{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:SD6VF3WM7Y2BXDX7EFK7VMNPAV","short_pith_number":"pith:SD6VF3WM","canonical_record":{"source":{"id":"2412.08936","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-12T04:56:53Z","cross_cats_sorted":[],"title_canon_sha256":"b3710c0f8d1f93fab4b7f694e643f6bf0bc852032c0bc9a06b30bb1ecd83bc94","abstract_canon_sha256":"7e88399f16bf02a04f082bbbbfebba10d3a053c40755cc8753b39e2f5b033de2"},"schema_version":"1.0"},"canonical_sha256":"90fd52eeccfe341b8eff2155fab1af05726945a706fcc07dccbec778687feaa2","source":{"kind":"arxiv","id":"2412.08936","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.08936","created_at":"2026-07-05T09:48:04Z"},{"alias_kind":"arxiv_version","alias_value":"2412.08936v1","created_at":"2026-07-05T09:48:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.08936","created_at":"2026-07-05T09:48:04Z"},{"alias_kind":"pith_short_12","alias_value":"SD6VF3WM7Y2B","created_at":"2026-07-05T09:48:04Z"},{"alias_kind":"pith_short_16","alias_value":"SD6VF3WM7Y2BXDX7","created_at":"2026-07-05T09:48:04Z"},{"alias_kind":"pith_short_8","alias_value":"SD6VF3WM","created_at":"2026-07-05T09:48:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:SD6VF3WM7Y2BXDX7EFK7VMNPAV","target":"record","payload":{"canonical_record":{"source":{"id":"2412.08936","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-12T04:56:53Z","cross_cats_sorted":[],"title_canon_sha256":"b3710c0f8d1f93fab4b7f694e643f6bf0bc852032c0bc9a06b30bb1ecd83bc94","abstract_canon_sha256":"7e88399f16bf02a04f082bbbbfebba10d3a053c40755cc8753b39e2f5b033de2"},"schema_version":"1.0"},"canonical_sha256":"90fd52eeccfe341b8eff2155fab1af05726945a706fcc07dccbec778687feaa2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:48:04.213421Z","signature_b64":"AdzCGWpdrYWOKbNdD+ZqLnHKgdvs1sBbA0hiJ9mIrdDD5+QvqKSOHRLAF+zzzPcyu24Jk6MFdTl+4Cdvbs7ICg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"90fd52eeccfe341b8eff2155fab1af05726945a706fcc07dccbec778687feaa2","last_reissued_at":"2026-07-05T09:48:04.212853Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:48:04.212853Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.08936","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:48:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PPkqUOXw9R5TfGAJVfrfqZxFmrZqNzFzucrRJCgdXMBzMtMu19B67y/zKPcptjql4VlJd9U9HV7AG9iNJy2jDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T08:15:49.547749Z"},"content_sha256":"5c9e3fca0deb111e296b2c416bc3f0a8b07c05825b9cb6e4d217af732f13e5be","schema_version":"1.0","event_id":"sha256:5c9e3fca0deb111e296b2c416bc3f0a8b07c05825b9cb6e4d217af732f13e5be"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:SD6VF3WM7Y2BXDX7EFK7VMNPAV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"QFAM: Mitigating QUIC Handshake Flooding Attacks Through Crypto Challenges","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Abdollah Jabbari, Benjamin Teyssier, Carol Fung, Y A Joarder","submitted_at":"2024-12-12T04:56:53Z","abstract_excerpt":"QUIC protocol is primarily designed to optimize web performance and security. However, previous research has pointed out that it is vulnerable to handshake flooding attacks. Attackers can send excessive volume of handshaking requests to exhaust the CPU resource of the server, through utilizing the large CPU amplification factor occurred during the handshake process under attack. In this paper, we introduce a novel defense mechanism by introducing the concept of crypto challenges into the handshake protocol. This enhancement involves a proposal of modifying the RETRY token to integrate a crypto"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.08936","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.08936/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:48:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dwJv9c5wxb635OIc4f3O6RyvI3ktPKqtsbeKhVbJVbYB6RFw9MSxkyXbQpGecEZwkyx9xjUfB/anqyhG3YamBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T08:15:49.548205Z"},"content_sha256":"40c6fde55073483f1919df062423c37756a5569aa5aff75a077c763aaf9b3d50","schema_version":"1.0","event_id":"sha256:40c6fde55073483f1919df062423c37756a5569aa5aff75a077c763aaf9b3d50"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SD6VF3WM7Y2BXDX7EFK7VMNPAV/bundle.json","state_url":"https