{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:POSSPF2AJENXPS63SOESJZ4NHE","short_pith_number":"pith:POSSPF2A","canonical_record":{"source":{"id":"2401.06657","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-12T16:05:13Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"6518d675234205955f8793fee3521f59f8cd02696fd67a19501818909cb26c91","abstract_canon_sha256":"80449f31dbc5672859d757ea8079cc11b3060773278929cb9a1686152d2f0982"},"schema_version":"1.0"},"canonical_sha256":"7ba5279740491b77cbdb938924e78d390d2c0818f224e24e23e17d7f356ae42d","source":{"kind":"arxiv","id":"2401.06657","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.06657","created_at":"2026-07-05T11:29:47Z"},{"alias_kind":"arxiv_version","alias_value":"2401.06657v3","created_at":"2026-07-05T11:29:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.06657","created_at":"2026-07-05T11:29:47Z"},{"alias_kind":"pith_short_12","alias_value":"POSSPF2AJENX","created_at":"2026-07-05T11:29:47Z"},{"alias_kind":"pith_short_16","alias_value":"POSSPF2AJENXPS63","created_at":"2026-07-05T11:29:47Z"},{"alias_kind":"pith_short_8","alias_value":"POSSPF2A","created_at":"2026-07-05T11:29:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:POSSPF2AJENXPS63SOESJZ4NHE","target":"record","payload":{"canonical_record":{"source":{"id":"2401.06657","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-12T16:05:13Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"6518d675234205955f8793fee3521f59f8cd02696fd67a19501818909cb26c91","abstract_canon_sha256":"80449f31dbc5672859d757ea8079cc11b3060773278929cb9a1686152d2f0982"},"schema_version":"1.0"},"canonical_sha256":"7ba5279740491b77cbdb938924e78d390d2c0818f224e24e23e17d7f356ae42d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:29:47.239229Z","signature_b64":"8bxVgAZLXtzwt44WPCxw4kqSyubgTyPr6oXCxF6p1PdmEtL14NqckCskSTxbs5C4+aSkowhW3d0KYpkT95pBBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7ba5279740491b77cbdb938924e78d390d2c0818f224e24e23e17d7f356ae42d","last_reissued_at":"2026-07-05T11:29:47.238826Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:29:47.238826Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.06657","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:29:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ECgKTFra2R3d1dM3OfRlYhuOOQSAbyeG+hF+JWgYLfkshBtjXFpCRXPMAT3WhGPpX82GvLtiA0/dn+blfeQyCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T15:14:52.947017Z"},"content_sha256":"548347750d89c7ac46cad5a8d2332e79a80703d65ae4b190b946ec0a1250c8f9","schema_version":"1.0","event_id":"sha256:548347750d89c7ac46cad5a8d2332e79a80703d65ae4b190b946ec0a1250c8f9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:POSSPF2AJENXPS63SOESJZ4NHE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"How Resilient is QUIC to Security and Privacy Attacks?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.NI"],"primary_cat":"cs.CR","authors_text":"Debasmita Dey, Jayasree Sengupta, Nirnay Ghosh, Simone Ferlin-Reiter, Vaibhav Bajpai","submitted_at":"2024-01-12T16:05:13Z","abstract_excerpt":"QUIC has rapidly evolved into a cornerstone transport protocol for secure, low-latency communications, yet its deployment continues to expose critical security and privacy vulnerabilities, particularly during connection establishment phases and via traffic analysis. This paper systematically revisits a comprehensive set of attacks on QUIC and emerging privacy threats. Building upon these observations, we critically analyze recent IETF mitigation efforts, including TLS Encrypted Client Hello (ECH), Oblivious HTTP (OHTTP) and MASQUE. We analyze how these mechanisms enhance privacy while introduc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.06657","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.06657/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:29:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Se2zShwRlnzHbMYss843nXl68KaX+rPNPPvncLMsvsmlsIiVpIKOj2p8RVhdc3A/ZPYhQIBICTSYaELsGh41DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T15:14:52.947682Z"},"content_sha256":"1c24ccb6f6028f38703d78893454e77c3bc349b7e8e5c7e7eb0e74e451b240fc","schema_version":"1.0","event_id":"sha256:1c24ccb6f6028f38703d78893454e77c3bc349b7e8e5c7e7eb0e74e451b240fc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/POSSPF2AJENXPS63SOESJZ4NHE/bundle.json","state_url":"https://pith.science