{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:EE6JZCH3AQR35FKWLWJ3INYQWE","short_pith_number":"pith:EE6JZCH3","canonical_record":{"source":{"id":"1911.09312","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-21T07:09:40Z","cross_cats_sorted":[],"title_canon_sha256":"b965d9ab81051a3952a025ef059b0f717c69c813b5bc62b284789734ff64c8d2","abstract_canon_sha256":"8fdf7496850efdbc63d7a6df819e3c3d85ced3eb035ed9c09b514a5726403849"},"schema_version":"1.0"},"canonical_sha256":"213c9c88fb0423be95565d93b43710b12ef84e2ffa89771f73ffdbb84a15f37a","source":{"kind":"arxiv","id":"1911.09312","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.09312","created_at":"2026-07-05T00:25:50Z"},{"alias_kind":"arxiv_version","alias_value":"1911.09312v2","created_at":"2026-07-05T00:25:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.09312","created_at":"2026-07-05T00:25:50Z"},{"alias_kind":"pith_short_12","alias_value":"EE6JZCH3AQR3","created_at":"2026-07-05T00:25:50Z"},{"alias_kind":"pith_short_16","alias_value":"EE6JZCH3AQR35FKW","created_at":"2026-07-05T00:25:50Z"},{"alias_kind":"pith_short_8","alias_value":"EE6JZCH3","created_at":"2026-07-05T00:25:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:EE6JZCH3AQR35FKWLWJ3INYQWE","target":"record","payload":{"canonical_record":{"source":{"id":"1911.09312","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-21T07:09:40Z","cross_cats_sorted":[],"title_canon_sha256":"b965d9ab81051a3952a025ef059b0f717c69c813b5bc62b284789734ff64c8d2","abstract_canon_sha256":"8fdf7496850efdbc63d7a6df819e3c3d85ced3eb035ed9c09b514a5726403849"},"schema_version":"1.0"},"canonical_sha256":"213c9c88fb0423be95565d93b43710b12ef84e2ffa89771f73ffdbb84a15f37a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:25:50.382537Z","signature_b64":"Ao/CZdv2ClKOub9Gw8avl6X9FLb7/+rBxE02PWGqsqyGtvTuIMcjC7kC5hWd5eUsFt3jLBjj66Rb5AFmI5sTCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"213c9c88fb0423be95565d93b43710b12ef84e2ffa89771f73ffdbb84a15f37a","last_reissued_at":"2026-07-05T00:25:50.381990Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:25:50.381990Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1911.09312","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:25:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HrZE6x+6UTwCCCils7ihF9/QFSw7x1S22t2al637CQv7F8jwypP7JkQMoZLKLaMq3SsSoWhzKo1Ov0jg3cU+DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T07:59:08.344290Z"},"content_sha256":"a47f498d95f78af50a5651068a2a7a8ca2ab2065adca97c20ff59b137e6acad4","schema_version":"1.0","event_id":"sha256:a47f498d95f78af50a5651068a2a7a8ca2ab2065adca97c20ff59b137e6acad4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:EE6JZCH3AQR35FKWLWJ3INYQWE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Revisiting and Evaluating Software Side-channel Vulnerabilities and Countermeasures in Cryptographic Applications","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jun Jiang, Tianwei Zhang, Yinqian Zhang","submitted_at":"2019-11-21T07:09:40Z","abstract_excerpt":"We systematize software side-channel attacks with a focus on vulnerabilities and countermeasures in the cryptographic implementations. Particularly, we survey past research literature to categorize vulnerable implementations, and identify common strategies to eliminate them. We then evaluate popular libraries and applications, quantitatively measuring and comparing the vulnerability severity, response time and coverage. Based on these characterizations and evaluations, we offer some insights for side-channel researchers, cryptographic software developers and users. We hope our study can inspir"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.09312","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1911.09312/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:25:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rfq2AVpi/AU5IAcqnFSHAy0hS5OX6lBH1nxYxYyJrS2gKL4t5qZ4uyztxqadBFmCjmZaiDP4UIHHRfUrGrhzBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T07:59:08.344929Z"},"content_sha256":"2ba7c3f4a8308021420f7b966e31a41714e4365446020618d0ffc4988afe3b7c","schema_version":"1.0","event_id":"sha256:2ba7c3f4a8308021420f7b966e31a41714e4365446020618d0ffc4988afe3b7c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EE6JZCH3AQR35FKWLWJ3INYQWE/bundle.json","state_url":"https