://pith.science/pith/SD6VF3WM7Y2BXDX7EFK7VMNPAV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SD6VF3WM7Y2BXDX7EFK7VMNPAV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T08:15:49Z","links":{"resolver":"https://pith.science/pith/SD6VF3WM7Y2BXDX7EFK7VMNPAV","bundle":"https://pith.science/pith/SD6VF3WM7Y2BXDX7EFK7VMNPAV/bundle.json","state":"https://pith.science/pith/SD6VF3WM7Y2BXDX7EFK7VMNPAV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SD6VF3WM7Y2BXDX7EFK7VMNPAV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SD6VF3WM7Y2BXDX7EFK7VMNPAV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7e88399f16bf02a04f082bbbbfebba10d3a053c40755cc8753b39e2f5b033de2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-12T04:56:53Z","title_canon_sha256":"b3710c0f8d1f93fab4b7f694e643f6bf0bc852032c0bc9a06b30bb1ecd83bc94"},"schema_version":"1.0","source":{"id":"2412.08936","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.08936","created_at":"2026-07-05T09:48:04Z"},{"alias_kind":"arxiv_version","alias_value":"2412.08936v1","created_at":"2026-07-05T09:48:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.08936","created_at":"2026-07-05T09:48:04Z"},{"alias_kind":"pith_short_12","alias_value":"SD6VF3WM7Y2B","created_at":"2026-07-05T09:48:04Z"},{"alias_kind":"pith_short_16","alias_value":"SD6VF3WM7Y2BXDX7","created_at":"2026-07-05T09:48:04Z"},{"alias_kind":"pith_short_8","alias_value":"SD6VF3WM","created_at":"2026-07-05T09:48:04Z"}],"graph_snapshots":[{"event_id":"sha256:40c6fde55073483f1919df062423c37756a5569aa5aff75a077c763aaf9b3d50","target":"graph","created_at":"2026-07-05T09:48:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.08936/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"QUIC protocol is primarily designed to optimize web performance and security. However, previous research has pointed out that it is vulnerable to handshake flooding attacks. Attackers can send excessive volume of handshaking requests to exhaust the CPU resource of the server, through utilizing the large CPU amplification factor occurred during the handshake process under attack. In this paper, we introduce a novel defense mechanism by introducing the concept of crypto challenges into the handshake protocol. This enhancement involves a proposal of modifying the RETRY token to integrate a crypto","authors_text":"Abdollah Jabbari, Benjamin Teyssier, Carol Fung, Y A Joarder","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-12T04:56:53Z","title":"QFAM: Mitigating QUIC Handshake Flooding Attacks Through Crypto Challenges"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.08936","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5c9e3fca0deb111e296b2c416bc3f0a8b07c05825b9cb6e4d217af732f13e5be","target":"record","created_at":"2026-07-05T09:48:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7e88399f16bf02a04f082bbbbfebba10d3a053c40755cc8753b39e2f5b033de2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-12T04:56:53Z","title_canon_sha256":"b3710c0f8d1f93fab4b7f694e643f6bf0bc852032c0bc9a06b30bb1ecd83bc94"},"schema_version":"1.0","source":{"id":"2412.08936","kind":"arxiv","version":1}},"canonical_sha256":"90fd52eeccfe341b8eff2155fab1af05726945a706fcc07dccbec778687feaa2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"90fd52eeccfe341b8eff2155fab1af05726945a706fcc07dccbec778687feaa2","first_computed_at":"2026-07-05T09:48:04.212853Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:48:04.212853Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"AdzCGWpdrYWOKbNdD+ZqLnHKgdvs1sBbA0hiJ9mIrdDD5+QvqKSOHRLAF+zzzPcyu24Jk6MFdTl+4Cdvbs7ICg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:48:04.213421Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.08936","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5c9e3fca0deb111e296b2c416bc3f0a8b07c05825b9cb6e4d217af732f13e5be","sha256:40c6fde55073483f1919df062423c37756a5569aa5aff75a077c763aaf9b3d50"],"state_sha256":"54009197b72ae277c48f9b94e73198b7c3b3918201bc6eeba3dbcf35a8c25914"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cRqg0CVE5hbLx//sbxgBcNOfbp23XLrM0HoZSz3OYaf1+i6fWl2dxdtDcqpdgRF5A9KQLQgP5f1Y7tAvV2ooAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T08:15:49.552356Z","bundle_sha256":"cea1074e54a3efa12835674917332f075016e48bee71d4853496e18d88a8b63d"}}