{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:QRDZZANZ5VLDVA3EYMU6N5TR33","short_pith_number":"pith:QRDZZANZ","canonical_record":{"source":{"id":"2112.12855","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-23T22:03:27Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"87baeced8c4d2949d99a851eb3a50aef936aa4c5e4487a9cd5a266c336184a48","abstract_canon_sha256":"a4585043f2f1f2b85147373e1a22b5f0a78cd16751d9b81ad601863dc25ba952"},"schema_version":"1.0"},"canonical_sha256":"84479c81b9ed563a8364c329e6f671ded7a08209244c3d1f630be26f44a6a60c","source":{"kind":"arxiv","id":"2112.12855","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.12855","created_at":"2026-07-05T03:44:57Z"},{"alias_kind":"arxiv_version","alias_value":"2112.12855v2","created_at":"2026-07-05T03:44:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.12855","created_at":"2026-07-05T03:44:57Z"},{"alias_kind":"pith_short_12","alias_value":"QRDZZANZ5VLD","created_at":"2026-07-05T03:44:57Z"},{"alias_kind":"pith_short_16","alias_value":"QRDZZANZ5VLDVA3E","created_at":"2026-07-05T03:44:57Z"},{"alias_kind":"pith_short_8","alias_value":"QRDZZANZ","created_at":"2026-07-05T03:44:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:QRDZZANZ5VLDVA3EYMU6N5TR33","target":"record","payload":{"canonical_record":{"source":{"id":"2112.12855","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-23T22:03:27Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"87baeced8c4d2949d99a851eb3a50aef936aa4c5e4487a9cd5a266c336184a48","abstract_canon_sha256":"a4585043f2f1f2b85147373e1a22b5f0a78cd16751d9b81ad601863dc25ba952"},"schema_version":"1.0"},"canonical_sha256":"84479c81b9ed563a8364c329e6f671ded7a08209244c3d1f630be26f44a6a60c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:44:57.170208Z","signature_b64":"m/azz3aR9UYAdPI7CWL6p9vxR6aTYicRMuAC/rBbWVUPlfcBZyLuDIG2cLhiNaejUma4LfBoHbb9rAS18xhEDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"84479c81b9ed563a8364c329e6f671ded7a08209244c3d1f630be26f44a6a60c","last_reissued_at":"2026-07-05T03:44:57.169802Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:44:57.169802Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.12855","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:44:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wniIOhAGLShZMM4GkNoRpsy5f31ecym3WUMlOPhl5eEX6Vg8Ncj3dELdPYA5ipz7gS/6HpzAJ6AJ9lsUZ9r2Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T20:46:27.781741Z"},"content_sha256":"35364f710389d0532e908d2f9e702e4cca44208d23ce3d6352cb86bddbceffae","schema_version":"1.0","event_id":"sha256:35364f710389d0532e908d2f9e702e4cca44208d23ce3d6352cb86bddbceffae"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:QRDZZANZ5VLDVA3EYMU6N5TR33","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: Privacy-preserving Deep Learning with Homomorphic Encryption","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Daniel Takabi, Peizhao Hu, Robert Podschwadt","submitted_at":"2021-12-23T22:03:27Z","abstract_excerpt":"Outsourced computation for neural networks allows users access to state of the art models without needing to invest in specialized hardware and know-how. The problem is that the users lose control over potentially privacy sensitive data. With homomorphic encryption (HE) computation can be performed on encrypted data without revealing its content. In this systematization of knowledge, we take an in-depth look at approaches that combine neural networks with HE for privacy preservation. We categorize the changes to neural network models and architectures to make them computable over HE and how th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.12855","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.12855/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:44:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M9kNnPZ6aP4mNSiJnuQSo8YE3o+E/VqhuRo/dp/DBxGZgkox71AM+lqAonzm6I7rHs77H0/zqILqczEVCVveDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T20:46:27.783576Z"},"content_sha256":"d8f32f8cb986e02427d7d8ae6c7960bd1aaabf007143c26204220bcea443aa89","schema_version":"1.0","event_id":"sha256:d8f32f8cb986e02427d7d8ae6c7960bd1aaabf007143c26204220bcea443aa89"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QRDZZANZ5VLDVA3EYMU6N5TR33/bundle.json","state_url":"https://