{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:B4BNKBJMBRCSKM7LJZST2MTFMN","short_pith_number":"pith:B4BNKBJM","canonical_record":{"source":{"id":"2112.12727","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-23T17:30:28Z","cross_cats_sorted":[],"title_canon_sha256":"cb007dc8f50a64938ccf8d42794b835442f6fc6995bf6cb3e6bafa2e4fb1f344","abstract_canon_sha256":"df84ca59da4d793d29c58c2fd69f7390f5ca3576ba7e2122911b3ea0ead332f6"},"schema_version":"1.0"},"canonical_sha256":"0f02d5052c0c452533eb4e653d3265635c103c4b708a3a27635013efaf704d13","source":{"kind":"arxiv","id":"2112.12727","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.12727","created_at":"2026-07-05T04:56:13Z"},{"alias_kind":"arxiv_version","alias_value":"2112.12727v2","created_at":"2026-07-05T04:56:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.12727","created_at":"2026-07-05T04:56:13Z"},{"alias_kind":"pith_short_12","alias_value":"B4BNKBJMBRCS","created_at":"2026-07-05T04:56:13Z"},{"alias_kind":"pith_short_16","alias_value":"B4BNKBJMBRCSKM7L","created_at":"2026-07-05T04:56:13Z"},{"alias_kind":"pith_short_8","alias_value":"B4BNKBJM","created_at":"2026-07-05T04:56:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:B4BNKBJMBRCSKM7LJZST2MTFMN","target":"record","payload":{"canonical_record":{"source":{"id":"2112.12727","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-23T17:30:28Z","cross_cats_sorted":[],"title_canon_sha256":"cb007dc8f50a64938ccf8d42794b835442f6fc6995bf6cb3e6bafa2e4fb1f344","abstract_canon_sha256":"df84ca59da4d793d29c58c2fd69f7390f5ca3576ba7e2122911b3ea0ead332f6"},"schema_version":"1.0"},"canonical_sha256":"0f02d5052c0c452533eb4e653d3265635c103c4b708a3a27635013efaf704d13","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:56:13.884213Z","signature_b64":"v9uiiRW8DrbRQVk22Dk/kAfENdb5EQ6zTbTdXcgL82z6W03bNPg6t4DiRkag+gPHcxW/4nHAVdfBtBODP5PPAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0f02d5052c0c452533eb4e653d3265635c103c4b708a3a27635013efaf704d13","last_reissued_at":"2026-07-05T04:56:13.883735Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:56:13.883735Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.12727","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:56:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VxpIwy9Vo7nWoPF3qjlKJjFXmu1XZ9ZrQ9d0v7OtHmLOiyELDzrTPlWHObd1bnyRF29iGFrM01fq4sCc3E2IDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:26:24.077676Z"},"content_sha256":"7c73beba0b1bac31a10922a2b1944723dc1a526259936ec6eaf835117afe6410","schema_version":"1.0","event_id":"sha256:7c73beba0b1bac31a10922a2b1944723dc1a526259936ec6eaf835117afe6410"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:B4BNKBJMBRCSKM7LJZST2MTFMN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"EIFFeL: Ensuring Integrity for Federated Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amrita Roy Chowdhury, Chuan Guo, Laurens van der Maaten, Somesh Jha","submitted_at":"2021-12-23T17:30:28Z","abstract_excerpt":"Federated learning (FL) enables clients to collaborate with a server to train a machine learning model. To ensure privacy, the server performs secure aggregation of updates from the clients. Unfortunately, this prevents verification of the well-formedness (integrity) of the updates as the updates are masked. Consequently, malformed updates designed to poison the model can be injected without detection. In this paper, we formalize the problem of ensuring \\textit{both} update privacy and integrity in FL and present a new system, \\textsf{EIFFeL}, that enables secure aggregation of \\textit{verifie"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.12727","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.12727/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:56:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FWpTwfjdgr6Min/FPe9/DFNei2oAEQmEI1eQgb+c/DVuNr1193YzydGnNMSaxoJFtWzGfmiq0Xuu+q//QfbwDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:26:24.078174Z"},"content_sha256":"96535edc8e402ecf5e6a2b5ca8d1310918756b304ad3d316b4461b2af73a52c4","schema_version":"1.0","event_id":"sha256:96535edc8e402ecf5e6a2b5ca8d1310918756b304ad3d316b4461b2af73a52c4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B4BNKBJMBRCSKM7LJZST2MTFMN/bundle.json","state_url