{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:4ELQ2YAQQLRE2REJGBZR7ZRSTO","short_pith_number":"pith:4ELQ2YAQ","canonical_record":{"source":{"id":"2306.14882","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-26T17:51:23Z","cross_cats_sorted":["cs.AR"],"title_canon_sha256":"16a4b2e4bc55fb8c76fb43d5dad778b86500f4a1d57a9396d2c2a65adf7614b3","abstract_canon_sha256":"b925bdd20788269b16c457345215c9d377e71b0b87aec3f11c33fa6b00afdcee"},"schema_version":"1.0"},"canonical_sha256":"e1170d601082e24d448930731fe6329bb89374690cde6c1db4d317062382e43e","source":{"kind":"arxiv","id":"2306.14882","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.14882","created_at":"2026-07-05T10:10:38Z"},{"alias_kind":"arxiv_version","alias_value":"2306.14882v5","created_at":"2026-07-05T10:10:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.14882","created_at":"2026-07-05T10:10:38Z"},{"alias_kind":"pith_short_12","alias_value":"4ELQ2YAQQLRE","created_at":"2026-07-05T10:10:38Z"},{"alias_kind":"pith_short_16","alias_value":"4ELQ2YAQQLRE2REJ","created_at":"2026-07-05T10:10:38Z"},{"alias_kind":"pith_short_8","alias_value":"4ELQ2YAQ","created_at":"2026-07-05T10:10:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:4ELQ2YAQQLRE2REJGBZR7ZRSTO","target":"record","payload":{"canonical_record":{"source":{"id":"2306.14882","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-26T17:51:23Z","cross_cats_sorted":["cs.AR"],"title_canon_sha256":"16a4b2e4bc55fb8c76fb43d5dad778b86500f4a1d57a9396d2c2a65adf7614b3","abstract_canon_sha256":"b925bdd20788269b16c457345215c9d377e71b0b87aec3f11c33fa6b00afdcee"},"schema_version":"1.0"},"canonical_sha256":"e1170d601082e24d448930731fe6329bb89374690cde6c1db4d317062382e43e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:10:38.204336Z","signature_b64":"wRXHUGY5dH3ck3DTsR0g2pzSBghRZNbqdbWojkDbQtDOC6GkBX/vTx2tTfXd5MrODHGlp3JKwpB3myf7fmakAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e1170d601082e24d448930731fe6329bb89374690cde6c1db4d317062382e43e","last_reissued_at":"2026-07-05T10:10:38.203914Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:10:38.203914Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.14882","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:10:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kq21FuVhmafRMcpT8s9kwewz6OYWScwgcOnouUIr6iZSfYqgjVErScjD7syCXUeFvdhUGYPDleVOZAo7ptT7Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T12:28:47.331523Z"},"content_sha256":"94d26035c430592b5da640ef4ea5b9a10bdd5ef9599711fcb00c662719421eec","schema_version":"1.0","event_id":"sha256:94d26035c430592b5da640ef4ea5b9a10bdd5ef9599711fcb00c662719421eec"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:4ELQ2YAQQLRE2REJGBZR7ZRSTO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Citadel: Simple Spectre-Safe Isolation For Real-World Programs That Share Memory","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AR"],"primary_cat":"cs.CR","authors_text":"Fisher Jepsen, Jules Drean, Miguel Gomez-Garcia, Srinivas Devadas, Thomas Bourgeat","submitted_at":"2023-06-26T17:51:23Z","abstract_excerpt":"Transient execution side-channel attacks, such as Spectre, have been shown to break almost all isolation primitives. We introduce a new security property we call relaxed microarchitectural isolation (RMI) that allows sensitive programs that are not-constant-time to share memory with an attacker while restricting the information leakage to that of non-speculative execution. Although this type of speculative security property is typically challenging to enforce, we show that we can leverage the enclave setup to achieve it. In particular, we use microarchitectural isolation to restrict attacker's"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.14882","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.14882/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:10:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WnhjW/BViIl46A/At58URP5jSQtAeUkpxa5PFF9c59NI87lPhUynceqxZzGoY5i3DRbEzPuP1DRUzB3FEx51Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T12:28:47.332591Z"},"content_sha256":"6ef9806c2ec67cb7c9c8477516f0851b5c3af5143553106774084f490f28038b","schema_version":"1.0","event_id":"sha256:6ef9806c2ec67cb7c9c8477516f0851b5c3af5143553106774084f490f28038b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4ELQ2YAQQLRE2REJGBZR7ZRSTO/bundle.json","state_url":"https://pith.science