{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:KA4EPKHQC5ICMU3KR5KCPIMNK7","short_pith_number":"pith:KA4EPKHQ","canonical_record":{"source":{"id":"1909.01785","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-09-04T13:27:36Z","cross_cats_sorted":[],"title_canon_sha256":"f7a2de637e8deaefa9e1a4d528f469edd1b421eea57ea9643afd2387222cd954","abstract_canon_sha256":"f21011ce8c9e3d1751fadcb0f07ce2b8cb13197d9adc16bc025f53dfc5a06318"},"schema_version":"1.0"},"canonical_sha256":"503847a8f0175026536a8f5427a18d57e12e790f75e6e3e2c126648fdf7cbbc5","source":{"kind":"arxiv","id":"1909.01785","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.01785","created_at":"2026-07-05T00:52:06Z"},{"alias_kind":"arxiv_version","alias_value":"1909.01785v2","created_at":"2026-07-05T00:52:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.01785","created_at":"2026-07-05T00:52:06Z"},{"alias_kind":"pith_short_12","alias_value":"KA4EPKHQC5IC","created_at":"2026-07-05T00:52:06Z"},{"alias_kind":"pith_short_16","alias_value":"KA4EPKHQC5ICMU3K","created_at":"2026-07-05T00:52:06Z"},{"alias_kind":"pith_short_8","alias_value":"KA4EPKHQ","created_at":"2026-07-05T00:52:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:KA4EPKHQC5ICMU3KR5KCPIMNK7","target":"record","payload":{"canonical_record":{"source":{"id":"1909.01785","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-09-04T13:27:36Z","cross_cats_sorted":[],"title_canon_sha256":"f7a2de637e8deaefa9e1a4d528f469edd1b421eea57ea9643afd2387222cd954","abstract_canon_sha256":"f21011ce8c9e3d1751fadcb0f07ce2b8cb13197d9adc16bc025f53dfc5a06318"},"schema_version":"1.0"},"canonical_sha256":"503847a8f0175026536a8f5427a18d57e12e790f75e6e3e2c126648fdf7cbbc5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:52:06.288518Z","signature_b64":"h7HYEsyNpMkkIJMHbZKoJhxEsnaiA5KJtYp+vqxNfqBB5m1+gaop2lNWDA/xO602+9T6s8JNAGE7+j7ewfUkDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"503847a8f0175026536a8f5427a18d57e12e790f75e6e3e2c126648fdf7cbbc5","last_reissued_at":"2026-07-05T00:52:06.288127Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:52:06.288127Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.01785","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:52:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M5iajBmw8lNKEO7S2oIZLTMGS7PYg3lveM3UX1c1a3V+XPYsCKXcUN+fvy764HQEhm84Jt5JwIXyQ0o8gqLRCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T18:45:38.217060Z"},"content_sha256":"191b806c0ac47dce2389a5f3cd89f47f284effb4ae17d85fee4bb39a078ba25c","schema_version":"1.0","event_id":"sha256:191b806c0ac47dce2389a5f3cd89f47f284effb4ae17d85fee4bb39a078ba25c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:KA4EPKHQC5ICMU3KR5KCPIMNK7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Certified Side Channels","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alejandro Cabrera Aldaya, Billy Bob Brumley, Cesar Pereida Garc\\'ia, Iaroslav Gridin, Nicola Tuveri, Sohaib ul Hassan","submitted_at":"2019-09-04T13:27:36Z","abstract_excerpt":"We demonstrate that the format in which private keys are persisted impacts Side Channel Analysis (SCA) security. Surveying several widely deployed software libraries, we investigate the formats they support, how they parse these keys, and what runtime decisions they make. We uncover a combination of weaknesses and vulnerabilities, in extreme cases inducing completely disjoint multi-precision arithmetic stacks deep within the cryptosystem level for keys that otherwise seem logically equivalent. Exploiting these vulnerabilities, we design and implement key recovery attacks utilizing signals rang"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.01785","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.01785/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:52:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t61wpDDPk+JOzPOs/ZO2fZl9f/2w976FXUXessG5PqzdiECL46ZwSWkBoEv6E3HjAQsHiBz7Au5+l0cD3SW0CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T18:45:38.217640Z"},"content_sha256":"6cfc73f812fe95ff3b4fcba650600a93c814bdbf551e64a18958e215c2dbbdf7","schema_version":"1.0","event_id":"sha256:6cfc73f812fe95ff3b4fcba650600a93c814bdbf551e64a18958e215c2dbbdf7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KA4EPKHQC5ICMU3KR5KCPIMNK7/bundle.json","state_url":"https://pith