{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:GUZEV262LIE4ZJP7PPLUHPVAJD","short_pith_number":"pith:GUZEV262","canonical_record":{"source":{"id":"1609.08187","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-09-26T20:50:03Z","cross_cats_sorted":[],"title_canon_sha256":"711b541899480b4decab434457fae94815590af8ffac3362ea4b1663c314a01b","abstract_canon_sha256":"a9433b333946ce1138ca490c363a6622b6ca388201834848c5d1e0781f7e91a1"},"schema_version":"1.0"},"canonical_sha256":"35324aebda5a09cca5ff7bd743bea048da38d53a226981ed854549d38f3ae2ef","source":{"kind":"arxiv","id":"1609.08187","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1609.08187","created_at":"2026-05-18T01:02:30Z"},{"alias_kind":"arxiv_version","alias_value":"1609.08187v2","created_at":"2026-05-18T01:02:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1609.08187","created_at":"2026-05-18T01:02:30Z"},{"alias_kind":"pith_short_12","alias_value":"GUZEV262LIE4","created_at":"2026-05-18T12:30:19Z"},{"alias_kind":"pith_short_16","alias_value":"GUZEV262LIE4ZJP7","created_at":"2026-05-18T12:30:19Z"},{"alias_kind":"pith_short_8","alias_value":"GUZEV262","created_at":"2026-05-18T12:30:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:GUZEV262LIE4ZJP7PPLUHPVAJD","target":"record","payload":{"canonical_record":{"source":{"id":"1609.08187","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-09-26T20:50:03Z","cross_cats_sorted":[],"title_canon_sha256":"711b541899480b4decab434457fae94815590af8ffac3362ea4b1663c314a01b","abstract_canon_sha256":"a9433b333946ce1138ca490c363a6622b6ca388201834848c5d1e0781f7e91a1"},"schema_version":"1.0"},"canonical_sha256":"35324aebda5a09cca5ff7bd743bea048da38d53a226981ed854549d38f3ae2ef","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:02:30.227440Z","signature_b64":"uT5lZUXwNLY6JZa9aM6V3WgTmeytbb3JGFmRzgrSBhpFjveiX9FroShSwlEks6pep7vYlt4fzuryPIrTMlHBAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"35324aebda5a09cca5ff7bd743bea048da38d53a226981ed854549d38f3ae2ef","last_reissued_at":"2026-05-18T01:02:30.226859Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:02:30.226859Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1609.08187","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:02:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mA25GVeqTKp/1FLcsRE3jSuDZ7+5VIpvo2TS6Dy1VVqAY/bEXxR4jbC0SgmZVh0tSbygf6+LYg1Q37xIpge9CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T16:23:58.312221Z"},"content_sha256":"e5942d3d786edaf2fa54a8e57b2000d656d7a1f214e7c75940ebe4ad9de174db","schema_version":"1.0","event_id":"sha256:e5942d3d786edaf2fa54a8e57b2000d656d7a1f214e7c75940ebe4ad9de174db"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:GUZEV262LIE4ZJP7PPLUHPVAJD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Effect of DNS on Tor's Anonymity","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Benjamin Greschbach, Laura M. Roberts, Nick Feamster, Philipp Winter, Tobias Pulls","submitted_at":"2016-09-26T20:50:03Z","abstract_excerpt":"Previous attacks that link the sender and receiver of traffic in the Tor network (\"correlation attacks\") have generally relied on analyzing traffic from TCP connections. The TCP connections of a typical client application, however, are often accompanied by DNS requests and responses. This additional traffic presents more opportunities for correlation attacks. This paper quantifies how DNS traffic can make Tor users more vulnerable to correlation attacks. We investigate how incorporating DNS traffic can make existing correlation attacks more powerful and how DNS lookups can leak information to "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1609.08187","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:02:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B+cvQJ3QmhbuFn6r+0KvPgsmgnxtRbtSJL9DCk+VeGxIGXhIsFvlSCMKJDsEHDgIyzNHGyjeGPrbZ3zq9zEoBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T16:23:58.312935Z"},"content_sha256":"a5f7e10d7c94620ca03f0ba808980d3624d3bd82680f9266c87e670d7deeede9","schema_version":"1.0","event_id":"sha256:a5f7e10d7c94620ca03f0ba808980d3624d3bd82680f9266c87e670d7deeede9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GUZEV262LIE4ZJP7PPLUHPVAJD/bundle.json","state_url":"https://pith.science