InfoQ 中文T2·78 pts
Apple Launches Reference Image: Sensor-Level Signing for Provenance
Original: C2PA 不够可信?苹果把照片签名塞进传感器,却把信任交给了自家云
- Apple's Reference Image mode bypasses C2PA standards, signing raw pixels directly during secure sensor boot to prevent post-capture tampering.
- Image development is moved to Private Cloud Compute (PCC), utilizing ML-DSA-87 and RSA-3072 composite signatures to claim quantum-safe provenance.
- RFC 3161 timestamps and Oblivious HTTP are employed to ensure time integrity while protecting user privacy from correlation.