{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:7K6HVQIJDWAILJMHWSWISNKHMX","short_pith_number":"pith:7K6HVQIJ","canonical_record":{"source":{"id":"2403.18403","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-27T09:45:33Z","cross_cats_sorted":[],"title_canon_sha256":"fa76b63aa4552cae9a0e352eb3d8c3243575d4520c6c8f9bff4e0a2ad939adf1","abstract_canon_sha256":"a851930dd05242581aa8338a9084e5568bae96263a45c98fcfc901592da296dc"},"schema_version":"1.0"},"canonical_sha256":"fabc7ac1091d8085a587b4ac89354765f6c3f594a04808457f3970bc6f577ee2","source":{"kind":"arxiv","id":"2403.18403","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.18403","created_at":"2026-07-05T10:53:44Z"},{"alias_kind":"arxiv_version","alias_value":"2403.18403v3","created_at":"2026-07-05T10:53:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.18403","created_at":"2026-07-05T10:53:44Z"},{"alias_kind":"pith_short_12","alias_value":"7K6HVQIJDWAI","created_at":"2026-07-05T10:53:44Z"},{"alias_kind":"pith_short_16","alias_value":"7K6HVQIJDWAILJMH","created_at":"2026-07-05T10:53:44Z"},{"alias_kind":"pith_short_8","alias_value":"7K6HVQIJ","created_at":"2026-07-05T10:53:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:7K6HVQIJDWAILJMHWSWISNKHMX","target":"record","payload":{"canonical_record":{"source":{"id":"2403.18403","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-27T09:45:33Z","cross_cats_sorted":[],"title_canon_sha256":"fa76b63aa4552cae9a0e352eb3d8c3243575d4520c6c8f9bff4e0a2ad939adf1","abstract_canon_sha256":"a851930dd05242581aa8338a9084e5568bae96263a45c98fcfc901592da296dc"},"schema_version":"1.0"},"canonical_sha256":"fabc7ac1091d8085a587b4ac89354765f6c3f594a04808457f3970bc6f577ee2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:53:44.414009Z","signature_b64":"NAZ3ZsGgyB7SfDnwNdI899pinIPy8a5/lVyXse18/oU2x+5JQGavLa3kW/fxVi+gtj5Im3wH5HbDOLuBvAFlDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fabc7ac1091d8085a587b4ac89354765f6c3f594a04808457f3970bc6f577ee2","last_reissued_at":"2026-07-05T10:53:44.413611Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:53:44.413611Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.18403","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:53:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"veC2MDkt4akUMyo53kUNOnk0Yq7cf9176uN7wCQ7fDL0vIADjRN4PcpaE99QZJ1UTvGt0EcP5tWeHV2m+OgGBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T20:51:16.386550Z"},"content_sha256":"3335afaece167cab498615564df116b0768284babce8f206cf0d6b6d5bfe9044","schema_version":"1.0","event_id":"sha256:3335afaece167cab498615564df116b0768284babce8f206cf0d6b6d5bfe9044"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:7K6HVQIJDWAILJMHWSWISNKHMX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FoC: Figure out the Cryptographic Functions in Stripped Binaries with LLMs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Guoqiang Chen, Nenghai Yu, Shaoyin Cheng, Shikai Guo, Weiming Zhang, Xiuwei Shang, Yanming Zhang","submitted_at":"2024-03-27T09:45:33Z","abstract_excerpt":"Analyzing the behavior of cryptographic functions in stripped binaries is a challenging but essential task. Cryptographic algorithms exhibit greater logical complexity compared to typical code, yet their analysis is unavoidable in areas such as virus analysis and legacy code inspection. Existing methods often rely on data or structural pattern matching, leading to suboptimal generalizability and suffering from manual work. In this paper, we propose a novel framework called FoC to Figure out the Cryptographic functions in stripped binaries. In FoC, we first build a binary large language model ("},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.18403","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.18403/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:53:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hb9tBykGie1mK2sQyJMEW8qIajSLrY6QVwP1g467QUVsr8q5W8G5qDfn7QaVDX03pYpZci/b1ihDJ2ZgCDzvDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T20:51:16.386925Z"},"content_sha256":"cc2970d4903d5591a04026144dcc4af635b402c00afdd78f2610023b09bebad6","schema_version":"1.0","event_id":"sha256:cc2970d4903d5591a04026144dcc4af635b402c00afdd78f2610023b09bebad6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7K6HVQIJDWAILJMHWSWISNKHMX/bundle.json","state_url":"https