{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2015:CUPDCH5AQ6T6AQVZYHCN4L7HZF","short_pith_number":"pith:CUPDCH5A","canonical_record":{"source":{"id":"1511.05682","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-11-18T07:49:11Z","cross_cats_sorted":[],"title_canon_sha256":"e5c2ce3942fece99d7c7554bf91028df0cef93abba68eed5e6430cd4a55cd085","abstract_canon_sha256":"ca90a40bc8322fd51c82e0d42a76314d14bb8ba0fc0e4707166ad7aebc4e087d"},"schema_version":"1.0"},"canonical_sha256":"151e311fa087a7e042b9c1c4de2fe7c94b2f31cd6a5b2bdbe824106f14ae697d","source":{"kind":"arxiv","id":"1511.05682","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1511.05682","created_at":"2026-05-18T01:23:44Z"},{"alias_kind":"arxiv_version","alias_value":"1511.05682v2","created_at":"2026-05-18T01:23:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1511.05682","created_at":"2026-05-18T01:23:44Z"},{"alias_kind":"pith_short_12","alias_value":"CUPDCH5AQ6T6","created_at":"2026-05-18T12:29:17Z"},{"alias_kind":"pith_short_16","alias_value":"CUPDCH5AQ6T6AQVZ","created_at":"2026-05-18T12:29:17Z"},{"alias_kind":"pith_short_8","alias_value":"CUPDCH5A","created_at":"2026-05-18T12:29:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2015:CUPDCH5AQ6T6AQVZYHCN4L7HZF","target":"record","payload":{"canonical_record":{"source":{"id":"1511.05682","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-11-18T07:49:11Z","cross_cats_sorted":[],"title_canon_sha256":"e5c2ce3942fece99d7c7554bf91028df0cef93abba68eed5e6430cd4a55cd085","abstract_canon_sha256":"ca90a40bc8322fd51c82e0d42a76314d14bb8ba0fc0e4707166ad7aebc4e087d"},"schema_version":"1.0"},"canonical_sha256":"151e311fa087a7e042b9c1c4de2fe7c94b2f31cd6a5b2bdbe824106f14ae697d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:23:44.166387Z","signature_b64":"5n9vOR5sDZjEnU5tb1QPoOKGzw4+GS9vzvUOXLo1OghCJvnvy6OIOjDHb0fG5jWBTPAy+lsQa26HyGhTFJ3KDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"151e311fa087a7e042b9c1c4de2fe7c94b2f31cd6a5b2bdbe824106f14ae697d","last_reissued_at":"2026-05-18T01:23:44.165707Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:23:44.165707Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1511.05682","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:23:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1tI7CQ2HcL3gqor61RjueZGg37DmAvJrkoN6TJCo0GUHQp1XMLL7MWxw4kbqjMUEsnmcuiUlab/bO6TCGKgSDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T10:45:31.486920Z"},"content_sha256":"13e30fc0b9f1a4b4c1efa6fbf380a7adb9e89e6d9bfe7de7e1d2e0f3a7425536","schema_version":"1.0","event_id":"sha256:13e30fc0b9f1a4b4c1efa6fbf380a7adb9e89e6d9bfe7de7e1d2e0f3a7425536"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2015:CUPDCH5AQ6T6AQVZYHCN4L7HZF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Trust-in-the-Middle: Towards Establishing Trustworthiness of Authentication Proxies using Trusted Computing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Kemal Bicakci, Yusuf Uzunay","submitted_at":"2015-11-18T07:49:11Z","abstract_excerpt":"Authentication proxies, which store users' secret credentials and submit them to servers on their behalf, offer benefits with respect to security of the authentication and usability of credential management. However, as being a service that is not in control of users, one important problem they suffer is the trust problem; how users trust that their secrets are handled securely in the proxy and not revealed to third parties. In this paper, we present a solution called Trust-in-the-Middle, a TPM based proxy system which ensures that user credentials are securely stored and submitted without dis"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1511.05682","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:23:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v1Ld7Rlw9eD5cnuEDDY5C/RbscliFQYNNGHUL1zZQVLhEiZY28f78TeFg6kfF7yUKKs5awirrH7gNQdSAaz2Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T10:45:31.487593Z"},"content_sha256":"7105a02ac0a317038ea31a9f737903740238af3d950d624d8466bb9893509c35","schema_version":"1.0","event_id":"sha256:7105a02ac0a317038ea31a9f737903740238af3d950d624d8466bb9893509c35"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CUPDCH5AQ6T6AQVZYHCN4L7HZF/bundle.json","state_url":"https://pith.science