{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:RWOWBYKCX3ZGAU5C6ZGVCOP2JZ","short_pith_number":"pith:RWOWBYKC","canonical_record":{"source":{"id":"2309.16952","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-29T03:36:42Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b2aad7dc176bf555c9f8c1971ae5fe76acb94176b9bd4358b3ba6e50087f88bd","abstract_canon_sha256":"3dc14cce8ccd7fdd088b179905a97f02363cfbbe5dfee6d5e7c842039e3d3268"},"schema_version":"1.0"},"canonical_sha256":"8d9d60e142bef26053a2f64d5139fa4e58a3c6186d382651dbb0288e9b88183d","source":{"kind":"arxiv","id":"2309.16952","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.16952","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"arxiv_version","alias_value":"2309.16952v2","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.16952","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"pith_short_12","alias_value":"RWOWBYKCX3ZG","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"pith_short_16","alias_value":"RWOWBYKCX3ZGAU5C","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"pith_short_8","alias_value":"RWOWBYKC","created_at":"2026-07-05T07:35:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:RWOWBYKCX3ZGAU5C6ZGVCOP2JZ","target":"record","payload":{"canonical_record":{"source":{"id":"2309.16952","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-29T03:36:42Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b2aad7dc176bf555c9f8c1971ae5fe76acb94176b9bd4358b3ba6e50087f88bd","abstract_canon_sha256":"3dc14cce8ccd7fdd088b179905a97f02363cfbbe5dfee6d5e7c842039e3d3268"},"schema_version":"1.0"},"canonical_sha256":"8d9d60e142bef26053a2f64d5139fa4e58a3c6186d382651dbb0288e9b88183d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:35:40.298083Z","signature_b64":"YyBtMmiFT3uiBcdOVZd2VCJGyWjTfrBNEWFNB9QkfgAc7lSrbzqX3+Os7DWP+dHYICFOJpU3+8FALGK59SIeDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8d9d60e142bef26053a2f64d5139fa4e58a3c6186d382651dbb0288e9b88183d","last_reissued_at":"2026-07-05T07:35:40.297634Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:35:40.297634Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.16952","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:35:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"b9IBfUpq6YXedLDbslMZSmuNFrWMDtB9M/ZdSHhJZJ90UnWG5BM5C8LiPBTwiA01l9ENQejsC35lqjHOZQT+AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T13:16:52.117965Z"},"content_sha256":"5521373e4ebc1f25fa91089d212763297ef2d063c349918e7aeede56a9470cb9","schema_version":"1.0","event_id":"sha256:5521373e4ebc1f25fa91089d212763297ef2d063c349918e7aeede56a9470cb9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:RWOWBYKCX3ZGAU5C6ZGVCOP2JZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Leveraging Optimization for Adaptive Attacks on Image Watermarks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Abdulrahman Diaa, Florian Kerschbaum, Lucas Fenaux, Nils Lukas","submitted_at":"2023-09-29T03:36:42Z","abstract_excerpt":"Untrustworthy users can misuse image generators to synthesize high-quality deepfakes and engage in unethical activities. Watermarking deters misuse by marking generated content with a hidden message, enabling its detection using a secret watermarking key. A core security property of watermarking is robustness, which states that an attacker can only evade detection by substantially degrading image quality. Assessing robustness requires designing an adaptive attack for the specific watermarking algorithm. When evaluating watermarking algorithms and their (adaptive) attacks, it is challenging to "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.16952","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.16952/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:35:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mgEFzwALncBoKZeTIzWp4EKKuWPR+mMgB5SUd2I4OtYuBRh64U1qfxM2/gpSeGG1DeByJLi3lyxw9J3d4sg5Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T13:16:52.118511Z"},"content_sha256":"3805f3929a33f838981f3e7164155c62e4012718f3ddad6e7d6d51d4ac91762b","schema_version":"1.0","event_id":"sha256:3805f3929a33f838981f3e7164155c62e4012718f3ddad6e7d6d51d4ac91762b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RWOWBYKCX3ZGAU5C6ZGVCOP2JZ/bundle.json","state_url":"https