{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:6WFOOXQNRAB52FONQ2TQ77OMG6","short_pith_number":"pith:6WFOOXQN","canonical_record":{"source":{"id":"2306.14043","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-24T19:50:08Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"c6e94bb14f3d514a236bc0b7f6734db75e6e05c96ddf64c21a3683f757a6550d","abstract_canon_sha256":"bb8cdff1bc8ae53d364ebc182255ff1bce9ef35f58706b62e84af7ae9a25b2b1"},"schema_version":"1.0"},"canonical_sha256":"f58ae75e0d8803dd15cd86a70ffdcc3795fb009a3d8cb6aa0c6e19e8918227c9","source":{"kind":"arxiv","id":"2306.14043","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.14043","created_at":"2026-07-05T07:43:32Z"},{"alias_kind":"arxiv_version","alias_value":"2306.14043v2","created_at":"2026-07-05T07:43:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.14043","created_at":"2026-07-05T07:43:32Z"},{"alias_kind":"pith_short_12","alias_value":"6WFOOXQNRAB5","created_at":"2026-07-05T07:43:32Z"},{"alias_kind":"pith_short_16","alias_value":"6WFOOXQNRAB52FON","created_at":"2026-07-05T07:43:32Z"},{"alias_kind":"pith_short_8","alias_value":"6WFOOXQN","created_at":"2026-07-05T07:43:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:6WFOOXQNRAB52FONQ2TQ77OMG6","target":"record","payload":{"canonical_record":{"source":{"id":"2306.14043","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-24T19:50:08Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"c6e94bb14f3d514a236bc0b7f6734db75e6e05c96ddf64c21a3683f757a6550d","abstract_canon_sha256":"bb8cdff1bc8ae53d364ebc182255ff1bce9ef35f58706b62e84af7ae9a25b2b1"},"schema_version":"1.0"},"canonical_sha256":"f58ae75e0d8803dd15cd86a70ffdcc3795fb009a3d8cb6aa0c6e19e8918227c9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:43:32.123721Z","signature_b64":"26SUxM165flbWGvJNKuuDOnMPqgOHEfazonI8vwghVJ4R3hBX7m+x88bBw7gzsQ3RXKRxLz40ozDGUljePvKDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f58ae75e0d8803dd15cd86a70ffdcc3795fb009a3d8cb6aa0c6e19e8918227c9","last_reissued_at":"2026-07-05T07:43:32.123287Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:43:32.123287Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.14043","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:43:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NaTdSGt4jURduG0vxvUzwNRi77GIscoL3M4W7+dBK86gyp8XtA9IKGIujiRWUwbbwIGe7uUSplKlCE2se72RDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T10:19:07.954493Z"},"content_sha256":"b57f6eedff7d8c6c6a61e9935900fa21cc1f1621fd04843907f876792ce2243f","schema_version":"1.0","event_id":"sha256:b57f6eedff7d8c6c6a61e9935900fa21cc1f1621fd04843907f876792ce2243f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:6WFOOXQNRAB52FONQ2TQ77OMG6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Machine Learning needs Better Randomness Standards: Randomised Smoothing and PRNG-based attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Ilia Shumailov, Pranav Dahiya, Ross Anderson","submitted_at":"2023-06-24T19:50:08Z","abstract_excerpt":"Randomness supports many critical functions in the field of machine learning (ML) including optimisation, data selection, privacy, and security. ML systems outsource the task of generating or harvesting randomness to the compiler, the cloud service provider or elsewhere in the toolchain. Yet there is a long history of attackers exploiting poor randomness, or even creating it -- as when the NSA put backdoors in random number generators to break cryptography. In this paper we consider whether attackers can compromise an ML system using only the randomness on which they commonly rely. We focus ou"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.14043","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.14043/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:43:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pOejjv8fnuEZHeClzTGnztbYI05hWthXmBj+OHo0HEIvMb/Amas5tbvQKvH7vg0omK+eE08kFqWnmfNXX5zECQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T10:19:07.955001Z"},"content_sha256":"9cf8929f0a89f442a4e9c1ed4bcf8a17d838e11fcb342c85424a8618a2c5a3ec","schema_version":"1.0","event_id":"sha256:9cf8929f0a89f442a4e9c1ed4bcf8a17d838e11fcb342c85424a8618a2c5a3ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6WFOOXQNRAB52FONQ2TQ77OMG6/bundle.json","state_url":"https