{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3LM6SJDEVVONUB773N4ZYIYDIA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fa09d4054f68a1487d067c0d38d6b2ea77b411d2fee4f7b09fb9f3d3da3cd6d5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T17:57:36Z","title_canon_sha256":"ee844755a547ddf29d2cde09ca731d4f8251d615b08f44b0f790d86f95ee8200"},"schema_version":"1.0","source":{"id":"2407.16694","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.16694","created_at":"2026-07-05T08:47:36Z"},{"alias_kind":"arxiv_version","alias_value":"2407.16694v1","created_at":"2026-07-05T08:47:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.16694","created_at":"2026-07-05T08:47:36Z"},{"alias_kind":"pith_short_12","alias_value":"3LM6SJDEVVON","created_at":"2026-07-05T08:47:36Z"},{"alias_kind":"pith_short_16","alias_value":"3LM6SJDEVVONUB77","created_at":"2026-07-05T08:47:36Z"},{"alias_kind":"pith_short_8","alias_value":"3LM6SJDE","created_at":"2026-07-05T08:47:36Z"}],"graph_snapshots":[{"event_id":"sha256:9cf6d7d455117020d240e98edd57f8eca9a80f76ae2cf19db3f1b36a1ca5c0ae","target":"graph","created_at":"2026-07-05T08:47:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.16694/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The Android ecosystem relies on either TrustZone (e.g., OP-TEE, QTEE, Trusty) or trusted hypervisors (pKVM, Gunyah) to isolate security-sensitive services from malicious apps and Android bugs. TrustZone allows any secure world code to access the normal world that runs Android. Similarly, a trusted hypervisor has full access to Android running in one VM and security services in other VMs. In this paper, we motivate the need for mutual isolation, wherein Android, hypervisors, and the secure world are isolated from each other. Then, we propose a sandboxed service abstraction, such that a sandboxe","authors_text":"Andrin Bertschi, Mark Kuhne, Nicolas Dutly, Shweta Shinde, Srdjan Capkun, Supraja Sridhara","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T17:57:36Z","title":"Aster: Fixing the Android TEE Ecosystem with Arm CCA"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.16694","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a2b0e089cd8db31d0b5ed0948fa58b5fe528f03bf6b2b8bf163bc557206163b6","target":"record","created_at":"2026-07-05T08:47:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fa09d4054f68a1487d067c0d38d6b2ea77b411d2fee4f7b09fb9f3d3da3cd6d5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-23T17:57:36Z","title_canon_sha256":"ee844755a547ddf29d2cde09ca731d4f8251d615b08f44b0f790d86f95ee8200"},"schema_version":"1.0","source":{"id":"2407.16694","kind":"arxiv","version":1}},"canonical_sha256":"dad9e92464ad5cda07ffdb799c230340107588e4c652f816d6d8eb0f30909566","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dad9e92464ad5cda07ffdb799c230340107588e4c652f816d6d8eb0f30909566","first_computed_at":"2026-07-05T08:47:36.990659Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:47:36.990659Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7cPQNsLsXo4q+HlA5uMJKk/gGd0iPO+xIUiQrUulPtNSxf31dkBOI2gzWquCPEnISIEMKMsIi5+pnsjnj7iDCA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:47:36.991161Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.16694","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a2b0e089cd8db31d0b5ed0948fa58b5fe528f03bf6b2b8bf163bc557206163b6","sha256:9cf6d7d455117020d240e98edd57f8eca9a80f76ae2cf19db3f1b36a1ca5c0ae"],"state_sha256":"fb0d0b382c9f7ec90de9488f44debce31f6fbdae48a5a45cc09cf9bb6a00b8e9"}