{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:TM3VGF66L44FBYGSU4WX4U26TJ","short_pith_number":"pith:TM3VGF66","canonical_record":{"source":{"id":"2207.11689","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-07-24T08:18:46Z","cross_cats_sorted":[],"title_canon_sha256":"1551ff4d66d9dce1b5cdd220d03d2f643016b41dc9cb1e0d04a1b0f8b5a0598c","abstract_canon_sha256":"80cb104c6345451c2e38712aaf5f6ee25b841c8657567f7305508336773c95cf"},"schema_version":"1.0"},"canonical_sha256":"9b375317de5f3850e0d2a72d7e535e9a706c4f4d40d55735e0bb8374c9d987e6","source":{"kind":"arxiv","id":"2207.11689","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.11689","created_at":"2026-07-05T04:43:08Z"},{"alias_kind":"arxiv_version","alias_value":"2207.11689v1","created_at":"2026-07-05T04:43:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.11689","created_at":"2026-07-05T04:43:08Z"},{"alias_kind":"pith_short_12","alias_value":"TM3VGF66L44F","created_at":"2026-07-05T04:43:08Z"},{"alias_kind":"pith_short_16","alias_value":"TM3VGF66L44FBYGS","created_at":"2026-07-05T04:43:08Z"},{"alias_kind":"pith_short_8","alias_value":"TM3VGF66","created_at":"2026-07-05T04:43:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:TM3VGF66L44FBYGSU4WX4U26TJ","target":"record","payload":{"canonical_record":{"source":{"id":"2207.11689","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-07-24T08:18:46Z","cross_cats_sorted":[],"title_canon_sha256":"1551ff4d66d9dce1b5cdd220d03d2f643016b41dc9cb1e0d04a1b0f8b5a0598c","abstract_canon_sha256":"80cb104c6345451c2e38712aaf5f6ee25b841c8657567f7305508336773c95cf"},"schema_version":"1.0"},"canonical_sha256":"9b375317de5f3850e0d2a72d7e535e9a706c4f4d40d55735e0bb8374c9d987e6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:43:08.231905Z","signature_b64":"ujurVBM1RdWPYRL5vpMmTepZr36gBs96NVCO1yJgL55UE/CI92/SkENLJyp7pmqiA3fpsvKCt64cSG4CNlByAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9b375317de5f3850e0d2a72d7e535e9a706c4f4d40d55735e0bb8374c9d987e6","last_reissued_at":"2026-07-05T04:43:08.231512Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:43:08.231512Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2207.11689","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:43:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v1x2K2PmG1fyv8tc5rlqztLFWiVT6m19rzraWqG/yOx6m0t/7SD0b9Tq/XTufKwElJZYqR0MY9YacmW/1NRUDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T13:29:56.380034Z"},"content_sha256":"6611695c48a3dbc8c35a38a47715c5c3274c7144e8e602679885947470ff189e","schema_version":"1.0","event_id":"sha256:6611695c48a3dbc8c35a38a47715c5c3274c7144e8e602679885947470ff189e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:TM3VGF66L44FBYGSU4WX4U26TJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PMUSpill: The Counters in Performance Monitor Unit that Leak SGX-Protected Secrets","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chang Liu, Chunlu Wang, Dongsheng Wang, Gang Qu, Haixia Wang, Pengfei Qiu, Qiang Gao, Rihui Sun, Yongqiang Lyu","submitted_at":"2022-07-24T08:18:46Z","abstract_excerpt":"Performance Monitor Unit (PMU) is a significant hardware module on the current processors, which counts the events launched by processor into a set of PMU counters. Ideally, the events triggered by instructions that are executed but the results are not successfully committed (transient execution) should not be recorded. However, in this study, we discover that some PMU events triggered by the transient execution instructions will actually be recorded by PMU. Based on this, we propose the PMUSpill attack, which enables attackers to maliciously leak the secret data that are loaded during transie"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.11689","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2207.11689/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:43:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ir5aiOf4XsYrm3xQgK2xCAv1/wwqUKcHXzILdGYYSIipsUTSQbYBGWXl/pCD4J5KOmxwT2lTWaGu9lSvSnKrAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T13:29:56.380549Z"},"content_sha256":"9d92cfb3cb022dcd248a20cfe1f620097fe80853eda949bf89e702485a147fc4","schema_version":"1.0","event_id":"sha256:9d92cfb3cb022dcd248a20cfe1f620097fe80853eda949bf89e702485a147fc4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TM3VGF66L44FBYGSU4WX4U26TJ/bundle.json","state_url":"https://pith.