{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:XU5LZTR2XUORR5TKOESUUR3PCM","short_pith_number":"pith:XU5LZTR2","canonical_record":{"source":{"id":"1709.03358","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-11T13:05:58Z","cross_cats_sorted":[],"title_canon_sha256":"840ae1aa754e103ea2d60d267e623daae13305dc99f193b0cb93ce566e44b1ef","abstract_canon_sha256":"5ba9176e8b7920b655874f9ccbb8313f2dbc72a44fe2cf60dc1a1a7ab62dffd3"},"schema_version":"1.0"},"canonical_sha256":"bd3abcce3abd1d18f66a71254a476f13225feeb25d9c73f91ce6b10297eb7de0","source":{"kind":"arxiv","id":"1709.03358","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.03358","created_at":"2026-05-18T00:35:38Z"},{"alias_kind":"arxiv_version","alias_value":"1709.03358v1","created_at":"2026-05-18T00:35:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.03358","created_at":"2026-05-18T00:35:38Z"},{"alias_kind":"pith_short_12","alias_value":"XU5LZTR2XUOR","created_at":"2026-05-18T12:31:56Z"},{"alias_kind":"pith_short_16","alias_value":"XU5LZTR2XUORR5TK","created_at":"2026-05-18T12:31:56Z"},{"alias_kind":"pith_short_8","alias_value":"XU5LZTR2","created_at":"2026-05-18T12:31:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:XU5LZTR2XUORR5TKOESUUR3PCM","target":"record","payload":{"canonical_record":{"source":{"id":"1709.03358","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-11T13:05:58Z","cross_cats_sorted":[],"title_canon_sha256":"840ae1aa754e103ea2d60d267e623daae13305dc99f193b0cb93ce566e44b1ef","abstract_canon_sha256":"5ba9176e8b7920b655874f9ccbb8313f2dbc72a44fe2cf60dc1a1a7ab62dffd3"},"schema_version":"1.0"},"canonical_sha256":"bd3abcce3abd1d18f66a71254a476f13225feeb25d9c73f91ce6b10297eb7de0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:35:38.649793Z","signature_b64":"/hr9aLoMMfOBG9EYC3jDJBM6cjyquZN9wjiC2n8c++cfwZJq3C7fLQJQG5BhHpNLcdZKdr9PI/HlsqVc9dHoCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bd3abcce3abd1d18f66a71254a476f13225feeb25d9c73f91ce6b10297eb7de0","last_reissued_at":"2026-05-18T00:35:38.649158Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:35:38.649158Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1709.03358","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:35:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2gNcJeNwdqiXqf7jfmGm/VHEYgQo3kN1Kanu0FCGcFeV0YQr2AXHFOAE8iHvyrTGaUTsyNs4Px+1NqzHcAZMCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-09T15:10:06.284705Z"},"content_sha256":"464be64e7422945055701395320d580ac41a61c7c152f2e014cc2d5e77cf9853","schema_version":"1.0","event_id":"sha256:464be64e7422945055701395320d580ac41a61c7c152f2e014cc2d5e77cf9853"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:XU5LZTR2XUORR5TKOESUUR3PCM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"qDSA: Small and Secure Digital Signatures with Curve-based Diffie--Hellman Key Pairs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Benjamin Smith (GRACE, Joost Renes, LIX)","submitted_at":"2017-09-11T13:05:58Z","abstract_excerpt":"qDSA is a high-speed, high-security signature scheme that facilitates implementations with a very small memory footprint, a crucial requirement for embedded systems and IoT devices, and that uses the same public keys as modern Diffie--Hellman schemes based on Montgomery curves (such as Curve25519) or Kummer surfaces. qDSA resembles an adaptation of EdDSA to the world of Kummer varieties, which are quotients of algebraic groups by $\\pm$1. Interestingly, qDSA does not require any full group operations or point recovery: all computations, including signature verification, occur on the quotient wh"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.03358","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:35:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h5aNU0OpYGMei2o0CqroRdk6v4bUUVrdjW+wjvPiPhps4v6v2kGVJShfD2Hvc9fhecnw62WTr82IwlJHBo0lBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-09T15:10:06.285058Z"},"content_sha256":"968a73b258ba7d468137228fbfdde1d8c3073ced503473b0532b647609e797c8","schema_version":"1.0","event_id":"sha256:968a73b258ba7d468137228fbfdde1d8c3073ced503473b0532b647609e797c8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XU5LZTR2XUORR5TKOESUUR3PCM/bundle.json","state_url":"https://pith