{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3EFAYXZLNR7ZNKMNX7A3IK6YR2","short_pith_number":"pith:3EFAYXZL","canonical_record":{"source":{"id":"2509.09424","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-11T13:04:22Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"0c3d78ceff1f6ab594da015691a0a77187bce21c50b49d6b8b695f9f713f3df0","abstract_canon_sha256":"e4d0d02be67b0c3b22f0c4b66eb8ba358d4b1315a41cfe1709060eec1a04a259"},"schema_version":"1.0"},"canonical_sha256":"d90a0c5f2b6c7f96a98dbfc1b42bd88ea6b271a98e8be8fede4eb2d38f3a7913","source":{"kind":"arxiv","id":"2509.09424","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.09424","created_at":"2026-07-05T12:09:35Z"},{"alias_kind":"arxiv_version","alias_value":"2509.09424v1","created_at":"2026-07-05T12:09:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.09424","created_at":"2026-07-05T12:09:35Z"},{"alias_kind":"pith_short_12","alias_value":"3EFAYXZLNR7Z","created_at":"2026-07-05T12:09:35Z"},{"alias_kind":"pith_short_16","alias_value":"3EFAYXZLNR7ZNKMN","created_at":"2026-07-05T12:09:35Z"},{"alias_kind":"pith_short_8","alias_value":"3EFAYXZL","created_at":"2026-07-05T12:09:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3EFAYXZLNR7ZNKMNX7A3IK6YR2","target":"record","payload":{"canonical_record":{"source":{"id":"2509.09424","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-11T13:04:22Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"0c3d78ceff1f6ab594da015691a0a77187bce21c50b49d6b8b695f9f713f3df0","abstract_canon_sha256":"e4d0d02be67b0c3b22f0c4b66eb8ba358d4b1315a41cfe1709060eec1a04a259"},"schema_version":"1.0"},"canonical_sha256":"d90a0c5f2b6c7f96a98dbfc1b42bd88ea6b271a98e8be8fede4eb2d38f3a7913","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:09:35.882589Z","signature_b64":"LiiCKg9TIRfNooyuM6R+kAAe7SMgvwbqGcCnGbGqzlA3TLvmJRIVRH7KjsSWXjcU0WNTJ2MnyfCHpco9iH5HCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d90a0c5f2b6c7f96a98dbfc1b42bd88ea6b271a98e8be8fede4eb2d38f3a7913","last_reissued_at":"2026-07-05T12:09:35.882103Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:09:35.882103Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.09424","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cVEpgZR9f4E//BRTjfD2HW9Iv86TPKHKIw5LW+wBwWoK7OA/707btJgS/EDZ89aHdgR3W+uhXay7bNNFPWkrDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T17:15:13.714199Z"},"content_sha256":"66365f07f8514825eae0618f0677c3c6655c5a09f50323411705af3a83f87da8","schema_version":"1.0","event_id":"sha256:66365f07f8514825eae0618f0677c3c6655c5a09f50323411705af3a83f87da8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3EFAYXZLNR7ZNKMNX7A3IK6YR2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ENSI: Efficient Non-Interactive Secure Inference for Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Lin Liu, Maojiang Wang, Shaojing Fu, Xinwen Gao, Yuchuan Luo, Zhiyu He","submitted_at":"2025-09-11T13:04:22Z","abstract_excerpt":"Secure inference enables privacy-preserving machine learning by leveraging cryptographic protocols that support computations on sensitive user data without exposing it. However, integrating cryptographic protocols with large language models (LLMs) presents significant challenges, as the inherent complexity of these protocols, together with LLMs' massive parameter scale and sophisticated architectures, severely limits practical usability. In this work, we propose ENSI, a novel non-interactive secure inference framework for LLMs, based on the principle of co-designing the cryptographic protocols"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.09424","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.09424/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:09:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w3nPRWlq1bcLhTvYbRjM9cHiI1p5xGIg90EvRLA2e6p7q5RuwJ49hI8+r2dTFMhrglhHcVZVQ9F2dI128+lyCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T17:15:13.714856Z"},"content_sha256":"3e901a72e7d5255671549511800331053ed1ca9d913ccfccc2729b3e7f8d0098","schema_version":"1.0","event_id":"sha256:3e901a72e7d5255671549511800331053ed1ca9d913ccfccc2729b3e7f8d0098"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3EFAYXZLNR7ZNKMNX7A3IK6YR2/bundle.json","state_url":"https://pith.science/pith/3EFAYXZLNR7ZNKMNX7A3IK6YR2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3EFAYXZLNR7ZNKMNX7A3IK6YR2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T17:15:13Z","links":{"resolver":"https://pith.science/pith/3EFAYXZLNR7ZNKMNX7A3IK6YR2","bundle":"https://pith.science/pith/3EFAYXZLNR7ZNKMNX7A3IK6YR2/bundle.json","state":"https://pith.science/pith/3EFAYXZLNR7ZNKMNX7A3IK6YR2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3EFAYXZLNR7ZNKMNX7A3IK6YR2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3EFAYXZLNR7ZNKMNX7A3IK6YR2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e4d0d02be67b0c3b22f0c4b66eb8ba358d4b1315a41cfe1709060eec1a04a259","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-11T13:04:22Z","title_canon_sha256":"0c3d78ceff1f6ab594da015691a0a77187bce21c50b49d6b8b695f9f713f3df0"},"schema_version":"1.0","source":{"id":"2509.09424","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.09424","created_at":"2026-07-05T12:09:35Z"},{"alias_kind":"arxiv_version","alias_value":"2509.09424v1","created_at":"2026-07-05T12:09:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.09424","created_at":"2026-07-05T12:09:35Z"},{"alias_kind":"pith_short_12","alias_value":"3EFAYXZLNR7Z","created_at":"2026-07-05T12:09:35Z"},{"alias_kind":"pith_short_16","alias_value":"3EFAYXZLNR7ZNKMN","created_at":"2026-07-05T12:09:35Z"},{"alias_kind":"pith_short_8","alias_value":"3EFAYXZL","created_at":"2026-07-05T12:09:35Z"}],"graph_snapshots":[{"event_id":"sha256:3e901a72e7d5255671549511800331053ed1ca9d913ccfccc2729b3e7f8d0098","target":"graph","created_at":"2026-07-05T12:09:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.09424/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Secure inference enables privacy-preserving machine learning by leveraging cryptographic protocols that support computations on sensitive user data without exposing it. However, integrating cryptographic protocols with large language models (LLMs) presents significant challenges, as the inherent complexity of these protocols, together with LLMs' massive parameter scale and sophisticated architectures, severely limits practical usability. In this work, we propose ENSI, a novel non-interactive secure inference framework for LLMs, based on the principle of co-designing the cryptographic protocols","authors_text":"Lin Liu, Maojiang Wang, Shaojing Fu, Xinwen Gao, Yuchuan Luo, Zhiyu He","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-11T13:04:22Z","title":"ENSI: Efficient Non-Interactive Secure Inference for Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.09424","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:66365f07f8514825eae0618f0677c3c6655c5a09f50323411705af3a83f87da8","target":"record","created_at":"2026-07-05T12:09:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e4d0d02be67b0c3b22f0c4b66eb8ba358d4b1315a41cfe1709060eec1a04a259","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-11T13:04:22Z","title_canon_sha256":"0c3d78ceff1f6ab594da015691a0a77187bce21c50b49d6b8b695f9f713f3df0"},"schema_version":"1.0","source":{"id":"2509.09424","kind":"arxiv","version":1}},"canonical_sha256":"d90a0c5f2b6c7f96a98dbfc1b42bd88ea6b271a98e8be8fede4eb2d38f3a7913","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d90a0c5f2b6c7f96a98dbfc1b42bd88ea6b271a98e8be8fede4eb2d38f3a7913","first_computed_at":"2026-07-05T12:09:35.882103Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:09:35.882103Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LiiCKg9TIRfNooyuM6R+kAAe7SMgvwbqGcCnGbGqzlA3TLvmJRIVRH7KjsSWXjcU0WNTJ2MnyfCHpco9iH5HCw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:09:35.882589Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.09424","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:66365f07f8514825eae0618f0677c3c6655c5a09f50323411705af3a83f87da8","sha256:3e901a72e7d5255671549511800331053ed1ca9d913ccfccc2729b3e7f8d0098"],"state_sha256":"ad4e9f187611da74a050dc00d18e871c8e2893f1208937e16330df0440d866a1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IwIGaKi6IVywwVQEtSYGo78vE5sUZGeaO5bPbYPnkvaqcprRux7nTpPubgEaId4k8bGNMFT6hAWomqesoNNZCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T17:15:13.718745Z","bundle_sha256":"3fa5b171cac424e734952676098f89b6e8102764c685fec365f10d2eb83244bd"}}