Source assertions are not new attribution claims. No sole inventor or transitive actor-CVE inference.
{
  "record": {
    "id": "local-technique:cryptographic-timing",
    "title": "Cryptographic timing attack",
    "type": "Historical concept",
    "snapshot": "historical-seed.json",
    "source_url": "https://paulkocher.com/doc/TimingAttacks.pdf",
    "description": "Timing observations may reveal secret-dependent implementation behavior.",
    "defensive_context": "Constant-time implementations, appropriate blinding and measured leakage testing.",
    "publication": {
      "id": "local-publication:cryptographic-timing-milestone",
      "entity_type": "Publication",
      "title": "Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems",
      "source_url": "https://paulkocher.com/doc/TimingAttacks.pdf",
      "publication_date": "1996",
      "publisher": "CRYPTO96",
      "credit_display": "Paul C. Kocher",
      "credit_role": "research author"
    },
    "mappings": [
      {
        "target_id": "CWE-208",
        "relation": "underlying observable timing weakness",
        "status": "research-supplied conceptual mapping; target exists in imported taxonomy; semantic review pending"
      }
    ],
    "uncertainty": "A cryptographic timing milestone, not the origin of every timing or covert-channel concept.",
    "rights": "Original concise metadata and linked references; no full paper or payload imported",
    "review_status": "Editorial historical seed; conceptual mappings remain explicitly provisional"
  },
  "assertions": [

  ],
  "source_snapshot": null,
  "notices_url": "https://aol.pm/source-notices.txt",
  "notices": "Source-specific notices: https://aol.pm/source-notices.txt\nCVE terms: https://www.cve.org/Legal/TermsOfUse"
}

Source-specific notices: https://aol.pm/source-notices.txt
CVE terms: https://www.cve.org/Legal/TermsOfUse