkies primes, this allows one to compute the number of points on
more efficiently than in Schoof's algorithm.
In the case of an Atkin prime, we can gain some information from the factorization pattern of
, which constrains the possibilities for the number of points modulo
, but the asymptotic complexity of the algorithm depends entirely on the Elkies primes.
Provided there are sufficiently many small Elkies primes (on average, we expect half the primes
to be Elkies primes), this results in a reduction in the running time.
The resulting algorithm is probabilistic (of Las Vegas type), and its expected running time is, heuristically,
, making it more efficient in practice than Schoof's algorithm.
notation is a variant of big O notation that suppresses terms that are logarithmic in the main term of an expression.
Schoof–Elkies–Atkin algorithm is implemented in the PARI/GP computer algebra system in the GP function ellap.