{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5XDMJANCLNCYXUAGOFEONXW42W","short_pith_number":"pith:5XDMJANC","canonical_record":{"source":{"id":"2305.04755","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-08T15:02:15Z","cross_cats_sorted":[],"title_canon_sha256":"4c6243fcff36691c0ad7721d22eb6d558a8952b58ed1574d0a258a9459938f60","abstract_canon_sha256":"e7c3f027b31f65635db963233625b5b580070559659e4d475449040fcccb3d23"},"schema_version":"1.0"},"canonical_sha256":"edc6c481a25b458bd0067148e6dedcd5b84ea2d4d3267d07967285755021b4a9","source":{"kind":"arxiv","id":"2305.04755","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.04755","created_at":"2026-07-05T06:07:53Z"},{"alias_kind":"arxiv_version","alias_value":"2305.04755v1","created_at":"2026-07-05T06:07:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.04755","created_at":"2026-07-05T06:07:53Z"},{"alias_kind":"pith_short_12","alias_value":"5XDMJANCLNCY","created_at":"2026-07-05T06:07:53Z"},{"alias_kind":"pith_short_16","alias_value":"5XDMJANCLNCYXUAG","created_at":"2026-07-05T06:07:53Z"},{"alias_kind":"pith_short_8","alias_value":"5XDMJANC","created_at":"2026-07-05T06:07:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5XDMJANCLNCYXUAGOFEONXW42W","target":"record","payload":{"canonical_record":{"source":{"id":"2305.04755","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-08T15:02:15Z","cross_cats_sorted":[],"title_canon_sha256":"4c6243fcff36691c0ad7721d22eb6d558a8952b58ed1574d0a258a9459938f60","abstract_canon_sha256":"e7c3f027b31f65635db963233625b5b580070559659e4d475449040fcccb3d23"},"schema_version":"1.0"},"canonical_sha256":"edc6c481a25b458bd0067148e6dedcd5b84ea2d4d3267d07967285755021b4a9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:07:53.544932Z","signature_b64":"4PLNDqRiLjcEvZ2Z8zCF/fWO55saILUI6MSeDiQthUQGLXh04irK+HdkDqwh6fNe39BcMzYQIVsTI1kJFi4XAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"edc6c481a25b458bd0067148e6dedcd5b84ea2d4d3267d07967285755021b4a9","last_reissued_at":"2026-07-05T06:07:53.544554Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:07:53.544554Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.04755","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:07:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Gy/MyDB2XJUBRwxNVugvimm+/yTzhz+stO31P0oHJj6uq50P4kVklS17/bTqvrWUylWPeuGOtIHK0nkSLp9ADg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T15:03:19.114835Z"},"content_sha256":"f6e05f5556e645dd4dc104abb15cdf6fbd5df2b183e50324a227715158fa4d75","schema_version":"1.0","event_id":"sha256:f6e05f5556e645dd4dc104abb15cdf6fbd5df2b183e50324a227715158fa4d75"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5XDMJANCLNCYXUAGOFEONXW42W","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"If it's Provably Secure, It Probably Isn't: Why Learning from Proof Failure is Hard","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Nicholas Boucher, Ross Anderson","submitted_at":"2023-05-08T15:02:15Z","abstract_excerpt":"In this paper we're going to explore the ways in which security proofs can fail, and their broader lessons for security engineering. To mention just one example, Larry Paulson proved the security of SSL/TLS using his theorem prover Isabelle in 1999, yet it's sprung multiple leaks since then, from timing attacks to Heartbleed. We will go through a number of other examples in the hope of elucidating general principles. Proofs can be irrelevant, they can be opaque, they can be misleading and they can even be wrong. So we can look to the philosophy of mathematics for illumination. But the problem "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.04755","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.04755/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:07:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3Wwfc9KQQXdJEe6/4XjvTjAv/xNX+ofqEK4dNqs86SzCM6jqRHZtFQV5n1OkGNw7qX6alDwRP4PiHb/Z1ItHDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T15:03:19.115742Z"},"content_sha256":"09065c49bb19c9ff414908220a62028416d34bc0e089a4d2869a4710e0f5d25f","schema_version":"1.0","event_id":"sha256:09065c49bb19c9ff414908220a62028416d34bc0e089a4d2869a4710e0f5d25f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5XDMJANCLNCYXUAGOFEONXW42W/bundle.json","state_url":"https