{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:65GPU2GCNBADAFFYPKOQJH5IDU","short_pith_number":"pith:65GPU2GC","canonical_record":{"source":{"id":"1802.09085","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-02-25T21:31:14Z","cross_cats_sorted":[],"title_canon_sha256":"fb61e583c7404d689188d0664ec72dd73fa169981041ea03e658931cf3773d9c","abstract_canon_sha256":"6aa32726df9745517d09e6299c517c4c92e0fbd63521fcbb1e061121ba43afab"},"schema_version":"1.0"},"canonical_sha256":"f74cfa68c268403014b87a9d049fa81d3f2f8c8ac36ed2704b2974405bf0bd68","source":{"kind":"arxiv","id":"1802.09085","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1802.09085","created_at":"2026-07-05T00:03:53Z"},{"alias_kind":"arxiv_version","alias_value":"1802.09085v3","created_at":"2026-07-05T00:03:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1802.09085","created_at":"2026-07-05T00:03:53Z"},{"alias_kind":"pith_short_12","alias_value":"65GPU2GCNBAD","created_at":"2026-07-05T00:03:53Z"},{"alias_kind":"pith_short_16","alias_value":"65GPU2GCNBADAFFY","created_at":"2026-07-05T00:03:53Z"},{"alias_kind":"pith_short_8","alias_value":"65GPU2GC","created_at":"2026-07-05T00:03:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:65GPU2GCNBADAFFYPKOQJH5IDU","target":"record","payload":{"canonical_record":{"source":{"id":"1802.09085","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-02-25T21:31:14Z","cross_cats_sorted":[],"title_canon_sha256":"fb61e583c7404d689188d0664ec72dd73fa169981041ea03e658931cf3773d9c","abstract_canon_sha256":"6aa32726df9745517d09e6299c517c4c92e0fbd63521fcbb1e061121ba43afab"},"schema_version":"1.0"},"canonical_sha256":"f74cfa68c268403014b87a9d049fa81d3f2f8c8ac36ed2704b2974405bf0bd68","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:03:53.503429Z","signature_b64":"FPNcEwRItXTmOKk+Fs2lhN+vFtaLknl6zvaTvXaXKoVpiI6nE9N1Znv/xXUyp4WMCb/x6O68fFfpsf8xP+W6Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f74cfa68c268403014b87a9d049fa81d3f2f8c8ac36ed2704b2974405bf0bd68","last_reissued_at":"2026-07-05T00:03:53.503005Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:03:53.503005Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1802.09085","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:03:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xMdRGaa7Gjg3L3H5Ve3elwD4gLBkzLb6PTutYyKHyqNFxADjXI7X7aEq4W2n+JNBU4HanlKSMC/T3nql1nrVAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T23:38:46.415428Z"},"content_sha256":"37d29bdf8f99148589b30a26880e8ec5a7ee7ba976903641224355f0ac2f4137","schema_version":"1.0","event_id":"sha256:37d29bdf8f99148589b30a26880e8ec5a7ee7ba976903641224355f0ac2f4137"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:65GPU2GCNBADAFFYPKOQJH5IDU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SgxPectre Attacks: Stealing Intel Secrets from SGX Enclaves via Speculative Execution","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Guoxing Chen, Sanchuan Chen, Ten H. Lai, Yinqian Zhang, Yuan Xiao, Zhiqiang Lin","submitted_at":"2018-02-25T21:31:14Z","abstract_excerpt":"This paper presents SgxPectre Attacks that exploit the recently disclosed CPU bugs to subvert the confidentiality and integrity of SGX enclaves. Particularly, we show that when branch prediction of the enclave code can be influenced by programs outside the enclave, the control flow of the enclave program can be temporarily altered to execute instructions that lead to observable cache-state changes. An adversary observing such changes can learn secrets inside the enclave memory or its internal registers, thus completely defeating the confidentiality guarantee offered by SGX. To demonstrate the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1802.09085","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1802.09085/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:03:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3KdMGYknKFxFXhf7SvrV1w4r/z8CTIhXH+FLMj3B6Q9x2muzKkwkqJmIRJ24WC488w74DOPkmFtpNrKdvYZ7CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T23:38:46.415926Z"},"content_sha256":"0a3033123da9080d2596ba2d6200191207c126b4ab8b9b5403ca56c53cca3bd2","schema_version":"1.0","event_id":"sha256:0a3033123da9080d2596ba2d6200191207c126b4ab8b9b5403ca56c53cca3bd2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/65GPU2GCNBADAFFYPKOQJH5IDU/bundle.json","state_url":"https://pith