.science/pith/KA4EPKHQC5ICMU3KR5KCPIMNK7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KA4EPKHQC5ICMU3KR5KCPIMNK7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T18:45:38Z","links":{"resolver":"https://pith.science/pith/KA4EPKHQC5ICMU3KR5KCPIMNK7","bundle":"https://pith.science/pith/KA4EPKHQC5ICMU3KR5KCPIMNK7/bundle.json","state":"https://pith.science/pith/KA4EPKHQC5ICMU3KR5KCPIMNK7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KA4EPKHQC5ICMU3KR5KCPIMNK7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:KA4EPKHQC5ICMU3KR5KCPIMNK7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f21011ce8c9e3d1751fadcb0f07ce2b8cb13197d9adc16bc025f53dfc5a06318","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-09-04T13:27:36Z","title_canon_sha256":"f7a2de637e8deaefa9e1a4d528f469edd1b421eea57ea9643afd2387222cd954"},"schema_version":"1.0","source":{"id":"1909.01785","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.01785","created_at":"2026-07-05T00:52:06Z"},{"alias_kind":"arxiv_version","alias_value":"1909.01785v2","created_at":"2026-07-05T00:52:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.01785","created_at":"2026-07-05T00:52:06Z"},{"alias_kind":"pith_short_12","alias_value":"KA4EPKHQC5IC","created_at":"2026-07-05T00:52:06Z"},{"alias_kind":"pith_short_16","alias_value":"KA4EPKHQC5ICMU3K","created_at":"2026-07-05T00:52:06Z"},{"alias_kind":"pith_short_8","alias_value":"KA4EPKHQ","created_at":"2026-07-05T00:52:06Z"}],"graph_snapshots":[{"event_id":"sha256:6cfc73f812fe95ff3b4fcba650600a93c814bdbf551e64a18958e215c2dbbdf7","target":"graph","created_at":"2026-07-05T00:52:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.01785/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We demonstrate that the format in which private keys are persisted impacts Side Channel Analysis (SCA) security. Surveying several widely deployed software libraries, we investigate the formats they support, how they parse these keys, and what runtime decisions they make. We uncover a combination of weaknesses and vulnerabilities, in extreme cases inducing completely disjoint multi-precision arithmetic stacks deep within the cryptosystem level for keys that otherwise seem logically equivalent. Exploiting these vulnerabilities, we design and implement key recovery attacks utilizing signals rang","authors_text":"Alejandro Cabrera Aldaya, Billy Bob Brumley, Cesar Pereida Garc\\'ia, Iaroslav Gridin, Nicola Tuveri, Sohaib ul Hassan","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-09-04T13:27:36Z","title":"Certified Side Channels"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.01785","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:191b806c0ac47dce2389a5f3cd89f47f284effb4ae17d85fee4bb39a078ba25c","target":"record","created_at":"2026-07-05T00:52:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f21011ce8c9e3d1751fadcb0f07ce2b8cb13197d9adc16bc025f53dfc5a06318","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-09-04T13:27:36Z","title_canon_sha256":"f7a2de637e8deaefa9e1a4d528f469edd1b421eea57ea9643afd2387222cd954"},"schema_version":"1.0","source":{"id":"1909.01785","kind":"arxiv","version":2}},"canonical_sha256":"503847a8f0175026536a8f5427a18d57e12e790f75e6e3e2c126648fdf7cbbc5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"503847a8f0175026536a8f5427a18d57e12e790f75e6e3e2c126648fdf7cbbc5","first_computed_at":"2026-07-05T00:52:06.288127Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:52:06.288127Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"h7HYEsyNpMkkIJMHbZKoJhxEsnaiA5KJtYp+vqxNfqBB5m1+gaop2lNWDA/xO602+9T6s8JNAGE7+j7ewfUkDg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:52:06.288518Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.01785","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:191b806c0ac47dce2389a5f3cd89f47f284effb4ae17d85fee4bb39a078ba25c","sha256:6cfc73f812fe95ff3b4fcba650600a93c814bdbf551e64a18958e215c2dbbdf7"],"state_sha256":"9522a60df82ec4aed128bc6a77bd48cfbd9af6b40f2c5528e494ac8013d3f642"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BHSclxrO8iSydb2/p31eDzz/4I1H0T3FuiUpabiZcUML1kHfJ1RDWjnniC8DdMKtNiUNrKRJeRlqNKhB8VPHCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T18:45:38.225105Z","bundle_sha256":"f7e1cd71d6e62828cd099ed8fe54e9a4be2eff8dad37c348a47cf2e7c68979bd"}}