{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:4DKMQK2SD4PPRHSQ7ILJVAYFE3","short_pith_number":"pith:4DKMQK2S","canonical_record":{"source":{"id":"2105.00334","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-01T19:33:28Z","cross_cats_sorted":["cs.AR","cs.LG"],"title_canon_sha256":"32ddfd6b19f7c0fbf91e944ca7cc2457a1a0f5a848dff234e42c996969e08c65","abstract_canon_sha256":"f52d05f0b7e4ebc86f9a1fd97c9d0e809a7117df2e324b79509c267f96784e3d"},"schema_version":"1.0"},"canonical_sha256":"e0d4c82b521f1ef89e50fa169a830526ef71cce618602399c6060d7fd0e7c474","source":{"kind":"arxiv","id":"2105.00334","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.00334","created_at":"2026-07-05T02:36:53Z"},{"alias_kind":"arxiv_version","alias_value":"2105.00334v1","created_at":"2026-07-05T02:36:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.00334","created_at":"2026-07-05T02:36:53Z"},{"alias_kind":"pith_short_12","alias_value":"4DKMQK2SD4PP","created_at":"2026-07-05T02:36:53Z"},{"alias_kind":"pith_short_16","alias_value":"4DKMQK2SD4PPRHSQ","created_at":"2026-07-05T02:36:53Z"},{"alias_kind":"pith_short_8","alias_value":"4DKMQK2S","created_at":"2026-07-05T02:36:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:4DKMQK2SD4PPRHSQ7ILJVAYFE3","target":"record","payload":{"canonical_record":{"source":{"id":"2105.00334","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-01T19:33:28Z","cross_cats_sorted":["cs.AR","cs.LG"],"title_canon_sha256":"32ddfd6b19f7c0fbf91e944ca7cc2457a1a0f5a848dff234e42c996969e08c65","abstract_canon_sha256":"f52d05f0b7e4ebc86f9a1fd97c9d0e809a7117df2e324b79509c267f96784e3d"},"schema_version":"1.0"},"canonical_sha256":"e0d4c82b521f1ef89e50fa169a830526ef71cce618602399c6060d7fd0e7c474","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:36:53.463644Z","signature_b64":"XbtpDrwRzRgw/xSnKe7ksGRg9HTI7PdmDCCQo31M+B06ZiMtJ+Fp/6lkakLKwjZKXjwfak6kj5ZMCrmO40PqAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e0d4c82b521f1ef89e50fa169a830526ef71cce618602399c6060d7fd0e7c474","last_reissued_at":"2026-07-05T02:36:53.463250Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:36:53.463250Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2105.00334","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:36:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p81q9mBqfdjIETy0vpAE4SlbQ9CdwTnqUnvXQY8kQNzzZX7CpQdnlkbB0795TSo14HM92TAThLwLdGqJcm1ACQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T12:10:51.430401Z"},"content_sha256":"002e33cb7608cd92d854be656b3b0ae50f6b011326ae47e8cdb2d56c2e3cfbc0","schema_version":"1.0","event_id":"sha256:002e33cb7608cd92d854be656b3b0ae50f6b011326ae47e8cdb2d56c2e3cfbc0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:4DKMQK2SD4PPRHSQ7ILJVAYFE3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy and Integrity Preserving Training Using Trusted Hardware","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AR","cs.LG"],"primary_cat":"cs.CR","authors_text":"Hanieh Hashemi, Murali Annavaram, Yongqin Wang","submitted_at":"2021-05-01T19:33:28Z","abstract_excerpt":"Privacy and security-related concerns are growing as machine learning reaches diverse application domains. The data holders want to train with private data while exploiting accelerators, such as GPUs, that are hosted in the cloud. However, Cloud systems are vulnerable to attackers that compromise the privacy of data and integrity of computations. This work presents DarKnight, a framework for large DNN training while protecting input privacy and computation integrity. DarKnight relies on cooperative execution between trusted execution environments (TEE) and accelerators, where the TEE provides "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.00334","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2105.00334/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:36:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EnGfjr6cTPiFxIdRTrUyFFMeSBxSIAZuxnSuz3DHUVBjYhVAP9G6vWPL8yyG4M6PFYNkyurqocxBZ8FINdn8Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T12:10:51.430773Z"},"content_sha256":"326a7e4f4a0ed1829d87236589f22f6ecd1d7b9f4a41d8a27d1d40c18faae894","schema_version":"1.0","event_id":"sha256:326a7e4f4a0ed1829d87236589f22f6ecd1d7b9f4a41d8a27d1d40c18faae894"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4DKMQK2SD4PPRHSQ7ILJVAYFE3/bundle.json","state_url":"https://pith