Birch and Swinnerton-Dyer

An elliptic curve is one of the friendliest objects in number theory: the set of points satisfying an equation like $y^{2}$ = $x^{3}$ + ax + b. Draw it and you get a smooth, looping curve. The interesting question is not where the curve goes, but which of its points have rational coordinates — both x and y are ordinary fractions.

Here is the mystery. Some curves carry only a handful of rational points. Others carry infinitely many, all generated from just a few "starting" points by a beautiful addition law. The number of independent starting points you need is called the rank of the curve. Rank 0 means essentially no rational points; rank 1, 2, 3… means richer and richer families.

So: given a curve, how many independent rational points does it have? That single number is shockingly hard to pin down — and a million-dollar conjecture says the answer is hiding somewhere you would never expect.

Below is an elliptic curve plotted over the real numbers. The highlighted dots are its rational points — points whose coordinates are honest fractions. Choose a curve and watch how many appear. Then use the group law: pick two rational points, draw the line through them, and the third place it crosses the curve (reflected over the x-axis) is another rational point.

<p class="hint">{{hint}}</p>
<div class="curves">
  <button data-c="0" class="csel active" type="button">{{curve0}}</button>
  <button data-c="1" class="csel" type="button">{{curve1}}</button>
  <button data-c="2" class="csel" type="button">{{curve2}}</button>
</div>
<canvas id="plot" width="360" height="300"></canvas>
<div class="status" id="status">{{status_init}}</div>
<div class="btns">
  <button id="step" type="button">{{btn_step}}</button>
  <button id="reset" type="button" class="ghost">{{btn_reset}}</button>
</div>

* { box-sizing: border-box; }
body { font-family: system-ui, sans-serif; color: #222; margin: 0; }
.hint { font-size: .9rem; color: #444; margin: 0 0 .7rem; line-height: 1.45; }
.curves { display: flex; gap: .4rem; flex-wrap: wrap; margin-bottom: .5rem; }
.csel { font: 600 13px system-ui, sans-serif; padding: .35rem .6rem; border: 1px solid #cdd9e3;
        background: #e8eef3; color: #1d3557; border-radius: 8px; cursor: pointer; }
.csel.active { background: #1d3557; color: #fff; border-color: #1d3557; }
canvas { background: #fbfcfe; border: 1px solid #cdd9e3; border-radius: 8px; display: block; margin: .3rem 0; }
.status { font-size: .95rem; font-weight: 600; margin: .5rem 0; min-height: 1.4em; line-height: 1.4; }
.status.ok { color: #0a7d33; }
.status.bad { color: #c92f3c; }
.btns { display: flex; gap: .5rem; flex-wrap: wrap; }
button { font: 600 14px system-ui, sans-serif; padding: .45rem .9rem; border: 1px solid #1d3557;
         background: #1d3557; color: #fff; border-radius: 8px; cursor: pointer; }
button.ghost { background: #fff; color: #1d3557; }

// Code not found

Notice the pattern. A rank-0 curve runs out of points almost immediately — a few torsion points and nothing more. A rank-1 curve never runs out: keep adding a generator to itself and fresh rational points keep appearing forever. The conjecture of Birch and Swinnerton-Dyer claims this infinite-or-not behavior is mirrored exactly by a completely different object — the curve's L-function.

How hard is it to know the rank of a curve? Hard enough to be a Millennium Prize Problem, one of the seven $1,000,000 questions named by the Clay Mathematics Institute in 2000.

• The geometric side is the rank r: the number of independent rational points that generate all the others. It is what our demo gropes toward by adding points.
• The analytic side is an L-function L(E, s), built from how many solutions the curve has modulo each prime p. It packages all that local data into one analytic function of a complex variable s.
• The conjecture, stated by Bryan Birch and Peter Swinnerton-Dyer in 1965 from extensive computer experiments, says these two sides match exactly: the rank equals the order of vanishing of L(E, s) at s = 1. If L doesn't vanish there, rank 0; if it vanishes to order one, rank 1; and so on.
• Status: open. Only partial results are proved. Thanks to work by Coates–Wiles, Gross–Zagier, and Kolyvagin, the conjecture is known when the order of vanishing is 0 or 1 — but the general case, and the full refined formula with the mysterious Tate–Shafarevich group, remain unproven.

That is the punchline: a question as concrete as "how many rational points?" is conjecturally answered by an object from a totally different universe, and proving they truly agree is one of the deepest open problems in mathematics — a cousin in spirit to P vs NP, where a clean statement guards an enormous difficulty.

Elliptic curves are not an exotic curiosity — they sit at the center of modern mathematics and technology:

• Cryptography: elliptic-curve cryptography (ECC) secures messaging apps, TLS connections and cryptocurrencies, all built on the arithmetic of points on these curves.
• Fermat's Last Theorem: Andrew Wiles' 1994 proof ran entirely through elliptic curves and the modularity theorem — the same machinery that gives L-functions their meaning.
• The congruent number problem: deciding which integers are the area of a right triangle with rational sides reduces directly to the rank of an elliptic curve, so Birch–Swinnerton-Dyer would settle a question older than a thousand years.
• Computational number theory: ranking and tabulating curves drives huge databases like the LMFDB, where the conjecture is tested against millions of examples.

Understand why counting points is hard and you've met the heart of arithmetic geometry — the same field behind factoring and the security of the keys protecting your data.

The Birch and Swinnerton-Dyer conjecture hides a beautiful secret: the geometry of an elliptic curve — how many rational points it carries — is conjecturally written, letter for letter, in the analysis of its L-function at the single point s = 1. Counting points is concrete; the bridge to L-functions is profound.

So far we can build the bridge only at its low end, for rank 0 and rank 1. The full span has stood open since 1965, a $1,000,000 Millennium Prize still unclaimed. The next time a curve hands you point after rational point with no end in sight, remember — you are watching, in plain fractions, one of the deepest unproven truths in mathematics, much like P vs NP hiding behind an innocent question.