{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:H2SJPW4TJAJWD4JP7ZZ2Y3DVKI","short_pith_number":"pith:H2SJPW4T","canonical_record":{"source":{"id":"2501.11771","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-20T22:23:50Z","cross_cats_sorted":["cs.DC"],"title_canon_sha256":"1a4b6b2171e719e0020f3b8503098ec05015af7ad4e5cf35581350d6ed32ac1e","abstract_canon_sha256":"7fefb13196f42087235da776d05cc00d5ac93b9ef6f40778a0ed86384ec674d3"},"schema_version":"1.0"},"canonical_sha256":"3ea497db93481361f12ffe73ac6c75521ae383aa88f27b3cf3502cd8e5cf1f91","source":{"kind":"arxiv","id":"2501.11771","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.11771","created_at":"2026-07-05T11:53:27Z"},{"alias_kind":"arxiv_version","alias_value":"2501.11771v3","created_at":"2026-07-05T11:53:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.11771","created_at":"2026-07-05T11:53:27Z"},{"alias_kind":"pith_short_12","alias_value":"H2SJPW4TJAJW","created_at":"2026-07-05T11:53:27Z"},{"alias_kind":"pith_short_16","alias_value":"H2SJPW4TJAJWD4JP","created_at":"2026-07-05T11:53:27Z"},{"alias_kind":"pith_short_8","alias_value":"H2SJPW4T","created_at":"2026-07-05T11:53:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:H2SJPW4TJAJWD4JP7ZZ2Y3DVKI","target":"record","payload":{"canonical_record":{"source":{"id":"2501.11771","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-20T22:23:50Z","cross_cats_sorted":["cs.DC"],"title_canon_sha256":"1a4b6b2171e719e0020f3b8503098ec05015af7ad4e5cf35581350d6ed32ac1e","abstract_canon_sha256":"7fefb13196f42087235da776d05cc00d5ac93b9ef6f40778a0ed86384ec674d3"},"schema_version":"1.0"},"canonical_sha256":"3ea497db93481361f12ffe73ac6c75521ae383aa88f27b3cf3502cd8e5cf1f91","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:53:27.338963Z","signature_b64":"ajZni7hlB8tKjO6FzssjxZNCgmQKsRPF0y4b5zqXNaFhdbyl8Bzn7lDbiA21RYZUcJ5JDRYmwOGhLih3QYxHAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3ea497db93481361f12ffe73ac6c75521ae383aa88f27b3cf3502cd8e5cf1f91","last_reissued_at":"2026-07-05T11:53:27.338259Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:53:27.338259Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.11771","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:53:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7BN0rIAdazk41Z/W0oysLFG5XQ7VaBWCHGgWnMGZAsMZicvAFcDQWEeUSEfUJxG9uBDZYT3bJTsOkF4fmbSECg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T10:58:41.116430Z"},"content_sha256":"b2cf7c4f36bff1778987451b7e7e90da42dc9dedef697c13e12e7a52b2dd3634","schema_version":"1.0","event_id":"sha256:b2cf7c4f36bff1778987451b7e7e90da42dc9dedef697c13e12e7a52b2dd3634"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:H2SJPW4TJAJWD4JP7ZZ2Y3DVKI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Characterization of GPU TEE Overheads in Distributed Data Parallel ML Training","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.DC"],"primary_cat":"cs.CR","authors_text":"Jonghyun Lee, Murali Annavaram, Rachit Rajat, Yongqin Wang","submitted_at":"2025-01-20T22:23:50Z","abstract_excerpt":"Confidential computing (CC) or trusted execution enclaves (TEEs) is now the most common approach to enable secure computing in the cloud. The recent introduction of GPU TEEs by NVIDIA enables machine learning (ML) models to be trained without leaking model weights or data to the cloud provider. However, the potential performance implications of using GPU TEEs for ML training are not well characterized. In this work, we present an in-depth characterization study on performance overhead associated with running distributed data parallel (DDP) ML training with GPU Trusted Execution Environments (T"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.11771","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.11771/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:53:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L72ATVthkqVs1q7RWePI2O9FpNyTkxmp1Sw0nMuAMumkcuOv/PK0uueSXTm+g17rFCnkv/BytJ55WJdCphiNCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T10:58:41.117249Z"},"content_sha256":"aad93942e7be2faf2cee62e2fbdfa8cb0e2d18a8729aac96ecdfdc05e9e7edb1","schema_version":"1.0","event_id":"sha256:aad93942e7be2faf2cee62e2fbdfa8cb0e2d18a8729aac96ecdfdc05e9e7edb1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/H2SJPW4TJAJWD4JP7ZZ2Y3DVKI/bundle.json","state_url":"https://pith