{"as_of":"2026-08-04T13:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6c7e973610df7f7fb8896f3bbce209e1ff7160ab4a5c9e76df88eae6ec8fd1ac","coverage":[{"denominator":90,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":90,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T02:53:23.964034Z","state":"measured"},{"denominator":90,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":90,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.17358/citation-record","integrity":"/paper/2606.17358/integrity","json":"/paper/2606.17358/citation-record.json","paper":"/paper/2606.17358"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"What was your prompt? a remote keylogging attack on{AI}assistants,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:8d35ad48adee64e2421ae0cc8c1e13ee10ce237672e3b09e242092083eb89771","observation_id":"c2529b09-2996-43fb-a720-3663e018f0f5","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Data mixture inference attack: Bpe tokenizers reveal training data compositions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:8bb63612e9af570dcb66492e331dfd6dcb4c8d96d3cdbc9f3b41293a48b2b5da","observation_id":"bce84501-6a83-4fca-8c65-167eccaee7bb","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.06738","last_updated":"2025-06-15T08:41:09Z","snapshot_observed_at":"2026-07-06T21:21:57.650402Z","submitted_at":"2025-05-10T19:06:37Z","title":"I Know What You Said: Unveiling Hardware Cache Side-Channels in Local Large Language Model Inference","version":3},"cited_work":{"arxiv_id":"2505.06738","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.06738","snapshot_observed_at":"2026-07-03T18:28:49.709218Z","title":"I know what you said: Unveiling hardware cache side-channels in local large language model inference","venue":null,"work_id":"adb36779-8d45-4c1e-905e-ef9baefe18a9","year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"cited_paper":"/paper/2505.06738","citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:2e8738702ef50fad7f62b361d2ef453d9b7fdc0a28d5f51b648092b1ab8be31f","observation_id":"f0640e7e-e07d-4507-814a-8e393e1767cc","resolution":{"observed_at":"2026-07-03T18:28:49.710928Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15431","last_updated":"2024-12-19T22:29:58Z","snapshot_observed_at":"2026-08-04T03:51:34.621059Z","submitted_at":"2024-12-19T22:29:58Z","title":"Time Will Tell: Timing Side Channels via Output Token Count in Large Language Models","version":1},"cited_work":{"arxiv_id":"2412.15431","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.15431","snapshot_observed_at":"2026-07-04T08:29:42.348258Z","title":"Time will tell: Timing side channels via output token count in large language models","venue":null,"work_id":"81c597df-3e2d-47d9-b063-d26e6ad439ca","year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"cited_paper":"/paper/2412.15431","citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:1b657c04f93a61689fd760c70ca6c47610402bb434568ca5b800eca13e6d5a20","observation_id":"efd4d034-f887-4f8b-b5de-cde5b86e16f0","resolution":{"observed_at":"2026-07-03T18:28:49.728735Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.06634","last_updated":"2024-07-09T17:44:00Z","snapshot_observed_at":"2026-07-06T17:42:33.242895Z","submitted_at":"2024-03-11T11:46:12Z","title":"Stealing Part of a Production Language Model","version":2},"cited_work":{"arxiv_id":"2403.06634","doi":"10.48550/arxiv.2403.06634","metadata_source":"arxiv_reference","pith_arxiv_id":"2403.06634","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Stealing part of a production language model.arXiv preprint arXiv:2403.06634","venue":null,"work_id":"0ab070c2-82e2-41d8-8d46-379236a08dbe","year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"cited_paper":"/paper/2403.06634","citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:9721abcf73f3dd866d803c01b14b7814af4348a55906e7375a4b6a82b5ef6afa","observation_id":"bf19d2af-e8e1-4d36-a17c-4fc5c33f01bb","resolution":{"observed_at":"2026-07-03T18:28:49.722869Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Amd secure encrypted virtualization (sev),","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:bebac99a4a84367ebb85e7921f190ff96eaa6687f5a173b09c486ae10d419515","observation_id":"1feb1053-ad8d-415e-8ae8-10be7a133999","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Strengthening vm isolation with integrity protection and more,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:d25930fa08b56abf47089f4eebe1523a5c0d5d5c2d95290aa7b7233294550f79","observation_id":"3a6fc0f1-0987-4ea7-a035-69800e41582c","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Intel trust domain extensions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:ad5e4becd6d8ed484e1c0a5eae334f94ddae902e541e0c5ed8af42eead2b8923","observation_id":"24538f50-167d-45d8-8938-3c50b6d49cba","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Architecture Specification: Intel Trust Domain Extensions (In- tel TDX) Module,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:892e5a512ddc66368971f88892e44fdacaab9a11faa72aaaf08fa1ddf0ce02ac","observation_id":"95a7d3ec-1816-4114-8654-78aebf489733","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"What is Azure confidential computing?