://pith.science/pith/7K6HVQIJDWAILJMHWSWISNKHMX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7K6HVQIJDWAILJMHWSWISNKHMX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T20:51:16Z","links":{"resolver":"https://pith.science/pith/7K6HVQIJDWAILJMHWSWISNKHMX","bundle":"https://pith.science/pith/7K6HVQIJDWAILJMHWSWISNKHMX/bundle.json","state":"https://pith.science/pith/7K6HVQIJDWAILJMHWSWISNKHMX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7K6HVQIJDWAILJMHWSWISNKHMX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:7K6HVQIJDWAILJMHWSWISNKHMX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a851930dd05242581aa8338a9084e5568bae96263a45c98fcfc901592da296dc","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-27T09:45:33Z","title_canon_sha256":"fa76b63aa4552cae9a0e352eb3d8c3243575d4520c6c8f9bff4e0a2ad939adf1"},"schema_version":"1.0","source":{"id":"2403.18403","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.18403","created_at":"2026-07-05T10:53:44Z"},{"alias_kind":"arxiv_version","alias_value":"2403.18403v3","created_at":"2026-07-05T10:53:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.18403","created_at":"2026-07-05T10:53:44Z"},{"alias_kind":"pith_short_12","alias_value":"7K6HVQIJDWAI","created_at":"2026-07-05T10:53:44Z"},{"alias_kind":"pith_short_16","alias_value":"7K6HVQIJDWAILJMH","created_at":"2026-07-05T10:53:44Z"},{"alias_kind":"pith_short_8","alias_value":"7K6HVQIJ","created_at":"2026-07-05T10:53:44Z"}],"graph_snapshots":[{"event_id":"sha256:cc2970d4903d5591a04026144dcc4af635b402c00afdd78f2610023b09bebad6","target":"graph","created_at":"2026-07-05T10:53:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.18403/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Analyzing the behavior of cryptographic functions in stripped binaries is a challenging but essential task. Cryptographic algorithms exhibit greater logical complexity compared to typical code, yet their analysis is unavoidable in areas such as virus analysis and legacy code inspection. Existing methods often rely on data or structural pattern matching, leading to suboptimal generalizability and suffering from manual work. In this paper, we propose a novel framework called FoC to Figure out the Cryptographic functions in stripped binaries. In FoC, we first build a binary large language model (","authors_text":"Guoqiang Chen, Nenghai Yu, Shaoyin Cheng, Shikai Guo, Weiming Zhang, Xiuwei Shang, Yanming Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-27T09:45:33Z","title":"FoC: Figure out the Cryptographic Functions in Stripped Binaries with LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.18403","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3335afaece167cab498615564df116b0768284babce8f206cf0d6b6d5bfe9044","target":"record","created_at":"2026-07-05T10:53:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a851930dd05242581aa8338a9084e5568bae96263a45c98fcfc901592da296dc","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-27T09:45:33Z","title_canon_sha256":"fa76b63aa4552cae9a0e352eb3d8c3243575d4520c6c8f9bff4e0a2ad939adf1"},"schema_version":"1.0","source":{"id":"2403.18403","kind":"arxiv","version":3}},"canonical_sha256":"fabc7ac1091d8085a587b4ac89354765f6c3f594a04808457f3970bc6f577ee2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fabc7ac1091d8085a587b4ac89354765f6c3f594a04808457f3970bc6f577ee2","first_computed_at":"2026-07-05T10:53:44.413611Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:53:44.413611Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NAZ3ZsGgyB7SfDnwNdI899pinIPy8a5/lVyXse18/oU2x+5JQGavLa3kW/fxVi+gtj5Im3wH5HbDOLuBvAFlDw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:53:44.414009Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.18403","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3335afaece167cab498615564df116b0768284babce8f206cf0d6b6d5bfe9044","sha256:cc2970d4903d5591a04026144dcc4af635b402c00afdd78f2610023b09bebad6"],"state_sha256":"c0b6abba826e133b5eae4b9a7b54284c328aaee3ba2d30d47208515284086bb6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nRDGAl020FUu0eOLdvbqhFyqM8JLfbG57GVMFOIwNmjIExjAZgNe6ICnVHKD5zXin3u4Euq8PkiBKfAVfdlPAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T20:51:16.388957Z","bundle_sha256":"745612ca2fc6eb55e0ad3059e4d3c396bbdc1277c065da48353c4e467e5e6788"}}