pith.science/pith/QRDZZANZ5VLDVA3EYMU6N5TR33/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QRDZZANZ5VLDVA3EYMU6N5TR33/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T20:46:27Z","links":{"resolver":"https://pith.science/pith/QRDZZANZ5VLDVA3EYMU6N5TR33","bundle":"https://pith.science/pith/QRDZZANZ5VLDVA3EYMU6N5TR33/bundle.json","state":"https://pith.science/pith/QRDZZANZ5VLDVA3EYMU6N5TR33/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QRDZZANZ5VLDVA3EYMU6N5TR33/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:QRDZZANZ5VLDVA3EYMU6N5TR33","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a4585043f2f1f2b85147373e1a22b5f0a78cd16751d9b81ad601863dc25ba952","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-23T22:03:27Z","title_canon_sha256":"87baeced8c4d2949d99a851eb3a50aef936aa4c5e4487a9cd5a266c336184a48"},"schema_version":"1.0","source":{"id":"2112.12855","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.12855","created_at":"2026-07-05T03:44:57Z"},{"alias_kind":"arxiv_version","alias_value":"2112.12855v2","created_at":"2026-07-05T03:44:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.12855","created_at":"2026-07-05T03:44:57Z"},{"alias_kind":"pith_short_12","alias_value":"QRDZZANZ5VLD","created_at":"2026-07-05T03:44:57Z"},{"alias_kind":"pith_short_16","alias_value":"QRDZZANZ5VLDVA3E","created_at":"2026-07-05T03:44:57Z"},{"alias_kind":"pith_short_8","alias_value":"QRDZZANZ","created_at":"2026-07-05T03:44:57Z"}],"graph_snapshots":[{"event_id":"sha256:d8f32f8cb986e02427d7d8ae6c7960bd1aaabf007143c26204220bcea443aa89","target":"graph","created_at":"2026-07-05T03:44:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.12855/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Outsourced computation for neural networks allows users access to state of the art models without needing to invest in specialized hardware and know-how. The problem is that the users lose control over potentially privacy sensitive data. With homomorphic encryption (HE) computation can be performed on encrypted data without revealing its content. In this systematization of knowledge, we take an in-depth look at approaches that combine neural networks with HE for privacy preservation. We categorize the changes to neural network models and architectures to make them computable over HE and how th","authors_text":"Daniel Takabi, Peizhao Hu, Robert Podschwadt","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-23T22:03:27Z","title":"SoK: Privacy-preserving Deep Learning with Homomorphic Encryption"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.12855","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:35364f710389d0532e908d2f9e702e4cca44208d23ce3d6352cb86bddbceffae","target":"record","created_at":"2026-07-05T03:44:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a4585043f2f1f2b85147373e1a22b5f0a78cd16751d9b81ad601863dc25ba952","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-23T22:03:27Z","title_canon_sha256":"87baeced8c4d2949d99a851eb3a50aef936aa4c5e4487a9cd5a266c336184a48"},"schema_version":"1.0","source":{"id":"2112.12855","kind":"arxiv","version":2}},"canonical_sha256":"84479c81b9ed563a8364c329e6f671ded7a08209244c3d1f630be26f44a6a60c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"84479c81b9ed563a8364c329e6f671ded7a08209244c3d1f630be26f44a6a60c","first_computed_at":"2026-07-05T03:44:57.169802Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:44:57.169802Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"m/azz3aR9UYAdPI7CWL6p9vxR6aTYicRMuAC/rBbWVUPlfcBZyLuDIG2cLhiNaejUma4LfBoHbb9rAS18xhEDw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:44:57.170208Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.12855","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:35364f710389d0532e908d2f9e702e4cca44208d23ce3d6352cb86bddbceffae","sha256:d8f32f8cb986e02427d7d8ae6c7960bd1aaabf007143c26204220bcea443aa89"],"state_sha256":"bd5903e345ad72a65f6a750cf6439092c70b8a9a6ea45fb0a4daa2077e357800"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DmRkgvJ8/+temVy/S0rPpcLRE/ZFsLrYxweaBopeNDYyNV8YK1RpvLmU0Y4LLb+EWVMnsO3j5uIc/YfTrilKDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T20:46:27.797210Z","bundle_sha256":"aacd52a2e54ce900167d5768a8bc6afd9c45e10d02cf65e89ed00f29f030afcd"}}