{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:2GXOA67J4UPSAIOOMOOEY3DT3Z","short_pith_number":"pith:2GXOA67J","canonical_record":{"source":{"id":"2411.11624","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-18T14:56:56Z","cross_cats_sorted":["cs.AR"],"title_canon_sha256":"32251b07b006e678e572bb0c4569821ef15c9072e71db48e68d7b680f802aa2b","abstract_canon_sha256":"4f414e196af5d7198f2d9874d948c0841ff6861cbee6c075b642584bbeb63d88"},"schema_version":"1.0"},"canonical_sha256":"d1aee07be9e51f2021ce639c4c6c73de59852c3a308dc4b745c8eaf72766a1db","source":{"kind":"arxiv","id":"2411.11624","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.11624","created_at":"2026-07-05T09:54:05Z"},{"alias_kind":"arxiv_version","alias_value":"2411.11624v2","created_at":"2026-07-05T09:54:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.11624","created_at":"2026-07-05T09:54:05Z"},{"alias_kind":"pith_short_12","alias_value":"2GXOA67J4UPS","created_at":"2026-07-05T09:54:05Z"},{"alias_kind":"pith_short_16","alias_value":"2GXOA67J4UPSAIOO","created_at":"2026-07-05T09:54:05Z"},{"alias_kind":"pith_short_8","alias_value":"2GXOA67J","created_at":"2026-07-05T09:54:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:2GXOA67J4UPSAIOOMOOEY3DT3Z","target":"record","payload":{"canonical_record":{"source":{"id":"2411.11624","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-18T14:56:56Z","cross_cats_sorted":["cs.AR"],"title_canon_sha256":"32251b07b006e678e572bb0c4569821ef15c9072e71db48e68d7b680f802aa2b","abstract_canon_sha256":"4f414e196af5d7198f2d9874d948c0841ff6861cbee6c075b642584bbeb63d88"},"schema_version":"1.0"},"canonical_sha256":"d1aee07be9e51f2021ce639c4c6c73de59852c3a308dc4b745c8eaf72766a1db","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:54:05.814885Z","signature_b64":"Cjb2xv4CF0S1ydHG2f4sQc9ci6hH+bpSUfONyffbzq2x7sJEK1gSGj9al/7DUReP3M+LU3hNqsWdTZDC1jjgAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d1aee07be9e51f2021ce639c4c6c73de59852c3a308dc4b745c8eaf72766a1db","last_reissued_at":"2026-07-05T09:54:05.814400Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:54:05.814400Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.11624","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:54:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EYvuUrX5+eiVQ8sutvWbnVnzZ0EtdrM2soH9TQEZxKmXaz48lFBL0fh7GKSBTLmECnaxU9FlX0C+vmHmjdP8CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T23:06:30.488660Z"},"content_sha256":"0e78665f0bae137b5c4986fd04d92e4952d78bf7b391d5b893c06b50656e0276","schema_version":"1.0","event_id":"sha256:0e78665f0bae137b5c4986fd04d92e4952d78bf7b391d5b893c06b50656e0276"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:2GXOA67J4UPSAIOOMOOEY3DT3Z","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Teapot: Efficiently Uncovering Spectre Gadgets in COTS Binaries","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AR"],"primary_cat":"cs.CR","authors_text":"Fangzheng Lin, Hiroshi Sasaki, Zhongfa Wang","submitted_at":"2024-11-18T14:56:56Z","abstract_excerpt":"Speculative execution is crucial in enhancing modern processor performance but can introduce Spectre-type vulnerabilities that may leak sensitive information. Detecting Spectre gadgets from programs has been a research focus to enhance the analysis and understanding of Spectre attacks. However, one of the problems of existing approaches is that they rely on the presence of source code (or are impractical in terms of run-time performance and gadget detection ability).\n  This paper presents Teapot, the first Spectre gadget scanner that works on COTS binaries with comparable performance to compil"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.11624","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.11624/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:54:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CplGP4ukGc1+//O9IX4vwMNMxXWSLzy1nA6mfgcAitMuMN8IhxNTNQouJ4R2KZJYyzKRN0j5YXCg4fViGRCcBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T23:06:30.489032Z"},"content_sha256":"6ee59352944076d3315b23737aeb43fa58d0b7de4077e413e74ad7859fb61280","schema_version":"1.0","event_id":"sha256:6ee59352944076d3315b23737aeb43fa58d0b7de4077e413e74ad7859fb61280"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2GXOA67J4UPSAIOOMOOEY3DT3Z/bundle.json","state_url":"https://pith.science