.science/pith/65GPU2GCNBADAFFYPKOQJH5IDU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/65GPU2GCNBADAFFYPKOQJH5IDU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T23:38:46Z","links":{"resolver":"https://pith.science/pith/65GPU2GCNBADAFFYPKOQJH5IDU","bundle":"https://pith.science/pith/65GPU2GCNBADAFFYPKOQJH5IDU/bundle.json","state":"https://pith.science/pith/65GPU2GCNBADAFFYPKOQJH5IDU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/65GPU2GCNBADAFFYPKOQJH5IDU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:65GPU2GCNBADAFFYPKOQJH5IDU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6aa32726df9745517d09e6299c517c4c92e0fbd63521fcbb1e061121ba43afab","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-02-25T21:31:14Z","title_canon_sha256":"fb61e583c7404d689188d0664ec72dd73fa169981041ea03e658931cf3773d9c"},"schema_version":"1.0","source":{"id":"1802.09085","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1802.09085","created_at":"2026-07-05T00:03:53Z"},{"alias_kind":"arxiv_version","alias_value":"1802.09085v3","created_at":"2026-07-05T00:03:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1802.09085","created_at":"2026-07-05T00:03:53Z"},{"alias_kind":"pith_short_12","alias_value":"65GPU2GCNBAD","created_at":"2026-07-05T00:03:53Z"},{"alias_kind":"pith_short_16","alias_value":"65GPU2GCNBADAFFY","created_at":"2026-07-05T00:03:53Z"},{"alias_kind":"pith_short_8","alias_value":"65GPU2GC","created_at":"2026-07-05T00:03:53Z"}],"graph_snapshots":[{"event_id":"sha256:0a3033123da9080d2596ba2d6200191207c126b4ab8b9b5403ca56c53cca3bd2","target":"graph","created_at":"2026-07-05T00:03:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1802.09085/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper presents SgxPectre Attacks that exploit the recently disclosed CPU bugs to subvert the confidentiality and integrity of SGX enclaves. Particularly, we show that when branch prediction of the enclave code can be influenced by programs outside the enclave, the control flow of the enclave program can be temporarily altered to execute instructions that lead to observable cache-state changes. An adversary observing such changes can learn secrets inside the enclave memory or its internal registers, thus completely defeating the confidentiality guarantee offered by SGX. To demonstrate the ","authors_text":"Guoxing Chen, Sanchuan Chen, Ten H. Lai, Yinqian Zhang, Yuan Xiao, Zhiqiang Lin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-02-25T21:31:14Z","title":"SgxPectre Attacks: Stealing Intel Secrets from SGX Enclaves via Speculative Execution"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1802.09085","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:37d29bdf8f99148589b30a26880e8ec5a7ee7ba976903641224355f0ac2f4137","target":"record","created_at":"2026-07-05T00:03:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6aa32726df9745517d09e6299c517c4c92e0fbd63521fcbb1e061121ba43afab","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-02-25T21:31:14Z","title_canon_sha256":"fb61e583c7404d689188d0664ec72dd73fa169981041ea03e658931cf3773d9c"},"schema_version":"1.0","source":{"id":"1802.09085","kind":"arxiv","version":3}},"canonical_sha256":"f74cfa68c268403014b87a9d049fa81d3f2f8c8ac36ed2704b2974405bf0bd68","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f74cfa68c268403014b87a9d049fa81d3f2f8c8ac36ed2704b2974405bf0bd68","first_computed_at":"2026-07-05T00:03:53.503005Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:03:53.503005Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FPNcEwRItXTmOKk+Fs2lhN+vFtaLknl6zvaTvXaXKoVpiI6nE9N1Znv/xXUyp4WMCb/x6O68fFfpsf8xP+W6Bg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:03:53.503429Z","signed_message":"canonical_sha256_bytes"},"source_id":"1802.09085","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:37d29bdf8f99148589b30a26880e8ec5a7ee7ba976903641224355f0ac2f4137","sha256:0a3033123da9080d2596ba2d6200191207c126b4ab8b9b5403ca56c53cca3bd2"],"state_sha256":"b4899fc588d802866a867486335ab66916d3a131f525b934a676c1008a10b12d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SNJzOhv68nY6vgjBaMc1vEKEyOMung5D8TBAAtn8ElG8JQVb9sQucylT8APFLvVbgaQNwC/hgHI+EcY8hVpUAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T23:38:46.420318Z","bundle_sha256":"039bece8fbbd5680586d75851f06674e115e31a230bbd43892488e0d2e784303"}}