{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:Q6N4TL2G7XLOSVMR74WLQRX75A","short_pith_number":"pith:Q6N4TL2G","canonical_record":{"source":{"id":"2410.05750","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-08T07:27:55Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"06c2d1eb89a3cc80a563ab70e4992ac11991586b368e873372e0c28fc6bc36c0","abstract_canon_sha256":"93f3d5b40d32c4bc15ea0757e2beac1990898892aeca0f52c9c290aa9bd23cb7"},"schema_version":"1.0"},"canonical_sha256":"879bc9af46fdd6e95591ff2cb846ffe822a5b730e0d303fff7255281e2dfa02e","source":{"kind":"arxiv","id":"2410.05750","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.05750","created_at":"2026-07-05T09:17:24Z"},{"alias_kind":"arxiv_version","alias_value":"2410.05750v1","created_at":"2026-07-05T09:17:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.05750","created_at":"2026-07-05T09:17:24Z"},{"alias_kind":"pith_short_12","alias_value":"Q6N4TL2G7XLO","created_at":"2026-07-05T09:17:24Z"},{"alias_kind":"pith_short_16","alias_value":"Q6N4TL2G7XLOSVMR","created_at":"2026-07-05T09:17:24Z"},{"alias_kind":"pith_short_8","alias_value":"Q6N4TL2G","created_at":"2026-07-05T09:17:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:Q6N4TL2G7XLOSVMR74WLQRX75A","target":"record","payload":{"canonical_record":{"source":{"id":"2410.05750","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-08T07:27:55Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"06c2d1eb89a3cc80a563ab70e4992ac11991586b368e873372e0c28fc6bc36c0","abstract_canon_sha256":"93f3d5b40d32c4bc15ea0757e2beac1990898892aeca0f52c9c290aa9bd23cb7"},"schema_version":"1.0"},"canonical_sha256":"879bc9af46fdd6e95591ff2cb846ffe822a5b730e0d303fff7255281e2dfa02e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:17:24.205977Z","signature_b64":"ZUKNhAOlPmrQsMYXTdtd06DcP3bs10uj29FnFeTjtNGzbm7epdHsHTZ5Jajp5KdTZOGOfKJsNCiFJMCpAPyWCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"879bc9af46fdd6e95591ff2cb846ffe822a5b730e0d303fff7255281e2dfa02e","last_reissued_at":"2026-07-05T09:17:24.205539Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:17:24.205539Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.05750","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:17:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/bJZ8Wr6lRox550eO8E+lVv8GqNcCvwWjz2elkgqj9WvDXwLOgcKNBN4PWAKr2ReQQnHWjhSV6gKmmkHwCxrDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T14:06:38.792442Z"},"content_sha256":"3ff3d8cd00eddbaa18806049eadb78022418b2bad785f4df566eb72a10a3725b","schema_version":"1.0","event_id":"sha256:3ff3d8cd00eddbaa18806049eadb78022418b2bad785f4df566eb72a10a3725b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:Q6N4TL2G7XLOSVMR74WLQRX75A","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Polynomial Time Cryptanalytic Extraction of Deep Neural Networks in the Hard-Label Setting","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Adi Shamir, Anna Hambitzer, Francisco Rodr\\'iguez-Henr\\'iquez, Jorge Ch\\'avez-Saab, Nicholas Carlini","submitted_at":"2024-10-08T07:27:55Z","abstract_excerpt":"Deep neural networks (DNNs) are valuable assets, yet their public accessibility raises security concerns about parameter extraction by malicious actors. Recent work by Carlini et al. (crypto'20) and Canales-Mart\\'inez et al. (eurocrypt'24) has drawn parallels between this issue and block cipher key extraction via chosen plaintext attacks. Leveraging differential cryptanalysis, they demonstrated that all the weights and biases of black-box ReLU-based DNNs could be inferred using a polynomial number of queries and computational time. However, their attacks relied on the availability of the exact"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.05750","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.05750/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:17:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kga0UPs+P3TfjMScU24184z+4l/9Q04Nobb2Rz1t0VW85rhqu835OjXaOgQf2gSvmHI1jLlwEykYRupMVavtDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T14:06:38.792992Z"},"content_sha256":"0f54c8171ac4d3d0c7697527e6a42564d772062db60f682baf0cc167f0a60bd8","schema_version":"1.0","event_id":"sha256:0f54c8171ac4d3d0c7697527e6a42564d772062db60f682baf0cc167f0a60bd8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q6N4TL2G7XLOSVMR74WLQRX75A/bundle.json","state