/pith/2GXOA67J4UPSAIOOMOOEY3DT3Z/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2GXOA67J4UPSAIOOMOOEY3DT3Z/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T23:06:30Z","links":{"resolver":"https://pith.science/pith/2GXOA67J4UPSAIOOMOOEY3DT3Z","bundle":"https://pith.science/pith/2GXOA67J4UPSAIOOMOOEY3DT3Z/bundle.json","state":"https://pith.science/pith/2GXOA67J4UPSAIOOMOOEY3DT3Z/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2GXOA67J4UPSAIOOMOOEY3DT3Z/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:2GXOA67J4UPSAIOOMOOEY3DT3Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4f414e196af5d7198f2d9874d948c0841ff6861cbee6c075b642584bbeb63d88","cross_cats_sorted":["cs.AR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-18T14:56:56Z","title_canon_sha256":"32251b07b006e678e572bb0c4569821ef15c9072e71db48e68d7b680f802aa2b"},"schema_version":"1.0","source":{"id":"2411.11624","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.11624","created_at":"2026-07-05T09:54:05Z"},{"alias_kind":"arxiv_version","alias_value":"2411.11624v2","created_at":"2026-07-05T09:54:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.11624","created_at":"2026-07-05T09:54:05Z"},{"alias_kind":"pith_short_12","alias_value":"2GXOA67J4UPS","created_at":"2026-07-05T09:54:05Z"},{"alias_kind":"pith_short_16","alias_value":"2GXOA67J4UPSAIOO","created_at":"2026-07-05T09:54:05Z"},{"alias_kind":"pith_short_8","alias_value":"2GXOA67J","created_at":"2026-07-05T09:54:05Z"}],"graph_snapshots":[{"event_id":"sha256:6ee59352944076d3315b23737aeb43fa58d0b7de4077e413e74ad7859fb61280","target":"graph","created_at":"2026-07-05T09:54:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.11624/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Speculative execution is crucial in enhancing modern processor performance but can introduce Spectre-type vulnerabilities that may leak sensitive information. Detecting Spectre gadgets from programs has been a research focus to enhance the analysis and understanding of Spectre attacks. However, one of the problems of existing approaches is that they rely on the presence of source code (or are impractical in terms of run-time performance and gadget detection ability).\n  This paper presents Teapot, the first Spectre gadget scanner that works on COTS binaries with comparable performance to compil","authors_text":"Fangzheng Lin, Hiroshi Sasaki, Zhongfa Wang","cross_cats":["cs.AR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-18T14:56:56Z","title":"Teapot: Efficiently Uncovering Spectre Gadgets in COTS Binaries"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.11624","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0e78665f0bae137b5c4986fd04d92e4952d78bf7b391d5b893c06b50656e0276","target":"record","created_at":"2026-07-05T09:54:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4f414e196af5d7198f2d9874d948c0841ff6861cbee6c075b642584bbeb63d88","cross_cats_sorted":["cs.AR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-18T14:56:56Z","title_canon_sha256":"32251b07b006e678e572bb0c4569821ef15c9072e71db48e68d7b680f802aa2b"},"schema_version":"1.0","source":{"id":"2411.11624","kind":"arxiv","version":2}},"canonical_sha256":"d1aee07be9e51f2021ce639c4c6c73de59852c3a308dc4b745c8eaf72766a1db","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d1aee07be9e51f2021ce639c4c6c73de59852c3a308dc4b745c8eaf72766a1db","first_computed_at":"2026-07-05T09:54:05.814400Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:54:05.814400Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Cjb2xv4CF0S1ydHG2f4sQc9ci6hH+bpSUfONyffbzq2x7sJEK1gSGj9al/7DUReP3M+LU3hNqsWdTZDC1jjgAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:54:05.814885Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.11624","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0e78665f0bae137b5c4986fd04d92e4952d78bf7b391d5b893c06b50656e0276","sha256:6ee59352944076d3315b23737aeb43fa58d0b7de4077e413e74ad7859fb61280"],"state_sha256":"eea0714727475740f6bdc2b3d60d55a1668b49ef044eb6650c484377cf9f0a4b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"36SyQkHE8c9Bd4vu3lzU9ZI5uWmIGwPkCWzzILFPFfALHbCLBCq52a0vua12yv2ILW8KTN/LNuKJUb1M/ORACw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T23:06:30.490931Z","bundle_sha256":"73fe62691be296c5a1837bf74c74e5317940807d8867534e494a300a3af9b3ee"}}