{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:VALZYCG5HEPTWS5PJQBXV3HPKC","short_pith_number":"pith:VALZYCG5","canonical_record":{"source":{"id":"2402.03704","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-06T04:47:58Z","cross_cats_sorted":[],"title_canon_sha256":"3e680c895fb1f6bb30c82fd2bd694d80b8a69bb24588b1a7dd4443e9dcd21321","abstract_canon_sha256":"2692e81e20ac3122fb6464473e70458a670592cbe5ef9aa044749f2cdcbbeace"},"schema_version":"1.0"},"canonical_sha256":"a8179c08dd391f3b4baf4c037aecef5094f6eb727606f3e80be2c3f0c0a76d7b","source":{"kind":"arxiv","id":"2402.03704","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.03704","created_at":"2026-07-05T07:56:20Z"},{"alias_kind":"arxiv_version","alias_value":"2402.03704v2","created_at":"2026-07-05T07:56:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.03704","created_at":"2026-07-05T07:56:20Z"},{"alias_kind":"pith_short_12","alias_value":"VALZYCG5HEPT","created_at":"2026-07-05T07:56:20Z"},{"alias_kind":"pith_short_16","alias_value":"VALZYCG5HEPTWS5P","created_at":"2026-07-05T07:56:20Z"},{"alias_kind":"pith_short_8","alias_value":"VALZYCG5","created_at":"2026-07-05T07:56:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:VALZYCG5HEPTWS5PJQBXV3HPKC","target":"record","payload":{"canonical_record":{"source":{"id":"2402.03704","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-06T04:47:58Z","cross_cats_sorted":[],"title_canon_sha256":"3e680c895fb1f6bb30c82fd2bd694d80b8a69bb24588b1a7dd4443e9dcd21321","abstract_canon_sha256":"2692e81e20ac3122fb6464473e70458a670592cbe5ef9aa044749f2cdcbbeace"},"schema_version":"1.0"},"canonical_sha256":"a8179c08dd391f3b4baf4c037aecef5094f6eb727606f3e80be2c3f0c0a76d7b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:56:20.986778Z","signature_b64":"YJ0QJRyI0s1JkYdRY1JK9fXE6uHuep7TxL3Q8JA08jVG+GzLgAu9QYqzmMxUrdcyZwTSaI/yRe5fc6dTL5eJBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a8179c08dd391f3b4baf4c037aecef5094f6eb727606f3e80be2c3f0c0a76d7b","last_reissued_at":"2026-07-05T07:56:20.986248Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:56:20.986248Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.03704","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:56:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vORo8loU/OeULNuMVMo+v30zEFwXVMQnrwnG2KWx2VEfh4vtc1VuSN5r3cEs3XcCGIEVibN8XZzG6251NIjZDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T21:22:54.218610Z"},"content_sha256":"75937f0534e450243b7d595ebb10b50f8df944b6d2d733a0b62c5d37d24b4e10","schema_version":"1.0","event_id":"sha256:75937f0534e450243b7d595ebb10b50f8df944b6d2d733a0b62c5d37d24b4e10"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:VALZYCG5HEPTWS5PJQBXV3HPKC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"WhisperFuzz: White-Box Fuzzing for Detecting and Locating Timing Vulnerabilities in Processors","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ahmad-Reza Sadeghi, Chen Chen, Chester Rebeiro, Jeyavijayan Rajendran, Mohamadreza Rostami, Nikhilesh Singh, Pallavi Borkar, Rahul Kande","submitted_at":"2024-02-06T04:47:58Z","abstract_excerpt":"Timing vulnerabilities in processors have emerged as a potent threat. As processors are the foundation of any computing system, identifying these flaws is imperative. Recently fuzzing techniques, traditionally used for detecting software vulnerabilities, have shown promising results for uncovering vulnerabilities in large-scale hardware designs, such as processors. Researchers have adapted black-box or grey-box fuzzing to detect timing vulnerabilities in processors. However, they cannot identify the locations or root causes of these timing vulnerabilities, nor do they provide coverage feedback"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.03704","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.03704/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:56:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5oXRjuOg0xnxWXxa2+/yE8ZgUO3s/uIk1ukYJ6e79QwKkcsRdgHr4VYBX5+nUUJ/at8vunyIc438ENymIcDMAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T21:22:54.219131Z"},"content_sha256":"bf3c819ab564de97500e591b58e5e2ae31696a4ee1534c8869f8cdfa7e5dd821","schema_version":"1.0","event_id":"sha256:bf3c819ab564de97500e591b58e5e2ae31696a4ee1534c8869f8cdfa7e5dd821"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VALZYCG5HEPTWS5PJQBXV3HPKC/bundle.json","state_url":"https://