In mathematics, an Artin–Schreier curve is a plane curve defined over an algebraically closed field of characteristic
p
by an equation
y
p
−
y
=
f
(
x
)
for some rational function
f
over that field.
One of the most important examples of such curves is hyperelliptic curves in characteristic 2, whose Jacobian varieties have been suggested for use in cryptography. It is common to write these curves in the form
y
2
+
h
(
x
)
y
=
f
(
x
)
for some polynomials
f
and
h
.
More generally, an Artin-Schreier curve defined over an algebraically closed field of characteristic
p
is a branched covering
C
→
P
1
of the projective line of degree
p
. Such a cover is necessarily cyclic, that is, the Galois group of the corresponding algebraic function field extension is the cyclic group
Z
/
p
Z
. In other words,
k
(
C
)
/
k
(
x
)
is an Artin–Schreier extension.
The fundamental theorem of Artin–Schreier theory implies that such a curve defined over a field
k
has an affine model
y
p
−
y
=
f
(
x
)
,
for some rational function
f
∈
k
(
x
)
that is not equal for
z
p
−
z
for any other rational function
z
. In other words, if we define polynomial
g
(
z
)
=
z
p
−
z
, then we require that
f
∈
k
(
x
)
∖
g
(
k
(
x
)
)
.
Let
C
:
y
p
−
y
=
f
(
x
)
be an Artin–Schreier curve. Rational function
f
over an algebraically closed field
k
has partial fraction decomposition
f
(
x
)
=
f
∞
(
x
)
+
∑
α
∈
B
′
f
α
(
1
x
−
α
)
for some finite set
B
′
of elements of
k
and corresponding non-constant polynomials
f
α
defined over
k
, and (possibly constant) polynomial
f
∞
. After a change of coordinates,
f
can be chosen so that the above polynomials have degrees coprime to
p
, and the same either holds for
f
∞
or it is zero. If that is the case, we define
B
=
{
B
′
if
f
∞
=
0
,
B
′
∪
{
∞
}
otherwise.
Then the set
B
⊂
P
1
(
k
)
is precisely the set of branch points of the covering
C
→
P
1
.
For example, Artin–Schreier curve
y
p
−
y
=
f
(
x
)
, where
f
is a polynomial, is ramified at a single point over the projective line.
Since the degree of the cover is a prime number, over each branching point
α
∈
B
lies a single ramification point
P
α
with corresponding ramification index equal to
e
(
P
α
)
=
(
p
−
1
)
(
deg
(
f
α
)
+
1
)
+
1.
Since,
p
does not divide
deg
(
f
α
)
, ramification indices
e
(
P
α
)
are not divisible by
p
either. Therefore, Riemann-Roch theorem may be used to compute that genus of an Artin–Schreier curve is given by
g
=
p
−
1
2
(
∑
α
∈
B
(
deg
(
f
α
)
+
1
)
−
2
)
.
For example, for a hyperelliptic curve defined over a field of characteristic
p
=
2
by equation
y
2
−
y
=
f
(
x
)
with
f
decomposing as above, we have
g
=
∑
α
∈
B
deg
(
f
α
)
+
1
2
−
1.
Artin–Schreier curves are a particular case of plane curves defined over an algebraically closed field
k
of characteristic
p
by an equation
g
(
y
p
)
=
f
(
x
)
for some separable polynomial
g
∈
k
[
x
]
and rational function
f
∈
k
(
x
)
∖
g
(
k
(
x
)
)
. Mapping
(
x
,
y
)
↦
x
yields a covering map from the curve
C
to the projective line
P
1
. Separability of defining polynomial
g
ensures separability of the corresponding function field extension
k
(
C
)
/
k
(
x
)
. If
g
(
y
p
)
=
a
m
y
p
m
+
a
m
−
1
y
p
m
−
1
+
⋯
+
a
1
y
p
+
a
0
, a change of variables can be found so that
a
m
=
a
1
=
1
and
a
0
=
0
. It has been shown that such curves can be built via a sequence of Artin-Schreier extension, that is, there exists a sequence of cyclic coverings of curves
C
→
C
m
−
1
→
⋯
→
C
0
=
P
1
,
each of degree
p
, starting with the projective line.
