Preprints A bound on the primes of bad reduction for CM curves of genus 3:We give a bound on the primes of stable bad reduction for curves of genus three of primitive CM type in terms of the CM order. The genus one case follows from the fact that CM elliptic curves are CM abelian varieties which have potential good reduction everywhere. However, for genus at least two, the curve can have bad reduction at a prime although the Jacobian has potential good reduction. Goren and Lauter gave the first bound in the genus two case. In the cases of hyperelliptic and Picard curves, our results imply bounds on primes appearing in the denominators of invariants and class polynomials, which are essential for algorithmic construction of curves with given characteristic polynomials over finite fields. Joint work with P.Kilicer, K.Lauter,E.Garcia,R.Newton and M.Streng
On the existence of ordinary and almost ordinary Prym varieties: We study the relationship between the prank of a curve and the pranks of the Prym varieties of its cyclic covers in characteristic p>0. For arbitrary p,g≥3 and 0≤f≤g, we generalize a result of Nakajima by proving that the Prym varieties of all unramified cyclic degree ℓ≠p covers of a generic curve X of genus g and prank f are ordinary. Furthermore, when p≥5, we prove that there exists a curve of genus g and prank f having an unramified degree ℓ=2 cover whose Prym is almost ordinary. Using work of Raynaud, we use these two theorems to prove results about the (non)intersection of the ℓtorsion group scheme with the theta divisor of the Jacobian of a generic curve X of genus g and prank f. The proofs involve geometric results about the prank stratification of the moduli space of Prym varieties. Joint work with R. Pries

Publications (Note that the actual published versions may be slightly different than the arXiv versions given below) RLWE Cryptography for the Number Theorist: In this paper, we survey the status of attacks on the ringand polynomial learning with errors problems (RLWE and PLWE). Recent work on the security of these problems gives rise to interesting questions about number fields. We extend these attacks and survey related open problems in number theory, including spectral distortion of an algebraic number and its relationship to Mahler measure, the monogenic property for the ring of integers of a number field, and the size of elements of small order modulo q. Joint work with Y. Elias, K. Lauter and K. Stange, Directions in Number Theory,Association for Women in Mathematics Series, Volume 3, Springer, 2016, DOI:10.1007/9783319309767 The distribution of F_qpoints on cyclic \ellcovers of genus g: We study fluctuations in the number of points of ℓcyclic covers of the projective line over the finite field F_q when q≡1modℓ is fixed and the genus tends to infinity. The distribution is given as a sum of q+1 i.i.d. random variables. This was settled for hyperelliptic curves by Kurlberg and Rudnick, while statistics were obtained for certain components of the moduli space of ℓcyclic covers by Bucur, David, Feigon and Lal\'{i}n. In this paper, we obtain statistics for the distribution of the number of points as the covers vary over the full moduli space of ℓcyclic covers of genus g. This is achieved by relating ℓcovers to cyclic function field extensions, and counting such extensions with prescribed ramification and splitting conditions at a finite number of primes. Joint work with A. Bucur, C. David, B. Feigon, N. Kaplan, M. Lal\'{i}n and M. M. Wood, International Math Research Notices, Vol. 2016, No. 14, pp. 4297–4340, DOI:10.1093/imrn/rnv279.