.science/pith/XU5LZTR2XUORR5TKOESUUR3PCM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XU5LZTR2XUORR5TKOESUUR3PCM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-09T15:10:06Z","links":{"resolver":"https://pith.science/pith/XU5LZTR2XUORR5TKOESUUR3PCM","bundle":"https://pith.science/pith/XU5LZTR2XUORR5TKOESUUR3PCM/bundle.json","state":"https://pith.science/pith/XU5LZTR2XUORR5TKOESUUR3PCM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XU5LZTR2XUORR5TKOESUUR3PCM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:XU5LZTR2XUORR5TKOESUUR3PCM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5ba9176e8b7920b655874f9ccbb8313f2dbc72a44fe2cf60dc1a1a7ab62dffd3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-11T13:05:58Z","title_canon_sha256":"840ae1aa754e103ea2d60d267e623daae13305dc99f193b0cb93ce566e44b1ef"},"schema_version":"1.0","source":{"id":"1709.03358","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.03358","created_at":"2026-05-18T00:35:38Z"},{"alias_kind":"arxiv_version","alias_value":"1709.03358v1","created_at":"2026-05-18T00:35:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.03358","created_at":"2026-05-18T00:35:38Z"},{"alias_kind":"pith_short_12","alias_value":"XU5LZTR2XUOR","created_at":"2026-05-18T12:31:56Z"},{"alias_kind":"pith_short_16","alias_value":"XU5LZTR2XUORR5TK","created_at":"2026-05-18T12:31:56Z"},{"alias_kind":"pith_short_8","alias_value":"XU5LZTR2","created_at":"2026-05-18T12:31:56Z"}],"graph_snapshots":[{"event_id":"sha256:968a73b258ba7d468137228fbfdde1d8c3073ced503473b0532b647609e797c8","target":"graph","created_at":"2026-05-18T00:35:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"qDSA is a high-speed, high-security signature scheme that facilitates implementations with a very small memory footprint, a crucial requirement for embedded systems and IoT devices, and that uses the same public keys as modern Diffie--Hellman schemes based on Montgomery curves (such as Curve25519) or Kummer surfaces. qDSA resembles an adaptation of EdDSA to the world of Kummer varieties, which are quotients of algebraic groups by $\\pm$1. Interestingly, qDSA does not require any full group operations or point recovery: all computations, including signature verification, occur on the quotient wh","authors_text":"Benjamin Smith (GRACE, Joost Renes, LIX)","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-11T13:05:58Z","title":"qDSA: Small and Secure Digital Signatures with Curve-based Diffie--Hellman Key Pairs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.03358","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:464be64e7422945055701395320d580ac41a61c7c152f2e014cc2d5e77cf9853","target":"record","created_at":"2026-05-18T00:35:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5ba9176e8b7920b655874f9ccbb8313f2dbc72a44fe2cf60dc1a1a7ab62dffd3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-11T13:05:58Z","title_canon_sha256":"840ae1aa754e103ea2d60d267e623daae13305dc99f193b0cb93ce566e44b1ef"},"schema_version":"1.0","source":{"id":"1709.03358","kind":"arxiv","version":1}},"canonical_sha256":"bd3abcce3abd1d18f66a71254a476f13225feeb25d9c73f91ce6b10297eb7de0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bd3abcce3abd1d18f66a71254a476f13225feeb25d9c73f91ce6b10297eb7de0","first_computed_at":"2026-05-18T00:35:38.649158Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:35:38.649158Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/hr9aLoMMfOBG9EYC3jDJBM6cjyquZN9wjiC2n8c++cfwZJq3C7fLQJQG5BhHpNLcdZKdr9PI/HlsqVc9dHoCw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:35:38.649793Z","signed_message":"canonical_sha256_bytes"},"source_id":"1709.03358","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:464be64e7422945055701395320d580ac41a61c7c152f2e014cc2d5e77cf9853","sha256:968a73b258ba7d468137228fbfdde1d8c3073ced503473b0532b647609e797c8"],"state_sha256":"24a87473aefed16c22de08ea2cb6d3f5a3950392d75a14d56d54a2860b32ff44"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RMIJiwdAvbp8UWq7k+bjLb3G+o37IZavZoxU/O9ZyZ0KZKnwdkCDfULpWP9SOiTSHaTxQk600mKI7qSqKLFnCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-09T15:10:06.287059Z","bundle_sha256":"d2a8262ceb065adc1075d68dfc0c9862873624a34ba2788b7654c5b40281e822"}}