Study applies B+C Conjecture to YiJing Hash v2.0, indicating subgroup attacks are impossible.
v2 adds: Dickson subgroup security verification (new Section 2). Key new result: unipotent element of order p=127 found at walk step 55 in SL(2,F_127). By Dickson's classification theorem (1901), this proves the 8 Hou-Tian Ba-Gua generator matrices generate the ENTIRE group SL(2,F_127). Subgroup attack is impossible. Also clarifies: trace=2 anomaly (15,695 vs expected 124) in cold-start walk is a mixing-time artifact, not a subgroup signal. Warm-start (200 steps) reduces ratio to 1.06x (p=0.042). Updated B+C Conjecture now has 4 bounds: C0 (subgroup, proven), C1 (BSGS Omega(1,431), proven), C2 (Expander t>=1,370, conditional), B (Landauer 7.35e-19 J, P=NP independent). Supersedes v1: doi:10.5281/zenodo.20257246
No takes yet. Share an insight, caveat, or question.
Yao-Kai Kao (2026) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: