{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:27CY4PHSBCT3QWXKKZNRYQUQYP","short_pith_number":"pith:27CY4PHS","canonical_record":{"source":{"id":"2303.05036","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-09T05:00:17Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"7a1481ae8bcf8e04a5fb6f326adbf9fdbf358e83c838a7e80e3fa0e6ea846b68","abstract_canon_sha256":"a33fd45efbd6af680f4d0febc67bd038af650273e8a18b85938e3a374b8b3541"},"schema_version":"1.0"},"canonical_sha256":"d7c58e3cf208a7b85aea565b1c4290c3e0aa63ffcfe08133a9d601f274b5b9ef","source":{"kind":"arxiv","id":"2303.05036","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.05036","created_at":"2026-07-05T05:49:36Z"},{"alias_kind":"arxiv_version","alias_value":"2303.05036v1","created_at":"2026-07-05T05:49:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.05036","created_at":"2026-07-05T05:49:36Z"},{"alias_kind":"pith_short_12","alias_value":"27CY4PHSBCT3","created_at":"2026-07-05T05:49:36Z"},{"alias_kind":"pith_short_16","alias_value":"27CY4PHSBCT3QWXK","created_at":"2026-07-05T05:49:36Z"},{"alias_kind":"pith_short_8","alias_value":"27CY4PHS","created_at":"2026-07-05T05:49:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:27CY4PHSBCT3QWXKKZNRYQUQYP","target":"record","payload":{"canonical_record":{"source":{"id":"2303.05036","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-09T05:00:17Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"7a1481ae8bcf8e04a5fb6f326adbf9fdbf358e83c838a7e80e3fa0e6ea846b68","abstract_canon_sha256":"a33fd45efbd6af680f4d0febc67bd038af650273e8a18b85938e3a374b8b3541"},"schema_version":"1.0"},"canonical_sha256":"d7c58e3cf208a7b85aea565b1c4290c3e0aa63ffcfe08133a9d601f274b5b9ef","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:49:36.666306Z","signature_b64":"ZOJsmrVgVGfxNp1HwFk/ALdxC0FIzKZtkJ4vmWXKUV/nOwr14O1bJqrRkcPmBzpPvLChXbE53N3FaJ0C7uMoDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d7c58e3cf208a7b85aea565b1c4290c3e0aa63ffcfe08133a9d601f274b5b9ef","last_reissued_at":"2026-07-05T05:49:36.665944Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:49:36.665944Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.05036","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:49:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sdHx/r06qTD/rdVPJihMr+tzyF9tbV90+xgZWNe/0Bd74Wxal9g6z/AMRqqVH4f2ctY4nqBZajwARZ5byb3ECQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T20:14:57.018677Z"},"content_sha256":"1ae9538e0dcf8b0324e6a7c56e716925e724c870c80471d21e5086d44865ef6c","schema_version":"1.0","event_id":"sha256:1ae9538e0dcf8b0324e6a7c56e716925e724c870c80471d21e5086d44865ef6c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:27CY4PHSBCT3QWXKKZNRYQUQYP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Generative Model-Based Attack on Learnable Image Encryption for Privacy-Preserving Deep Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"AprilPyone MaungMaung, Hitoshi Kiya","submitted_at":"2023-03-09T05:00:17Z","abstract_excerpt":"In this paper, we propose a novel generative model-based attack on learnable image encryption methods proposed for privacy-preserving deep learning. Various learnable encryption methods have been studied to protect the sensitive visual information of plain images, and some of them have been investigated to be robust enough against all existing attacks. However, previous attacks on image encryption focus only on traditional cryptanalytic attacks or reverse translation models, so these attacks cannot recover any visual information if a block-scrambling encryption step, which effectively destroys"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.05036","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.05036/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:49:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/i0TtZTzCept3amF/FwbF+nv3phIizfvFZLjQX1tMeN6M+YV5B4JgkCWcP683xlrCVh46Hu8t6NZ5HI0NxoIAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T20:14:57.019233Z"},"content_sha256":"307b9332dfda6cfceed0efa5a24eee90117d80417fc511bd72a1775e7bce1e93","schema_version":"1.0","event_id":"sha256:307b9332dfda6cfceed0efa5a24eee90117d80417fc511bd72a1775e7bce1e93"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/27CY4PHSBCT3QWXKKZNRYQUQYP/bundle.json","state_url":"https://pith.science/pith/27CY4PHSBCT3QWXKKZNRYQUQYP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/27CY4PHSBCT3QWXKKZNRYQUQYP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T20:14:57Z","links":{"resolver":"https://pith.science/pith/27CY4PHSBCT3QWXKKZNRYQUQYP","bundle":"https://pith.science/pith/27CY4PHSBCT3QWXKKZNRYQUQYP/bundle.json","state":"https://pith.science/pith/27CY4PHSBCT3QWXKKZNRYQUQYP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/27CY4PHSBCT3QWXKKZNRYQUQYP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:27CY4PHSBCT3QWXKKZNRYQUQYP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a33fd45efbd6af680f4d0febc67bd038af650273e8a18b85938e3a374b8b3541","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-09T05:00:17Z","title_canon_sha256":"7a1481ae8bcf8e04a5fb6f326adbf9fdbf358e83c838a7e80e3fa0e6ea846b68"},"schema_version":"1.0","source":{"id":"2303.05036","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.05036","created_at":"2026-07-05T05:49:36Z"},{"alias_kind":"arxiv_version","alias_value":"2303.05036v1","created_at":"2026-07-05T05:49:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.05036","created_at":"2026-07-05T05:49:36Z"},{"alias_kind":"pith_short_12","alias_value":"27CY4PHSBCT3","created_at":"2026-07-05T05:49:36Z"},{"alias_kind":"pith_short_16","alias_value":"27CY4PHSBCT3QWXK","created_at":"2026-07-05T05:49:36Z"},{"alias_kind":"pith_short_8","alias_value":"27CY4PHS","created_at":"2026-07-05T05:49:36Z"}],"graph_snapshots":[{"event_id":"sha256:307b9332dfda6cfceed0efa5a24eee90117d80417fc511bd72a1775e7bce1e93","target":"graph","created_at":"2026-07-05T05:49:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.05036/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we propose a novel generative model-based attack on learnable image encryption methods proposed for privacy-preserving deep learning. Various learnable encryption methods have been studied to protect the sensitive visual information of plain images, and some of them have been investigated to be robust enough against all existing attacks. However, previous attacks on image encryption focus only on traditional cryptanalytic attacks or reverse translation models, so these attacks cannot recover any visual information if a block-scrambling encryption step, which effectively destroys","authors_text":"AprilPyone MaungMaung, Hitoshi Kiya","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-09T05:00:17Z","title":"Generative Model-Based Attack on Learnable Image Encryption for Privacy-Preserving Deep Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.05036","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1ae9538e0dcf8b0324e6a7c56e716925e724c870c80471d21e5086d44865ef6c","target":"record","created_at":"2026-07-05T05:49:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a33fd45efbd6af680f4d0febc67bd038af650273e8a18b85938e3a374b8b3541","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-09T05:00:17Z","title_canon_sha256":"7a1481ae8bcf8e04a5fb6f326adbf9fdbf358e83c838a7e80e3fa0e6ea846b68"},"schema_version":"1.0","source":{"id":"2303.05036","kind":"arxiv","version":1}},"canonical_sha256":"d7c58e3cf208a7b85aea565b1c4290c3e0aa63ffcfe08133a9d601f274b5b9ef","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d7c58e3cf208a7b85aea565b1c4290c3e0aa63ffcfe08133a9d601f274b5b9ef","first_computed_at":"2026-07-05T05:49:36.665944Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:49:36.665944Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZOJsmrVgVGfxNp1HwFk/ALdxC0FIzKZtkJ4vmWXKUV/nOwr14O1bJqrRkcPmBzpPvLChXbE53N3FaJ0C7uMoDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:49:36.666306Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.05036","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1ae9538e0dcf8b0324e6a7c56e716925e724c870c80471d21e5086d44865ef6c","sha256:307b9332dfda6cfceed0efa5a24eee90117d80417fc511bd72a1775e7bce1e93"],"state_sha256":"64d16a9437c71ce5d2f10934f4a54e3274cb2542f40958e4b048f6935c524806"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E7Re+cwxZyUiZCEUDNVThmNN1kQaNd7ob8y5T9lCS/R6Jz+TxWbwa2inn6yu4EFccZM7/vq+rOi4zJ72C5p1AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T20:14:57.026707Z","bundle_sha256":"fefc078a6cf606d22df8e8c6acd533f5f4e4490ca57163b6a6177e2ebc736975"}}