{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:IHJPJQDXUEBHPYZJM4ERU2TPX3","short_pith_number":"pith:IHJPJQDX","canonical_record":{"source":{"id":"2406.15731","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-22T04:42:18Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7939122979fa6d4f645db6a81e0205b6cf22de6586d7fa27c4ad65a14d563136","abstract_canon_sha256":"e4a3bde61ad0a91de3586ed0b9ab6f8dbb67bdf2b9d9514271a1e26589bea6fc"},"schema_version":"1.0"},"canonical_sha256":"41d2f4c077a10277e32967091a6a6fbefecfbb26fe5a3e4608d3e812e852b4a1","source":{"kind":"arxiv","id":"2406.15731","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.15731","created_at":"2026-07-05T08:35:26Z"},{"alias_kind":"arxiv_version","alias_value":"2406.15731v1","created_at":"2026-07-05T08:35:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.15731","created_at":"2026-07-05T08:35:26Z"},{"alias_kind":"pith_short_12","alias_value":"IHJPJQDXUEBH","created_at":"2026-07-05T08:35:26Z"},{"alias_kind":"pith_short_16","alias_value":"IHJPJQDXUEBHPYZJ","created_at":"2026-07-05T08:35:26Z"},{"alias_kind":"pith_short_8","alias_value":"IHJPJQDX","created_at":"2026-07-05T08:35:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:IHJPJQDXUEBHPYZJM4ERU2TPX3","target":"record","payload":{"canonical_record":{"source":{"id":"2406.15731","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-22T04:42:18Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7939122979fa6d4f645db6a81e0205b6cf22de6586d7fa27c4ad65a14d563136","abstract_canon_sha256":"e4a3bde61ad0a91de3586ed0b9ab6f8dbb67bdf2b9d9514271a1e26589bea6fc"},"schema_version":"1.0"},"canonical_sha256":"41d2f4c077a10277e32967091a6a6fbefecfbb26fe5a3e4608d3e812e852b4a1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:35:26.723063Z","signature_b64":"ITARmSiY/boO+JGM8y/4wwkGR0+gLzFEBF3rGtVt9WoZpatORqBzGkerGMj1bM2KSz6psu+YwwlU1ZBiSRaWDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"41d2f4c077a10277e32967091a6a6fbefecfbb26fe5a3e4608d3e812e852b4a1","last_reissued_at":"2026-07-05T08:35:26.722646Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:35:26.722646Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.15731","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:35:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N/FAnJW01tAqFj07OJdRgzM3tHwTx6uUVyB29RFXXR7PRG6UadnrgZr4qrruFomlHp6Hb7JsHRZDMw9yUubQCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:20:01.722882Z"},"content_sha256":"735b3b2eb894a82676eb92e6ef3ccaf73aee759506199f5b7936603f9c276680","schema_version":"1.0","event_id":"sha256:735b3b2eb894a82676eb92e6ef3ccaf73aee759506199f5b7936603f9c276680"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:IHJPJQDXUEBHPYZJM4ERU2TPX3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Breaking Secure Aggregation: Label Leakage from Aggregated Gradients in Federated Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jiacheng Du, Jiahui Hu, Kui Ren, Xiaoyi Pang, Yongle Chen, Zhibo Wang, Zhiwei Chang","submitted_at":"2024-06-22T04:42:18Z","abstract_excerpt":"Federated Learning (FL) exhibits privacy vulnerabilities under gradient inversion attacks (GIAs), which can extract private information from individual gradients. To enhance privacy, FL incorporates Secure Aggregation (SA) to prevent the server from obtaining individual gradients, thus effectively resisting GIAs. In this paper, we propose a stealthy label inference attack to bypass SA and recover individual clients' private labels. Specifically, we conduct a theoretical analysis of label inference from the aggregated gradients that are exclusively obtained after implementing SA. The analysis r"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.15731","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.15731/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:35:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xTg7tDuoTPrvbDWVs81vwcEitCuP1qgupb99S4XZrl8TTdCQVN5r8vfy0qG//3oqBuEsqEJlHrQlhqD5QdmLBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:20:01.723422Z"},"content_sha256":"a114280090349cc1cf50a1321b619d2ac0ee5bcbf1cb2813168faa65cbb7a79e","schema_version":"1.0","event_id":"sha256:a114280090349cc1cf50a1321b619d2ac0ee5bcbf1cb2813168faa65cbb7a79e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IHJPJQDXUEBHPYZJM4ERU2TPX3/bundle.json","state_url":"https