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:6d2db83ede1906b61bc0187d280de3b0ddf82d2e565bf395376b5881d60c51e5","observation_id":"0cc5465d-2b0f-42d0-ac1a-b048f4990ec7","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Confidential Compute on NVIDIA Hopper H100,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:4d328e3372980fd072ecbfeee3cb0ff0678656eee9f28f6e86cc8512ed32ca8f","observation_id":"16622e1d-8dbe-4896-88a1-bdedafd0a447","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"AI security with confidential computing,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:f5e9fd185d278ba621b2a8e1540a417c11866df58ebcabe81637686c49bdaf91","observation_id":"cacfa882-cb68-4e24-8557-65d525106673","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Private processing technical whitepaper,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:c8ccb30ede9e2be72a2f37fdfe22a36af045224e36e6ddf2b2a095130d399ff9","observation_id":"8f761841-6c33-4b58-bf75-65fb2e42c0ec","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"How Confidential Accelerators can boost AI work- load security,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:7cd95c6dd0f85503c9824eb0a209106d07a2fc5ca4536337b063467a7f32193e","observation_id":"346719b2-6aa1-4228-b700-d82a138898dc","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"com/2089630","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T18:28:49.705181Z","title":"About Private Processing","venue":null,"work_id":"1c1fb1bb-8be3-4a65-810d-9f5605d829e1","year":null},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:e9a3b776ab8e1f80e77bc4d7302235ebdd84b1b59821db35503733e622894ca3","observation_id":"07cca715-9ca0-4bae-8af0-8d382aeb4718","resolution":{"observed_at":"2026-07-03T18:28:49.707474Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"{CIPHERLEAKS}: Breaking constant-time cryptography on{AMD}{SEV}via the ci- phertext side channel,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:65aad4129e4109d940df07eee60fc49bff9c434cebd759e0c469ac7b0e7f3f8b","observation_id":"6ed20636-b2d6-4e5d-b86b-0996d1e27c16","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"SEVered: Subverting AMD’s virtual machine encryption,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:f4ad9088a09a2e7c02f7487f03e155da7878919c10d0e62c4b3928d0f0b061e4","observation_id":"a5f87152-d867-4c8a-80cf-6b862bd8758c","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"The SEVerESt of them all: Inference attacks against secure virtual enclaves,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:3846c9bfc5963cc749612b556950b71c08b896d4bdafffade5085b2e2ab025da","observation_id":"ddf85308-7c0f-4a99-a799-d2f5a9c20cc4","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Flush+ reload: A high resolution, low noise, l3 cache side-channel attack","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:778b264121830bf73d5dc4f2c8ecd5dceac9d356272272469f91b55533787e66","observation_id":"8ca1ceb9-e42d-42ef-905d-76ca6543bd31","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Cachequote: Efficiently recovering long- term secrets of sgx epid via cache attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:289d9c098c79a3d1161b9d31af18817727e1caa6b7c112f1c459941707ea5316","observation_id":"f978ad68-66d6-4296-8424-1f2cae8750c4","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"SGX-Step: A practical attack framework for precise enclave execution control,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:c49667aadae0dc33e1d8e0d5de47afc8e4d48f00269a6d192d794604e8e72834","observation_id":"d75fc3cf-0404-42e7-86d1-9ab6f330841e","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Relocate-vote: Using sparsity information to exploit cipher- text side-channels,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:e38fd48b0dad89ee7a637372da1612b6a8cd4d4a30e836439d780bff7241ec2f","observation_id":"647541cb-e25b-4280-861a-406eef744ae2","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Hypertheft: Thieving model weights from tee-shielded neural net- works via ciphertext side channels,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:4bb78e6d25d57620746654035723210e5e77bfe0b25b71f8edaad5ac52f4da75","observation_id":"8037127c-cf58-4641-92ed-e02649a4ac82","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"A systematic look at ciphertext side channels on amd sev- snp,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:6293cdfad2e8e791e5a7af736ab6a2ba21ac2116547db6293b05463a2cdfe1f5","observation_id":"7fd80e4c-0096-4794-b0ef-3b4bffcbfcb9","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Gemma 3,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:5f08c2414bef0f88a3254fe4b2609d9d5bfc9ecb39488f73e2065922a46bc710","observation_id":"cd04297a-557b-4705-b491-f9dc55c189f4","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Llama 3 model card,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:a4e2c018eeca7a9f8f66b4431dca75edec720f820dd118da383c2dd17eb7bf29","observation_id":"e603100d-5cc3-4298-aa63-f2ab3b7a44a2","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14219","last_updated":"2024-08-30T21:17:17Z","snapshot_observed_at":"2026-07-06T18:03:47.096406Z","submitted_at":"2024-04-22T14:32:33Z","title":"Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phone","version":4},"cited_work":{"arxiv_id":"2404.14219","doi":"10.48550/arxiv.2404.14219","metadata_source":"pith","pith_arxiv_id":"2404.14219","snapshot_observed_at":"2026-07-10T13:57:06.708632Z","title":"Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phone","venue":"cs.CL","work_id":"feef9556-a016-493c-abd2-0c97a23a7ebf","year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"cited_paper":"/paper/2404.14219","citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:6ae4e29513fe7f5bef91cea2236077111e3af0ff208f769ece09a23438fb5b0a","observation_id":"3f053743-5a61-41ce-bbc9-0e71397b8df0","resolution":{"observed_at":"2026-07-03T18:28:49.725862Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.09388","last_updated":"2025-05-14T13:41:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-05-14T13:41:34Z","title":"Qwen3 Technical Report","version":1},"cited_work":{"arxiv_id":"2505.09388","doi":"10.1016/j.aiopen.2022.12","metadata_source":"pith","pith_arxiv_id":"2505.09388","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Qwen3 Technical Report","venue":"cs.CL","work_id":"25a4e30c-1232-48e7-9925-02fa12ba7c9e","year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"cited_paper":"/paper/2505.09388","citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:a4581d8ac9ff2c7d7f951cab99059e5afbc41a27505d12d65d9e5ca729bc19d9","observation_id":"0a0ac60a-7e62-46f3-a92d-8f6cc9a236cb","resolution":{"observed_at":"2026-07-03T18:28:49.720086Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Time will tell: Timing side channels via output token count,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:ffc84aab74691f46f9ae0e8f730bac6f011b4295f954079ae3ff0cd7a0a4a520","observation_id":"b6fa7ea4-16ee-4c08-896c-5c0ef14aac44","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Tdxray: Microarchitectural side-channel analysis of intel tdx for real-world workloads","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:c9a263232f118bf104c0e3c10f65202ff9c888de0680560e9869a4b2e93a6371","observation_id":"9b034d48-a911-4146-8451-66d4596aa520","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Laoram: A look ahead oram architecture for training large embedding tables,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:1dfe7062a6f8c90df0cb641f9a7e840f346654a17fb6e17fd8b947abd03bb450","observation_id":"30b02510-8195-491e-97f7-24f5e1ccf783","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2212.06264","last_updated":"2022-12-12T22:05:46Z","snapshot_observed_at":"2026-08-01T19:17:25.571033Z","submitted_at":"2022-12-12T22:05:46Z","title":"Data Leakage via Access Patterns of Sparse Features in Deep Learning-based Recommendation Systems","version":1},"cited_work":{"arxiv_id":"2212.06264","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2212.06264","snapshot_observed_at":"2026-07-03T18:28:49.712150Z","title":"Data leakage via access patterns of sparse features in deep learning-based recommendation systems,","venue":null,"work_id":"9788d6e9-0691-4f94-889b-9a81fffafca9","year":2022},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"cited_paper":"/paper/2212.06264","citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:a34f0669dd20aa3915fd4923eb3fc6b0b70d264465160936b2f23def479725ad","observation_id":"8637580d-bd0d-43a3-8913-1266623915a2","resolution":{"observed_at":"2026-07-03T18:28:49.714151Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Efficient memory side-channel protection for embedding generation in machine learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:300221ffaa4082774c30710e31c6552db9f5af583ee989e377a71609cbbf3867","observation_id":"20109cbb-fff1-43f8-8d54-a1f1bb495935","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"3551.233553","doi":"10.1145/233551.233553","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Software protection and simulation on