{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:33AMU6HBZJ26VN7ANTQPWB2S5X","short_pith_number":"pith:33AMU6HB","canonical_record":{"source":{"id":"2105.01281","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-04T04:17:29Z","cross_cats_sorted":["cs.DC","cs.LG"],"title_canon_sha256":"20fef3b0d16cde9eb0242913747ea8b8db9680808466a19fc92778d866fd9209","abstract_canon_sha256":"7b7b519c8641219a8ebf1a380816ee988a34a30bf25d08517566150693b1aef9"},"schema_version":"1.0"},"canonical_sha256":"dec0ca78e1ca75eab7e06ce0fb0752edca1271c05872ce06b24f8b0a925bfba1","source":{"kind":"arxiv","id":"2105.01281","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.01281","created_at":"2026-07-05T03:29:48Z"},{"alias_kind":"arxiv_version","alias_value":"2105.01281v2","created_at":"2026-07-05T03:29:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.01281","created_at":"2026-07-05T03:29:48Z"},{"alias_kind":"pith_short_12","alias_value":"33AMU6HBZJ26","created_at":"2026-07-05T03:29:48Z"},{"alias_kind":"pith_short_16","alias_value":"33AMU6HBZJ26VN7A","created_at":"2026-07-05T03:29:48Z"},{"alias_kind":"pith_short_8","alias_value":"33AMU6HB","created_at":"2026-07-05T03:29:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:33AMU6HBZJ26VN7ANTQPWB2S5X","target":"record","payload":{"canonical_record":{"source":{"id":"2105.01281","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-04T04:17:29Z","cross_cats_sorted":["cs.DC","cs.LG"],"title_canon_sha256":"20fef3b0d16cde9eb0242913747ea8b8db9680808466a19fc92778d866fd9209","abstract_canon_sha256":"7b7b519c8641219a8ebf1a380816ee988a34a30bf25d08517566150693b1aef9"},"schema_version":"1.0"},"canonical_sha256":"dec0ca78e1ca75eab7e06ce0fb0752edca1271c05872ce06b24f8b0a925bfba1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:29:48.718692Z","signature_b64":"enYBnIHyDbWwObD6MZjkC2vtnAnPkxXqIpOSX46oZUocT1Om3G8SziK5kVJ1NMA3l/6rnEpwIzygjufeXZ9QAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dec0ca78e1ca75eab7e06ce0fb0752edca1271c05872ce06b24f8b0a925bfba1","last_reissued_at":"2026-07-05T03:29:48.718010Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:29:48.718010Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2105.01281","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:29:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DtUyL7ljbP+6uk4ETCAS1QtBmKwMkI3RaTZ37ktXDImUchY7VMLw6Q/lYjTfsRrp2AvVD7ulVbjIubjclVwEBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T07:22:54.189703Z"},"content_sha256":"c45684673d3dc431bc16d24839bb8c9d12504d2e4ad551b8025c481c3a2ec5e1","schema_version":"1.0","event_id":"sha256:c45684673d3dc431bc16d24839bb8c9d12504d2e4ad551b8025c481c3a2ec5e1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:33AMU6HBZJ26VN7ANTQPWB2S5X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Citadel: Protecting Data Privacy and Model Confidentiality for Collaborative Learning with SGX","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.DC","cs.LG"],"primary_cat":"cs.CR","authors_text":"Baichen Yang, Chengliang Zhang, Feng Yan, Huancheng Puyang, Istemi Ekin Akkus, Junzhe Xia, Paarijaat Aditya, Ruichuan Chen, Wei Wang","submitted_at":"2021-05-04T04:17:29Z","abstract_excerpt":"With the advancement of machine learning (ML) and its growing awareness, many organizations who own data but not ML expertise (data owner) would like to pool their data and collaborate with those who have expertise but need data from diverse sources to train truly generalizable models (model owner). In such collaborative ML, the data owner wants to protect the privacy of its training data, while the model owner desires the confidentiality of the model and the training method which may contain intellectual properties. However, existing private ML solutions, such as federated learning and split "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.01281","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2105.01281/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:29:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jHglcF0ZcMt6X+9XkMIsyJlxCUvsuPR6fHRRQgZdw13NBE80fEMnDBkLzcMWOD+L+YqZsOp1lDLoi6Dw5rVPAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T07:22:54.190200Z"},"content_sha256":"299fc955bd265a12b61434031e597f775ccab45ab253c6654352c5910ded66d6","schema_version":"1.0","event_id":"sha256:299fc955bd265a12b61434031e597f775ccab45ab253c6654352c5910ded66d6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/33AMU6HBZJ26VN7ANTQPWB2S5X/bundle.json","state_url":"https://pith