{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:CM4DHTX45UFBJZ4D5HJA4IQPPM","short_pith_number":"pith:CM4DHTX4","canonical_record":{"source":{"id":"2505.18332","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T19:39:18Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"c261414e8bdab405b7c9e7384fcc335cae008130efc1383babfed5491dc89670","abstract_canon_sha256":"1712f075fc75531e667278a518b6513d2a12b383a2daf80d55228b249b9139ee"},"schema_version":"1.0"},"canonical_sha256":"133833cefced0a14e783e9d20e220f7b1a73df1a1b7e9472a2958f41b10cd614","source":{"kind":"arxiv","id":"2505.18332","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.18332","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"arxiv_version","alias_value":"2505.18332v1","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.18332","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"pith_short_12","alias_value":"CM4DHTX45UFB","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"pith_short_16","alias_value":"CM4DHTX45UFBJZ4D","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"pith_short_8","alias_value":"CM4DHTX4","created_at":"2026-07-05T11:08:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:CM4DHTX45UFBJZ4D5HJA4IQPPM","target":"record","payload":{"canonical_record":{"source":{"id":"2505.18332","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T19:39:18Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"c261414e8bdab405b7c9e7384fcc335cae008130efc1383babfed5491dc89670","abstract_canon_sha256":"1712f075fc75531e667278a518b6513d2a12b383a2daf80d55228b249b9139ee"},"schema_version":"1.0"},"canonical_sha256":"133833cefced0a14e783e9d20e220f7b1a73df1a1b7e9472a2958f41b10cd614","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:08:44.947232Z","signature_b64":"deJB0pGOeRKsebPwxEHhs+UfF/JPtHmvdwrRYrz4FKfZRbJNNAV2JfnkkfXOHa8dkGKbiEIkSqkIPx4zRveiAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"133833cefced0a14e783e9d20e220f7b1a73df1a1b7e9472a2958f41b10cd614","last_reissued_at":"2026-07-05T11:08:44.946785Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:08:44.946785Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.18332","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:08:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Sx94SwE8iJxFq3FUsHFJ+xEqJDqap+IwzOWOAuvs0Xl+5YhbQJkasxl3vOd+78Y6XFpaQaCwQ3v2wGzHFRnSBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T06:24:42.598723Z"},"content_sha256":"31568719d50c817a53c9cd4379984b280a1000c4eb64a25a165632adb29f9c3d","schema_version":"1.0","event_id":"sha256:31568719d50c817a53c9cd4379984b280a1000c4eb64a25a165632adb29f9c3d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:CM4DHTX45UFBJZ4D5HJA4IQPPM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Akilesh Potti, Arka Pal, Erica Choi, Louai Zahran, Micah Goldblum, Rahul Thomas","submitted_at":"2025-05-23T19:39:18Z","abstract_excerpt":"Recent advances in Large Language Models (LLMs) have led to the widespread adoption of third-party inference services, raising critical privacy concerns. Existing methods of performing private third-party inference, such as Secure Multiparty Computation (SMPC), often rely on cryptographic methods. However, these methods are thousands of times slower than standard unencrypted inference, and fail to scale to large modern LLMs. Therefore, recent lines of work have explored the replacement of expensive encrypted nonlinear computations in SMPC with statistical obfuscation methods - in particular, r"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.18332","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.18332/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:08:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QbPhomVzK8vaLMY1C6QfEbq+3vveobl6hfNTQpZFSXxkCFpPj9VNKbHzyoWOBoRO7ieYFQHJkhYUaPAMqLkdDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T06:24:42.599278Z"},"content_sha256":"5ad5a0ae765bd247d4f56cca27de18b58bc30f9a4afa63433443c0cabd8bf892","schema_version":"1.0","event_id":"sha256:5ad5a0ae765bd247d4f56cca27de18b58bc30f9a4afa63433443c0cabd8bf892"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CM4DHTX45UFBJZ4D5HJA4IQPPM/bundle.json","state_url":"https://pith.science