.science/pith/4DKMQK2SD4PPRHSQ7ILJVAYFE3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4DKMQK2SD4PPRHSQ7ILJVAYFE3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T12:10:51Z","links":{"resolver":"https://pith.science/pith/4DKMQK2SD4PPRHSQ7ILJVAYFE3","bundle":"https://pith.science/pith/4DKMQK2SD4PPRHSQ7ILJVAYFE3/bundle.json","state":"https://pith.science/pith/4DKMQK2SD4PPRHSQ7ILJVAYFE3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4DKMQK2SD4PPRHSQ7ILJVAYFE3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:4DKMQK2SD4PPRHSQ7ILJVAYFE3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f52d05f0b7e4ebc86f9a1fd97c9d0e809a7117df2e324b79509c267f96784e3d","cross_cats_sorted":["cs.AR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-01T19:33:28Z","title_canon_sha256":"32ddfd6b19f7c0fbf91e944ca7cc2457a1a0f5a848dff234e42c996969e08c65"},"schema_version":"1.0","source":{"id":"2105.00334","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.00334","created_at":"2026-07-05T02:36:53Z"},{"alias_kind":"arxiv_version","alias_value":"2105.00334v1","created_at":"2026-07-05T02:36:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.00334","created_at":"2026-07-05T02:36:53Z"},{"alias_kind":"pith_short_12","alias_value":"4DKMQK2SD4PP","created_at":"2026-07-05T02:36:53Z"},{"alias_kind":"pith_short_16","alias_value":"4DKMQK2SD4PPRHSQ","created_at":"2026-07-05T02:36:53Z"},{"alias_kind":"pith_short_8","alias_value":"4DKMQK2S","created_at":"2026-07-05T02:36:53Z"}],"graph_snapshots":[{"event_id":"sha256:326a7e4f4a0ed1829d87236589f22f6ecd1d7b9f4a41d8a27d1d40c18faae894","target":"graph","created_at":"2026-07-05T02:36:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2105.00334/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Privacy and security-related concerns are growing as machine learning reaches diverse application domains. The data holders want to train with private data while exploiting accelerators, such as GPUs, that are hosted in the cloud. However, Cloud systems are vulnerable to attackers that compromise the privacy of data and integrity of computations. This work presents DarKnight, a framework for large DNN training while protecting input privacy and computation integrity. DarKnight relies on cooperative execution between trusted execution environments (TEE) and accelerators, where the TEE provides ","authors_text":"Hanieh Hashemi, Murali Annavaram, Yongqin Wang","cross_cats":["cs.AR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-01T19:33:28Z","title":"Privacy and Integrity Preserving Training Using Trusted Hardware"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.00334","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:002e33cb7608cd92d854be656b3b0ae50f6b011326ae47e8cdb2d56c2e3cfbc0","target":"record","created_at":"2026-07-05T02:36:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f52d05f0b7e4ebc86f9a1fd97c9d0e809a7117df2e324b79509c267f96784e3d","cross_cats_sorted":["cs.AR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-01T19:33:28Z","title_canon_sha256":"32ddfd6b19f7c0fbf91e944ca7cc2457a1a0f5a848dff234e42c996969e08c65"},"schema_version":"1.0","source":{"id":"2105.00334","kind":"arxiv","version":1}},"canonical_sha256":"e0d4c82b521f1ef89e50fa169a830526ef71cce618602399c6060d7fd0e7c474","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e0d4c82b521f1ef89e50fa169a830526ef71cce618602399c6060d7fd0e7c474","first_computed_at":"2026-07-05T02:36:53.463250Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:36:53.463250Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"XbtpDrwRzRgw/xSnKe7ksGRg9HTI7PdmDCCQo31M+B06ZiMtJ+Fp/6lkakLKwjZKXjwfak6kj5ZMCrmO40PqAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:36:53.463644Z","signed_message":"canonical_sha256_bytes"},"source_id":"2105.00334","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:002e33cb7608cd92d854be656b3b0ae50f6b011326ae47e8cdb2d56c2e3cfbc0","sha256:326a7e4f4a0ed1829d87236589f22f6ecd1d7b9f4a41d8a27d1d40c18faae894"],"state_sha256":"3228dc6c9d9c4ec924edca5a308cc7155c37ef4661a0298d4ffecccd79a092fa"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BIHmso9m6UyFK/rGYRRrZlderidh7cx2bZwGqyWbpcmLDzInKtjmmiftZYK+lM5KcP2TUoGhmhNU4e8JMm2bAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T12:10:51.432688Z","bundle_sha256":"21704dcf0b130b77435b93f7ca7eacc0e7f30b92c4394b0772b90a2db2f3ee81"}}