{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:ZPNZCK663C25UFCMMJPWCXGTVH","short_pith_number":"pith:ZPNZCK66","canonical_record":{"source":{"id":"2303.12233","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-21T23:29:35Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"8b2a18cbd8b420dadbdca7bb393085d1060021ae459c95217bacdb0cf5202363","abstract_canon_sha256":"bd31ed9dd0143acfec8e7fde17edc19ea6ac58bede25f4436b206ea7789f964e"},"schema_version":"1.0"},"canonical_sha256":"cbdb912bded8b5da144c625f615cd3a9f1f0f4dde8487fef971cdf472f0e1eef","source":{"kind":"arxiv","id":"2303.12233","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.12233","created_at":"2026-07-05T06:53:35Z"},{"alias_kind":"arxiv_version","alias_value":"2303.12233v2","created_at":"2026-07-05T06:53:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.12233","created_at":"2026-07-05T06:53:35Z"},{"alias_kind":"pith_short_12","alias_value":"ZPNZCK663C25","created_at":"2026-07-05T06:53:35Z"},{"alias_kind":"pith_short_16","alias_value":"ZPNZCK663C25UFCM","created_at":"2026-07-05T06:53:35Z"},{"alias_kind":"pith_short_8","alias_value":"ZPNZCK66","created_at":"2026-07-05T06:53:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:ZPNZCK663C25UFCMMJPWCXGTVH","target":"record","payload":{"canonical_record":{"source":{"id":"2303.12233","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-21T23:29:35Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"8b2a18cbd8b420dadbdca7bb393085d1060021ae459c95217bacdb0cf5202363","abstract_canon_sha256":"bd31ed9dd0143acfec8e7fde17edc19ea6ac58bede25f4436b206ea7789f964e"},"schema_version":"1.0"},"canonical_sha256":"cbdb912bded8b5da144c625f615cd3a9f1f0f4dde8487fef971cdf472f0e1eef","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:53:35.755010Z","signature_b64":"MSg8tJA5W2ei5VVSP9Nb9sm4dQ0ih/EOvIxSlKiILAX1mmcQDCldpSjEZb1EPeZxa2TL301v8kEczz2JymzJDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cbdb912bded8b5da144c625f615cd3a9f1f0f4dde8487fef971cdf472f0e1eef","last_reissued_at":"2026-07-05T06:53:35.754518Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:53:35.754518Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.12233","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:53:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3sFoIvWPxJmagD4HmxhSA4hc6C6nysfIeLmL252sy73H2MDXEolAHm+4i/sDN0Aq+KHSleHmrN7o6aCqr7m9CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:29:51.583529Z"},"content_sha256":"c8154fcc442e72c943e78f5f397606c581242d39c8d86deadf9582c350125beb","schema_version":"1.0","event_id":"sha256:c8154fcc442e72c943e78f5f397606c581242d39c8d86deadf9582c350125beb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:ZPNZCK663C25UFCMMJPWCXGTVH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LOKI: Large-scale Data Reconstruction Attack against Federated Learning through Model Manipulation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Ahmed Roushdy Elkordy, Atul Sharma, Joshua C. Zhao, Salman Avestimehr, Saurabh Bagchi, Yahya H. Ezzeldin","submitted_at":"2023-03-21T23:29:35Z","abstract_excerpt":"Federated learning was introduced to enable machine learning over large decentralized datasets while promising privacy by eliminating the need for data sharing. Despite this, prior work has shown that shared gradients often contain private information and attackers can gain knowledge either through malicious modification of the architecture and parameters or by using optimization to approximate user data from the shared gradients. However, prior data reconstruction attacks have been limited in setting and scale, as most works target FedSGD and limit the attack to single-client gradients. Many "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.12233","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.12233/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:53:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TdgE+bXUOmKwB6RLnz0xG7MBRFn9Vh3Y7mBNsEOuVB8H/HDr2DdLA+R2lmB2Rd3cyxoCEDy5j0tHob0tRA+JCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T22:29:51.584381Z"},"content_sha256":"7899e3aae531f4ba9cff9e8bc6bfefa47e7a234f24af58e2c91e675a6eafce21","schema_version":"1.0","event_id":"sha256:7899e3aae531f4ba9cff9e8bc6bfefa47e7a234f24af58e2c91e675a6eafce21"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZPNZCK663C25UFCMMJPWCXGTVH/bundle.json","state_url