/pith/POSSPF2AJENXPS63SOESJZ4NHE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/POSSPF2AJENXPS63SOESJZ4NHE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T15:14:52Z","links":{"resolver":"https://pith.science/pith/POSSPF2AJENXPS63SOESJZ4NHE","bundle":"https://pith.science/pith/POSSPF2AJENXPS63SOESJZ4NHE/bundle.json","state":"https://pith.science/pith/POSSPF2AJENXPS63SOESJZ4NHE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/POSSPF2AJENXPS63SOESJZ4NHE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:POSSPF2AJENXPS63SOESJZ4NHE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"80449f31dbc5672859d757ea8079cc11b3060773278929cb9a1686152d2f0982","cross_cats_sorted":["cs.NI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-12T16:05:13Z","title_canon_sha256":"6518d675234205955f8793fee3521f59f8cd02696fd67a19501818909cb26c91"},"schema_version":"1.0","source":{"id":"2401.06657","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.06657","created_at":"2026-07-05T11:29:47Z"},{"alias_kind":"arxiv_version","alias_value":"2401.06657v3","created_at":"2026-07-05T11:29:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.06657","created_at":"2026-07-05T11:29:47Z"},{"alias_kind":"pith_short_12","alias_value":"POSSPF2AJENX","created_at":"2026-07-05T11:29:47Z"},{"alias_kind":"pith_short_16","alias_value":"POSSPF2AJENXPS63","created_at":"2026-07-05T11:29:47Z"},{"alias_kind":"pith_short_8","alias_value":"POSSPF2A","created_at":"2026-07-05T11:29:47Z"}],"graph_snapshots":[{"event_id":"sha256:1c24ccb6f6028f38703d78893454e77c3bc349b7e8e5c7e7eb0e74e451b240fc","target":"graph","created_at":"2026-07-05T11:29:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.06657/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"QUIC has rapidly evolved into a cornerstone transport protocol for secure, low-latency communications, yet its deployment continues to expose critical security and privacy vulnerabilities, particularly during connection establishment phases and via traffic analysis. This paper systematically revisits a comprehensive set of attacks on QUIC and emerging privacy threats. Building upon these observations, we critically analyze recent IETF mitigation efforts, including TLS Encrypted Client Hello (ECH), Oblivious HTTP (OHTTP) and MASQUE. We analyze how these mechanisms enhance privacy while introduc","authors_text":"Debasmita Dey, Jayasree Sengupta, Nirnay Ghosh, Simone Ferlin-Reiter, Vaibhav Bajpai","cross_cats":["cs.NI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-12T16:05:13Z","title":"How Resilient is QUIC to Security and Privacy Attacks?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.06657","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:548347750d89c7ac46cad5a8d2332e79a80703d65ae4b190b946ec0a1250c8f9","target":"record","created_at":"2026-07-05T11:29:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"80449f31dbc5672859d757ea8079cc11b3060773278929cb9a1686152d2f0982","cross_cats_sorted":["cs.NI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-12T16:05:13Z","title_canon_sha256":"6518d675234205955f8793fee3521f59f8cd02696fd67a19501818909cb26c91"},"schema_version":"1.0","source":{"id":"2401.06657","kind":"arxiv","version":3}},"canonical_sha256":"7ba5279740491b77cbdb938924e78d390d2c0818f224e24e23e17d7f356ae42d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7ba5279740491b77cbdb938924e78d390d2c0818f224e24e23e17d7f356ae42d","first_computed_at":"2026-07-05T11:29:47.238826Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:29:47.238826Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8bxVgAZLXtzwt44WPCxw4kqSyubgTyPr6oXCxF6p1PdmEtL14NqckCskSTxbs5C4+aSkowhW3d0KYpkT95pBBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:29:47.239229Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.06657","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:548347750d89c7ac46cad5a8d2332e79a80703d65ae4b190b946ec0a1250c8f9","sha256:1c24ccb6f6028f38703d78893454e77c3bc349b7e8e5c7e7eb0e74e451b240fc"],"state_sha256":"ef50a74d034b8691cdebda4c98d4e3787c80c0b20580863ddc0b0de02741da3d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9lNE6fDVp8gdiCQt+KJzMDTwZqzReJQ5h7hVezxFh/zGQ/9jWJQVeVrQ2SYYP25XVI1l6fNwXsDl5xSpEleGAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T15:14:52.954071Z","bundle_sha256":"def7db923e4ace2fcef9541eba0e92fdc43ee9457013cdf034cef1cd7ed08f70"}}