{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:FI7B5HQ4R4PBJLHFMQ3WB6LS3Z","short_pith_number":"pith:FI7B5HQ4","canonical_record":{"source":{"id":"2109.13631","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-28T11:48:04Z","cross_cats_sorted":[],"title_canon_sha256":"8f841cfc722cfddfa8ed04a000e28c61802c62918d2647f448581b39798bfb8d","abstract_canon_sha256":"1a495c65c7fac4becc0e338598fbf38566a80e5d76b7781644a34d063b12d9e7"},"schema_version":"1.0"},"canonical_sha256":"2a3e1e9e1c8f1e14ace5643760f972de553ccaf2814967e15a11343b04c20852","source":{"kind":"arxiv","id":"2109.13631","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.13631","created_at":"2026-07-05T03:18:04Z"},{"alias_kind":"arxiv_version","alias_value":"2109.13631v1","created_at":"2026-07-05T03:18:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.13631","created_at":"2026-07-05T03:18:04Z"},{"alias_kind":"pith_short_12","alias_value":"FI7B5HQ4R4PB","created_at":"2026-07-05T03:18:04Z"},{"alias_kind":"pith_short_16","alias_value":"FI7B5HQ4R4PBJLHF","created_at":"2026-07-05T03:18:04Z"},{"alias_kind":"pith_short_8","alias_value":"FI7B5HQ4","created_at":"2026-07-05T03:18:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:FI7B5HQ4R4PBJLHFMQ3WB6LS3Z","target":"record","payload":{"canonical_record":{"source":{"id":"2109.13631","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-28T11:48:04Z","cross_cats_sorted":[],"title_canon_sha256":"8f841cfc722cfddfa8ed04a000e28c61802c62918d2647f448581b39798bfb8d","abstract_canon_sha256":"1a495c65c7fac4becc0e338598fbf38566a80e5d76b7781644a34d063b12d9e7"},"schema_version":"1.0"},"canonical_sha256":"2a3e1e9e1c8f1e14ace5643760f972de553ccaf2814967e15a11343b04c20852","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:18:04.814890Z","signature_b64":"MvRRIpiSDD79pEZXI4125tleKuPmDEnzG3miwIJB11pl+/2dQjKHAcqoc/pxyFJHdxgon7wd8gxdbHCGIrxXBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2a3e1e9e1c8f1e14ace5643760f972de553ccaf2814967e15a11343b04c20852","last_reissued_at":"2026-07-05T03:18:04.814504Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:18:04.814504Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2109.13631","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:18:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0LBRUSQeRYZcVBkN7PwsNN1Tv7l1M8RxodULuNq53amdDD7vzR+aJIu7nKf0kmeWuD2HHcgChRPTr4r99SDEAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:49:58.519522Z"},"content_sha256":"4d8eb0c134afca3bbb4fb7e904c03dece9e132297d200cde9b73a31c491bcbd8","schema_version":"1.0","event_id":"sha256:4d8eb0c134afca3bbb4fb7e904c03dece9e132297d200cde9b73a31c491bcbd8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:FI7B5HQ4R4PBJLHFMQ3WB6LS3Z","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Formally Verified Configuration for Hardware Security Modules in the Cloud","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Flaminia L. Luccio, Riccardo Focardi","submitted_at":"2021-09-28T11:48:04Z","abstract_excerpt":"Hardware Security Modules (HSMs) are trusted machines that perform sensitive operations in critical ecosystems. They are usually required by law in financial and government digital services. The most important feature of an HSM is its ability to store sensitive credentials and cryptographic keys inside a tamper-resistant hardware, so that every operation is done internally through a suitable API, and such sensitive data are never exposed outside the device. HSMs are now conveniently provided in the cloud, meaning that the physical machines are remotely hosted by some provider and customers can"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.13631","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.13631/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:18:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tzCDwH5jEfdHvEeVKjHXcgjnRf1u49Um5z2U5jtxnKJCAxXskxHE7cpLlKsAgea6geFZJvxHk0mDYisgm85nDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T20:49:58.519920Z"},"content_sha256":"044713740420891073effff364b23f28f839c32287ab874a756cf6b76e24367e","schema_version":"1.0","event_id":"sha256:044713740420891073effff364b23f28f839c32287ab874a756cf6b76e24367e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FI7B5HQ4R4PBJLHFMQ3WB6LS3Z/bundle.json","state_url":"https://