{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:SSFUBVW4DYJYHQM6OPPAEMFD7G","short_pith_number":"pith:SSFUBVW4","canonical_record":{"source":{"id":"2412.03283","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-04T12:57:17Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"bced60c0ddc06ecf6f4b952154d70366b81856bd92d0c65dfe7f2dbf8498508d","abstract_canon_sha256":"534d5e1b7301ea70541e51974fc62c7661f50e11d673507a11ac7683b42e9b5c"},"schema_version":"1.0"},"canonical_sha256":"948b40d6dc1e1383c19e73de0230a3f9b02e63e0039c745dacf217d7b80a5b0d","source":{"kind":"arxiv","id":"2412.03283","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.03283","created_at":"2026-07-05T11:17:38Z"},{"alias_kind":"arxiv_version","alias_value":"2412.03283v3","created_at":"2026-07-05T11:17:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.03283","created_at":"2026-07-05T11:17:38Z"},{"alias_kind":"pith_short_12","alias_value":"SSFUBVW4DYJY","created_at":"2026-07-05T11:17:38Z"},{"alias_kind":"pith_short_16","alias_value":"SSFUBVW4DYJYHQM6","created_at":"2026-07-05T11:17:38Z"},{"alias_kind":"pith_short_8","alias_value":"SSFUBVW4","created_at":"2026-07-05T11:17:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:SSFUBVW4DYJYHQM6OPPAEMFD7G","target":"record","payload":{"canonical_record":{"source":{"id":"2412.03283","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-04T12:57:17Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"bced60c0ddc06ecf6f4b952154d70366b81856bd92d0c65dfe7f2dbf8498508d","abstract_canon_sha256":"534d5e1b7301ea70541e51974fc62c7661f50e11d673507a11ac7683b42e9b5c"},"schema_version":"1.0"},"canonical_sha256":"948b40d6dc1e1383c19e73de0230a3f9b02e63e0039c745dacf217d7b80a5b0d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:17:38.557394Z","signature_b64":"HIoGqeMvR/NMwQeypRE8PxEuQYl6TzxbTbqsFRkX8asGZ3kpHiT0+IJ2ppOGv8r8IycHboq92IPJKTgGFwcxAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"948b40d6dc1e1383c19e73de0230a3f9b02e63e0039c745dacf217d7b80a5b0d","last_reissued_at":"2026-07-05T11:17:38.556875Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:17:38.556875Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.03283","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:17:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dCtCIw5UIOBvQRPjVZaeNTFlBnxjL3DZwIDa0f8k8j6S1W0tIJ0NNvUd34drR+5WYTr8OnASe0QRkpg1hTFyDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T12:12:30.379517Z"},"content_sha256":"4529ab8db91ded9c035528891cd1bdfdb9a9d98fab433b57187ec2f1a7643cac","schema_version":"1.0","event_id":"sha256:4529ab8db91ded9c035528891cd1bdfdb9a9d98fab433b57187ec2f1a7643cac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:SSFUBVW4DYJYHQM6OPPAEMFD7G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.CR","authors_text":"Andreas M\\\"uller, Asja Fischer, Denis Lukovnikov, Erwin Quiring, Jonas Thietke","submitted_at":"2024-12-04T12:57:17Z","abstract_excerpt":"Integrating watermarking into the generation process of latent diffusion models (LDMs) simplifies detection and attribution of generated content. Semantic watermarks, such as Tree-Rings and Gaussian Shading, represent a novel class of watermarking techniques that are easy to implement and highly robust against various perturbations. However, our work demonstrates a fundamental security vulnerability of semantic watermarks. We show that attackers can leverage unrelated models, even with different latent spaces and architectures (UNet vs DiT), to perform powerful and realistic forgery attacks. S"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.03283","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.03283/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:17:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F4ceGMqLiLqe2QPlHlYApAt14YH4FTBAgG7rLQJlA6E0rEVsj2UYuxrbyTO7hddJpPh18/aYZbjPXDl+0doMAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T12:12:30.380084Z"},"content_sha256":"ed24427a93cfaab3f4196fe8ca6b8c6f86eb1e10cbadd3ee5d32874ab634f703","schema_version":"1.0","event_id":"sha256:ed24427a93cfaab3f4196fe8ca6b8c6f86eb1e10cbadd3ee5d32874ab634f703"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SSFUBVW4DYJYHQM6OPPAEMFD7G/bundle.json","state_url":"https://pith.science