://pith.science/pith/RWOWBYKCX3ZGAU5C6ZGVCOP2JZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RWOWBYKCX3ZGAU5C6ZGVCOP2JZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T13:16:52Z","links":{"resolver":"https://pith.science/pith/RWOWBYKCX3ZGAU5C6ZGVCOP2JZ","bundle":"https://pith.science/pith/RWOWBYKCX3ZGAU5C6ZGVCOP2JZ/bundle.json","state":"https://pith.science/pith/RWOWBYKCX3ZGAU5C6ZGVCOP2JZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RWOWBYKCX3ZGAU5C6ZGVCOP2JZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:RWOWBYKCX3ZGAU5C6ZGVCOP2JZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3dc14cce8ccd7fdd088b179905a97f02363cfbbe5dfee6d5e7c842039e3d3268","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-29T03:36:42Z","title_canon_sha256":"b2aad7dc176bf555c9f8c1971ae5fe76acb94176b9bd4358b3ba6e50087f88bd"},"schema_version":"1.0","source":{"id":"2309.16952","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.16952","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"arxiv_version","alias_value":"2309.16952v2","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.16952","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"pith_short_12","alias_value":"RWOWBYKCX3ZG","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"pith_short_16","alias_value":"RWOWBYKCX3ZGAU5C","created_at":"2026-07-05T07:35:40Z"},{"alias_kind":"pith_short_8","alias_value":"RWOWBYKC","created_at":"2026-07-05T07:35:40Z"}],"graph_snapshots":[{"event_id":"sha256:3805f3929a33f838981f3e7164155c62e4012718f3ddad6e7d6d51d4ac91762b","target":"graph","created_at":"2026-07-05T07:35:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.16952/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Untrustworthy users can misuse image generators to synthesize high-quality deepfakes and engage in unethical activities. Watermarking deters misuse by marking generated content with a hidden message, enabling its detection using a secret watermarking key. A core security property of watermarking is robustness, which states that an attacker can only evade detection by substantially degrading image quality. Assessing robustness requires designing an adaptive attack for the specific watermarking algorithm. When evaluating watermarking algorithms and their (adaptive) attacks, it is challenging to ","authors_text":"Abdulrahman Diaa, Florian Kerschbaum, Lucas Fenaux, Nils Lukas","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-29T03:36:42Z","title":"Leveraging Optimization for Adaptive Attacks on Image Watermarks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.16952","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5521373e4ebc1f25fa91089d212763297ef2d063c349918e7aeede56a9470cb9","target":"record","created_at":"2026-07-05T07:35:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3dc14cce8ccd7fdd088b179905a97f02363cfbbe5dfee6d5e7c842039e3d3268","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-29T03:36:42Z","title_canon_sha256":"b2aad7dc176bf555c9f8c1971ae5fe76acb94176b9bd4358b3ba6e50087f88bd"},"schema_version":"1.0","source":{"id":"2309.16952","kind":"arxiv","version":2}},"canonical_sha256":"8d9d60e142bef26053a2f64d5139fa4e58a3c6186d382651dbb0288e9b88183d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8d9d60e142bef26053a2f64d5139fa4e58a3c6186d382651dbb0288e9b88183d","first_computed_at":"2026-07-05T07:35:40.297634Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:35:40.297634Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YyBtMmiFT3uiBcdOVZd2VCJGyWjTfrBNEWFNB9QkfgAc7lSrbzqX3+Os7DWP+dHYICFOJpU3+8FALGK59SIeDg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:35:40.298083Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.16952","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5521373e4ebc1f25fa91089d212763297ef2d063c349918e7aeede56a9470cb9","sha256:3805f3929a33f838981f3e7164155c62e4012718f3ddad6e7d6d51d4ac91762b"],"state_sha256":"fb819f80e38bbac07cd4abb36a3099901f0bbe934afbaace6f79a33848a73650"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"24I9UZC7dIoVruAjTdnXrs1iTEE1VvZLVRUg4K4/ueA+CWQy2t1uN0Z31c+98cDVAg/Eyp+/r8qlrWIeORTBBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T13:16:52.123393Z","bundle_sha256":"0546659a5499ff94318d1e228ee7306559e8ce6f03aad5081f298a122227605f"}}