{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:VU6JOQOX2NRBO3SB7MDPARLNDY","short_pith_number":"pith:VU6JOQOX","canonical_record":{"source":{"id":"2509.10814","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-13T14:28:20Z","cross_cats_sorted":[],"title_canon_sha256":"3ccaa2cef7eadfabcafa45ede4102556e811113f1830611f33b6fa8b0f7861f4","abstract_canon_sha256":"8f3fe7e09c09a53d067e8a6bb04975b1420e8f80aac513928c09bf4edae27705"},"schema_version":"1.0"},"canonical_sha256":"ad3c9741d7d362176e41fb06f0456d1e2560f3bebcdc33039241e6f75fa72022","source":{"kind":"arxiv","id":"2509.10814","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.10814","created_at":"2026-07-05T12:11:28Z"},{"alias_kind":"arxiv_version","alias_value":"2509.10814v1","created_at":"2026-07-05T12:11:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.10814","created_at":"2026-07-05T12:11:28Z"},{"alias_kind":"pith_short_12","alias_value":"VU6JOQOX2NRB","created_at":"2026-07-05T12:11:28Z"},{"alias_kind":"pith_short_16","alias_value":"VU6JOQOX2NRBO3SB","created_at":"2026-07-05T12:11:28Z"},{"alias_kind":"pith_short_8","alias_value":"VU6JOQOX","created_at":"2026-07-05T12:11:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:VU6JOQOX2NRBO3SB7MDPARLNDY","target":"record","payload":{"canonical_record":{"source":{"id":"2509.10814","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-13T14:28:20Z","cross_cats_sorted":[],"title_canon_sha256":"3ccaa2cef7eadfabcafa45ede4102556e811113f1830611f33b6fa8b0f7861f4","abstract_canon_sha256":"8f3fe7e09c09a53d067e8a6bb04975b1420e8f80aac513928c09bf4edae27705"},"schema_version":"1.0"},"canonical_sha256":"ad3c9741d7d362176e41fb06f0456d1e2560f3bebcdc33039241e6f75fa72022","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:11:28.547970Z","signature_b64":"sq7dpa2lg0OWcCu+Te/XyMBjYu+9EaNKlztdh2XvfraSZfo3NOT3jgPw6hbdO3ZdrS4umacYb73H1VwcH2L/DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ad3c9741d7d362176e41fb06f0456d1e2560f3bebcdc33039241e6f75fa72022","last_reissued_at":"2026-07-05T12:11:28.547443Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:11:28.547443Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.10814","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:11:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WFmHiNAIQLWLY3TiMIW3sBh+9p+XhWPkmA68cH4rCCCICkUr5gMEQJxy1rICbWc5v0Iocp7IYTucJN4j0or7DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T23:14:29.381701Z"},"content_sha256":"ddb701c0e6f5fcb580fae27fbb88be900b88227598fca9be3a08e2b25828bbe3","schema_version":"1.0","event_id":"sha256:ddb701c0e6f5fcb580fae27fbb88be900b88227598fca9be3a08e2b25828bbe3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:VU6JOQOX2NRBO3SB7MDPARLNDY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Automatic Generation of a Cryptography Misuse Taxonomy Using Large Language Models","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chen Wu, Liang Cheng, Wenxin Hu, Wenyi Ouyang, Yang Zhang, Yi Zhang","submitted_at":"2025-09-13T14:28:20Z","abstract_excerpt":"The prevalence of cryptographic API misuse (CAM) is compromising the effectiveness of cryptography and in turn the security of modern systems and applications. Despite extensive efforts to develop CAM detection tools, these tools typically rely on a limited set of predefined rules from human-curated knowledge. This rigid, rule-based approach hinders adaptation to evolving CAM patterns in real practices.\n  We propose leveraging large language models (LLMs), trained on publicly available cryptography-related data, to automatically detect and classify CAMs in real-world code to address this limit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.10814","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.10814/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:11:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3B4ejjrR8cppUKwOm075RFERxBMLn5OSXuSZQ25jVlqf+VnWG2Iinj6Mn7ua+pLLm1Drgy5Uib9qPqm/TxupBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T23:14:29.382245Z"},"content_sha256":"8ad0ebed3677568ae94b757087bb4313e7366459b1341bb68c22c56d8f67fb85","schema_version":"1.0","event_id":"sha256:8ad0ebed3677568ae94b757087bb4313e7366459b1341bb68c22c56d8f67fb85"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VU6JOQOX2NRBO3SB7MDPARLNDY/bundle.json","state_url