science/pith/TM3VGF66L44FBYGSU4WX4U26TJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TM3VGF66L44FBYGSU4WX4U26TJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T13:29:56Z","links":{"resolver":"https://pith.science/pith/TM3VGF66L44FBYGSU4WX4U26TJ","bundle":"https://pith.science/pith/TM3VGF66L44FBYGSU4WX4U26TJ/bundle.json","state":"https://pith.science/pith/TM3VGF66L44FBYGSU4WX4U26TJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TM3VGF66L44FBYGSU4WX4U26TJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:TM3VGF66L44FBYGSU4WX4U26TJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"80cb104c6345451c2e38712aaf5f6ee25b841c8657567f7305508336773c95cf","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-07-24T08:18:46Z","title_canon_sha256":"1551ff4d66d9dce1b5cdd220d03d2f643016b41dc9cb1e0d04a1b0f8b5a0598c"},"schema_version":"1.0","source":{"id":"2207.11689","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.11689","created_at":"2026-07-05T04:43:08Z"},{"alias_kind":"arxiv_version","alias_value":"2207.11689v1","created_at":"2026-07-05T04:43:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.11689","created_at":"2026-07-05T04:43:08Z"},{"alias_kind":"pith_short_12","alias_value":"TM3VGF66L44F","created_at":"2026-07-05T04:43:08Z"},{"alias_kind":"pith_short_16","alias_value":"TM3VGF66L44FBYGS","created_at":"2026-07-05T04:43:08Z"},{"alias_kind":"pith_short_8","alias_value":"TM3VGF66","created_at":"2026-07-05T04:43:08Z"}],"graph_snapshots":[{"event_id":"sha256:9d92cfb3cb022dcd248a20cfe1f620097fe80853eda949bf89e702485a147fc4","target":"graph","created_at":"2026-07-05T04:43:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2207.11689/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Performance Monitor Unit (PMU) is a significant hardware module on the current processors, which counts the events launched by processor into a set of PMU counters. Ideally, the events triggered by instructions that are executed but the results are not successfully committed (transient execution) should not be recorded. However, in this study, we discover that some PMU events triggered by the transient execution instructions will actually be recorded by PMU. Based on this, we propose the PMUSpill attack, which enables attackers to maliciously leak the secret data that are loaded during transie","authors_text":"Chang Liu, Chunlu Wang, Dongsheng Wang, Gang Qu, Haixia Wang, Pengfei Qiu, Qiang Gao, Rihui Sun, Yongqiang Lyu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-07-24T08:18:46Z","title":"PMUSpill: The Counters in Performance Monitor Unit that Leak SGX-Protected Secrets"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.11689","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6611695c48a3dbc8c35a38a47715c5c3274c7144e8e602679885947470ff189e","target":"record","created_at":"2026-07-05T04:43:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"80cb104c6345451c2e38712aaf5f6ee25b841c8657567f7305508336773c95cf","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-07-24T08:18:46Z","title_canon_sha256":"1551ff4d66d9dce1b5cdd220d03d2f643016b41dc9cb1e0d04a1b0f8b5a0598c"},"schema_version":"1.0","source":{"id":"2207.11689","kind":"arxiv","version":1}},"canonical_sha256":"9b375317de5f3850e0d2a72d7e535e9a706c4f4d40d55735e0bb8374c9d987e6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9b375317de5f3850e0d2a72d7e535e9a706c4f4d40d55735e0bb8374c9d987e6","first_computed_at":"2026-07-05T04:43:08.231512Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:43:08.231512Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ujurVBM1RdWPYRL5vpMmTepZr36gBs96NVCO1yJgL55UE/CI92/SkENLJyp7pmqiA3fpsvKCt64cSG4CNlByAw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:43:08.231905Z","signed_message":"canonical_sha256_bytes"},"source_id":"2207.11689","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6611695c48a3dbc8c35a38a47715c5c3274c7144e8e602679885947470ff189e","sha256:9d92cfb3cb022dcd248a20cfe1f620097fe80853eda949bf89e702485a147fc4"],"state_sha256":"fa6597f457da1f3c156bcb5c79dae5b4521d21702e537671c2746f511e796d78"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8+jx7FfCcQQGMopGxG4B4QiC/6pGgzZWDUMT8djSPQc6+OnUxOG6PNIQYZOINt9H+2pIrOv2KjWAbQ29g3vpAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T13:29:56.385798Z","bundle_sha256":"02560d8bdf60b8052b9d124471f9b1746bf7e2f0cb29da477f3fc2d72e2021a7"}}