{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:TWJZ7YNZTEKNWGTL6TRB7AVRWI","short_pith_number":"pith:TWJZ7YNZ","canonical_record":{"source":{"id":"2312.07783","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-12T22:57:06Z","cross_cats_sorted":[],"title_canon_sha256":"dbbafebdfe2da3ff75bd66ddaa2d2326bc3f219d0567639834530d11ccd107a0","abstract_canon_sha256":"66461c650dfbcc3b492e79568f8b8accb9703c80e5b01be30ff3b80cfe3ac177"},"schema_version":"1.0"},"canonical_sha256":"9d939fe1b99914db1a6bf4e21f82b1b2295d4bcb0f596b0dc2bc4349f5c725d0","source":{"kind":"arxiv","id":"2312.07783","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.07783","created_at":"2026-07-05T09:14:17Z"},{"alias_kind":"arxiv_version","alias_value":"2312.07783v3","created_at":"2026-07-05T09:14:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.07783","created_at":"2026-07-05T09:14:17Z"},{"alias_kind":"pith_short_12","alias_value":"TWJZ7YNZTEKN","created_at":"2026-07-05T09:14:17Z"},{"alias_kind":"pith_short_16","alias_value":"TWJZ7YNZTEKNWGTL","created_at":"2026-07-05T09:14:17Z"},{"alias_kind":"pith_short_8","alias_value":"TWJZ7YNZ","created_at":"2026-07-05T09:14:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:TWJZ7YNZTEKNWGTL6TRB7AVRWI","target":"record","payload":{"canonical_record":{"source":{"id":"2312.07783","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-12T22:57:06Z","cross_cats_sorted":[],"title_canon_sha256":"dbbafebdfe2da3ff75bd66ddaa2d2326bc3f219d0567639834530d11ccd107a0","abstract_canon_sha256":"66461c650dfbcc3b492e79568f8b8accb9703c80e5b01be30ff3b80cfe3ac177"},"schema_version":"1.0"},"canonical_sha256":"9d939fe1b99914db1a6bf4e21f82b1b2295d4bcb0f596b0dc2bc4349f5c725d0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:14:17.529221Z","signature_b64":"HcmFJ1IuHY4woVTA57/XtJv+Z6QWs8GoC4BM4rxqH4X/nKqDq2VPi9pe9t9MnlZKy6r+9W6xU53nctVarr2HAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9d939fe1b99914db1a6bf4e21f82b1b2295d4bcb0f596b0dc2bc4349f5c725d0","last_reissued_at":"2026-07-05T09:14:17.528668Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:14:17.528668Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.07783","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:14:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ssoHXMIFScfINLFFEaQQkgU153lQUph41bMUqnS2CpluxFkT8qHwu/VKjnQCeRqJAqulavKN4kUHfQmnKy9eCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T00:21:57.068829Z"},"content_sha256":"b27fed739904a26d49585f1123ad827d3e517371225d10cfa1c808378b904018","schema_version":"1.0","event_id":"sha256:b27fed739904a26d49585f1123ad827d3e517371225d10cfa1c808378b904018"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:TWJZ7YNZTEKNWGTL6TRB7AVRWI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BarraCUDA: Edge GPUs do Leak DNN Weights","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Lejla Batina, Leo Weissbart, Lukasz Chmielewski, Peter Horvath, Yuval Yarom","submitted_at":"2023-12-12T22:57:06Z","abstract_excerpt":"Over the last decade, applications of neural networks (NNs) have spread to various aspects of our lives. A large number of companies base their businesses on building products that use neural networks for tasks such as face recognition, machine translation, and self-driving cars. Much of the intellectual property underpinning these products is encoded in the exact parameters of the neural networks. Consequently, protecting these is of utmost priority to businesses. At the same time, many of these products need to operate under a strong threat model, in which the adversary has unfettered physic"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.07783","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.07783/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:14:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WOtSRCb6PRyGYupc6hgpQXmv6C3r/rLiKNV3DE74zzKKqQMicvQ/3eWHGtXsBoGqClIDsdPe4dyaI84mT0uVCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T00:21:57.069545Z"},"content_sha256":"0e9d4b329f2fd78b42c592b656bad57cda43fb3d9a5433fb17e581daeea06e8f","schema_version":"1.0","event_id":"sha256:0e9d4b329f2fd78b42c592b656bad57cda43fb3d9a5433fb17e581daeea06e8f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TWJZ7YNZTEKNWGTL6TRB7AVRWI/bundle.json","state_url":"https://pith.science/pith/TWJZ7YNZTEKNWGTL6TRB7AVRWI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TWJZ7YNZTEKNWGTL6TRB7AVRWI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T00:21:57Z","links":{"resolver":"https://pith.science/pith/TWJZ7YNZTEKNWGTL6TRB7AVRWI","bundle":"https://pith.science/pith/TWJZ7YNZTEKNWGTL6TRB7AVRWI/bundle.json","state":"https://pith.science/pith/TWJZ7YNZTEKNWGTL6TRB7AVRWI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TWJZ7YNZTEKNWGTL6TRB7AVRWI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:TWJZ7YNZTEKNWGTL6TRB7AVRWI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"66461c650dfbcc3b492e79568f8b8accb9703c80e5b01be30ff3b80cfe3ac177","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-12T22:57:06Z","title_canon_sha256":"dbbafebdfe2da3ff75bd66ddaa2d2326bc3f219d0567639834530d11ccd107a0"},"schema_version":"1.0","source":{"id":"2312.07783","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.07783","created_at":"2026-07-05T09:14:17Z"},{"alias_kind":"arxiv_version","alias_value":"2312.07783v3","created_at":"2026-07-05T09:14:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.07783","created_at":"2026-07-05T09:14:17Z"},{"alias_kind":"pith_short_12","alias_value":"TWJZ7YNZTEKN","created_at":"2026-07-05T09:14:17Z"},{"alias_kind":"pith_short_16","alias_value":"TWJZ7YNZTEKNWGTL","created_at":"2026-07-05T09:14:17Z"},{"alias_kind":"pith_short_8","alias_value":"TWJZ7YNZ","created_at":"2026-07-05T09:14:17Z"}],"graph_snapshots":[{"event_id":"sha256:0e9d4b329f2fd78b42c592b656bad57cda43fb3d9a5433fb17e581daeea06e8f","target":"graph","created_at":"2026-07-05T09:14:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.07783/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Over the last decade, applications of neural networks (NNs) have spread to various aspects of our lives. A large number of companies base their businesses on building products that use neural networks for tasks such as face recognition, machine translation, and self-driving cars. Much of the intellectual property underpinning these products is encoded in the exact parameters of the neural networks. Consequently, protecting these is of utmost priority to businesses. At the same time, many of these products need to operate under a strong threat model, in which the adversary has unfettered physic","authors_text":"Lejla Batina, Leo Weissbart, Lukasz Chmielewski, Peter Horvath, Yuval Yarom","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-12T22:57:06Z","title":"BarraCUDA: Edge GPUs do Leak DNN Weights"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.07783","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b27fed739904a26d49585f1123ad827d3e517371225d10cfa1c808378b904018","target":"record","created_at":"2026-07-05T09:14:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"66461c650dfbcc3b492e79568f8b8accb9703c80e5b01be30ff3b80cfe3ac177","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-12T22:57:06Z","title_canon_sha256":"dbbafebdfe2da3ff75bd66ddaa2d2326bc3f219d0567639834530d11ccd107a0"},"schema_version":"1.0","source":{"id":"2312.07783","kind":"arxiv","version":3}},"canonical_sha256":"9d939fe1b99914db1a6bf4e21f82b1b2295d4bcb0f596b0dc2bc4349f5c725d0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9d939fe1b99914db1a6bf4e21f82b1b2295d4bcb0f596b0dc2bc4349f5c725d0","first_computed_at":"2026-07-05T09:14:17.528668Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:14:17.528668Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HcmFJ1IuHY4woVTA57/XtJv+Z6QWs8GoC4BM4rxqH4X/nKqDq2VPi9pe9t9MnlZKy6r+9W6xU53nctVarr2HAg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:14:17.529221Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.07783","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b27fed739904a26d49585f1123ad827d3e517371225d10cfa1c808378b904018","sha256:0e9d4b329f2fd78b42c592b656bad57cda43fb3d9a5433fb17e581daeea06e8f"],"state_sha256":"eb02b042153caba7077ce8410048565ca5e2cf7aed7ebb60acaa673325694487"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mtF6Ezra/vfZ5wc6EmcJqg0yq3Qyx3uavDlRQZ+0QpRxnhYG/O40idLtGr0Fg1JZ5T0H9IFMVULE135Mq6E1Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T00:21:57.072973Z","bundle_sha256":"cfaa8861dd62257e795125ab18603a650b4c5e4b83e737a34e47e17403829a5c"}}