oblivious rams,","venue":null,"work_id":"122adaed-e5b4-4c4e-81a4-f9d21aa85cc9","year":1996},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:2a08b851710d871a2fda0d82b25a33d014a01723aa7f3295030b813d32ad5ebd","observation_id":"2d9130da-d64a-4ca5-9d53-881bc8b26ed2","resolution":{"observed_at":"2026-06-27T03:00:24.759398Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Path oram: An extremely simple oblivious ram protocol,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:71bb95d6f04e4d98ca993822a928d5752a4aa998afd9edc93b46143eeb068e0f","observation_id":"842d685d-98d7-43a3-952a-ce449cc1a037","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Constants count: Practical improvements to oblivious RAM,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:84761b99379b16d2051b84a845c0f9945761208f7c29d7f074165a184679f4c0","observation_id":"2d087a0a-af8e-4492-8df6-b765d0c7a99e","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"AMD memory encryption,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:a27ac26be0a60c58f8c753af4cdee89bb68698a9c94697b1a841e81040c37603","observation_id":"109813d3-4ba5-4815-a590-c24af9b59873","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Intel Hardware Shield- Intel Total Memory Encryption,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:609c1dab2a05eba6ff4486770322d26c477f84226ededdea52a3a7c611899a37","observation_id":"85c54b9d-763b-46f3-b9b9-b6328de0ae1f","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Intel trust domain extensions whitepaper,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:8afa868e735c08b1997049b2bbc4bfb77db1f9cf6a69ffdb8aec7c4e2cb98866","observation_id":"5cb793d5-da7b-430f-9cea-42e2b885eb9e","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"SEV API version 0.22,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:17d292629aba221f0fc7c803e9b726df149a5ee9eb7ad4a71f0924a9d8434397","observation_id":"838a61d9-be10-4176-9607-4266fd9dad07","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"ARM CCA Security Model 1.0,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:2046a4e0e2680983556f70dc0da8f196381dad87897edb18465dc80ae455cdfb","observation_id":"ef3ca0a5-ca8b-43cb-8853-62a33601a6f5","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Intel SGX explained","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:30e3fe835557ea481241555959a78486bef719f76ffbff5a6eaf6b3273edd032","observation_id":"10e3ebf7-2e84-4b51-bd10-369966b4f66c","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"AMD64 architecture programmer’s manual volume 2: System programming,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:c6b0b9bec84fa7c67d580f40741fb4a895756530a204a1e25b273a53c370bf4f","observation_id":"d7effe26-468c-48ec-9b1b-01c07b2799df","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Upcoming x86 technologies for malicious hyper- visor protection,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:e59eaeecf7e666aa8febc4f917cb5d3bf134dae4f1831dc32912d028fac5829d","observation_id":"6852ee4a-9132-4135-9182-65dc2bde5cc7","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Protecting VM register state with SEV-ES,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:e275ef74bf24fcdc7d9bc7e5092b7702c5edca9927ef3d50ff72e15a63582d6b","observation_id":"b24ea68e-51c3-4dc2-86b4-3e1ef2427cee","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"NVIDIA Attestation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:9158c34ec944898b347b5e53c736f3dd23fc157aa484dddcd52ea491f3b5f4ef","observation_id":"e72af637-40f4-4e22-ab02-dc5b409b8e62","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Private processing for whatsapp: Tech- nical whitepaper,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:3fb9db1895f038a4aaa461c3adabe2d32283b4defdbec68952fe57b5e0ce5f20","observation_id":"222dcc54-ab90-4437-922f-145661bc3b62","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"azure-ai-confidential-inferencing-technical-deep-dive/4253150","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-03T18:28:49.701822Z","title":"Azure AI Confidential Inferenc- ing: Technical Deep-Dive,","venue":null,"work_id":"7433d4aa-8588-4595-8481-484f57c1adbf","year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:619c19b5990d3fe0e76a53916aca06cf2c6ce850816e6c324e1c85cd8f6f07f3","observation_id":"8e617536-b17f-4332-a395-d9f6661d6161","resolution":{"observed_at":"2026-07-03T18:28:49.703948Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"(2023) Blindai: Confidential ai deployment with trusted execution environments","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:8aa4eca1d48d69a8cc76c1fb257b504f50fb85f548b968e3d864b046539cf471","observation_id":"efcd5844-b724-45a9-a004-0826770399ff","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"(2024) Blindllama: Zero-trust confidential ai for llms","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:6b912285fdc124b9de094c9f5fe768fbce251db2695bed4d8c520cdfb49f9221","observation_id":"651eac84-9244-48d6-be59-d1e2e49a90bc","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"(2024, Jul.) Continuum: The first confidential llm platform to revolutionize secure, privacy-preserving ai with nvidia h100 gpus","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:2d5209766badbe5ab5cbdad4e107fa7d27bfd7639535ddb20058ed33b51a9408","observation_id":"91c506ce-c18a-4a6f-9fa6-eb7956b35311","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Neural machine translation of rare words with subword units,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:daee1072b33b55b8a9bdb93b24a12df660afd625e4f4d857d3b61fec8d0f4c4e","observation_id":"115b8636-7aee-4efa-b99e-83bc9790a117","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1609.08144","last_updated":"2016-10-08T19:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-09-26T19:59:55Z","title":"Google's Neural Machine Translation System: Bridging the Gap between Human and Machine Translation","version":2},"cited_work":{"arxiv_id":"1609.08144","doi":"10.18653/v1/2021.eacl-main.163","metadata_source":"pith","pith_arxiv_id":"1609.08144","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Google's Neural Machine Translation System: Bridging the Gap between Human and Machine Translation","venue":"cs.CL","work_id":"e294e5a1-5dd2-44a0-b348-adbd62fe1916","year":2016},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"cited_paper":"/paper/1609.08144","citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:51a55064ab1e71b4cdfff7ac2a79e4c6563ca43946a9a47a8843406247bfb04a","observation_id":"06e243e2-c91c-434d-8a46-88a40afad0de","resolution":{"observed_at":"2026-07-03T18:28:49.732086Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1808.06226","last_updated":"2018-08-19T16:49:06Z","snapshot_observed_at":"2026-07-06T06:56:20.935388Z","submitted_at":"2018-08-19T16:49:06Z","title":"SentencePiece: A simple and language independent subword tokenizer and detokenizer for Neural Text Processing","version":1},"cited_work":{"arxiv_id":"1808.06226","doi":"10.18653/v1/d18-2012","metadata_source":"doi_reference","pith_arxiv_id":"1808.06226","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Sentencepiece: A simple and language independent subword tokenizer and detokenizer for neural text processing","venue":"cs.CL","work_id":"81a6320b-c2e1-4d74-a03e-9e1ff6bbed8d","year":2018},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"cited_paper":"/paper/1808.06226","citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:3a90afb28656e39552e5b79ba53f581e451ad5171cdb8d0c235c10c2fbb147b8","observation_id":"a7047c0a-050d-49ef-9fd1-31ab8196aa69","resolution":{"observed_at":"2026-07-03T18:28:49.717093Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-07-11T12:19:12.876508+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T12:19:12.876508+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Huggingface’s tokenizers,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:43bd3e807d7c7c385c7febbb88185a54b5e8c04f41f2e8e8be74ebc6ec5b1270","observation_id":"ba4dd95a-1ade-4a6f-b56f-74352c9c937e","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Nvidia confidential computing,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:846097698f633d9c48cb22684e45a716b84c3fdce84a010694d010cbefccf0ab","observation_id":"f2d6fbd6-41ca-4fc2-b747-dcdd26f8acbf","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Wiretap: Breaking server sgx via dram bus inter- position,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:e0fb1d3a3ea9e1abe25b1b53b714a8babc7b60a6922463f1546b1730a7a07c67","observation_id":"f5e69f26-8eca-40a2-8884-05058e0780a2","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Badram: Practical memory aliasing attacks on trusted execution environments,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:01be2bc4c5a7f9e5ef28e10f63b79aec481ab3d49a35279f09d63b30a7bc395f","observation_id":"c6ada568-4c5e-45ed-bf37-944eca726527","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Pageoram: An efficient dram page aware oram strategy,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:97110a4f33fc792f65a61e82d0997d28403eb165dcb934ae35e58711548c9cc8","observation_id":"48724908-1b19-466c-8c17-221dcb44b350","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"nano-vllm,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:60dd4cb0e73b8fa73d113a65816f48bb20f053fc9a32211100474498be4d003d","observation_id":"5ae95182-03b4-469c-ad70-7df378c3adc5","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Cache attacks on intel