/pith/CUPDCH5AQ6T6AQVZYHCN4L7HZF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CUPDCH5AQ6T6AQVZYHCN4L7HZF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-26T10:45:31Z","links":{"resolver":"https://pith.science/pith/CUPDCH5AQ6T6AQVZYHCN4L7HZF","bundle":"https://pith.science/pith/CUPDCH5AQ6T6AQVZYHCN4L7HZF/bundle.json","state":"https://pith.science/pith/CUPDCH5AQ6T6AQVZYHCN4L7HZF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CUPDCH5AQ6T6AQVZYHCN4L7HZF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2015:CUPDCH5AQ6T6AQVZYHCN4L7HZF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ca90a40bc8322fd51c82e0d42a76314d14bb8ba0fc0e4707166ad7aebc4e087d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-11-18T07:49:11Z","title_canon_sha256":"e5c2ce3942fece99d7c7554bf91028df0cef93abba68eed5e6430cd4a55cd085"},"schema_version":"1.0","source":{"id":"1511.05682","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1511.05682","created_at":"2026-05-18T01:23:44Z"},{"alias_kind":"arxiv_version","alias_value":"1511.05682v2","created_at":"2026-05-18T01:23:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1511.05682","created_at":"2026-05-18T01:23:44Z"},{"alias_kind":"pith_short_12","alias_value":"CUPDCH5AQ6T6","created_at":"2026-05-18T12:29:17Z"},{"alias_kind":"pith_short_16","alias_value":"CUPDCH5AQ6T6AQVZ","created_at":"2026-05-18T12:29:17Z"},{"alias_kind":"pith_short_8","alias_value":"CUPDCH5A","created_at":"2026-05-18T12:29:17Z"}],"graph_snapshots":[{"event_id":"sha256:7105a02ac0a317038ea31a9f737903740238af3d950d624d8466bb9893509c35","target":"graph","created_at":"2026-05-18T01:23:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Authentication proxies, which store users' secret credentials and submit them to servers on their behalf, offer benefits with respect to security of the authentication and usability of credential management. However, as being a service that is not in control of users, one important problem they suffer is the trust problem; how users trust that their secrets are handled securely in the proxy and not revealed to third parties. In this paper, we present a solution called Trust-in-the-Middle, a TPM based proxy system which ensures that user credentials are securely stored and submitted without dis","authors_text":"Kemal Bicakci, Yusuf Uzunay","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-11-18T07:49:11Z","title":"Trust-in-the-Middle: Towards Establishing Trustworthiness of Authentication Proxies using Trusted Computing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1511.05682","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:13e30fc0b9f1a4b4c1efa6fbf380a7adb9e89e6d9bfe7de7e1d2e0f3a7425536","target":"record","created_at":"2026-05-18T01:23:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ca90a40bc8322fd51c82e0d42a76314d14bb8ba0fc0e4707166ad7aebc4e087d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-11-18T07:49:11Z","title_canon_sha256":"e5c2ce3942fece99d7c7554bf91028df0cef93abba68eed5e6430cd4a55cd085"},"schema_version":"1.0","source":{"id":"1511.05682","kind":"arxiv","version":2}},"canonical_sha256":"151e311fa087a7e042b9c1c4de2fe7c94b2f31cd6a5b2bdbe824106f14ae697d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"151e311fa087a7e042b9c1c4de2fe7c94b2f31cd6a5b2bdbe824106f14ae697d","first_computed_at":"2026-05-18T01:23:44.165707Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:23:44.165707Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5n9vOR5sDZjEnU5tb1QPoOKGzw4+GS9vzvUOXLo1OghCJvnvy6OIOjDHb0fG5jWBTPAy+lsQa26HyGhTFJ3KDw==","signature_status":"signed_v1","signed_at":"2026-05-18T01:23:44.166387Z","signed_message":"canonical_sha256_bytes"},"source_id":"1511.05682","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:13e30fc0b9f1a4b4c1efa6fbf380a7adb9e89e6d9bfe7de7e1d2e0f3a7425536","sha256:7105a02ac0a317038ea31a9f737903740238af3d950d624d8466bb9893509c35"],"state_sha256":"102e80d485819cb02c047d82eb3d3f65e54d8e5b1092688d0d23f219ef1fe17a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+BNUCgEiC1NnvC3Bqu2YpD0FlEM7OEpQj7GRvpRQAoOBOxed19tSXe/8MEXtv0yxIr3k4hkvBEbJx4Zys3vzBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-26T10:45:31.491454Z","bundle_sha256":"34d839e6d9ddffc499feb1bf7a45cdf5b964c4b7e8c859ab988e1365756940d7"}}