The Arithmetic of Elliptic Curves
《The Arithmetic of Elliptic Curves》 · 第 93–94 页 · Chapter III，Section 8「The Weil Pairing」，Definition and Proposition 8.1
This allows us to define a pairing $e_m:E[m]\times E[m]\to\mu_m$ by setting $e_m(S,T)=g(X+S)/g(X)$. […] The pairing that we have just defined is called the Weil $e_m$-pairing. It is bilinear, alternating, nondegenerate, and Galois invariant.