{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:KZPZ6YR766VOMLWCNOWJBQUSD2","short_pith_number":"pith:KZPZ6YR7","canonical_record":{"source":{"id":"2111.12528","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-24T14:54:03Z","cross_cats_sorted":[],"title_canon_sha256":"eb8b97ede8666576bfb03b04bc68ac2ad0be03fe72d7dc81f55461050ea65858","abstract_canon_sha256":"c4720e9060e860e2f1e737f3bc944fd6311108c162e782a6a795ab47944edfad"},"schema_version":"1.0"},"canonical_sha256":"565f9f623ff7aae62ec26bac90c2921eba33927d8b0fecf9970480344d11342d","source":{"kind":"arxiv","id":"2111.12528","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.12528","created_at":"2026-07-05T03:34:53Z"},{"alias_kind":"arxiv_version","alias_value":"2111.12528v1","created_at":"2026-07-05T03:34:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.12528","created_at":"2026-07-05T03:34:53Z"},{"alias_kind":"pith_short_12","alias_value":"KZPZ6YR766VO","created_at":"2026-07-05T03:34:53Z"},{"alias_kind":"pith_short_16","alias_value":"KZPZ6YR766VOMLWC","created_at":"2026-07-05T03:34:53Z"},{"alias_kind":"pith_short_8","alias_value":"KZPZ6YR7","created_at":"2026-07-05T03:34:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:KZPZ6YR766VOMLWCNOWJBQUSD2","target":"record","payload":{"canonical_record":{"source":{"id":"2111.12528","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-24T14:54:03Z","cross_cats_sorted":[],"title_canon_sha256":"eb8b97ede8666576bfb03b04bc68ac2ad0be03fe72d7dc81f55461050ea65858","abstract_canon_sha256":"c4720e9060e860e2f1e737f3bc944fd6311108c162e782a6a795ab47944edfad"},"schema_version":"1.0"},"canonical_sha256":"565f9f623ff7aae62ec26bac90c2921eba33927d8b0fecf9970480344d11342d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:34:53.167216Z","signature_b64":"vTLsZyCjVAa/anpQz/osir+K1I+0oMllhXXXXq8ITM99Y3DbizrJtnEX2HwSWKvHLvIXEC/Z4MIBoWYW6i+WBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"565f9f623ff7aae62ec26bac90c2921eba33927d8b0fecf9970480344d11342d","last_reissued_at":"2026-07-05T03:34:53.166884Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:34:53.166884Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2111.12528","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:34:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j88l/ZtA0z9LALvZ3Y3P5m3MjfC7O/rENEcbGQSmhilfFxZycOe7TiPgDyPudpj5ELsZ7ufMCTJRkcDeKDwbAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T20:46:34.049307Z"},"content_sha256":"142187dc96d66acfb8d7d0811d7ebb42ad77234e7a7f5f24771fece1a1166e2d","schema_version":"1.0","event_id":"sha256:142187dc96d66acfb8d7d0811d7ebb42ad77234e7a7f5f24771fece1a1166e2d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:KZPZ6YR766VOMLWCNOWJBQUSD2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Systematic Analysis of Programming Languages and Their Execution Environments for Spectre Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amel Smajic, Amir Naseredini, Claudio Canella, Daniel Gruss, Martin Berger, Martin Schwarzl, Pedro Miguel Sousa Bernardo, Stefan Gast","submitted_at":"2021-11-24T14:54:03Z","abstract_excerpt":"In this paper, we analyze the security of programming languages and their execution environments (compilers and interpreters) with respect to Spectre attacks. The analysis shows that only 16 out of 42 execution environments have mitigations against at least one Spectre variant, i.e., 26 have no mitigations against any Spectre variant. Using our novel tool Speconnector, we develop Spectre proof-of-concept attacks in 8 programming languages and on code generated by 11 execution environments that were previously not known to be affected. Our results highlight some programming languages that are u"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.12528","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2111.12528/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:34:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0CizFvYSytWbTc65dilCLSeOKrW6uesNT430jQz4qbr4JjCKI1mofrWk9ls3hVroa0qX6OVNPXj1V2WmQQugDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T20:46:34.049841Z"},"content_sha256":"ab0dd05b1f1d52fec77f4eca185ab3674faf71a3dc9afb8d15c0f19250a6b32f","schema_version":"1.0","event_id":"sha256:ab0dd05b1f1d52fec77f4eca185ab3674faf71a3dc9afb8d15c0f19250a6b32f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KZPZ6YR766VOMLWCNOWJBQUSD2/bundle.json","state_url":"