://pith.science/pith/5XDMJANCLNCYXUAGOFEONXW42W/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5XDMJANCLNCYXUAGOFEONXW42W/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T15:03:19Z","links":{"resolver":"https://pith.science/pith/5XDMJANCLNCYXUAGOFEONXW42W","bundle":"https://pith.science/pith/5XDMJANCLNCYXUAGOFEONXW42W/bundle.json","state":"https://pith.science/pith/5XDMJANCLNCYXUAGOFEONXW42W/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5XDMJANCLNCYXUAGOFEONXW42W/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5XDMJANCLNCYXUAGOFEONXW42W","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e7c3f027b31f65635db963233625b5b580070559659e4d475449040fcccb3d23","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-08T15:02:15Z","title_canon_sha256":"4c6243fcff36691c0ad7721d22eb6d558a8952b58ed1574d0a258a9459938f60"},"schema_version":"1.0","source":{"id":"2305.04755","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.04755","created_at":"2026-07-05T06:07:53Z"},{"alias_kind":"arxiv_version","alias_value":"2305.04755v1","created_at":"2026-07-05T06:07:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.04755","created_at":"2026-07-05T06:07:53Z"},{"alias_kind":"pith_short_12","alias_value":"5XDMJANCLNCY","created_at":"2026-07-05T06:07:53Z"},{"alias_kind":"pith_short_16","alias_value":"5XDMJANCLNCYXUAG","created_at":"2026-07-05T06:07:53Z"},{"alias_kind":"pith_short_8","alias_value":"5XDMJANC","created_at":"2026-07-05T06:07:53Z"}],"graph_snapshots":[{"event_id":"sha256:09065c49bb19c9ff414908220a62028416d34bc0e089a4d2869a4710e0f5d25f","target":"graph","created_at":"2026-07-05T06:07:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.04755/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper we're going to explore the ways in which security proofs can fail, and their broader lessons for security engineering. To mention just one example, Larry Paulson proved the security of SSL/TLS using his theorem prover Isabelle in 1999, yet it's sprung multiple leaks since then, from timing attacks to Heartbleed. We will go through a number of other examples in the hope of elucidating general principles. Proofs can be irrelevant, they can be opaque, they can be misleading and they can even be wrong. So we can look to the philosophy of mathematics for illumination. But the problem ","authors_text":"Nicholas Boucher, Ross Anderson","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-08T15:02:15Z","title":"If it's Provably Secure, It Probably Isn't: Why Learning from Proof Failure is Hard"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.04755","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f6e05f5556e645dd4dc104abb15cdf6fbd5df2b183e50324a227715158fa4d75","target":"record","created_at":"2026-07-05T06:07:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e7c3f027b31f65635db963233625b5b580070559659e4d475449040fcccb3d23","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-08T15:02:15Z","title_canon_sha256":"4c6243fcff36691c0ad7721d22eb6d558a8952b58ed1574d0a258a9459938f60"},"schema_version":"1.0","source":{"id":"2305.04755","kind":"arxiv","version":1}},"canonical_sha256":"edc6c481a25b458bd0067148e6dedcd5b84ea2d4d3267d07967285755021b4a9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"edc6c481a25b458bd0067148e6dedcd5b84ea2d4d3267d07967285755021b4a9","first_computed_at":"2026-07-05T06:07:53.544554Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:07:53.544554Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4PLNDqRiLjcEvZ2Z8zCF/fWO55saILUI6MSeDiQthUQGLXh04irK+HdkDqwh6fNe39BcMzYQIVsTI1kJFi4XAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:07:53.544932Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.04755","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f6e05f5556e645dd4dc104abb15cdf6fbd5df2b183e50324a227715158fa4d75","sha256:09065c49bb19c9ff414908220a62028416d34bc0e089a4d2869a4710e0f5d25f"],"state_sha256":"d1689ae360a78195a96d9d5bbea46c006c5a1486f7353cac33c989f8704dbf10"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y71xOJrzmVTmjYorz3TLnzGZvnomsrTT1lC0ZnbN9nlOYopApNOMJ8cS6+SXneEyFskck3e9ulg4wiMMUKr0Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T15:03:19.121812Z","bundle_sha256":"6098de614d548ed021d0fc826b4d6e0bf1867220cd15d2e979985a99502f66d2"}}