{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:PZLXMCVQUXJOGEZ2T43VGW3YT5","short_pith_number":"pith:PZLXMCVQ","canonical_record":{"source":{"id":"2410.13489","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-17T12:34:02Z","cross_cats_sorted":[],"title_canon_sha256":"eac6c149d947c35586880c3f945a51e26bad8ab11ab6229da0fe4d036bf4c77a","abstract_canon_sha256":"1662aa60877887216ea60abeede8029259af7bf996bf83e415a364947f656916"},"schema_version":"1.0"},"canonical_sha256":"7e57760ab0a5d2e3133a9f37535b789f54679cc7624a2447020508b45d5e737c","source":{"kind":"arxiv","id":"2410.13489","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.13489","created_at":"2026-07-05T12:02:36Z"},{"alias_kind":"arxiv_version","alias_value":"2410.13489v2","created_at":"2026-07-05T12:02:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.13489","created_at":"2026-07-05T12:02:36Z"},{"alias_kind":"pith_short_12","alias_value":"PZLXMCVQUXJO","created_at":"2026-07-05T12:02:36Z"},{"alias_kind":"pith_short_16","alias_value":"PZLXMCVQUXJOGEZ2","created_at":"2026-07-05T12:02:36Z"},{"alias_kind":"pith_short_8","alias_value":"PZLXMCVQ","created_at":"2026-07-05T12:02:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:PZLXMCVQUXJOGEZ2T43VGW3YT5","target":"record","payload":{"canonical_record":{"source":{"id":"2410.13489","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-17T12:34:02Z","cross_cats_sorted":[],"title_canon_sha256":"eac6c149d947c35586880c3f945a51e26bad8ab11ab6229da0fe4d036bf4c77a","abstract_canon_sha256":"1662aa60877887216ea60abeede8029259af7bf996bf83e415a364947f656916"},"schema_version":"1.0"},"canonical_sha256":"7e57760ab0a5d2e3133a9f37535b789f54679cc7624a2447020508b45d5e737c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:02:36.701447Z","signature_b64":"asr8alTsuYqO3qiRpcfSTM1ifxyBwLXAfz48NArTZTDLXQ4NrcJTJLmwOyxaksuPCDl/RfO9Glaj8xUHKtUEAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7e57760ab0a5d2e3133a9f37535b789f54679cc7624a2447020508b45d5e737c","last_reissued_at":"2026-07-05T12:02:36.700869Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:02:36.700869Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.13489","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:02:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dNdGr8laC6Az7MWSnUteti1gAtZwWRtfTnhIud+nBNMTnIRxJkF4SVA88fQh8ARbkilihIpqhtnV5I8BTID8AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T08:54:42.245343Z"},"content_sha256":"6c3f5403d3d68ffacd93223097528489e83f333a9749253b4d4c79caec6ecd69","schema_version":"1.0","event_id":"sha256:6c3f5403d3d68ffacd93223097528489e83f333a9749253b4d4c79caec6ecd69"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:PZLXMCVQUXJOGEZ2T43VGW3YT5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Breaking Bad: How Compilers Break Constant-Time Implementations","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Daniele Lain, Ivan Puddu, Moritz Schneider, Nicolas Dutly, Srdjan Capkun","submitted_at":"2024-10-17T12:34:02Z","abstract_excerpt":"The implementations of most hardened cryptographic libraries use defensive programming techniques for side-channel resistance. These techniques are usually specified as guidelines to developers on specific code patterns to use or avoid. Examples include performing arithmetic operations to choose between two variables instead of executing a secret-dependent branch. However, such techniques are only meaningful if they persist across compilation. In this paper, we investigate how optimizations used by modern compilers break the protections introduced by defensive programming techniques. Specifica"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.13489","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.13489/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:02:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GnInKqZJ2Ic6hSBkOT46uaxo1QiT0Ghtjnd2rncuHqyr0dohdp1umGsLFc8NI4oYBoIU1MP5y/zrLkwQdB9lCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T08:54:42.245870Z"},"content_sha256":"ceb92cb232ca26f8ce19ea131ca393d379e5f8d84b26b22a4348d26c86e4da84","schema_version":"1.0","event_id":"sha256:ceb92cb232ca26f8ce19ea131ca393d379e5f8d84b26b22a4348d26c86e4da84"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PZLXMCVQUXJOGEZ2T43VGW3YT5/bundle.json","state_url":"https://