sgx,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:70b0d6933afbc8dbf29c4684dc014455fd40e3fe1e4dc59f569383c248f797e2","observation_id":"2edf8a98-44f0-49a2-8432-1070260edb15","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Platypus: Software-based power side-channel attacks on x86,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:33616f1bda877aedd65e6fb1da06b683c12c26ae631bda39849482febc522351","observation_id":"7442dfc8-26b2-4ec6-8ea3-686071dde995","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Software grand exposure:{SGX}cache attacks are practical,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:8ab9b774789942b8fbf9587d76559dee4f68f88ef129f74f65da06451b10a124","observation_id":"a06b2ea4-a1dc-4a7d-a57a-81e6629bbe29","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Cachequote: Efficiently recovering long- term secrets of sgx epid via cache attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:8f5f242452123cb9230f448c4e2c361a9ec2eb6a786ea1279134460f669b288c","observation_id":"1c8cc9ed-0516-4bb3-9afc-9c8d3721e0fa","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Cachezoom: How sgx amplifies the power of cache attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:11c217247e8ad52c893444ad0c6abddadbfb5e4e417321a27bd1a2995163650c","observation_id":"bed1d3c2-a783-4d08-bcc3-35d7b2dc9e5b","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Malware guard extension: Using sgx to conceal cache attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:b218ce76e56c50270b89d1f7b29f9b5216fae4d26db661d07aa1b08a771d6544","observation_id":"ba801357-5f4b-4a17-9a3e-150040b611f2","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Nemesis: Studying mi- croarchitectural timing leaks in rudimentary cpu interrupt logic,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:de7bff104bc385c84d05ac1fc713fa411bbc51b72a3d39a0d90fe5dc16356f39","observation_id":"7dce75fa-5f8f-4fbd-96a8-ad92cc4aff37","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Private in- formation retrieval,","venue":null,"work_id":null,"year":1998},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:0caa7085646200c07497cb7bd25f03a7cc257d4f53e796c53d06a7a13f68d03e","observation_id":"c498c5f9-c434-477d-8b93-e28eae932fe6","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Replication is not needed: Single database, computationally-private information retrieval,","venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:92472e199705c8fcd6192070d194047248874a37fe3cc3dcdd2bdfb555fdf1e4","observation_id":"46c8c6ca-5c57-4721-a1da-7b293e53b36f","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Oblix: An efficient oblivious search index,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:ae240aef18af0f492cd962c0db5f2efc1a8b7d9c242cca054ba503eec4c2ea16","observation_id":"2c8caecf-d94c-445e-99ad-f54377038a51","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"{EnigMap}:{External-Memory} oblivious map for secure enclaves,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:5d66b621728263b0bb045ca91b4d73b5d88e7332dea949cefc939c9bd1cbb26b","observation_id":"fa3cc4f7-748e-43aa-a6ef-040ff5610f94","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Design space exploration and optimization of path oblivious ram in secure processors,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:0944e0653e2fc6c4b48164b65f58fc8c1e0270c9df9dd16cf04d3df01632c1f6","observation_id":"ceac7052-69e5-414d-ab71-e9c4445fb2a5","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Constants count: Practical improvements to oblivious {RAM},","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:a8703bdd3f4ad611c5054ea3c056f2f426589a9090fc6dbeb7c18aa506a6eba7","observation_id":"997a5978-45f0-4e23-9ecc-ceadc683aa4f","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Ir-oram: Path access type based memory intensity reduction for path-oram,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:a1a16c4e5818f626b92e14d08d96405801be4007146a92be8e4eaa4e2b372b7c","observation_id":"f4811578-ca6b-40fc-a320-14fc5317297f","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Ep-oram: efficient nvm- friendly path eviction for ring oram in hybrid memory,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:ec173586365cfa31829018e7044b4e3b057d19d9d2035fb0f16337e2e36f430a","observation_id":"a27f03ab-65e6-42c4-88ea-aed3614a22ba","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Ab-oram: Constructing adjustable buckets for space reduction in ring oram,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:196f5c9f2ce9169840e337631f9d62cb268dcf369b72c568b903b5bd30d0d829","observation_id":"35b7d540-cc46-4425-9143-2a8663c9b77e","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Ps-oram: Efficient crash consistency support for oblivious ram on