/pith/GUZEV262LIE4ZJP7PPLUHPVAJD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GUZEV262LIE4ZJP7PPLUHPVAJD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T16:23:58Z","links":{"resolver":"https://pith.science/pith/GUZEV262LIE4ZJP7PPLUHPVAJD","bundle":"https://pith.science/pith/GUZEV262LIE4ZJP7PPLUHPVAJD/bundle.json","state":"https://pith.science/pith/GUZEV262LIE4ZJP7PPLUHPVAJD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GUZEV262LIE4ZJP7PPLUHPVAJD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:GUZEV262LIE4ZJP7PPLUHPVAJD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a9433b333946ce1138ca490c363a6622b6ca388201834848c5d1e0781f7e91a1","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-09-26T20:50:03Z","title_canon_sha256":"711b541899480b4decab434457fae94815590af8ffac3362ea4b1663c314a01b"},"schema_version":"1.0","source":{"id":"1609.08187","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1609.08187","created_at":"2026-05-18T01:02:30Z"},{"alias_kind":"arxiv_version","alias_value":"1609.08187v2","created_at":"2026-05-18T01:02:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1609.08187","created_at":"2026-05-18T01:02:30Z"},{"alias_kind":"pith_short_12","alias_value":"GUZEV262LIE4","created_at":"2026-05-18T12:30:19Z"},{"alias_kind":"pith_short_16","alias_value":"GUZEV262LIE4ZJP7","created_at":"2026-05-18T12:30:19Z"},{"alias_kind":"pith_short_8","alias_value":"GUZEV262","created_at":"2026-05-18T12:30:19Z"}],"graph_snapshots":[{"event_id":"sha256:a5f7e10d7c94620ca03f0ba808980d3624d3bd82680f9266c87e670d7deeede9","target":"graph","created_at":"2026-05-18T01:02:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Previous attacks that link the sender and receiver of traffic in the Tor network (\"correlation attacks\") have generally relied on analyzing traffic from TCP connections. The TCP connections of a typical client application, however, are often accompanied by DNS requests and responses. This additional traffic presents more opportunities for correlation attacks. This paper quantifies how DNS traffic can make Tor users more vulnerable to correlation attacks. We investigate how incorporating DNS traffic can make existing correlation attacks more powerful and how DNS lookups can leak information to ","authors_text":"Benjamin Greschbach, Laura M. Roberts, Nick Feamster, Philipp Winter, Tobias Pulls","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-09-26T20:50:03Z","title":"The Effect of DNS on Tor's Anonymity"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1609.08187","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e5942d3d786edaf2fa54a8e57b2000d656d7a1f214e7c75940ebe4ad9de174db","target":"record","created_at":"2026-05-18T01:02:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a9433b333946ce1138ca490c363a6622b6ca388201834848c5d1e0781f7e91a1","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-09-26T20:50:03Z","title_canon_sha256":"711b541899480b4decab434457fae94815590af8ffac3362ea4b1663c314a01b"},"schema_version":"1.0","source":{"id":"1609.08187","kind":"arxiv","version":2}},"canonical_sha256":"35324aebda5a09cca5ff7bd743bea048da38d53a226981ed854549d38f3ae2ef","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"35324aebda5a09cca5ff7bd743bea048da38d53a226981ed854549d38f3ae2ef","first_computed_at":"2026-05-18T01:02:30.226859Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:02:30.226859Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"uT5lZUXwNLY6JZa9aM6V3WgTmeytbb3JGFmRzgrSBhpFjveiX9FroShSwlEks6pep7vYlt4fzuryPIrTMlHBAQ==","signature_status":"signed_v1","signed_at":"2026-05-18T01:02:30.227440Z","signed_message":"canonical_sha256_bytes"},"source_id":"1609.08187","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e5942d3d786edaf2fa54a8e57b2000d656d7a1f214e7c75940ebe4ad9de174db","sha256:a5f7e10d7c94620ca03f0ba808980d3624d3bd82680f9266c87e670d7deeede9"],"state_sha256":"3127cd05ef022ed8d8664fb4968cf72a58df66e130cf39b4393a9fcf3452df30"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bwQACMVaC3Kxidg/4NezkT38rAC5kLQdg69LnnO3q5eLtbdZkW11ABMCad9iosDekeRf8MsQJQYgDwDj1NJRDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T16:23:58.317206Z","bundle_sha256":"aafa24a8ed8ff8095c9241ff98b0f2fa6dd61200cc31feff1a440a603205d791"}}