Hashing to elliptic curves of \(j=0\) and Mordell-Weil groups (Q2217273)

Consider the ordinary elliptic curve \(E_b : y_0^2 = x_0^3+b\) over the finite field \(\mathbb{F}_q\). Many protocols of pairing-based cryptography require the construction of a map \(h : \mathbb{F}_q \rightarrow E_b(\mathbb{F}_q)\). The method of the construction lead to the task of finding a rational \(\mathbb{F}_q\)-curve (and its proper \(\mathbb{F}_q\)-parametrization) on the Kummer surface \(\mathcal{K}_2\) of the direct product \(E_b\times E_b^{\prime}\), where \(E_b^{\prime}\) is the quadratic \(\mathbb{F}_q\)-twist of \(E_b\). The most actually used pairing-friendly curves \(E_b\) have the restriction that \(2\) does not divide \(|E_b(\mathbb{F}_q)|\) which makes the above task very difficult. Taking any element \(c \in (\mathbb{F}_q^*)^3\) such that \(c \not \in (\mathbb{F}_q^*)^2\), we obtain the equations \[E_b^{\prime} : cy_1^2 = x^3_1 -b, \ \ \ \mathcal{K}^2 : (x^3_1 -b)t^2 = c(x^3_0 -b)\] where \(t = y_0/y_1\). The base change \(t \mapsto t^3 \) provides us with the Kuwata surface \(\mathcal{K}_6\). In this paper, it is proved that the Mordell-Weil group \(MW(\mathcal{K}_6)\) is isomorphic to \(\mathbb{Z}_3\). Since the base change \(t \mapsto t^3 \) transforms an affine \(\mathbb{F}_q\)-section of \(\mathcal{K}_2\) to that of \(\mathcal{K}_6\), it follows that the elliptic \(\mathbb{F}_q\)-surface \(\mathcal{K}_2\) is not Jacobian, that is, it has no \(\mathbb{F}_q\)-section. Furthermore, the paper discuss what other Jacobian elliptic \(\mathbb{F}_q\)-fibrations can be potentially used to construct a rational \(\mathbb{F}_q\)-curve on the Kummer surface \(\mathcal{K}_2\).