nvm,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:3324cab0ce34ea065265332d2586cfb21d49678197f76c075c631ce71fada0e1","observation_id":"6db6dfd5-b922-497a-8491-88ecac113fea","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"H2oram: Low response latency optimized oram for hybrid memory systems,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:1ed6859b33ec8e6a3b3c97d61f221a31d61cc6e9f19329831e30ce0a85c49a54","observation_id":"43c72957-aca3-4937-be4e-df28e4a4bb69","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Multi-range supported oblivious ram for efficient block data retrieval,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:5d305db2d428f8158679d0548723cefb71ee71bfaed7778a5e966edc4c665bf1","observation_id":"ac547961-38fa-454a-be35-4f0a07a18f5c","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Streamline ring oram accesses through spatial and temporal op- timization,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:74a1eed76e4f6584c6187c28252fdf9a5204e6bc025e4520de7140f99fcc2b4e","observation_id":"e4cd1889-74dc-4cfa-8b88-f37094d34d85","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Optorama: optimal oblivious ram,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:02da59934cfb5ebe13d6370f7d1d75b4415d6957380c715bdfbbe336d7b90e2b","observation_id":"27483c07-eee9-4e12-bbca-9e741032c31a","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Zerotrace: Oblivious memory primitives from intel sgx,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:385924f395e9197961f2ea2750f90811f6ecb40047dccb891e9b21a0748cb235","observation_id":"b1cd8a15-860d-4f4e-8721-021bd337cb16","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Obliviate: A data oblivious filesystem for intel sgx","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:802be24a9ea57fcbe1a6c942d2d5ce2d359e6cc933f38780eeb1d8b8feb3bf1b","observation_id":"c7a4e97d-0b19-4cb6-8b1b-4a7bcf392d71","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Obscuro: A bitcoin mixer using trusted execution environments,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:250afcade877a7aa9b0555a23dd040b4d615b784057916ecf03bbf348f2df858","observation_id":"97cd6019-8d7b-4846-9232-c13a3a7da323","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"{H2O2RAM}: A{High-Performance}hierarchical doubly oblivious {RAM},","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:cfe42775ec2e854792f878c89675bc6da0a41c84d4a42ecd6c884acd0256a0c5","observation_id":"d4c353e1-7388-4fcb-95f2-a7979ecf6b68","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Intel software guard extensions: Epid provisioning and attestation services,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:630e114aca92155694bd80bd4ca27ff72415dcbf65c07318e8003d4e3ead537d","observation_id":"486d6a4b-7205-4b2b-9314-9f8bf22965a7","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Pro-oram: Constant latency read-only oblivious ram,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:bf272e64643cb32e00cef9c1deefd4f76c2a6db213cc7ff4da4634d9e5fffa49","observation_id":"e3e2fbca-2a78-4a3e-a3a9-b7bf379c2573","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Menhir: an oblivious database with protection against access and volume pattern leakage,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:e41c49530fe728059b76bc482ecb127e4aaceb4fc47eee644654c56b9f17984b","observation_id":"af397144-b02f-4e97-922c-a34de0305876","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Obelix: Mitigating side-channels through dynamic obfuscation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:eede65e83443e6d2c957eaa2662c7b18d3ce81bfb99f9a136fe8336c7c700e97","observation_id":"1d34a9a7-f1fe-405d-bbec-bfc37e7dd8dc","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T02:53:23.964034Z","title":"Sorting networks and their applications,","venue":null,"work_id":null,"year":1968},"citing_paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM","version":2},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-06-27T02:53:23.964034Z"},"links":{"citing_paper":"/paper/2606.17358"},"observation_digest":"sha256:0d10b45fee9c46bba779057d9302de584f492626b14aa66ee8d81af0aeef2d2f","observation_id":"d326cb97-941b-4309-9cd1-da686cff6881","resolution":{"observed_at":"2026-06-27T02:53:23.964034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.17358","last_updated":"2026-06-23T01:32:01Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-01T20:32:13.245306Z","submitted_at":"2026-06-15T23:21:32Z","title":"OTRO: Oblivious Tokenization Path with Square-Root ORAM"},"reference_resolution":{"displayed":90,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":79,"verified_exact":11,"verified_fuzzy":0},"total_outbound_references":90},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 90 of 90 outbound references and 0 inbound Pith citation observations for arXiv:2606.17358."}