pith.science/pith/PZLXMCVQUXJOGEZ2T43VGW3YT5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PZLXMCVQUXJOGEZ2T43VGW3YT5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T08:54:42Z","links":{"resolver":"https://pith.science/pith/PZLXMCVQUXJOGEZ2T43VGW3YT5","bundle":"https://pith.science/pith/PZLXMCVQUXJOGEZ2T43VGW3YT5/bundle.json","state":"https://pith.science/pith/PZLXMCVQUXJOGEZ2T43VGW3YT5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PZLXMCVQUXJOGEZ2T43VGW3YT5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:PZLXMCVQUXJOGEZ2T43VGW3YT5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1662aa60877887216ea60abeede8029259af7bf996bf83e415a364947f656916","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-17T12:34:02Z","title_canon_sha256":"eac6c149d947c35586880c3f945a51e26bad8ab11ab6229da0fe4d036bf4c77a"},"schema_version":"1.0","source":{"id":"2410.13489","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.13489","created_at":"2026-07-05T12:02:36Z"},{"alias_kind":"arxiv_version","alias_value":"2410.13489v2","created_at":"2026-07-05T12:02:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.13489","created_at":"2026-07-05T12:02:36Z"},{"alias_kind":"pith_short_12","alias_value":"PZLXMCVQUXJO","created_at":"2026-07-05T12:02:36Z"},{"alias_kind":"pith_short_16","alias_value":"PZLXMCVQUXJOGEZ2","created_at":"2026-07-05T12:02:36Z"},{"alias_kind":"pith_short_8","alias_value":"PZLXMCVQ","created_at":"2026-07-05T12:02:36Z"}],"graph_snapshots":[{"event_id":"sha256:ceb92cb232ca26f8ce19ea131ca393d379e5f8d84b26b22a4348d26c86e4da84","target":"graph","created_at":"2026-07-05T12:02:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.13489/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The implementations of most hardened cryptographic libraries use defensive programming techniques for side-channel resistance. These techniques are usually specified as guidelines to developers on specific code patterns to use or avoid. Examples include performing arithmetic operations to choose between two variables instead of executing a secret-dependent branch. However, such techniques are only meaningful if they persist across compilation. In this paper, we investigate how optimizations used by modern compilers break the protections introduced by defensive programming techniques. Specifica","authors_text":"Daniele Lain, Ivan Puddu, Moritz Schneider, Nicolas Dutly, Srdjan Capkun","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-17T12:34:02Z","title":"Breaking Bad: How Compilers Break Constant-Time Implementations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.13489","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6c3f5403d3d68ffacd93223097528489e83f333a9749253b4d4c79caec6ecd69","target":"record","created_at":"2026-07-05T12:02:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1662aa60877887216ea60abeede8029259af7bf996bf83e415a364947f656916","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-17T12:34:02Z","title_canon_sha256":"eac6c149d947c35586880c3f945a51e26bad8ab11ab6229da0fe4d036bf4c77a"},"schema_version":"1.0","source":{"id":"2410.13489","kind":"arxiv","version":2}},"canonical_sha256":"7e57760ab0a5d2e3133a9f37535b789f54679cc7624a2447020508b45d5e737c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7e57760ab0a5d2e3133a9f37535b789f54679cc7624a2447020508b45d5e737c","first_computed_at":"2026-07-05T12:02:36.700869Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:02:36.700869Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"asr8alTsuYqO3qiRpcfSTM1ifxyBwLXAfz48NArTZTDLXQ4NrcJTJLmwOyxaksuPCDl/RfO9Glaj8xUHKtUEAg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:02:36.701447Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.13489","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6c3f5403d3d68ffacd93223097528489e83f333a9749253b4d4c79caec6ecd69","sha256:ceb92cb232ca26f8ce19ea131ca393d379e5f8d84b26b22a4348d26c86e4da84"],"state_sha256":"f1cbd4b95a398c61b6dbaf2f7e98bc65c0f939776c9dce8fd4a9502e7a183d3a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v9GugKPYGVPF9GSb3RJzK3lCZOFVcu56FSP8/E73QwliSKCJGtxtmj9pKKRsk5dpTu7TwLBfdeLq3OsVC/QDDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T08:54:42.250335Z","bundle_sha256":"1bf04402d945c845ac557755359580f81fba8359dd88f541f5caa36ff57d96d7"}}