{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:RTQFSHWBD7TBETECWVNWIGJQOD","short_pith_number":"pith:RTQFSHWB","canonical_record":{"source":{"id":"2308.11862","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-23T01:38:03Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"e4daad7db0ed395006f6800dfd580402495c2e1471cb3aebf04053b7ff24eb1e","abstract_canon_sha256":"4c4d4844c905639104ebd347d0bcff0f4d344feb4041b5e2520dbd5251d23ed1"},"schema_version":"1.0"},"canonical_sha256":"8ce0591ec11fe6124c82b55b64193070f93de16314e63bf9d527920ef3d66675","source":{"kind":"arxiv","id":"2308.11862","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.11862","created_at":"2026-07-05T06:43:55Z"},{"alias_kind":"arxiv_version","alias_value":"2308.11862v1","created_at":"2026-07-05T06:43:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.11862","created_at":"2026-07-05T06:43:55Z"},{"alias_kind":"pith_short_12","alias_value":"RTQFSHWBD7TB","created_at":"2026-07-05T06:43:55Z"},{"alias_kind":"pith_short_16","alias_value":"RTQFSHWBD7TBETEC","created_at":"2026-07-05T06:43:55Z"},{"alias_kind":"pith_short_8","alias_value":"RTQFSHWB","created_at":"2026-07-05T06:43:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:RTQFSHWBD7TBETECWVNWIGJQOD","target":"record","payload":{"canonical_record":{"source":{"id":"2308.11862","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-23T01:38:03Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"e4daad7db0ed395006f6800dfd580402495c2e1471cb3aebf04053b7ff24eb1e","abstract_canon_sha256":"4c4d4844c905639104ebd347d0bcff0f4d344feb4041b5e2520dbd5251d23ed1"},"schema_version":"1.0"},"canonical_sha256":"8ce0591ec11fe6124c82b55b64193070f93de16314e63bf9d527920ef3d66675","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:43:55.781928Z","signature_b64":"oe4DrvoT4RbW3Nc1dYjYU764iPuH937UpCZ9VQZYBOCcns2gmBq8DF+uJbDl942/9SYOPAHiA60rMXhFmUicAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8ce0591ec11fe6124c82b55b64193070f93de16314e63bf9d527920ef3d66675","last_reissued_at":"2026-07-05T06:43:55.781508Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:43:55.781508Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.11862","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:43:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8Rifo5f5CVCQlMa9bbPJUMjy7ZdojIx2RPvrCScm580JkxM+gaelzhvBiCKUkvbtltVKEv0lOcx7tp0zAxSdCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T08:06:41.957156Z"},"content_sha256":"0bbf4ff08b3bd0685d02495fbbfbf8932bb1c67f6407b0e4af3ddb97a1b0e6b4","schema_version":"1.0","event_id":"sha256:0bbf4ff08b3bd0685d02495fbbfbf8932bb1c67f6407b0e4af3ddb97a1b0e6b4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:RTQFSHWBD7TBETECWVNWIGJQOD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Empirical Analysis of Software Vulnerabilities Causing Timing Side Channels","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Cemal Yilmaz, M. Ali Babar, M. Mehdi Kholoosi","submitted_at":"2023-08-23T01:38:03Z","abstract_excerpt":"Timing attacks are considered one of the most damaging side-channel attacks. These attacks exploit timing fluctuations caused by certain operations to disclose confidential information to an attacker. For instance, in asymmetric encryption, operations such as multiplication and division can cause time-varying execution times that can be ill-treated to obtain an encryption key. Whilst several efforts have been devoted to exploring the various aspects of timing attacks, particularly in cryptography, little attention has been paid to empirically studying the timing attack-related vulnerabilities "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.11862","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.11862/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:43:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MXNYVuET7ATx/pHJoV6Sb6SvEVZClfAvpWE00kt5ZG6sq7pUTQhLT6UqWKcvuighA2DaGhrnwuSTn8X8EUiRAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T08:06:41.957529Z"},"content_sha256":"1d508a04471709caa940fdea9d44a12feb32d3eaed085aa6d32323fcf93c09c1","schema_version":"1.0","event_id":"sha256:1d508a04471709caa940fdea9d44a12feb32d3eaed085aa6d32323fcf93c09c1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RTQFSHWBD7TBETECWVNWIGJQOD/bundle.json","state_url":"https://pith.science/pith/RTQFSHWBD7TBETECWVNWIGJQOD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RTQFSHWBD7TBETECWVNWIGJQOD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T08:06:41Z","links":{"resolver":"https://pith.science/pith/RTQFSHWBD7TBETECWVNWIGJQOD","bundle":"https://pith.science/pith/RTQFSHWBD7TBETECWVNWIGJQOD/bundle.json","state":"https://pith.science/pith/RTQFSHWBD7TBETECWVNWIGJQOD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RTQFSHWBD7TBETECWVNWIGJQOD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:RTQFSHWBD7TBETECWVNWIGJQOD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4c4d4844c905639104ebd347d0bcff0f4d344feb4041b5e2520dbd5251d23ed1","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-23T01:38:03Z","title_canon_sha256":"e4daad7db0ed395006f6800dfd580402495c2e1471cb3aebf04053b7ff24eb1e"},"schema_version":"1.0","source":{"id":"2308.11862","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.11862","created_at":"2026-07-05T06:43:55Z"},{"alias_kind":"arxiv_version","alias_value":"2308.11862v1","created_at":"2026-07-05T06:43:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.11862","created_at":"2026-07-05T06:43:55Z"},{"alias_kind":"pith_short_12","alias_value":"RTQFSHWBD7TB","created_at":"2026-07-05T06:43:55Z"},{"alias_kind":"pith_short_16","alias_value":"RTQFSHWBD7TBETEC","created_at":"2026-07-05T06:43:55Z"},{"alias_kind":"pith_short_8","alias_value":"RTQFSHWB","created_at":"2026-07-05T06:43:55Z"}],"graph_snapshots":[{"event_id":"sha256:1d508a04471709caa940fdea9d44a12feb32d3eaed085aa6d32323fcf93c09c1","target":"graph","created_at":"2026-07-05T06:43:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.11862/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Timing attacks are considered one of the most damaging side-channel attacks. These attacks exploit timing fluctuations caused by certain operations to disclose confidential information to an attacker. For instance, in asymmetric encryption, operations such as multiplication and division can cause time-varying execution times that can be ill-treated to obtain an encryption key. Whilst several efforts have been devoted to exploring the various aspects of timing attacks, particularly in cryptography, little attention has been paid to empirically studying the timing attack-related vulnerabilities ","authors_text":"Cemal Yilmaz, M. Ali Babar, M. Mehdi Kholoosi","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-23T01:38:03Z","title":"Empirical Analysis of Software Vulnerabilities Causing Timing Side Channels"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.11862","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0bbf4ff08b3bd0685d02495fbbfbf8932bb1c67f6407b0e4af3ddb97a1b0e6b4","target":"record","created_at":"2026-07-05T06:43:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4c4d4844c905639104ebd347d0bcff0f4d344feb4041b5e2520dbd5251d23ed1","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-08-23T01:38:03Z","title_canon_sha256":"e4daad7db0ed395006f6800dfd580402495c2e1471cb3aebf04053b7ff24eb1e"},"schema_version":"1.0","source":{"id":"2308.11862","kind":"arxiv","version":1}},"canonical_sha256":"8ce0591ec11fe6124c82b55b64193070f93de16314e63bf9d527920ef3d66675","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8ce0591ec11fe6124c82b55b64193070f93de16314e63bf9d527920ef3d66675","first_computed_at":"2026-07-05T06:43:55.781508Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:43:55.781508Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"oe4DrvoT4RbW3Nc1dYjYU764iPuH937UpCZ9VQZYBOCcns2gmBq8DF+uJbDl942/9SYOPAHiA60rMXhFmUicAA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:43:55.781928Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.11862","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0bbf4ff08b3bd0685d02495fbbfbf8932bb1c67f6407b0e4af3ddb97a1b0e6b4","sha256:1d508a04471709caa940fdea9d44a12feb32d3eaed085aa6d32323fcf93c09c1"],"state_sha256":"53d71288a26c41552db4411c4b55334f85cea71cb92cbd14d40c4bae7bfe8c86"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HLJgUP3EEfT3dlwfAjP53aIR7SxMBGMoWk0CxPOHC7fe9NDK2QR70SzQ40dGZO+3N8YqQF3Qe1pD/Hjnzl4ADQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T08:06:41.960471Z","bundle_sha256":"a4f4a05355b3d4f4d64864aedb63d18dfbda70914a3066e767eb4457c83668f3"}}