/pith/SSFUBVW4DYJYHQM6OPPAEMFD7G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SSFUBVW4DYJYHQM6OPPAEMFD7G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T12:12:30Z","links":{"resolver":"https://pith.science/pith/SSFUBVW4DYJYHQM6OPPAEMFD7G","bundle":"https://pith.science/pith/SSFUBVW4DYJYHQM6OPPAEMFD7G/bundle.json","state":"https://pith.science/pith/SSFUBVW4DYJYHQM6OPPAEMFD7G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SSFUBVW4DYJYHQM6OPPAEMFD7G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SSFUBVW4DYJYHQM6OPPAEMFD7G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"534d5e1b7301ea70541e51974fc62c7661f50e11d673507a11ac7683b42e9b5c","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-04T12:57:17Z","title_canon_sha256":"bced60c0ddc06ecf6f4b952154d70366b81856bd92d0c65dfe7f2dbf8498508d"},"schema_version":"1.0","source":{"id":"2412.03283","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.03283","created_at":"2026-07-05T11:17:38Z"},{"alias_kind":"arxiv_version","alias_value":"2412.03283v3","created_at":"2026-07-05T11:17:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.03283","created_at":"2026-07-05T11:17:38Z"},{"alias_kind":"pith_short_12","alias_value":"SSFUBVW4DYJY","created_at":"2026-07-05T11:17:38Z"},{"alias_kind":"pith_short_16","alias_value":"SSFUBVW4DYJYHQM6","created_at":"2026-07-05T11:17:38Z"},{"alias_kind":"pith_short_8","alias_value":"SSFUBVW4","created_at":"2026-07-05T11:17:38Z"}],"graph_snapshots":[{"event_id":"sha256:ed24427a93cfaab3f4196fe8ca6b8c6f86eb1e10cbadd3ee5d32874ab634f703","target":"graph","created_at":"2026-07-05T11:17:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.03283/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Integrating watermarking into the generation process of latent diffusion models (LDMs) simplifies detection and attribution of generated content. Semantic watermarks, such as Tree-Rings and Gaussian Shading, represent a novel class of watermarking techniques that are easy to implement and highly robust against various perturbations. However, our work demonstrates a fundamental security vulnerability of semantic watermarks. We show that attackers can leverage unrelated models, even with different latent spaces and architectures (UNet vs DiT), to perform powerful and realistic forgery attacks. S","authors_text":"Andreas M\\\"uller, Asja Fischer, Denis Lukovnikov, Erwin Quiring, Jonas Thietke","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-04T12:57:17Z","title":"Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.03283","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4529ab8db91ded9c035528891cd1bdfdb9a9d98fab433b57187ec2f1a7643cac","target":"record","created_at":"2026-07-05T11:17:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"534d5e1b7301ea70541e51974fc62c7661f50e11d673507a11ac7683b42e9b5c","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-04T12:57:17Z","title_canon_sha256":"bced60c0ddc06ecf6f4b952154d70366b81856bd92d0c65dfe7f2dbf8498508d"},"schema_version":"1.0","source":{"id":"2412.03283","kind":"arxiv","version":3}},"canonical_sha256":"948b40d6dc1e1383c19e73de0230a3f9b02e63e0039c745dacf217d7b80a5b0d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"948b40d6dc1e1383c19e73de0230a3f9b02e63e0039c745dacf217d7b80a5b0d","first_computed_at":"2026-07-05T11:17:38.556875Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:17:38.556875Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HIoGqeMvR/NMwQeypRE8PxEuQYl6TzxbTbqsFRkX8asGZ3kpHiT0+IJ2ppOGv8r8IycHboq92IPJKTgGFwcxAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:17:38.557394Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.03283","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4529ab8db91ded9c035528891cd1bdfdb9a9d98fab433b57187ec2f1a7643cac","sha256:ed24427a93cfaab3f4196fe8ca6b8c6f86eb1e10cbadd3ee5d32874ab634f703"],"state_sha256":"03b10abec519f761ce73bf40538a84a7df0f28211a868bed34219234ac2f42b8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7S9auO7mO7mLaUqcZeESu9ZfHbIZmr9R10fs/dTXIsXUVCB4tZQGMHoB8je/qtyf/aV7iEIgzLS7BRIJHzZtBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T12:12:30.385720Z","bundle_sha256":"e4cf1bd31eb038b476acd6cea83050d35f6b8c970af5a39a3f94b992b044800e"}}