{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:JYK7TVSQIXU6NIIXTLNWRIFQZ6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"91d792459a8d4fe0509d6af8d0db01f6b90f04d693e1cb690d7cb3bb13c59d64","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-22T19:52:02Z","title_canon_sha256":"c6d9024a17d4b8dcf9fa5807b98524e872d6833a372d960062c5a729789eb3c0"},"schema_version":"1.0","source":{"id":"2503.17847","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.17847","created_at":"2026-07-05T10:37:56Z"},{"alias_kind":"arxiv_version","alias_value":"2503.17847v1","created_at":"2026-07-05T10:37:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.17847","created_at":"2026-07-05T10:37:56Z"},{"alias_kind":"pith_short_12","alias_value":"JYK7TVSQIXU6","created_at":"2026-07-05T10:37:56Z"},{"alias_kind":"pith_short_16","alias_value":"JYK7TVSQIXU6NIIX","created_at":"2026-07-05T10:37:56Z"},{"alias_kind":"pith_short_8","alias_value":"JYK7TVSQ","created_at":"2026-07-05T10:37:56Z"}],"graph_snapshots":[{"event_id":"sha256:545e0671ed830eab9334518f5d011f26a15be3ad0d37c637636573ff6de39be8","target":"graph","created_at":"2026-07-05T10:37:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.17847/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multi-GPU systems are becoming increasingly important in highperformance computing (HPC) and cloud infrastructure, providing acceleration for data-intensive applications, including machine learning workloads. These systems consist of multiple GPUs interconnected through high-speed networking links such as NVIDIA's NVLink. In this work, we explore whether the interconnect on such systems can offer a novel source of leakage, enabling new forms of covert and side-channel attacks. Specifically, we reverse engineer the operations of NVlink and identify two primary sources of leakage: timing variati","authors_text":"Andres Marquez, Kevin Barker, Nael Abu-Ghazaleh, Ravan Nazaraliyev, Sankha Baran Dutta, Yicheng Zhang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-22T19:52:02Z","title":"NVBleed: Covert and Side-Channel Attacks on NVIDIA Multi-GPU Interconnect"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.17847","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7f1b203ba78b6863402bfa94218ed7d317460c577c9852d3b453ed8c3b0c61c7","target":"record","created_at":"2026-07-05T10:37:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"91d792459a8d4fe0509d6af8d0db01f6b90f04d693e1cb690d7cb3bb13c59d64","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-03-22T19:52:02Z","title_canon_sha256":"c6d9024a17d4b8dcf9fa5807b98524e872d6833a372d960062c5a729789eb3c0"},"schema_version":"1.0","source":{"id":"2503.17847","kind":"arxiv","version":1}},"canonical_sha256":"4e15f9d65045e9e6a1179adb68a0b0cf870cdd91216f700c2e4e809ae177f97e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4e15f9d65045e9e6a1179adb68a0b0cf870cdd91216f700c2e4e809ae177f97e","first_computed_at":"2026-07-05T10:37:56.290443Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:37:56.290443Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vwCQ1LFlxjBIktkasGJ3gSh1zYf15RjdOS5z9/QnAWl4FTOriyKT0Qy+lVYN2e/Vn/rLh3yi0u+54C+CEoSfAw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:37:56.290941Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.17847","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7f1b203ba78b6863402bfa94218ed7d317460c577c9852d3b453ed8c3b0c61c7","sha256:545e0671ed830eab9334518f5d011f26a15be3ad0d37c637636573ff6de39be8"],"state_sha256":"4131adb972b42c525b5e3c6069119fe8e28f45f20de8fdc6b95f01cf7cf762f6"}