":"https://pith.science/pith/B4BNKBJMBRCSKM7LJZST2MTFMN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B4BNKBJMBRCSKM7LJZST2MTFMN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T04:26:24Z","links":{"resolver":"https://pith.science/pith/B4BNKBJMBRCSKM7LJZST2MTFMN","bundle":"https://pith.science/pith/B4BNKBJMBRCSKM7LJZST2MTFMN/bundle.json","state":"https://pith.science/pith/B4BNKBJMBRCSKM7LJZST2MTFMN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B4BNKBJMBRCSKM7LJZST2MTFMN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:B4BNKBJMBRCSKM7LJZST2MTFMN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df84ca59da4d793d29c58c2fd69f7390f5ca3576ba7e2122911b3ea0ead332f6","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-23T17:30:28Z","title_canon_sha256":"cb007dc8f50a64938ccf8d42794b835442f6fc6995bf6cb3e6bafa2e4fb1f344"},"schema_version":"1.0","source":{"id":"2112.12727","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.12727","created_at":"2026-07-05T04:56:13Z"},{"alias_kind":"arxiv_version","alias_value":"2112.12727v2","created_at":"2026-07-05T04:56:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.12727","created_at":"2026-07-05T04:56:13Z"},{"alias_kind":"pith_short_12","alias_value":"B4BNKBJMBRCS","created_at":"2026-07-05T04:56:13Z"},{"alias_kind":"pith_short_16","alias_value":"B4BNKBJMBRCSKM7L","created_at":"2026-07-05T04:56:13Z"},{"alias_kind":"pith_short_8","alias_value":"B4BNKBJM","created_at":"2026-07-05T04:56:13Z"}],"graph_snapshots":[{"event_id":"sha256:96535edc8e402ecf5e6a2b5ca8d1310918756b304ad3d316b4461b2af73a52c4","target":"graph","created_at":"2026-07-05T04:56:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.12727/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) enables clients to collaborate with a server to train a machine learning model. To ensure privacy, the server performs secure aggregation of updates from the clients. Unfortunately, this prevents verification of the well-formedness (integrity) of the updates as the updates are masked. Consequently, malformed updates designed to poison the model can be injected without detection. In this paper, we formalize the problem of ensuring \\textit{both} update privacy and integrity in FL and present a new system, \\textsf{EIFFeL}, that enables secure aggregation of \\textit{verifie","authors_text":"Amrita Roy Chowdhury, Chuan Guo, Laurens van der Maaten, Somesh Jha","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-23T17:30:28Z","title":"EIFFeL: Ensuring Integrity for Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.12727","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7c73beba0b1bac31a10922a2b1944723dc1a526259936ec6eaf835117afe6410","target":"record","created_at":"2026-07-05T04:56:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df84ca59da4d793d29c58c2fd69f7390f5ca3576ba7e2122911b3ea0ead332f6","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-23T17:30:28Z","title_canon_sha256":"cb007dc8f50a64938ccf8d42794b835442f6fc6995bf6cb3e6bafa2e4fb1f344"},"schema_version":"1.0","source":{"id":"2112.12727","kind":"arxiv","version":2}},"canonical_sha256":"0f02d5052c0c452533eb4e653d3265635c103c4b708a3a27635013efaf704d13","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0f02d5052c0c452533eb4e653d3265635c103c4b708a3a27635013efaf704d13","first_computed_at":"2026-07-05T04:56:13.883735Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:56:13.883735Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"v9uiiRW8DrbRQVk22Dk/kAfENdb5EQ6zTbTdXcgL82z6W03bNPg6t4DiRkag+gPHcxW/4nHAVdfBtBODP5PPAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:56:13.884213Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.12727","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7c73beba0b1bac31a10922a2b1944723dc1a526259936ec6eaf835117afe6410","sha256:96535edc8e402ecf5e6a2b5ca8d1310918756b304ad3d316b4461b2af73a52c4"],"state_sha256":"639b0f0c4b473115b909b6f0c8edcef399e3422bfc81e700f5bb904d924c930e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LTJs4RfpY4Iyzr9ES7LjE2bOqDvL4CnahanuWAiMf3amJUL2IJd7WBPncWxcFbUwugBJgpIgEiYCZA3No+X6BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T04:26:24.083162Z","bundle_sha256":"0ec1df96201427917e346c865fa46a7bc2ac6d1f61afcd8e300597a99a7d1fdb"}}