https://pith.science/pith/KZPZ6YR766VOMLWCNOWJBQUSD2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KZPZ6YR766VOMLWCNOWJBQUSD2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T20:46:34Z","links":{"resolver":"https://pith.science/pith/KZPZ6YR766VOMLWCNOWJBQUSD2","bundle":"https://pith.science/pith/KZPZ6YR766VOMLWCNOWJBQUSD2/bundle.json","state":"https://pith.science/pith/KZPZ6YR766VOMLWCNOWJBQUSD2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KZPZ6YR766VOMLWCNOWJBQUSD2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:KZPZ6YR766VOMLWCNOWJBQUSD2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c4720e9060e860e2f1e737f3bc944fd6311108c162e782a6a795ab47944edfad","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-24T14:54:03Z","title_canon_sha256":"eb8b97ede8666576bfb03b04bc68ac2ad0be03fe72d7dc81f55461050ea65858"},"schema_version":"1.0","source":{"id":"2111.12528","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.12528","created_at":"2026-07-05T03:34:53Z"},{"alias_kind":"arxiv_version","alias_value":"2111.12528v1","created_at":"2026-07-05T03:34:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.12528","created_at":"2026-07-05T03:34:53Z"},{"alias_kind":"pith_short_12","alias_value":"KZPZ6YR766VO","created_at":"2026-07-05T03:34:53Z"},{"alias_kind":"pith_short_16","alias_value":"KZPZ6YR766VOMLWC","created_at":"2026-07-05T03:34:53Z"},{"alias_kind":"pith_short_8","alias_value":"KZPZ6YR7","created_at":"2026-07-05T03:34:53Z"}],"graph_snapshots":[{"event_id":"sha256:ab0dd05b1f1d52fec77f4eca185ab3674faf71a3dc9afb8d15c0f19250a6b32f","target":"graph","created_at":"2026-07-05T03:34:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.12528/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we analyze the security of programming languages and their execution environments (compilers and interpreters) with respect to Spectre attacks. The analysis shows that only 16 out of 42 execution environments have mitigations against at least one Spectre variant, i.e., 26 have no mitigations against any Spectre variant. Using our novel tool Speconnector, we develop Spectre proof-of-concept attacks in 8 programming languages and on code generated by 11 execution environments that were previously not known to be affected. Our results highlight some programming languages that are u","authors_text":"Amel Smajic, Amir Naseredini, Claudio Canella, Daniel Gruss, Martin Berger, Martin Schwarzl, Pedro Miguel Sousa Bernardo, Stefan Gast","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-24T14:54:03Z","title":"Systematic Analysis of Programming Languages and Their Execution Environments for Spectre Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.12528","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:142187dc96d66acfb8d7d0811d7ebb42ad77234e7a7f5f24771fece1a1166e2d","target":"record","created_at":"2026-07-05T03:34:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c4720e9060e860e2f1e737f3bc944fd6311108c162e782a6a795ab47944edfad","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-11-24T14:54:03Z","title_canon_sha256":"eb8b97ede8666576bfb03b04bc68ac2ad0be03fe72d7dc81f55461050ea65858"},"schema_version":"1.0","source":{"id":"2111.12528","kind":"arxiv","version":1}},"canonical_sha256":"565f9f623ff7aae62ec26bac90c2921eba33927d8b0fecf9970480344d11342d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"565f9f623ff7aae62ec26bac90c2921eba33927d8b0fecf9970480344d11342d","first_computed_at":"2026-07-05T03:34:53.166884Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:34:53.166884Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vTLsZyCjVAa/anpQz/osir+K1I+0oMllhXXXXq8ITM99Y3DbizrJtnEX2HwSWKvHLvIXEC/Z4MIBoWYW6i+WBw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:34:53.167216Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.12528","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:142187dc96d66acfb8d7d0811d7ebb42ad77234e7a7f5f24771fece1a1166e2d","sha256:ab0dd05b1f1d52fec77f4eca185ab3674faf71a3dc9afb8d15c0f19250a6b32f"],"state_sha256":"851ba6e75547994e5544465a62e607860517f336627fae989d0c792717ecfc3c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0ixoZvshc4/zRbuA/iOFz3QrreIXgQX4241/a3Fq6Mx2Fu6o3aXr7EG8PI2eWQgUACz7bRF+VCumDXbEP+0ZCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T20:46:34.055330Z","bundle_sha256":"852fa08195b8947427b09418b9bc923f11c6de1bb53fd8cd5973f19e7e35869e"}}