{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:RM643DMLVQJ6J3MOINPTAQOC6F","short_pith_number":"pith:RM643DML","canonical_record":{"source":{"id":"2012.13293","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-12-24T15:28:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"99a4ecda719741f0c257cb856c75741f6b8ca3f2c6e009628b8715554a38223e","abstract_canon_sha256":"dd5c71c113983c042322d4804c178437f9274caa72866ec042f723bba2de93a2"},"schema_version":"1.0"},"canonical_sha256":"8b3dcd8d8bac13e4ed8e435f3041c2f140aa5ddbdc95f20e997af78108bd5623","source":{"kind":"arxiv","id":"2012.13293","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.13293","created_at":"2026-07-05T02:01:56Z"},{"alias_kind":"arxiv_version","alias_value":"2012.13293v1","created_at":"2026-07-05T02:01:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.13293","created_at":"2026-07-05T02:01:56Z"},{"alias_kind":"pith_short_12","alias_value":"RM643DMLVQJ6","created_at":"2026-07-05T02:01:56Z"},{"alias_kind":"pith_short_16","alias_value":"RM643DMLVQJ6J3MO","created_at":"2026-07-05T02:01:56Z"},{"alias_kind":"pith_short_8","alias_value":"RM643DML","created_at":"2026-07-05T02:01:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:RM643DMLVQJ6J3MOINPTAQOC6F","target":"record","payload":{"canonical_record":{"source":{"id":"2012.13293","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-12-24T15:28:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"99a4ecda719741f0c257cb856c75741f6b8ca3f2c6e009628b8715554a38223e","abstract_canon_sha256":"dd5c71c113983c042322d4804c178437f9274caa72866ec042f723bba2de93a2"},"schema_version":"1.0"},"canonical_sha256":"8b3dcd8d8bac13e4ed8e435f3041c2f140aa5ddbdc95f20e997af78108bd5623","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:01:56.971650Z","signature_b64":"cGTreI1b2DcoqXQGbRYU9NiMJDJzHdg0CPGnKl04xQ6yS29tZluRV0C/Tjb3Pj1zQ8mKBMeX8YePSfSBuhSvDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8b3dcd8d8bac13e4ed8e435f3041c2f140aa5ddbdc95f20e997af78108bd5623","last_reissued_at":"2026-07-05T02:01:56.971256Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:01:56.971256Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2012.13293","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:01:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L/UaEJ6XY17GY7xN/PClirn+mUYne3xurUmJ4IWHpfQ/dc3N3s7uENSnmciRa7axO+A0bKcj2wxv0uWmH2KUDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T23:41:34.438534Z"},"content_sha256":"c6387219cc41977a1338364e6c72725d309bb31a4b32675d30ae18d50535cff7","schema_version":"1.0","event_id":"sha256:c6387219cc41977a1338364e6c72725d309bb31a4b32675d30ae18d50535cff7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:RM643DMLVQJ6J3MOINPTAQOC6F","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fuzzy Commitments Offer Insufficient Protection to Biometric Templates Produced by Deep Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Danny Keller, Margarita Osadchy, Orr Dunkelman","submitted_at":"2020-12-24T15:28:33Z","abstract_excerpt":"In this work, we study the protection that fuzzy commitments offer when they are applied to facial images, processed by the state of the art deep learning facial recognition systems. We show that while these systems are capable of producing great accuracy, they produce templates of too little entropy. As a result, we present a reconstruction attack that takes a protected template, and reconstructs a facial image. The reconstructed facial images greatly resemble the original ones. In the simplest attack scenario, more than 78% of these reconstructed templates succeed in unlocking an account (wh"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.13293","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2012.13293/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:01:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i2Wv369v1bHKTE5XSmgqhZFu4SSZxqNUJd52ePnB7ZrUiKp361pS+AhTqS/9XP/drnulaHYy0T659WGuaPwWBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T23:41:34.438988Z"},"content_sha256":"24d1553fa5801f3f346fc10f2ec199a4c07d2d660c1fb31b68a8a8da47348b7e","schema_version":"1.0","event_id":"sha256:24d1553fa5801f3f346fc10f2ec199a4c07d2d660c1fb31b68a8a8da47348b7e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RM643DMLVQJ6J3MOINPTAQOC6F/bundle.json","state_url":"https://pith.