{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:UI7QTOO5PDTRPEKSFET55LNWME","short_pith_number":"pith:UI7QTOO5","canonical_record":{"source":{"id":"1905.08742","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-21T16:38:56Z","cross_cats_sorted":[],"title_canon_sha256":"46acc9e19d837e4491bc9c476a4c821ae4f2c36d79505bfa1dd968ae8228edb9","abstract_canon_sha256":"02298e600c53ff7dc23b50dd873010e02d4a7137f29503c5b2455d014084ce20"},"schema_version":"1.0"},"canonical_sha256":"a23f09b9dd78e71791522927deadb6613c0d0443abc8cc2f8104a2f5f2c186c0","source":{"kind":"arxiv","id":"1905.08742","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.08742","created_at":"2026-05-17T23:45:42Z"},{"alias_kind":"arxiv_version","alias_value":"1905.08742v1","created_at":"2026-05-17T23:45:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.08742","created_at":"2026-05-17T23:45:42Z"},{"alias_kind":"pith_short_12","alias_value":"UI7QTOO5PDTR","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_16","alias_value":"UI7QTOO5PDTRPEKS","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_8","alias_value":"UI7QTOO5","created_at":"2026-05-18T12:33:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:UI7QTOO5PDTRPEKSFET55LNWME","target":"record","payload":{"canonical_record":{"source":{"id":"1905.08742","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-21T16:38:56Z","cross_cats_sorted":[],"title_canon_sha256":"46acc9e19d837e4491bc9c476a4c821ae4f2c36d79505bfa1dd968ae8228edb9","abstract_canon_sha256":"02298e600c53ff7dc23b50dd873010e02d4a7137f29503c5b2455d014084ce20"},"schema_version":"1.0"},"canonical_sha256":"a23f09b9dd78e71791522927deadb6613c0d0443abc8cc2f8104a2f5f2c186c0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:45:42.196445Z","signature_b64":"LoP7He9E+XhrGwmKBF3xS4aaGElQ1/i1YidpnNstccNE94LL2MfrhVW3TCxyTPE5C1qvYqLCzR+EuhKxD+zSAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a23f09b9dd78e71791522927deadb6613c0d0443abc8cc2f8104a2f5f2c186c0","last_reissued_at":"2026-05-17T23:45:42.195554Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:45:42.195554Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1905.08742","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:45:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JDAf9OOGDoazsMX16syMlABgX91z0FVdGV/wRdyMSgKv/6Ucft/dNrTt24o+e+sdKTjFLvLwbbfCuMGmtu2IBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-05T21:09:45.596244Z"},"content_sha256":"77ba826431621e11bce01652c2fa4420c21f3aba51e42fd4a71c1efa1b9cd4bc","schema_version":"1.0","event_id":"sha256:77ba826431621e11bce01652c2fa4420c21f3aba51e42fd4a71c1efa1b9cd4bc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:UI7QTOO5PDTRPEKSFET55LNWME","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Your PIN Sounds Good! On The Feasibility of PIN Inference Through Audio Leakage","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Kiran Balagani, Matteo Cardaioli, Mauro Conti, Paolo Gasti","submitted_at":"2019-05-21T16:38:56Z","abstract_excerpt":"Personal Identification Numbers (PIN) are widely used as authentication method for systems such as Automated Teller Machines (ATMs) and Point of Sale (PoS). Input devices (PIN pads) usually give the user a feedback sound when a key is pressed. In this paper, we propose an attack based on the extraction of inter-keystroke timing from the feedback sound when users type their PINs. Our attack is able to reach an accuracy of 98% with a mean error of 0.13 +/-6.66 milliseconds. We demonstrate that inter-keystroke timing significantly improves the guessing probability of certain subsets of PINs. We b"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.08742","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:45:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rR7XrwbIX5qLjX4Na0gzWS+N/Ot/W1JUFSxIrFifd9r6z94NeETobk29XT2u7iZObKBEf3IZ+FJY4GmUFRLIDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-05T21:09:45.596927Z"},"content_sha256":"91523b9655a673da4ae4a822209f24dae5de3e05e2b580010086d890d62f4ae4","schema_version":"1.0","event_id":"sha256:91523b9655a673da4ae4a822209f24dae5de3e05e2b580010086d890d62f4ae4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UI7QTOO5PDTRPEKSFET55LNWME/bundle.json","state_url":"https://pith.science