.science/pith/H2SJPW4TJAJWD4JP7ZZ2Y3DVKI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/H2SJPW4TJAJWD4JP7ZZ2Y3DVKI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T10:58:41Z","links":{"resolver":"https://pith.science/pith/H2SJPW4TJAJWD4JP7ZZ2Y3DVKI","bundle":"https://pith.science/pith/H2SJPW4TJAJWD4JP7ZZ2Y3DVKI/bundle.json","state":"https://pith.science/pith/H2SJPW4TJAJWD4JP7ZZ2Y3DVKI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/H2SJPW4TJAJWD4JP7ZZ2Y3DVKI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:H2SJPW4TJAJWD4JP7ZZ2Y3DVKI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7fefb13196f42087235da776d05cc00d5ac93b9ef6f40778a0ed86384ec674d3","cross_cats_sorted":["cs.DC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-20T22:23:50Z","title_canon_sha256":"1a4b6b2171e719e0020f3b8503098ec05015af7ad4e5cf35581350d6ed32ac1e"},"schema_version":"1.0","source":{"id":"2501.11771","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.11771","created_at":"2026-07-05T11:53:27Z"},{"alias_kind":"arxiv_version","alias_value":"2501.11771v3","created_at":"2026-07-05T11:53:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.11771","created_at":"2026-07-05T11:53:27Z"},{"alias_kind":"pith_short_12","alias_value":"H2SJPW4TJAJW","created_at":"2026-07-05T11:53:27Z"},{"alias_kind":"pith_short_16","alias_value":"H2SJPW4TJAJWD4JP","created_at":"2026-07-05T11:53:27Z"},{"alias_kind":"pith_short_8","alias_value":"H2SJPW4T","created_at":"2026-07-05T11:53:27Z"}],"graph_snapshots":[{"event_id":"sha256:aad93942e7be2faf2cee62e2fbdfa8cb0e2d18a8729aac96ecdfdc05e9e7edb1","target":"graph","created_at":"2026-07-05T11:53:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.11771/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Confidential computing (CC) or trusted execution enclaves (TEEs) is now the most common approach to enable secure computing in the cloud. The recent introduction of GPU TEEs by NVIDIA enables machine learning (ML) models to be trained without leaking model weights or data to the cloud provider. However, the potential performance implications of using GPU TEEs for ML training are not well characterized. In this work, we present an in-depth characterization study on performance overhead associated with running distributed data parallel (DDP) ML training with GPU Trusted Execution Environments (T","authors_text":"Jonghyun Lee, Murali Annavaram, Rachit Rajat, Yongqin Wang","cross_cats":["cs.DC"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-20T22:23:50Z","title":"Characterization of GPU TEE Overheads in Distributed Data Parallel ML Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.11771","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b2cf7c4f36bff1778987451b7e7e90da42dc9dedef697c13e12e7a52b2dd3634","target":"record","created_at":"2026-07-05T11:53:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7fefb13196f42087235da776d05cc00d5ac93b9ef6f40778a0ed86384ec674d3","cross_cats_sorted":["cs.DC"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-20T22:23:50Z","title_canon_sha256":"1a4b6b2171e719e0020f3b8503098ec05015af7ad4e5cf35581350d6ed32ac1e"},"schema_version":"1.0","source":{"id":"2501.11771","kind":"arxiv","version":3}},"canonical_sha256":"3ea497db93481361f12ffe73ac6c75521ae383aa88f27b3cf3502cd8e5cf1f91","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3ea497db93481361f12ffe73ac6c75521ae383aa88f27b3cf3502cd8e5cf1f91","first_computed_at":"2026-07-05T11:53:27.338259Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:53:27.338259Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ajZni7hlB8tKjO6FzssjxZNCgmQKsRPF0y4b5zqXNaFhdbyl8Bzn7lDbiA21RYZUcJ5JDRYmwOGhLih3QYxHAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:53:27.338963Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.11771","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b2cf7c4f36bff1778987451b7e7e90da42dc9dedef697c13e12e7a52b2dd3634","sha256:aad93942e7be2faf2cee62e2fbdfa8cb0e2d18a8729aac96ecdfdc05e9e7edb1"],"state_sha256":"e0afa36d8bd898e49b5fa889da5bd81e19e64517431b527e7ed90abc3c709d67"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HLQUxitU6NbNFA1vZGGtuQXqESh/1ekYcokPKvMKQem7R3yFp6XyF7KapM9EB+UxBlWOOQbAPynwp47+sfP/AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T10:58:41.122703Z","bundle_sha256":"297c989e77b732e7bbf6f498a7e2452a0f2fe486e461ccecfe63b241e2274c3f"}}