{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:UMLCSTEUEDASJABSUAX4AI3PDU","short_pith_number":"pith:UMLCSTEU","canonical_record":{"source":{"id":"2207.08978","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-07-18T23:14:49Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"bc128271e22e62ee081dbd53ed4962bcadfb8a4d53ea8f8af734ba64a375cf37","abstract_canon_sha256":"1a54b0876c9a270de3a5d0c7acc8834f7a8fb51dca5c2499db7a23500d8ee073"},"schema_version":"1.0"},"canonical_sha256":"a316294c9420c1248032a02fc0236f1d22f41eed6f6af287b1154689898cf2af","source":{"kind":"arxiv","id":"2207.08978","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.08978","created_at":"2026-07-05T04:42:09Z"},{"alias_kind":"arxiv_version","alias_value":"2207.08978v2","created_at":"2026-07-05T04:42:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.08978","created_at":"2026-07-05T04:42:09Z"},{"alias_kind":"pith_short_12","alias_value":"UMLCSTEUEDAS","created_at":"2026-07-05T04:42:09Z"},{"alias_kind":"pith_short_16","alias_value":"UMLCSTEUEDASJABS","created_at":"2026-07-05T04:42:09Z"},{"alias_kind":"pith_short_8","alias_value":"UMLCSTEU","created_at":"2026-07-05T04:42:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:UMLCSTEUEDASJABSUAX4AI3PDU","target":"record","payload":{"canonical_record":{"source":{"id":"2207.08978","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-07-18T23:14:49Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"bc128271e22e62ee081dbd53ed4962bcadfb8a4d53ea8f8af734ba64a375cf37","abstract_canon_sha256":"1a54b0876c9a270de3a5d0c7acc8834f7a8fb51dca5c2499db7a23500d8ee073"},"schema_version":"1.0"},"canonical_sha256":"a316294c9420c1248032a02fc0236f1d22f41eed6f6af287b1154689898cf2af","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:42:09.692343Z","signature_b64":"IJ8PQ3CV5YHDw1+hkMt19+A6GpkzcjhaaYk0wE6Eak5BysBRKpRhBCVtr6VAtSz9eFgFIhksCJ4UuQ38j6p5DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a316294c9420c1248032a02fc0236f1d22f41eed6f6af287b1154689898cf2af","last_reissued_at":"2026-07-05T04:42:09.691798Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:42:09.691798Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2207.08978","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:42:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YZYvJk98xlwrxF5l3ZfklRmuoY42cMrML4+QUzmODJ0VoZfIuZ35+umbxTsHMWbFg2W+Y+cRx0JETm1ZckP5CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T00:13:08.617934Z"},"content_sha256":"a6617e697bce93eb34877e109d42ef0f81436afe51ca813ad506b1d4d3bd4714","schema_version":"1.0","event_id":"sha256:a6617e697bce93eb34877e109d42ef0f81436afe51ca813ad506b1d4d3bd4714"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:UMLCSTEUEDASJABSUAX4AI3PDU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Security & Privacy Analysis of US-based Contact Tracing Apps","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"Joydeep Mitra","submitted_at":"2022-07-18T23:14:49Z","abstract_excerpt":"With the onset of COVID-19, governments worldwide planned to develop and deploy contact tracing (CT) apps to help speed up the contact tracing process. However, experts raised concerns about the long-term privacy and security implications of using these apps. Consequently, several proposals were made to design privacy-preserving CT apps. To this end, Google and Apple developed the Google/Apple Exposure Notification (GAEN) framework to help public health authorities develop privacy-preserving CT apps. In the United States, 26 states used the GAEN framework to develop their CT apps. In this pape"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.08978","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2207.08978/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:42:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QbBtqmxaIBWTUhFkLFEcoxuQRctxVuUxKEZqsAr/G+Pc10BU+Lg2U3T8uEUiARopuNnAFR1b1KlNU/VW/TeYAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T00:13:08.618389Z"},"content_sha256":"39f24ff1efa8a23c0f5ec351337abdcdce2b73b7283f4e9f668187b35141f48c","schema_version":"1.0","event_id":"sha256:39f24ff1efa8a23c0f5ec351337abdcdce2b73b7283f4e9f668187b35141f48c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UMLCSTEUEDASJABSUAX4AI3PDU/bundle.json","state_url":"https://pith.science/pith/UMLCSTEUEDASJABSUAX4AI3PDU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UMLCSTEUEDASJABSUAX4AI3PDU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T00:13:08Z","links":{"resolver":"https://pith.science/pith/UMLCSTEUEDASJABSUAX4AI3PDU","bundle":"https://pith.science/pith/UMLCSTEUEDASJABSUAX4AI3PDU/bundle.json","state":"https://pith.science/pith/UMLCSTEUEDASJABSUAX4AI3PDU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UMLCSTEUEDASJABSUAX4AI3PDU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:UMLCSTEUEDASJABSUAX4AI3PDU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1a54b0876c9a270de3a5d0c7acc8834f7a8fb51dca5c2499db7a23500d8ee073","cross_cats_sorted":["cs.CY"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-07-18T23:14:49Z","title_canon_sha256":"bc128271e22e62ee081dbd53ed4962bcadfb8a4d53ea8f8af734ba64a375cf37"},"schema_version":"1.0","source":{"id":"2207.08978","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.08978","created_at":"2026-07-05T04:42:09Z"},{"alias_kind":"arxiv_version","alias_value":"2207.08978v2","created_at":"2026-07-05T04:42:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.08978","created_at":"2026-07-05T04:42:09Z"},{"alias_kind":"pith_short_12","alias_value":"UMLCSTEUEDAS","created_at":"2026-07-05T04:42:09Z"},{"alias_kind":"pith_short_16","alias_value":"UMLCSTEUEDASJABS","created_at":"2026-07-05T04:42:09Z"},{"alias_kind":"pith_short_8","alias_value":"UMLCSTEU","created_at":"2026-07-05T04:42:09Z"}],"graph_snapshots":[{"event_id":"sha256:39f24ff1efa8a23c0f5ec351337abdcdce2b73b7283f4e9f668187b35141f48c","target":"graph","created_at":"2026-07-05T04:42:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2207.08978/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the onset of COVID-19, governments worldwide planned to develop and deploy contact tracing (CT) apps to help speed up the contact tracing process. However, experts raised concerns about the long-term privacy and security implications of using these apps. Consequently, several proposals were made to design privacy-preserving CT apps. To this end, Google and Apple developed the Google/Apple Exposure Notification (GAEN) framework to help public health authorities develop privacy-preserving CT apps. In the United States, 26 states used the GAEN framework to develop their CT apps. In this pape","authors_text":"Joydeep Mitra","cross_cats":["cs.CY"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-07-18T23:14:49Z","title":"A Security & Privacy Analysis of US-based Contact Tracing Apps"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.08978","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a6617e697bce93eb34877e109d42ef0f81436afe51ca813ad506b1d4d3bd4714","target":"record","created_at":"2026-07-05T04:42:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1a54b0876c9a270de3a5d0c7acc8834f7a8fb51dca5c2499db7a23500d8ee073","cross_cats_sorted":["cs.CY"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-07-18T23:14:49Z","title_canon_sha256":"bc128271e22e62ee081dbd53ed4962bcadfb8a4d53ea8f8af734ba64a375cf37"},"schema_version":"1.0","source":{"id":"2207.08978","kind":"arxiv","version":2}},"canonical_sha256":"a316294c9420c1248032a02fc0236f1d22f41eed6f6af287b1154689898cf2af","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a316294c9420c1248032a02fc0236f1d22f41eed6f6af287b1154689898cf2af","first_computed_at":"2026-07-05T04:42:09.691798Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:42:09.691798Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IJ8PQ3CV5YHDw1+hkMt19+A6GpkzcjhaaYk0wE6Eak5BysBRKpRhBCVtr6VAtSz9eFgFIhksCJ4UuQ38j6p5DA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:42:09.692343Z","signed_message":"canonical_sha256_bytes"},"source_id":"2207.08978","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a6617e697bce93eb34877e109d42ef0f81436afe51ca813ad506b1d4d3bd4714","sha256:39f24ff1efa8a23c0f5ec351337abdcdce2b73b7283f4e9f668187b35141f48c"],"state_sha256":"a5cb8c35014435ff8c2dc3b7e213181d9741a92b8036138e9f184ad4a4dccb63"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cHtR4MiwiSA/l90cqCi2Rj7wBetCE7AnWRLqx+NtbCNkrOzx6RCYQ+sKeoytNjJuxoccGWd2G5VxGD1Q+ALIDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T00:13:08.621198Z","bundle_sha256":"6637ee56b94ea9fe2bb0c7e7627517f22024b9a144f4b8c50f0ab6b2241e24ad"}}