/pith/UI7QTOO5PDTRPEKSFET55LNWME/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UI7QTOO5PDTRPEKSFET55LNWME/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-05T21:09:45Z","links":{"resolver":"https://pith.science/pith/UI7QTOO5PDTRPEKSFET55LNWME","bundle":"https://pith.science/pith/UI7QTOO5PDTRPEKSFET55LNWME/bundle.json","state":"https://pith.science/pith/UI7QTOO5PDTRPEKSFET55LNWME/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UI7QTOO5PDTRPEKSFET55LNWME/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:UI7QTOO5PDTRPEKSFET55LNWME","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"02298e600c53ff7dc23b50dd873010e02d4a7137f29503c5b2455d014084ce20","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-21T16:38:56Z","title_canon_sha256":"46acc9e19d837e4491bc9c476a4c821ae4f2c36d79505bfa1dd968ae8228edb9"},"schema_version":"1.0","source":{"id":"1905.08742","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.08742","created_at":"2026-05-17T23:45:42Z"},{"alias_kind":"arxiv_version","alias_value":"1905.08742v1","created_at":"2026-05-17T23:45:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.08742","created_at":"2026-05-17T23:45:42Z"},{"alias_kind":"pith_short_12","alias_value":"UI7QTOO5PDTR","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_16","alias_value":"UI7QTOO5PDTRPEKS","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_8","alias_value":"UI7QTOO5","created_at":"2026-05-18T12:33:30Z"}],"graph_snapshots":[{"event_id":"sha256:91523b9655a673da4ae4a822209f24dae5de3e05e2b580010086d890d62f4ae4","target":"graph","created_at":"2026-05-17T23:45:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Personal Identification Numbers (PIN) are widely used as authentication method for systems such as Automated Teller Machines (ATMs) and Point of Sale (PoS). Input devices (PIN pads) usually give the user a feedback sound when a key is pressed. In this paper, we propose an attack based on the extraction of inter-keystroke timing from the feedback sound when users type their PINs. Our attack is able to reach an accuracy of 98% with a mean error of 0.13 +/-6.66 milliseconds. We demonstrate that inter-keystroke timing significantly improves the guessing probability of certain subsets of PINs. We b","authors_text":"Kiran Balagani, Matteo Cardaioli, Mauro Conti, Paolo Gasti","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-21T16:38:56Z","title":"Your PIN Sounds Good! On The Feasibility of PIN Inference Through Audio Leakage"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.08742","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:77ba826431621e11bce01652c2fa4420c21f3aba51e42fd4a71c1efa1b9cd4bc","target":"record","created_at":"2026-05-17T23:45:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"02298e600c53ff7dc23b50dd873010e02d4a7137f29503c5b2455d014084ce20","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-21T16:38:56Z","title_canon_sha256":"46acc9e19d837e4491bc9c476a4c821ae4f2c36d79505bfa1dd968ae8228edb9"},"schema_version":"1.0","source":{"id":"1905.08742","kind":"arxiv","version":1}},"canonical_sha256":"a23f09b9dd78e71791522927deadb6613c0d0443abc8cc2f8104a2f5f2c186c0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a23f09b9dd78e71791522927deadb6613c0d0443abc8cc2f8104a2f5f2c186c0","first_computed_at":"2026-05-17T23:45:42.195554Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:45:42.195554Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LoP7He9E+XhrGwmKBF3xS4aaGElQ1/i1YidpnNstccNE94LL2MfrhVW3TCxyTPE5C1qvYqLCzR+EuhKxD+zSAg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:45:42.196445Z","signed_message":"canonical_sha256_bytes"},"source_id":"1905.08742","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:77ba826431621e11bce01652c2fa4420c21f3aba51e42fd4a71c1efa1b9cd4bc","sha256:91523b9655a673da4ae4a822209f24dae5de3e05e2b580010086d890d62f4ae4"],"state_sha256":"f182f8b3ec5fe5d5f6169912ff3f8e605bd0a3e1d71851c2c661f8619e140428"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i88Z7KpRiymD88/FTrvzbyU88cLpFWtUvAHmT8AldRJIu02Ex9OpknfsusJZjJ9VcgQARKB9s2ZLYSqean9UBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-05T21:09:45.600936Z","bundle_sha256":"6ac64f0dd543014695b8b69019c5a262e562c7283eeca8140bee061af88ffbd2"}}