://pith.science/pith/EE6JZCH3AQR35FKWLWJ3INYQWE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EE6JZCH3AQR35FKWLWJ3INYQWE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T07:59:08Z","links":{"resolver":"https://pith.science/pith/EE6JZCH3AQR35FKWLWJ3INYQWE","bundle":"https://pith.science/pith/EE6JZCH3AQR35FKWLWJ3INYQWE/bundle.json","state":"https://pith.science/pith/EE6JZCH3AQR35FKWLWJ3INYQWE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EE6JZCH3AQR35FKWLWJ3INYQWE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:EE6JZCH3AQR35FKWLWJ3INYQWE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8fdf7496850efdbc63d7a6df819e3c3d85ced3eb035ed9c09b514a5726403849","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-21T07:09:40Z","title_canon_sha256":"b965d9ab81051a3952a025ef059b0f717c69c813b5bc62b284789734ff64c8d2"},"schema_version":"1.0","source":{"id":"1911.09312","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.09312","created_at":"2026-07-05T00:25:50Z"},{"alias_kind":"arxiv_version","alias_value":"1911.09312v2","created_at":"2026-07-05T00:25:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.09312","created_at":"2026-07-05T00:25:50Z"},{"alias_kind":"pith_short_12","alias_value":"EE6JZCH3AQR3","created_at":"2026-07-05T00:25:50Z"},{"alias_kind":"pith_short_16","alias_value":"EE6JZCH3AQR35FKW","created_at":"2026-07-05T00:25:50Z"},{"alias_kind":"pith_short_8","alias_value":"EE6JZCH3","created_at":"2026-07-05T00:25:50Z"}],"graph_snapshots":[{"event_id":"sha256:2ba7c3f4a8308021420f7b966e31a41714e4365446020618d0ffc4988afe3b7c","target":"graph","created_at":"2026-07-05T00:25:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.09312/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We systematize software side-channel attacks with a focus on vulnerabilities and countermeasures in the cryptographic implementations. Particularly, we survey past research literature to categorize vulnerable implementations, and identify common strategies to eliminate them. We then evaluate popular libraries and applications, quantitatively measuring and comparing the vulnerability severity, response time and coverage. Based on these characterizations and evaluations, we offer some insights for side-channel researchers, cryptographic software developers and users. We hope our study can inspir","authors_text":"Jun Jiang, Tianwei Zhang, Yinqian Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-21T07:09:40Z","title":"Revisiting and Evaluating Software Side-channel Vulnerabilities and Countermeasures in Cryptographic Applications"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.09312","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a47f498d95f78af50a5651068a2a7a8ca2ab2065adca97c20ff59b137e6acad4","target":"record","created_at":"2026-07-05T00:25:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8fdf7496850efdbc63d7a6df819e3c3d85ced3eb035ed9c09b514a5726403849","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-11-21T07:09:40Z","title_canon_sha256":"b965d9ab81051a3952a025ef059b0f717c69c813b5bc62b284789734ff64c8d2"},"schema_version":"1.0","source":{"id":"1911.09312","kind":"arxiv","version":2}},"canonical_sha256":"213c9c88fb0423be95565d93b43710b12ef84e2ffa89771f73ffdbb84a15f37a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"213c9c88fb0423be95565d93b43710b12ef84e2ffa89771f73ffdbb84a15f37a","first_computed_at":"2026-07-05T00:25:50.381990Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:25:50.381990Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Ao/CZdv2ClKOub9Gw8avl6X9FLb7/+rBxE02PWGqsqyGtvTuIMcjC7kC5hWd5eUsFt3jLBjj66Rb5AFmI5sTCw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:25:50.382537Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.09312","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a47f498d95f78af50a5651068a2a7a8ca2ab2065adca97c20ff59b137e6acad4","sha256:2ba7c3f4a8308021420f7b966e31a41714e4365446020618d0ffc4988afe3b7c"],"state_sha256":"2c0cb1c9341d40edbd4bb5a22eccdc4e599510cdaa9c6f8e769c8a67df2c7a0c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rQxDqxL55pZ8p7cW4sKZbXrWcxxphEHEHXKO8nKSs4v9HfJqhK+jP5DEqAN2EZ3w0bub6DegjbowlzV3IyLRCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T07:59:08.349862Z","bundle_sha256":"c17a342e6bec3623b0f29c9e0fa6c9885816d5bc3708a266363825d62958fe3f"}}