.science/pith/33AMU6HBZJ26VN7ANTQPWB2S5X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/33AMU6HBZJ26VN7ANTQPWB2S5X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T07:22:54Z","links":{"resolver":"https://pith.science/pith/33AMU6HBZJ26VN7ANTQPWB2S5X","bundle":"https://pith.science/pith/33AMU6HBZJ26VN7ANTQPWB2S5X/bundle.json","state":"https://pith.science/pith/33AMU6HBZJ26VN7ANTQPWB2S5X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/33AMU6HBZJ26VN7ANTQPWB2S5X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:33AMU6HBZJ26VN7ANTQPWB2S5X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7b7b519c8641219a8ebf1a380816ee988a34a30bf25d08517566150693b1aef9","cross_cats_sorted":["cs.DC","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-04T04:17:29Z","title_canon_sha256":"20fef3b0d16cde9eb0242913747ea8b8db9680808466a19fc92778d866fd9209"},"schema_version":"1.0","source":{"id":"2105.01281","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.01281","created_at":"2026-07-05T03:29:48Z"},{"alias_kind":"arxiv_version","alias_value":"2105.01281v2","created_at":"2026-07-05T03:29:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.01281","created_at":"2026-07-05T03:29:48Z"},{"alias_kind":"pith_short_12","alias_value":"33AMU6HBZJ26","created_at":"2026-07-05T03:29:48Z"},{"alias_kind":"pith_short_16","alias_value":"33AMU6HBZJ26VN7A","created_at":"2026-07-05T03:29:48Z"},{"alias_kind":"pith_short_8","alias_value":"33AMU6HB","created_at":"2026-07-05T03:29:48Z"}],"graph_snapshots":[{"event_id":"sha256:299fc955bd265a12b61434031e597f775ccab45ab253c6654352c5910ded66d6","target":"graph","created_at":"2026-07-05T03:29:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2105.01281/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the advancement of machine learning (ML) and its growing awareness, many organizations who own data but not ML expertise (data owner) would like to pool their data and collaborate with those who have expertise but need data from diverse sources to train truly generalizable models (model owner). In such collaborative ML, the data owner wants to protect the privacy of its training data, while the model owner desires the confidentiality of the model and the training method which may contain intellectual properties. However, existing private ML solutions, such as federated learning and split ","authors_text":"Baichen Yang, Chengliang Zhang, Feng Yan, Huancheng Puyang, Istemi Ekin Akkus, Junzhe Xia, Paarijaat Aditya, Ruichuan Chen, Wei Wang","cross_cats":["cs.DC","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-04T04:17:29Z","title":"Citadel: Protecting Data Privacy and Model Confidentiality for Collaborative Learning with SGX"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.01281","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c45684673d3dc431bc16d24839bb8c9d12504d2e4ad551b8025c481c3a2ec5e1","target":"record","created_at":"2026-07-05T03:29:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7b7b519c8641219a8ebf1a380816ee988a34a30bf25d08517566150693b1aef9","cross_cats_sorted":["cs.DC","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-05-04T04:17:29Z","title_canon_sha256":"20fef3b0d16cde9eb0242913747ea8b8db9680808466a19fc92778d866fd9209"},"schema_version":"1.0","source":{"id":"2105.01281","kind":"arxiv","version":2}},"canonical_sha256":"dec0ca78e1ca75eab7e06ce0fb0752edca1271c05872ce06b24f8b0a925bfba1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dec0ca78e1ca75eab7e06ce0fb0752edca1271c05872ce06b24f8b0a925bfba1","first_computed_at":"2026-07-05T03:29:48.718010Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:29:48.718010Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"enYBnIHyDbWwObD6MZjkC2vtnAnPkxXqIpOSX46oZUocT1Om3G8SziK5kVJ1NMA3l/6rnEpwIzygjufeXZ9QAg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:29:48.718692Z","signed_message":"canonical_sha256_bytes"},"source_id":"2105.01281","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c45684673d3dc431bc16d24839bb8c9d12504d2e4ad551b8025c481c3a2ec5e1","sha256:299fc955bd265a12b61434031e597f775ccab45ab253c6654352c5910ded66d6"],"state_sha256":"5c8494d79faf3854e18d9b735b5122b172ba767eac84d2ec128fee5ca249511b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6I9ZI38gxMpIGAO5SpA6+zMsC/JxDOx0KAf9Gof9Ry//xAtj+EXAR/HfAoG4RD8Yfg5wR1O8hMGSCK2gpZVcBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T07:22:54.194320Z","bundle_sha256":"95df3580d487dea9c4c1fa85201db005c6c30440b6220b6b4073b8ac1fbff2d7"}}