":"https://pith.science/pith/VU6JOQOX2NRBO3SB7MDPARLNDY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VU6JOQOX2NRBO3SB7MDPARLNDY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T23:14:29Z","links":{"resolver":"https://pith.science/pith/VU6JOQOX2NRBO3SB7MDPARLNDY","bundle":"https://pith.science/pith/VU6JOQOX2NRBO3SB7MDPARLNDY/bundle.json","state":"https://pith.science/pith/VU6JOQOX2NRBO3SB7MDPARLNDY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VU6JOQOX2NRBO3SB7MDPARLNDY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:VU6JOQOX2NRBO3SB7MDPARLNDY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8f3fe7e09c09a53d067e8a6bb04975b1420e8f80aac513928c09bf4edae27705","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-13T14:28:20Z","title_canon_sha256":"3ccaa2cef7eadfabcafa45ede4102556e811113f1830611f33b6fa8b0f7861f4"},"schema_version":"1.0","source":{"id":"2509.10814","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.10814","created_at":"2026-07-05T12:11:28Z"},{"alias_kind":"arxiv_version","alias_value":"2509.10814v1","created_at":"2026-07-05T12:11:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.10814","created_at":"2026-07-05T12:11:28Z"},{"alias_kind":"pith_short_12","alias_value":"VU6JOQOX2NRB","created_at":"2026-07-05T12:11:28Z"},{"alias_kind":"pith_short_16","alias_value":"VU6JOQOX2NRBO3SB","created_at":"2026-07-05T12:11:28Z"},{"alias_kind":"pith_short_8","alias_value":"VU6JOQOX","created_at":"2026-07-05T12:11:28Z"}],"graph_snapshots":[{"event_id":"sha256:8ad0ebed3677568ae94b757087bb4313e7366459b1341bb68c22c56d8f67fb85","target":"graph","created_at":"2026-07-05T12:11:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.10814/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The prevalence of cryptographic API misuse (CAM) is compromising the effectiveness of cryptography and in turn the security of modern systems and applications. Despite extensive efforts to develop CAM detection tools, these tools typically rely on a limited set of predefined rules from human-curated knowledge. This rigid, rule-based approach hinders adaptation to evolving CAM patterns in real practices.\n  We propose leveraging large language models (LLMs), trained on publicly available cryptography-related data, to automatically detect and classify CAMs in real-world code to address this limit","authors_text":"Chen Wu, Liang Cheng, Wenxin Hu, Wenyi Ouyang, Yang Zhang, Yi Zhang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-13T14:28:20Z","title":"Automatic Generation of a Cryptography Misuse Taxonomy Using Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.10814","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ddb701c0e6f5fcb580fae27fbb88be900b88227598fca9be3a08e2b25828bbe3","target":"record","created_at":"2026-07-05T12:11:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8f3fe7e09c09a53d067e8a6bb04975b1420e8f80aac513928c09bf4edae27705","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-13T14:28:20Z","title_canon_sha256":"3ccaa2cef7eadfabcafa45ede4102556e811113f1830611f33b6fa8b0f7861f4"},"schema_version":"1.0","source":{"id":"2509.10814","kind":"arxiv","version":1}},"canonical_sha256":"ad3c9741d7d362176e41fb06f0456d1e2560f3bebcdc33039241e6f75fa72022","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ad3c9741d7d362176e41fb06f0456d1e2560f3bebcdc33039241e6f75fa72022","first_computed_at":"2026-07-05T12:11:28.547443Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:11:28.547443Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sq7dpa2lg0OWcCu+Te/XyMBjYu+9EaNKlztdh2XvfraSZfo3NOT3jgPw6hbdO3ZdrS4umacYb73H1VwcH2L/DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T12:11:28.547970Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.10814","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ddb701c0e6f5fcb580fae27fbb88be900b88227598fca9be3a08e2b25828bbe3","sha256:8ad0ebed3677568ae94b757087bb4313e7366459b1341bb68c22c56d8f67fb85"],"state_sha256":"e30248c6ebbb4794791c401785db6d7231a1ea53ee0c32ce078b5c1a3a554692"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TLuvIszO+0qMIoer25V99CSt5Dc23hBFgGeTY6zlBhzTAXCukB2PPpAl9zME+lb63Q9y3VTRadgJLbAzhgS0BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T23:14:29.387283Z","bundle_sha256":"906bfb731a295efd5df623884fd72ffab3bdbe518f460a2e8cc74d99defee7a7"}}