science/pith/RM643DMLVQJ6J3MOINPTAQOC6F/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RM643DMLVQJ6J3MOINPTAQOC6F/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-12T23:41:34Z","links":{"resolver":"https://pith.science/pith/RM643DMLVQJ6J3MOINPTAQOC6F","bundle":"https://pith.science/pith/RM643DMLVQJ6J3MOINPTAQOC6F/bundle.json","state":"https://pith.science/pith/RM643DMLVQJ6J3MOINPTAQOC6F/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RM643DMLVQJ6J3MOINPTAQOC6F/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:RM643DMLVQJ6J3MOINPTAQOC6F","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dd5c71c113983c042322d4804c178437f9274caa72866ec042f723bba2de93a2","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-12-24T15:28:33Z","title_canon_sha256":"99a4ecda719741f0c257cb856c75741f6b8ca3f2c6e009628b8715554a38223e"},"schema_version":"1.0","source":{"id":"2012.13293","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.13293","created_at":"2026-07-05T02:01:56Z"},{"alias_kind":"arxiv_version","alias_value":"2012.13293v1","created_at":"2026-07-05T02:01:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.13293","created_at":"2026-07-05T02:01:56Z"},{"alias_kind":"pith_short_12","alias_value":"RM643DMLVQJ6","created_at":"2026-07-05T02:01:56Z"},{"alias_kind":"pith_short_16","alias_value":"RM643DMLVQJ6J3MO","created_at":"2026-07-05T02:01:56Z"},{"alias_kind":"pith_short_8","alias_value":"RM643DML","created_at":"2026-07-05T02:01:56Z"}],"graph_snapshots":[{"event_id":"sha256:24d1553fa5801f3f346fc10f2ec199a4c07d2d660c1fb31b68a8a8da47348b7e","target":"graph","created_at":"2026-07-05T02:01:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2012.13293/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this work, we study the protection that fuzzy commitments offer when they are applied to facial images, processed by the state of the art deep learning facial recognition systems. We show that while these systems are capable of producing great accuracy, they produce templates of too little entropy. As a result, we present a reconstruction attack that takes a protected template, and reconstructs a facial image. The reconstructed facial images greatly resemble the original ones. In the simplest attack scenario, more than 78% of these reconstructed templates succeed in unlocking an account (wh","authors_text":"Danny Keller, Margarita Osadchy, Orr Dunkelman","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-12-24T15:28:33Z","title":"Fuzzy Commitments Offer Insufficient Protection to Biometric Templates Produced by Deep Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.13293","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c6387219cc41977a1338364e6c72725d309bb31a4b32675d30ae18d50535cff7","target":"record","created_at":"2026-07-05T02:01:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dd5c71c113983c042322d4804c178437f9274caa72866ec042f723bba2de93a2","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-12-24T15:28:33Z","title_canon_sha256":"99a4ecda719741f0c257cb856c75741f6b8ca3f2c6e009628b8715554a38223e"},"schema_version":"1.0","source":{"id":"2012.13293","kind":"arxiv","version":1}},"canonical_sha256":"8b3dcd8d8bac13e4ed8e435f3041c2f140aa5ddbdc95f20e997af78108bd5623","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8b3dcd8d8bac13e4ed8e435f3041c2f140aa5ddbdc95f20e997af78108bd5623","first_computed_at":"2026-07-05T02:01:56.971256Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:01:56.971256Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cGTreI1b2DcoqXQGbRYU9NiMJDJzHdg0CPGnKl04xQ6yS29tZluRV0C/Tjb3Pj1zQ8mKBMeX8YePSfSBuhSvDA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:01:56.971650Z","signed_message":"canonical_sha256_bytes"},"source_id":"2012.13293","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c6387219cc41977a1338364e6c72725d309bb31a4b32675d30ae18d50535cff7","sha256:24d1553fa5801f3f346fc10f2ec199a4c07d2d660c1fb31b68a8a8da47348b7e"],"state_sha256":"033158883b769645c3d328e25be74cc5e6f4beab861c128ca543e0b8afea1067"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qDW411h6lTud2PDtQzZzFxhf7LI40VZOZoIB5wizis9OicdqvDeOe1gNonp0k7YppoMFBqraqJQXcljNuKrgDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-12T23:41:34.441583Z","bundle_sha256":"ddb9db750e6e040885c2515ae54d8df5768d4448a2f1232cba151d9dfc1eb8e6"}}