://pith.science/pith/6WFOOXQNRAB52FONQ2TQ77OMG6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6WFOOXQNRAB52FONQ2TQ77OMG6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T10:19:07Z","links":{"resolver":"https://pith.science/pith/6WFOOXQNRAB52FONQ2TQ77OMG6","bundle":"https://pith.science/pith/6WFOOXQNRAB52FONQ2TQ77OMG6/bundle.json","state":"https://pith.science/pith/6WFOOXQNRAB52FONQ2TQ77OMG6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6WFOOXQNRAB52FONQ2TQ77OMG6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:6WFOOXQNRAB52FONQ2TQ77OMG6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bb8cdff1bc8ae53d364ebc182255ff1bce9ef35f58706b62e84af7ae9a25b2b1","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-24T19:50:08Z","title_canon_sha256":"c6e94bb14f3d514a236bc0b7f6734db75e6e05c96ddf64c21a3683f757a6550d"},"schema_version":"1.0","source":{"id":"2306.14043","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.14043","created_at":"2026-07-05T07:43:32Z"},{"alias_kind":"arxiv_version","alias_value":"2306.14043v2","created_at":"2026-07-05T07:43:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.14043","created_at":"2026-07-05T07:43:32Z"},{"alias_kind":"pith_short_12","alias_value":"6WFOOXQNRAB5","created_at":"2026-07-05T07:43:32Z"},{"alias_kind":"pith_short_16","alias_value":"6WFOOXQNRAB52FON","created_at":"2026-07-05T07:43:32Z"},{"alias_kind":"pith_short_8","alias_value":"6WFOOXQN","created_at":"2026-07-05T07:43:32Z"}],"graph_snapshots":[{"event_id":"sha256:9cf8929f0a89f442a4e9c1ed4bcf8a17d838e11fcb342c85424a8618a2c5a3ec","target":"graph","created_at":"2026-07-05T07:43:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.14043/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Randomness supports many critical functions in the field of machine learning (ML) including optimisation, data selection, privacy, and security. ML systems outsource the task of generating or harvesting randomness to the compiler, the cloud service provider or elsewhere in the toolchain. Yet there is a long history of attackers exploiting poor randomness, or even creating it -- as when the NSA put backdoors in random number generators to break cryptography. In this paper we consider whether attackers can compromise an ML system using only the randomness on which they commonly rely. We focus ou","authors_text":"Ilia Shumailov, Pranav Dahiya, Ross Anderson","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-24T19:50:08Z","title":"Machine Learning needs Better Randomness Standards: Randomised Smoothing and PRNG-based attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.14043","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b57f6eedff7d8c6c6a61e9935900fa21cc1f1621fd04843907f876792ce2243f","target":"record","created_at":"2026-07-05T07:43:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bb8cdff1bc8ae53d364ebc182255ff1bce9ef35f58706b62e84af7ae9a25b2b1","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-24T19:50:08Z","title_canon_sha256":"c6e94bb14f3d514a236bc0b7f6734db75e6e05c96ddf64c21a3683f757a6550d"},"schema_version":"1.0","source":{"id":"2306.14043","kind":"arxiv","version":2}},"canonical_sha256":"f58ae75e0d8803dd15cd86a70ffdcc3795fb009a3d8cb6aa0c6e19e8918227c9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f58ae75e0d8803dd15cd86a70ffdcc3795fb009a3d8cb6aa0c6e19e8918227c9","first_computed_at":"2026-07-05T07:43:32.123287Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:43:32.123287Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"26SUxM165flbWGvJNKuuDOnMPqgOHEfazonI8vwghVJ4R3hBX7m+x88bBw7gzsQ3RXKRxLz40ozDGUljePvKDA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:43:32.123721Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.14043","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b57f6eedff7d8c6c6a61e9935900fa21cc1f1621fd04843907f876792ce2243f","sha256:9cf8929f0a89f442a4e9c1ed4bcf8a17d838e11fcb342c85424a8618a2c5a3ec"],"state_sha256":"e5ea856bec576fc290e494ed331b883bc252b33996e64417e20423123590c426"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m+SK24N3qWdhZX36PpTDuZ/rLA5Y6Lx1PynKpJgncxOKTgxIdYZ+7Px2ZM5gKSmjN7eD4N3r/iV2lP6DEH6TCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T10:19:07.958986Z","bundle_sha256":"680fd6b6009f25ee3a27ee90de0eeee68991e90db921439f70cc9d5b4694fcac"}}