Provably weak instances of RingLWE: The ring and polynomial learning with errors problems (RingLWE and PolyLWE) have been proposed as hard problems to form the basis for cryptosystems, and various security reductions to hard lattice problems have been presented. So far these problems have been stated for general (number) rings but have only been closely examined for cyclotomic number rings. In this paper, we state and examine the RingLWE problem for general number rings and demonstrate provably weak instances of RingLWE. We construct an explicit family of number fields for which we have an efficient attack. We demonstrate the attack in both theory and practice, providing code and running times for the attack. The attack runs in time linear in q, where q is the modulus. Our attack is based on the attack on PolyLWE which was presented in [Eisentr\"agerHallgrenLauter]. We extend the EHLattack to apply to a larger class of number fields, and show how it applies to attack RingLWE for a heuristically large class of fields. Certain RingLWE instances can be transformed into PolyLWE instances without distorting the error too much, and thus provide the first weak instances of the RingLWE problem. We also provide additional examples of fields which are vulnerable to our attacks on PolyLWE, including powerof2 cyclotomic fields. Joint work with Y. Elias, K. Lauter and K. Stange, Advances in Cryptology  CRYPTO 2015, 6392, Springer (2015), DOI: 10.1007/9783662479896
Bad reduction of genus3 curves with complex multiplication: Let C be a smooth, absolutely irreducible genus3 curve over a number field M. Suppose that the Jacobian of C has complex multiplication by a sextic CMfield K. Suppose further that K contains no imaginary quadratic subfield. We give a bound on the primes v of M such that the stable reduction of C at v contains three irreducible components of genus 1. Joint with I.Bouw, J.Cooley, K. Lauter, E. Garcia,M. Manes and R. Newton. Research Directions in Number Theory, Association for Women in Mathematics Series, Volume 2, Springer, DOI: 10.1007/9783319179872
Local to Global Trace Questions and Twists of Genus One Curves: Let E be an elliptic curve defined over a number field F and K/F be a quadratic extension. For a point P in E(F) that is a local trace for every completion of K/F, we find necessary and sufficient conditions for P to lie in the image of the global trace map. These conditions can then be used to determine whether a quadratic twist of E, as a genus one curve, has rational points. In the case of quadratic twists of genus one modular curves X_0(N) with squarefree N, the existence of rational points corresponds to the existence of Qcurves of degree N defined over K. Joint work with M. Çiperiani, to appear in Proceedings of American Mathematical Society, DOI: http://dx.doi.org/10.1090/proc/12560
Unramified Brauer classes on cyclic covers of the projective plane: Let X > P^2 be a pcyclic cover branched over a smooth, connected curve C of degree divisible by p, defined over a separably closed field of primetop characteristic. We show that all (unramified) ptorsion Brauer classes on X that are fixed by Aut(X/P^2) arise as pullbacks of certain Brauer classes on k(P^2) that are unramified away from C and a fixed line L. We completely characterize these Brauer classes on k(P^2) and relate the kernel of the pullback map to the Picard group of X. If p = 2, we give a second construction, which works over any base field of characteristic not 2, that uses Clifford algebras arising from symmetric resolutions of line bundles on C to yield Azumaya representatives for the 2torsion Brauer classes on X. We show that, when p=2 and sqrt{1} is in our base field, both constructions give the same result.Joint work with with C. Ingalls, A. Obus and B. Viray, to appear in Proc. of Brauer groups and obstruction problems
Newton and Hodge polygons for a variant of the Kloosterman family: We study the padic valuations of roots of Lfunctions associated with certain families of exponential sums of Laurent polynomials in n variables over a finite field. The families we consider are reflection and Kloosterman variants of diagonal polynomials. Using decomposition theorems of Wan, we determine the Newton and Hodge polygons of a nondegenerate Laurent polynomial in one of these families. Joint work with R. Bellovin, S. Garthwaite, R. Pries, C. Williams and H. J.Zhu, to appear in in Women in Numbers 2: Research Directions in Number Theory Contemporary Mathematics, 606. AMS, 2013, 206 pp.
On Polyquadratic Twists of X_0(N): In this paper, we study the Q_prational points of the twist of X_0(N) by a polyquadratic field and give an algorithm to produce such twists which has Q_prational points for all primes p. Then we investigate violations of the Hasse Principle for these curves and give an asymptotic for the number of such violations. Finally, we study reasons of such violations, Journal of Number Theory, Volume 133, pp. 33253338, 2013
Points on Quadratic Twists of X_0(N): In this paper we give necessary and sufficient conditions for the existence of a Q_prational point on quadratic twists of X_0(N), whenever p is not simultaneously ramified in Q(sqrt{d}) and Q(sqrt{N}). The main theorem yields a population of curves which have local points everywhere but no points over Q; in several cases we show that this obstruction to the Hasse Principle is explained by the BrauerManin obstruction. Acta Arithmetica, Volume 152, Number 4, pages 323348, 2012
Semidirect product Galois covers of curves in characteristic p: Let k be an algebraically closed field with characteristic p>0. Raynaud showed in that the finite quotients of the algebraic fundamental group of the affine line over k is equal to the set of quasi pgroups. In this paper, we consider (Z/lZ)^b semidirect Z/pZ Galois covers of the affine line ramified only at infinity, where l is a prime different from p. We show that the minimal genus of such a cover depends only on l, p, and and the order a of l modulo p. Moreover, we show that the number of such minimal genus covers equals (p1)/a. The results of this paper, which are based on a project which took place in BANFF as a part of the conference WIN, are joint work with L. Gruendken, L. HallSeelig, B.H. Im, R. Pries and K. Stevenson. WIN—women in numbers, 201–210, Fields Inst. Commun., 60, Amer. Math. Soc., 2011.
Points on quadratic twists of the classical modular curve. Ph.D. Thesis–The University of Wisconsin  Madison. 2010. 73 pp. ISBN: 978112437082