/pith/4ELQ2YAQQLRE2REJGBZR7ZRSTO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4ELQ2YAQQLRE2REJGBZR7ZRSTO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T12:28:47Z","links":{"resolver":"https://pith.science/pith/4ELQ2YAQQLRE2REJGBZR7ZRSTO","bundle":"https://pith.science/pith/4ELQ2YAQQLRE2REJGBZR7ZRSTO/bundle.json","state":"https://pith.science/pith/4ELQ2YAQQLRE2REJGBZR7ZRSTO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4ELQ2YAQQLRE2REJGBZR7ZRSTO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:4ELQ2YAQQLRE2REJGBZR7ZRSTO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b925bdd20788269b16c457345215c9d377e71b0b87aec3f11c33fa6b00afdcee","cross_cats_sorted":["cs.AR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-26T17:51:23Z","title_canon_sha256":"16a4b2e4bc55fb8c76fb43d5dad778b86500f4a1d57a9396d2c2a65adf7614b3"},"schema_version":"1.0","source":{"id":"2306.14882","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.14882","created_at":"2026-07-05T10:10:38Z"},{"alias_kind":"arxiv_version","alias_value":"2306.14882v5","created_at":"2026-07-05T10:10:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.14882","created_at":"2026-07-05T10:10:38Z"},{"alias_kind":"pith_short_12","alias_value":"4ELQ2YAQQLRE","created_at":"2026-07-05T10:10:38Z"},{"alias_kind":"pith_short_16","alias_value":"4ELQ2YAQQLRE2REJ","created_at":"2026-07-05T10:10:38Z"},{"alias_kind":"pith_short_8","alias_value":"4ELQ2YAQ","created_at":"2026-07-05T10:10:38Z"}],"graph_snapshots":[{"event_id":"sha256:6ef9806c2ec67cb7c9c8477516f0851b5c3af5143553106774084f490f28038b","target":"graph","created_at":"2026-07-05T10:10:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.14882/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Transient execution side-channel attacks, such as Spectre, have been shown to break almost all isolation primitives. We introduce a new security property we call relaxed microarchitectural isolation (RMI) that allows sensitive programs that are not-constant-time to share memory with an attacker while restricting the information leakage to that of non-speculative execution. Although this type of speculative security property is typically challenging to enforce, we show that we can leverage the enclave setup to achieve it. In particular, we use microarchitectural isolation to restrict attacker's","authors_text":"Fisher Jepsen, Jules Drean, Miguel Gomez-Garcia, Srinivas Devadas, Thomas Bourgeat","cross_cats":["cs.AR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-26T17:51:23Z","title":"Citadel: Simple Spectre-Safe Isolation For Real-World Programs That Share Memory"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.14882","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:94d26035c430592b5da640ef4ea5b9a10bdd5ef9599711fcb00c662719421eec","target":"record","created_at":"2026-07-05T10:10:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b925bdd20788269b16c457345215c9d377e71b0b87aec3f11c33fa6b00afdcee","cross_cats_sorted":["cs.AR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-26T17:51:23Z","title_canon_sha256":"16a4b2e4bc55fb8c76fb43d5dad778b86500f4a1d57a9396d2c2a65adf7614b3"},"schema_version":"1.0","source":{"id":"2306.14882","kind":"arxiv","version":5}},"canonical_sha256":"e1170d601082e24d448930731fe6329bb89374690cde6c1db4d317062382e43e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e1170d601082e24d448930731fe6329bb89374690cde6c1db4d317062382e43e","first_computed_at":"2026-07-05T10:10:38.203914Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:10:38.203914Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wRXHUGY5dH3ck3DTsR0g2pzSBghRZNbqdbWojkDbQtDOC6GkBX/vTx2tTfXd5MrODHGlp3JKwpB3myf7fmakAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:10:38.204336Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.14882","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:94d26035c430592b5da640ef4ea5b9a10bdd5ef9599711fcb00c662719421eec","sha256:6ef9806c2ec67cb7c9c8477516f0851b5c3af5143553106774084f490f28038b"],"state_sha256":"0639090ff18c27fb76101ba28407045f5aa871dfee9cfab49b3b6b44914907b5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vAnPii+L1JWSeKnhiPLZFe4aH7JANe8L1opbv+meWyY0W88KGPeHiWTe4MeJOjL9aaJeeWRCh/i5ewS98MiXAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T12:28:47.343894Z","bundle_sha256":"0c46ca1d925fbd1c4e7cd5c7e6a3520b49b77cc8e22ff1168f0dad0929e4ee4c"}}