{"id":"https://openalex.org/W7166199857","doi":"https://doi.org/10.48550/arxiv.2606.26933","title":"Chai: Agentic Discovery of Cryptographic Misuse Vulnerabilities","display_name":"Chai: Agentic Discovery of Cryptographic Misuse Vulnerabilities","publication_year":2026,"publication_date":"2026-06-25","ids":{"openalex":"https://openalex.org/W7166199857","doi":"https://doi.org/10.48550/arxiv.2606.26933"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.26933","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26933","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.26933","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139424544","display_name":"Corban Villa","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Villa, Corban","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139400568","display_name":"Sohee Kim","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kim, Sohee","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046207178","display_name":"Austin Chu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chu, Austin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139409835","display_name":"Alon Shakevsky","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shakevsky, Alon","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136211374","display_name":"Raluca Ada Popa","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Popa, Raluca Ada","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.35929998755455017,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.35929998755455017,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.225600004196167,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.09049999713897705,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7077999711036682},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.5403000116348267},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5390999913215637},{"id":"https://openalex.org/keywords/chai","display_name":"Chai","score":0.5371000170707703},{"id":"https://openalex.org/keywords/troubleshooting","display_name":"Troubleshooting","score":0.4350000023841858},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.4214000105857849},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.4138999879360199},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.4106999933719635},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.40389999747276306}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7480000257492065},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.734000027179718},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7077999711036682},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.5403000116348267},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5390999913215637},{"id":"https://openalex.org/C120324620","wikidata":"https://www.wikidata.org/wiki/Q15304537","display_name":"Chai","level":2,"score":0.5371000170707703},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.4350000023841858},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.4214000105857849},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.4138999879360199},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.4106999933719635},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4068000018596649},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.40389999747276306},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.325300008058548},{"id":"https://openalex.org/C2777516300","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data discovery","level":3,"score":0.32120001316070557},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.31150001287460327},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.304500013589859},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.303600013256073},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.2924000024795532},{"id":"https://openalex.org/C118530786","wikidata":"https://www.wikidata.org/wiki/Q1134732","display_name":"Instrumentation (computer programming)","level":2,"score":0.2903999984264374},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.2897000014781952},{"id":"https://openalex.org/C2780532074","wikidata":"https://www.wikidata.org/wiki/Q1200314","display_name":"Derogation","level":2,"score":0.2865000069141388},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.28290000557899475},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2784000039100647},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.2782000005245209},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.27309998869895935},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.2648000121116638},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.2587999999523163},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.25279998779296875},{"id":"https://openalex.org/C2776841711","wikidata":"https://www.wikidata.org/wiki/Q856","display_name":"Barcode","level":2,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.26933","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26933","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.26933","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.26933","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7190738320350647}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AI-assisted":[0],"vulnerability":[1,24,104,148],"discovery":[2],"has":[3],"proven":[4],"effective":[5],"for":[6,73,88,111],"bug":[7],"classes":[8],"like":[9],"memory":[10,15],"safety,":[11],"where":[12],"instrumentation":[13],"confirms":[14],"violations":[16],"and":[17,46,80,121,139,170],"efficiently":[18],"filters":[19],"false":[20],"positives.":[21],"Many":[22],"dangerous":[23],"classes,":[25],"such":[26],"as":[27,86],"cryptographic":[28,48,126],"misuse,":[29],"however,":[30],"lack":[31],"any":[32],"comparable":[33],"instrumentation.":[34],"In":[35,94,176],"this":[36],"work,":[37],"we":[38],"present":[39],"Chai,":[40],"an":[41,150],"AI-based":[42],"system":[43],"that":[44,153],"discovers":[45],"validates":[47],"misuse":[49],"vulnerabilities":[50,90],"through":[51],"naturally":[52],"occurring":[53],"signals.":[54],"To":[55],"achieve":[56],"this,":[57],"Chai":[58,97,135,142],"rethinks":[59],"the":[60,99,118],"classical":[61],"technique":[62],"of":[63,102,107,156],"differential":[64],"testing":[65],"by":[66],"leveraging":[67],"AI":[68,103],"to":[69],"1)":[70],"improve":[71],"precision":[72],"detecting":[74],"real":[75],"security":[76,160],"issues":[77],"in":[78,91,149,162,172],"libraries,":[79],"2)":[81],"repurpose":[82],"commonly":[83],"overlooked":[84],"discrepancies":[85],"leads":[87],"tangible":[89],"downstream":[92],"applications.":[93],"doing":[95],"so,":[96],"inverts":[98],"prevailing":[100],"paradigm":[101],"discovery:":[105],"instead":[106],"auditing":[108],"one":[109,163],"codebase":[110],"many":[112],"flaws,":[113],"it":[114],"catalogs":[115],"flaws":[116],"at":[117],"library":[119,152,164],"level":[120],"propagates":[122],"them":[123],"across":[124,136],"a":[125,144,166],"dependency":[127],"graph,":[128],"delivering":[129],"compounding":[130],"efficiency":[131],"gains.":[132],"We":[133],"evaluate":[134],"X.509,":[137],"JWT,":[138],"SAML":[140],"libraries.":[141],"discovered":[143],"previously":[145],"unknown":[146],"critical":[147],"SSL":[151],"powers":[154],"billions":[155],"devices,":[157],"along":[158],"with":[159],"bugs":[161],"behind":[165],"major":[167,173],"web":[168],"browser":[169],"another":[171],"Linux":[174],"distributions.":[175],"total,":[177],"these":[178],"techniques":[179],"surfaced":[180],"over":[181],"100":[182],"vulnerabilities.":[183]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-27T00:00:00"}