/pith/CM4DHTX45UFBJZ4D5HJA4IQPPM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CM4DHTX45UFBJZ4D5HJA4IQPPM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T06:24:42Z","links":{"resolver":"https://pith.science/pith/CM4DHTX45UFBJZ4D5HJA4IQPPM","bundle":"https://pith.science/pith/CM4DHTX45UFBJZ4D5HJA4IQPPM/bundle.json","state":"https://pith.science/pith/CM4DHTX45UFBJZ4D5HJA4IQPPM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CM4DHTX45UFBJZ4D5HJA4IQPPM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CM4DHTX45UFBJZ4D5HJA4IQPPM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1712f075fc75531e667278a518b6513d2a12b383a2daf80d55228b249b9139ee","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T19:39:18Z","title_canon_sha256":"c261414e8bdab405b7c9e7384fcc335cae008130efc1383babfed5491dc89670"},"schema_version":"1.0","source":{"id":"2505.18332","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.18332","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"arxiv_version","alias_value":"2505.18332v1","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.18332","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"pith_short_12","alias_value":"CM4DHTX45UFB","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"pith_short_16","alias_value":"CM4DHTX45UFBJZ4D","created_at":"2026-07-05T11:08:44Z"},{"alias_kind":"pith_short_8","alias_value":"CM4DHTX4","created_at":"2026-07-05T11:08:44Z"}],"graph_snapshots":[{"event_id":"sha256:5ad5a0ae765bd247d4f56cca27de18b58bc30f9a4afa63433443c0cabd8bf892","target":"graph","created_at":"2026-07-05T11:08:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.18332/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances in Large Language Models (LLMs) have led to the widespread adoption of third-party inference services, raising critical privacy concerns. Existing methods of performing private third-party inference, such as Secure Multiparty Computation (SMPC), often rely on cryptographic methods. However, these methods are thousands of times slower than standard unencrypted inference, and fail to scale to large modern LLMs. Therefore, recent lines of work have explored the replacement of expensive encrypted nonlinear computations in SMPC with statistical obfuscation methods - in particular, r","authors_text":"Akilesh Potti, Arka Pal, Erica Choi, Louai Zahran, Micah Goldblum, Rahul Thomas","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T19:39:18Z","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.18332","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:31568719d50c817a53c9cd4379984b280a1000c4eb64a25a165632adb29f9c3d","target":"record","created_at":"2026-07-05T11:08:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1712f075fc75531e667278a518b6513d2a12b383a2daf80d55228b249b9139ee","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-23T19:39:18Z","title_canon_sha256":"c261414e8bdab405b7c9e7384fcc335cae008130efc1383babfed5491dc89670"},"schema_version":"1.0","source":{"id":"2505.18332","kind":"arxiv","version":1}},"canonical_sha256":"133833cefced0a14e783e9d20e220f7b1a73df1a1b7e9472a2958f41b10cd614","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"133833cefced0a14e783e9d20e220f7b1a73df1a1b7e9472a2958f41b10cd614","first_computed_at":"2026-07-05T11:08:44.946785Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:08:44.946785Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"deJB0pGOeRKsebPwxEHhs+UfF/JPtHmvdwrRYrz4FKfZRbJNNAV2JfnkkfXOHa8dkGKbiEIkSqkIPx4zRveiAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:08:44.947232Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.18332","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:31568719d50c817a53c9cd4379984b280a1000c4eb64a25a165632adb29f9c3d","sha256:5ad5a0ae765bd247d4f56cca27de18b58bc30f9a4afa63433443c0cabd8bf892"],"state_sha256":"6a4ad05cb9f826996ecd26fc20a0ce660d743472e4834e763c370107a1e09417"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wHOA4TIl1GT+Fy9ckMEZWwZv1E64EuIFuJkKooILbR5OVlZrpc9g3JOPGtcV2gQAmSsYFETuICb0vGyDxHF/AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T06:24:42.603393Z","bundle_sha256":"693b928443f7f5ac7c0e0792ad9bfc958098eb92a5e0c44f3c2d34c8b4ac1182"}}