Hardware Keystores for AI Agent Signing Workflows: A Zero-Trust MCP Enforcement Architecture arxiv.org
Paper on shoving AI agent signing keys into PKCS#11 hardware, then bolting on zero-trust MCP checks for prompt injection.
trending176
61 62 How do chiplets and LLMs widen the hardware attack surface, and which defenses still survive the paper cut?63 Blockchain Empowered Trustworthy Agent Networks: Foundations, Taxonomy, and Future Directions arxiv.orgSurvey on using blockchains as a shared trust layer for open agent networks, with a 5-axis taxonomy and risk mapping.64 Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework arxiv.orgSecureCollaRAG adds Byzantine tolerance and GNN credibility scoring to collaborative RAG, basically poison-resistant retriever gossip for...65 Classifies trace-product switchings of x^3: only even dimensions 4, 6, and 8 admit nontrivial ones.66 A spec for opaque rotating refresh tokens, with server-state semantics, CAS replay checks, and 10 impls to keep honest.67 A categorical string-diagram UC treatment that makes composition theorem proofs graphical, and quietly fixes a few standard-SUC warts.68 A model of MEV searcher markets, with Shapley/HHI fairness metrics and a capped entry filter to curb the usual cartel math.69 Beyond the QBER Threshold: A Temporal QBER Based Machine Learning Framework for Multi Attack Detection in BB84 QKD arxiv.orgQBER isn't a threshold here, it's a time series for ML attack detection in BB84, with SHAP explaining the usual physics bits.70 ZK-SR117: A Chunked Zero-Knowledge Attestation Design for Aggregated Fair-Lending Metrics, with a Control Mapping toward Full SR 11-7 Coverage arxiv.orgChunked zkSNARKs for fair-lending metrics on HMDA, plus a control-language map from SR 11-7 to statements.71 Behavioral Skill Reconstruction: Reconstructing Hidden Functionality from LLM Agent Skills arxiv.orgBlack-box prompts can reconstruct hidden LLM agent skills, because apparently secrecy by file hiding was too optimistic.72 Turns PoL into a physical prototype with witness zones and mesh relays, instead of the usual GPS fairy dust.73 Behavioral Information Leakage in Darknet Traffic: A Multi-Channel Analysis Across Anonymity Networks arxiv.orgA cross-network study finds Tor/I2P/Freenet/ZeroNet leak via control, structure, tempo, and silence, not just packet sizes.74 PriDyG claims edge-level DP for dynamic graph inference without privacy compounding, by mixing private GNN aggregation with LLM semantics.75 PIR-based audits make deceptive model providers risk more false answers, so cheating gets harder to hide.76 Kerckhoffs-Compliant Watermarking for Physical Design IP Protection: From Placement to Routing arxiv.orgKerckhoffs-compliant watermarking for P&R IP, with deterministic HMAC-SHA256 marks and modest PPA overhead.77 DeepInvert adds semi-supervised embedding inversion, and it cracks ObfusLM-style prompt obfuscation better than prior work.78 Only the label is secret here, not the prompt or replies: PrivDPO privatizes DPO with calibrated noise on the preference axis.79 Hidden Ciphers and Where to Find Them: Static Discovery and Assessment of Cryptographic Assets in Software arxiv.orgStatic scanner maps crypto material, artifacts, and calls across code/config/deps for CBOMs and PQC triage.80 Can secrecy in unbounded Dolev-Yao sessions be decided? Yes, if you accept bounded freshness, typing, and a cut-off.81 Paper on MutMem, a signed, commitment-backed protocol for agent-memory mutation, because even memories need receipts.82 Attribute-based watermarking for genAI, detection keys only work on allowed outputs, which is the new twist on the usual everyone-can-spo...83 ArXiv paper measuring PQ TLS on 4,665 UK orgs: HTTPS has it, SMTP mostly doesn't, and the certs are still pre-quantum.84 How much collateral leakage is “minimal”? This paper turns AI verification into conditional mutual information and Groth16.85 Steganalysis of Adaptive Covert Collusion in Tool-Using Agent Populations: A Black-Box, Cross-Principal Approach arxiv.orgTool-using agents can collude across principals, and this paper tries to catch them with black-box steganalysis.86 A security lifecycle for LLMs, 32 stages across data/model/app/ops, finally treating provenance and decommissioning as first-class.87 Intruder deduction gets reduced to right-divisibility in semi-Thue systems, with decidable erasing cases and one undecidable trap.88 Can a supply-chain reputation system avoid colluders and sparse histories? This paper answers with bounded, weighted trust updates.89 Polytime attack on EGMC, the Gabidulin matrix-code scheme from Asiacrypt 2024, and it hands back an equivalent secret key.90 Internalising the Identity Primitive: Cryptographic Individuality for an Autonomous Agent on a Public Blockchain arxiv.orgArXiv paper on an on-chain identity primitive for autonomous agents, binding weights to a key in ZK, because humans love referees.