{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:AWLUQP2TDENZTGIGUFRFQQLPQN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"831fca855f05c3874bd0007da8a279585b519ab8c9b635184ace51baa31ca399","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-10-30T10:59:55Z","title_canon_sha256":"34606bce3d3bbab23f16341a798b1a0b47173034a95bd470498e8edec2839172"},"schema_version":"1.0","source":{"id":"1910.13772","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.13772","created_at":"2026-07-05T00:15:55Z"},{"alias_kind":"arxiv_version","alias_value":"1910.13772v1","created_at":"2026-07-05T00:15:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.13772","created_at":"2026-07-05T00:15:55Z"},{"alias_kind":"pith_short_12","alias_value":"AWLUQP2TDENZ","created_at":"2026-07-05T00:15:55Z"},{"alias_kind":"pith_short_16","alias_value":"AWLUQP2TDENZTGIG","created_at":"2026-07-05T00:15:55Z"},{"alias_kind":"pith_short_8","alias_value":"AWLUQP2T","created_at":"2026-07-05T00:15:55Z"}],"graph_snapshots":[{"event_id":"sha256:32d46a77ee7ac21c6dd4d00c01f592f6590605dcd295677e998c5ceddd52c55f","target":"graph","created_at":"2026-07-05T00:15:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1910.13772/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"After several years of research on onion routing, Camenisch and Lysyanskaya, in an attempt at rigorous analysis, defined an ideal functionality in the universal composability model, together with properties that protocols have to meet to achieve provable security. A whole family of systems based their security proofs on this work. However, analyzing HORNET and Sphinx, two instances from this family, we show that this proof strategy is broken. We discover a previously unknown vulnerability that breaks anonymity completely, and explain a known one. Both should not exist if privacy is proven corr","authors_text":"Christiane Kuhn, Martin Beck, Thorsten Strufe","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-10-30T10:59:55Z","title":"Breaking and (Partially) Fixing Provably Secure Onion Routing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.13772","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:99cdfd63240953dff0c4ec3f16abf1e3362b7b50f5ca48a3f0d065177c039205","target":"record","created_at":"2026-07-05T00:15:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"831fca855f05c3874bd0007da8a279585b519ab8c9b635184ace51baa31ca399","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-10-30T10:59:55Z","title_canon_sha256":"34606bce3d3bbab23f16341a798b1a0b47173034a95bd470498e8edec2839172"},"schema_version":"1.0","source":{"id":"1910.13772","kind":"arxiv","version":1}},"canonical_sha256":"0597483f53191b999906a16258416f837bdfbf696510f1c08dcd126ad8515090","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0597483f53191b999906a16258416f837bdfbf696510f1c08dcd126ad8515090","first_computed_at":"2026-07-05T00:15:55.913855Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:15:55.913855Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Q4ouabOR+6cRaDttPmejk2txt6xKA18o9alpA1+kY6nvLr57oIGfbeDEF54nQVbqVrFrcQct6+EEBDlM22CnDg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:15:55.914334Z","signed_message":"canonical_sha256_bytes"},"source_id":"1910.13772","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:99cdfd63240953dff0c4ec3f16abf1e3362b7b50f5ca48a3f0d065177c039205","sha256:32d46a77ee7ac21c6dd4d00c01f592f6590605dcd295677e998c5ceddd52c55f"],"state_sha256":"2bacd5a58a8aaceb08184669d7e75cc488c5243e4b7d0b565b12fc2a20e3d644"}