pith.science/pith/FI7B5HQ4R4PBJLHFMQ3WB6LS3Z/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FI7B5HQ4R4PBJLHFMQ3WB6LS3Z/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T20:49:58Z","links":{"resolver":"https://pith.science/pith/FI7B5HQ4R4PBJLHFMQ3WB6LS3Z","bundle":"https://pith.science/pith/FI7B5HQ4R4PBJLHFMQ3WB6LS3Z/bundle.json","state":"https://pith.science/pith/FI7B5HQ4R4PBJLHFMQ3WB6LS3Z/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FI7B5HQ4R4PBJLHFMQ3WB6LS3Z/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:FI7B5HQ4R4PBJLHFMQ3WB6LS3Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1a495c65c7fac4becc0e338598fbf38566a80e5d76b7781644a34d063b12d9e7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-28T11:48:04Z","title_canon_sha256":"8f841cfc722cfddfa8ed04a000e28c61802c62918d2647f448581b39798bfb8d"},"schema_version":"1.0","source":{"id":"2109.13631","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.13631","created_at":"2026-07-05T03:18:04Z"},{"alias_kind":"arxiv_version","alias_value":"2109.13631v1","created_at":"2026-07-05T03:18:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.13631","created_at":"2026-07-05T03:18:04Z"},{"alias_kind":"pith_short_12","alias_value":"FI7B5HQ4R4PB","created_at":"2026-07-05T03:18:04Z"},{"alias_kind":"pith_short_16","alias_value":"FI7B5HQ4R4PBJLHF","created_at":"2026-07-05T03:18:04Z"},{"alias_kind":"pith_short_8","alias_value":"FI7B5HQ4","created_at":"2026-07-05T03:18:04Z"}],"graph_snapshots":[{"event_id":"sha256:044713740420891073effff364b23f28f839c32287ab874a756cf6b76e24367e","target":"graph","created_at":"2026-07-05T03:18:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.13631/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Hardware Security Modules (HSMs) are trusted machines that perform sensitive operations in critical ecosystems. They are usually required by law in financial and government digital services. The most important feature of an HSM is its ability to store sensitive credentials and cryptographic keys inside a tamper-resistant hardware, so that every operation is done internally through a suitable API, and such sensitive data are never exposed outside the device. HSMs are now conveniently provided in the cloud, meaning that the physical machines are remotely hosted by some provider and customers can","authors_text":"Flaminia L. Luccio, Riccardo Focardi","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-28T11:48:04Z","title":"A Formally Verified Configuration for Hardware Security Modules in the Cloud"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.13631","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4d8eb0c134afca3bbb4fb7e904c03dece9e132297d200cde9b73a31c491bcbd8","target":"record","created_at":"2026-07-05T03:18:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1a495c65c7fac4becc0e338598fbf38566a80e5d76b7781644a34d063b12d9e7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-28T11:48:04Z","title_canon_sha256":"8f841cfc722cfddfa8ed04a000e28c61802c62918d2647f448581b39798bfb8d"},"schema_version":"1.0","source":{"id":"2109.13631","kind":"arxiv","version":1}},"canonical_sha256":"2a3e1e9e1c8f1e14ace5643760f972de553ccaf2814967e15a11343b04c20852","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2a3e1e9e1c8f1e14ace5643760f972de553ccaf2814967e15a11343b04c20852","first_computed_at":"2026-07-05T03:18:04.814504Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:18:04.814504Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MvRRIpiSDD79pEZXI4125tleKuPmDEnzG3miwIJB11pl+/2dQjKHAcqoc/pxyFJHdxgon7wd8gxdbHCGIrxXBA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:18:04.814890Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.13631","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4d8eb0c134afca3bbb4fb7e904c03dece9e132297d200cde9b73a31c491bcbd8","sha256:044713740420891073effff364b23f28f839c32287ab874a756cf6b76e24367e"],"state_sha256":"97d02c5d50717392cc9c8899281aa9cd2766b93d0e64651f80316b84bebb4a74"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ap2DTj2M50d9oaHfZ6WaYopSYPf4e3VqRrzGC5iACu3UFIZTAzB+bD2mz9ebVymRZfnHlreuO/PcCb1EgaXcBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T20:49:58.521914Z","bundle_sha256":"aeacb3079c2eeaac670dd16283014bbf807df8f9801776fbcd3c096572c82fe5"}}