Pell equations can be solved using continued fractions. I have heard that some elliptic curves can be "solved" using continued fractions. Is this true?


Which Diophantine equations other than Pell equations can be solved for rational or integer points using continued fractions? If there are others, what are some good references?


Edit:


Professor Elkies has given an excellent response as to the role of continued fractions in solving general Diophantine equations including elliptic curves. What are some other methods to solve the Diophantine equations $$X^2 - \Delta Y^2 = 4 Z^3$$ and $$18 x y + x^2 y^2 - 4 x^3 - 4 y^3 - 27 = D z^2 ?$$



Which Diophantine equations can be solved using continued fractions?
[edited to insert paragraph on Cornacchia and point-counting]


Continued fractions, or (more-or-less) equivalently the Euclidean algorithm, can be used to find small integer solutions of linear Diophantine equations $ax+by=c$, and integer solutions of quadratic equations such as $x^2-Dy^2=\pm1$ ("Pell"). Continued fractions in themselves won't find rational points on elliptic curves, but there's a technique using Heegner points that calculates a close real approximation to a rational point, which is then recovered from a continued fraction — this is possible because the recovery problem amounts to finding a small integer solution of a linear Diophantine equation. My paper



> 
> Noam D. Elkies: Heegner point computations, *Lecture Notes in Computer Science* **877** (proceedings of ANTS-1, 5/94; L.M. Adleman and M.-D. Huang, eds.), 122-133.
> 
> 
> 


might have been the first to describe this approach.


Another application of continued fractions is [Cornacchia's algorithm](http://en.wikipedia.org/wiki/Cornacchia%27s_algorithm) to solve $x^2+Dy^2=m$ for large $m>0$ coprime to $D$, given $x/y \bmod m$ which is a square root of $-D \bmod m$. This has an application to *counting* points on elliptic curves $E\bmod p$ for $E$ such as $y^2 = x^3 + b$ or $y^2 = x^3 + ax$ for which the CM field ${\bf Q}(\sqrt{-D})$ is known: the count (including the point at infinity) is $p+1-t$ where $t^2+Du^2=4p$ for some integers $t$ and $u$, and this determines $t$ up to an ambiguity of at most $6$ possibilities that in practice is readily resolved. The necessary square root mod $p$ is readily found in *random* polynomial time, though it is a persistent embarrassment that we cannot extract square roots modulo a large prime in *deterministic* polynomial time without assuming something like the extended Riemann hypothesis. Indeed the application that Schoof gave to motivate [his polynomial-time algorithm](http://www.mat.uniroma2.it/~schoof/ctpts.pdf) to compute $t$ for any elliptic curve mod $p$ was to recover a square root of $-D \bmod p$ for small $D$ ! (Though this would never be done in practice because the exponent in Schoof's algorithm is much larger than for the randomized algorithm.) The reference for Schoof's paper is



> 
> René Schoof: Elliptic Curves over Finite Fields and the Computation of Square Roots $\bmod p$, *Math. Comp.* **44** (#170, April 1985), 483-494.
> 
> 
> 


A natural generalization of the Euclidean algorithm to higher dimensions is the LLL algorithm and other techniques for lattice basis reduction (LBR), which have found various other Diophantine uses, including some other techniques for finding rational points on elliptic curves; [another of my papers](http://arXiv.org/abs/math/0005139) describes some of these Diophantine applications of LBR.