":"https://pith.science/pith/ZPNZCK663C25UFCMMJPWCXGTVH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZPNZCK663C25UFCMMJPWCXGTVH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T22:29:51Z","links":{"resolver":"https://pith.science/pith/ZPNZCK663C25UFCMMJPWCXGTVH","bundle":"https://pith.science/pith/ZPNZCK663C25UFCMMJPWCXGTVH/bundle.json","state":"https://pith.science/pith/ZPNZCK663C25UFCMMJPWCXGTVH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZPNZCK663C25UFCMMJPWCXGTVH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:ZPNZCK663C25UFCMMJPWCXGTVH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bd31ed9dd0143acfec8e7fde17edc19ea6ac58bede25f4436b206ea7789f964e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-21T23:29:35Z","title_canon_sha256":"8b2a18cbd8b420dadbdca7bb393085d1060021ae459c95217bacdb0cf5202363"},"schema_version":"1.0","source":{"id":"2303.12233","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.12233","created_at":"2026-07-05T06:53:35Z"},{"alias_kind":"arxiv_version","alias_value":"2303.12233v2","created_at":"2026-07-05T06:53:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.12233","created_at":"2026-07-05T06:53:35Z"},{"alias_kind":"pith_short_12","alias_value":"ZPNZCK663C25","created_at":"2026-07-05T06:53:35Z"},{"alias_kind":"pith_short_16","alias_value":"ZPNZCK663C25UFCM","created_at":"2026-07-05T06:53:35Z"},{"alias_kind":"pith_short_8","alias_value":"ZPNZCK66","created_at":"2026-07-05T06:53:35Z"}],"graph_snapshots":[{"event_id":"sha256:7899e3aae531f4ba9cff9e8bc6bfefa47e7a234f24af58e2c91e675a6eafce21","target":"graph","created_at":"2026-07-05T06:53:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.12233/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning was introduced to enable machine learning over large decentralized datasets while promising privacy by eliminating the need for data sharing. Despite this, prior work has shown that shared gradients often contain private information and attackers can gain knowledge either through malicious modification of the architecture and parameters or by using optimization to approximate user data from the shared gradients. However, prior data reconstruction attacks have been limited in setting and scale, as most works target FedSGD and limit the attack to single-client gradients. Many ","authors_text":"Ahmed Roushdy Elkordy, Atul Sharma, Joshua C. Zhao, Salman Avestimehr, Saurabh Bagchi, Yahya H. Ezzeldin","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-21T23:29:35Z","title":"LOKI: Large-scale Data Reconstruction Attack against Federated Learning through Model Manipulation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.12233","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c8154fcc442e72c943e78f5f397606c581242d39c8d86deadf9582c350125beb","target":"record","created_at":"2026-07-05T06:53:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bd31ed9dd0143acfec8e7fde17edc19ea6ac58bede25f4436b206ea7789f964e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-03-21T23:29:35Z","title_canon_sha256":"8b2a18cbd8b420dadbdca7bb393085d1060021ae459c95217bacdb0cf5202363"},"schema_version":"1.0","source":{"id":"2303.12233","kind":"arxiv","version":2}},"canonical_sha256":"cbdb912bded8b5da144c625f615cd3a9f1f0f4dde8487fef971cdf472f0e1eef","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cbdb912bded8b5da144c625f615cd3a9f1f0f4dde8487fef971cdf472f0e1eef","first_computed_at":"2026-07-05T06:53:35.754518Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:53:35.754518Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MSg8tJA5W2ei5VVSP9Nb9sm4dQ0ih/EOvIxSlKiILAX1mmcQDCldpSjEZb1EPeZxa2TL301v8kEczz2JymzJDg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:53:35.755010Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.12233","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c8154fcc442e72c943e78f5f397606c581242d39c8d86deadf9582c350125beb","sha256:7899e3aae531f4ba9cff9e8bc6bfefa47e7a234f24af58e2c91e675a6eafce21"],"state_sha256":"723789046b52fe9f9e0761db7b08269f49220c5abb85b65dd9ae07afc737154e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kv3ENuGkhatJ1Mrvr7+SVlvqJihY4bOVo9lt4Cggrdp8sw9uuRjrfcV1+9spXYKfRCiWiTZNXF4DAxvrIWKfAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T22:29:51.589797Z","bundle_sha256":"a1ca4c65c30ace7348ddb04c2f4f15ebf6c86801322e847be1003a5b8c060ab4"}}