pith.science/pith/VALZYCG5HEPTWS5PJQBXV3HPKC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VALZYCG5HEPTWS5PJQBXV3HPKC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T21:22:54Z","links":{"resolver":"https://pith.science/pith/VALZYCG5HEPTWS5PJQBXV3HPKC","bundle":"https://pith.science/pith/VALZYCG5HEPTWS5PJQBXV3HPKC/bundle.json","state":"https://pith.science/pith/VALZYCG5HEPTWS5PJQBXV3HPKC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VALZYCG5HEPTWS5PJQBXV3HPKC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:VALZYCG5HEPTWS5PJQBXV3HPKC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2692e81e20ac3122fb6464473e70458a670592cbe5ef9aa044749f2cdcbbeace","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-06T04:47:58Z","title_canon_sha256":"3e680c895fb1f6bb30c82fd2bd694d80b8a69bb24588b1a7dd4443e9dcd21321"},"schema_version":"1.0","source":{"id":"2402.03704","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.03704","created_at":"2026-07-05T07:56:20Z"},{"alias_kind":"arxiv_version","alias_value":"2402.03704v2","created_at":"2026-07-05T07:56:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.03704","created_at":"2026-07-05T07:56:20Z"},{"alias_kind":"pith_short_12","alias_value":"VALZYCG5HEPT","created_at":"2026-07-05T07:56:20Z"},{"alias_kind":"pith_short_16","alias_value":"VALZYCG5HEPTWS5P","created_at":"2026-07-05T07:56:20Z"},{"alias_kind":"pith_short_8","alias_value":"VALZYCG5","created_at":"2026-07-05T07:56:20Z"}],"graph_snapshots":[{"event_id":"sha256:bf3c819ab564de97500e591b58e5e2ae31696a4ee1534c8869f8cdfa7e5dd821","target":"graph","created_at":"2026-07-05T07:56:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.03704/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Timing vulnerabilities in processors have emerged as a potent threat. As processors are the foundation of any computing system, identifying these flaws is imperative. Recently fuzzing techniques, traditionally used for detecting software vulnerabilities, have shown promising results for uncovering vulnerabilities in large-scale hardware designs, such as processors. Researchers have adapted black-box or grey-box fuzzing to detect timing vulnerabilities in processors. However, they cannot identify the locations or root causes of these timing vulnerabilities, nor do they provide coverage feedback","authors_text":"Ahmad-Reza Sadeghi, Chen Chen, Chester Rebeiro, Jeyavijayan Rajendran, Mohamadreza Rostami, Nikhilesh Singh, Pallavi Borkar, Rahul Kande","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-06T04:47:58Z","title":"WhisperFuzz: White-Box Fuzzing for Detecting and Locating Timing Vulnerabilities in Processors"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.03704","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:75937f0534e450243b7d595ebb10b50f8df944b6d2d733a0b62c5d37d24b4e10","target":"record","created_at":"2026-07-05T07:56:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2692e81e20ac3122fb6464473e70458a670592cbe5ef9aa044749f2cdcbbeace","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-06T04:47:58Z","title_canon_sha256":"3e680c895fb1f6bb30c82fd2bd694d80b8a69bb24588b1a7dd4443e9dcd21321"},"schema_version":"1.0","source":{"id":"2402.03704","kind":"arxiv","version":2}},"canonical_sha256":"a8179c08dd391f3b4baf4c037aecef5094f6eb727606f3e80be2c3f0c0a76d7b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a8179c08dd391f3b4baf4c037aecef5094f6eb727606f3e80be2c3f0c0a76d7b","first_computed_at":"2026-07-05T07:56:20.986248Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:56:20.986248Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YJ0QJRyI0s1JkYdRY1JK9fXE6uHuep7TxL3Q8JA08jVG+GzLgAu9QYqzmMxUrdcyZwTSaI/yRe5fc6dTL5eJBg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:56:20.986778Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.03704","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:75937f0534e450243b7d595ebb10b50f8df944b6d2d733a0b62c5d37d24b4e10","sha256:bf3c819ab564de97500e591b58e5e2ae31696a4ee1534c8869f8cdfa7e5dd821"],"state_sha256":"288321824a65e827e9279abac62a6bae1554c3b7233bf7a55ff0dccdc47ee687"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9lZZ26dTcSio3DW0Y2GupVs5Eohb0gae6tOtwmhsf/VjLsTa4XSPjbvuQ8CfwpYe/QfFeBt7Aa0bIMjfGh3wCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T21:22:54.224078Z","bundle_sha256":"b1c8e34ff60d87f5eb59ae52159a4212d97adaacac57d8bea1a70548551c8c0c"}}