://pith.science/pith/IHJPJQDXUEBHPYZJM4ERU2TPX3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IHJPJQDXUEBHPYZJM4ERU2TPX3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T16:20:01Z","links":{"resolver":"https://pith.science/pith/IHJPJQDXUEBHPYZJM4ERU2TPX3","bundle":"https://pith.science/pith/IHJPJQDXUEBHPYZJM4ERU2TPX3/bundle.json","state":"https://pith.science/pith/IHJPJQDXUEBHPYZJM4ERU2TPX3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IHJPJQDXUEBHPYZJM4ERU2TPX3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:IHJPJQDXUEBHPYZJM4ERU2TPX3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e4a3bde61ad0a91de3586ed0b9ab6f8dbb67bdf2b9d9514271a1e26589bea6fc","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-22T04:42:18Z","title_canon_sha256":"7939122979fa6d4f645db6a81e0205b6cf22de6586d7fa27c4ad65a14d563136"},"schema_version":"1.0","source":{"id":"2406.15731","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.15731","created_at":"2026-07-05T08:35:26Z"},{"alias_kind":"arxiv_version","alias_value":"2406.15731v1","created_at":"2026-07-05T08:35:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.15731","created_at":"2026-07-05T08:35:26Z"},{"alias_kind":"pith_short_12","alias_value":"IHJPJQDXUEBH","created_at":"2026-07-05T08:35:26Z"},{"alias_kind":"pith_short_16","alias_value":"IHJPJQDXUEBHPYZJ","created_at":"2026-07-05T08:35:26Z"},{"alias_kind":"pith_short_8","alias_value":"IHJPJQDX","created_at":"2026-07-05T08:35:26Z"}],"graph_snapshots":[{"event_id":"sha256:a114280090349cc1cf50a1321b619d2ac0ee5bcbf1cb2813168faa65cbb7a79e","target":"graph","created_at":"2026-07-05T08:35:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.15731/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated Learning (FL) exhibits privacy vulnerabilities under gradient inversion attacks (GIAs), which can extract private information from individual gradients. To enhance privacy, FL incorporates Secure Aggregation (SA) to prevent the server from obtaining individual gradients, thus effectively resisting GIAs. In this paper, we propose a stealthy label inference attack to bypass SA and recover individual clients' private labels. Specifically, we conduct a theoretical analysis of label inference from the aggregated gradients that are exclusively obtained after implementing SA. The analysis r","authors_text":"Jiacheng Du, Jiahui Hu, Kui Ren, Xiaoyi Pang, Yongle Chen, Zhibo Wang, Zhiwei Chang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-22T04:42:18Z","title":"Breaking Secure Aggregation: Label Leakage from Aggregated Gradients in Federated Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.15731","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:735b3b2eb894a82676eb92e6ef3ccaf73aee759506199f5b7936603f9c276680","target":"record","created_at":"2026-07-05T08:35:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e4a3bde61ad0a91de3586ed0b9ab6f8dbb67bdf2b9d9514271a1e26589bea6fc","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-06-22T04:42:18Z","title_canon_sha256":"7939122979fa6d4f645db6a81e0205b6cf22de6586d7fa27c4ad65a14d563136"},"schema_version":"1.0","source":{"id":"2406.15731","kind":"arxiv","version":1}},"canonical_sha256":"41d2f4c077a10277e32967091a6a6fbefecfbb26fe5a3e4608d3e812e852b4a1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"41d2f4c077a10277e32967091a6a6fbefecfbb26fe5a3e4608d3e812e852b4a1","first_computed_at":"2026-07-05T08:35:26.722646Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:35:26.722646Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ITARmSiY/boO+JGM8y/4wwkGR0+gLzFEBF3rGtVt9WoZpatORqBzGkerGMj1bM2KSz6psu+YwwlU1ZBiSRaWDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:35:26.723063Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.15731","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:735b3b2eb894a82676eb92e6ef3ccaf73aee759506199f5b7936603f9c276680","sha256:a114280090349cc1cf50a1321b619d2ac0ee5bcbf1cb2813168faa65cbb7a79e"],"state_sha256":"d932384b2c292d05ca16deed8291ecfe848ad9ac1ea63fad37a122f6f81bd415"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iPlhV0VrEkW1qkZNNAGawEyDxw9htqFqP/+791CWRFPh9ALCGIA/x5ziz/Q5UjvFz3kCw6rPkQSoz5/VLe0mDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T16:20:01.727858Z","bundle_sha256":"8226cef7c0b0e1359020ac849405624879362352535b277bb4574c55050d0ab8"}}