_url":"https://pith.science/pith/Q6N4TL2G7XLOSVMR74WLQRX75A/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q6N4TL2G7XLOSVMR74WLQRX75A/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T14:06:38Z","links":{"resolver":"https://pith.science/pith/Q6N4TL2G7XLOSVMR74WLQRX75A","bundle":"https://pith.science/pith/Q6N4TL2G7XLOSVMR74WLQRX75A/bundle.json","state":"https://pith.science/pith/Q6N4TL2G7XLOSVMR74WLQRX75A/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q6N4TL2G7XLOSVMR74WLQRX75A/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:Q6N4TL2G7XLOSVMR74WLQRX75A","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"93f3d5b40d32c4bc15ea0757e2beac1990898892aeca0f52c9c290aa9bd23cb7","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-08T07:27:55Z","title_canon_sha256":"06c2d1eb89a3cc80a563ab70e4992ac11991586b368e873372e0c28fc6bc36c0"},"schema_version":"1.0","source":{"id":"2410.05750","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.05750","created_at":"2026-07-05T09:17:24Z"},{"alias_kind":"arxiv_version","alias_value":"2410.05750v1","created_at":"2026-07-05T09:17:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.05750","created_at":"2026-07-05T09:17:24Z"},{"alias_kind":"pith_short_12","alias_value":"Q6N4TL2G7XLO","created_at":"2026-07-05T09:17:24Z"},{"alias_kind":"pith_short_16","alias_value":"Q6N4TL2G7XLOSVMR","created_at":"2026-07-05T09:17:24Z"},{"alias_kind":"pith_short_8","alias_value":"Q6N4TL2G","created_at":"2026-07-05T09:17:24Z"}],"graph_snapshots":[{"event_id":"sha256:0f54c8171ac4d3d0c7697527e6a42564d772062db60f682baf0cc167f0a60bd8","target":"graph","created_at":"2026-07-05T09:17:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.05750/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are valuable assets, yet their public accessibility raises security concerns about parameter extraction by malicious actors. Recent work by Carlini et al. (crypto'20) and Canales-Mart\\'inez et al. (eurocrypt'24) has drawn parallels between this issue and block cipher key extraction via chosen plaintext attacks. Leveraging differential cryptanalysis, they demonstrated that all the weights and biases of black-box ReLU-based DNNs could be inferred using a polynomial number of queries and computational time. However, their attacks relied on the availability of the exact","authors_text":"Adi Shamir, Anna Hambitzer, Francisco Rodr\\'iguez-Henr\\'iquez, Jorge Ch\\'avez-Saab, Nicholas Carlini","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-08T07:27:55Z","title":"Polynomial Time Cryptanalytic Extraction of Deep Neural Networks in the Hard-Label Setting"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.05750","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3ff3d8cd00eddbaa18806049eadb78022418b2bad785f4df566eb72a10a3725b","target":"record","created_at":"2026-07-05T09:17:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"93f3d5b40d32c4bc15ea0757e2beac1990898892aeca0f52c9c290aa9bd23cb7","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-08T07:27:55Z","title_canon_sha256":"06c2d1eb89a3cc80a563ab70e4992ac11991586b368e873372e0c28fc6bc36c0"},"schema_version":"1.0","source":{"id":"2410.05750","kind":"arxiv","version":1}},"canonical_sha256":"879bc9af46fdd6e95591ff2cb846ffe822a5b730e0d303fff7255281e2dfa02e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"879bc9af46fdd6e95591ff2cb846ffe822a5b730e0d303fff7255281e2dfa02e","first_computed_at":"2026-07-05T09:17:24.205539Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:17:24.205539Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZUKNhAOlPmrQsMYXTdtd06DcP3bs10uj29FnFeTjtNGzbm7epdHsHTZ5Jajp5KdTZOGOfKJsNCiFJMCpAPyWCw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:17:24.205977Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.05750","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3ff3d8cd00eddbaa18806049eadb78022418b2bad785f4df566eb72a10a3725b","sha256:0f54c8171ac4d3d0c7697527e6a42564d772062db60f682baf0cc167f0a60bd8"],"state_sha256":"2d5de9ee820fa7e4329ed45e3b8c2a9f4f575c2bcb635a636f0d2a0bf788a976"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SN/rK6gpNMDEBXzZgghZMhstYeBMbrwvNw7KljyO9JxMDsa+1/Mxe2ItFOvLTdFCeweMjFUfHFrqAkvaTfXPAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T14:06:38.834253Z","bundle_sha256":"3c4995978f47da15acb5b1a2902ae119b7afabfc79b93094b116306430caa5c6"}}