Apple's Reference Image Signs Pixel Data Inside The iPhone Sensor
By moving the signature inside the sensor at capture time, Apple is trying to answer the provenance question at the point where pixel data is still raw, which the C2PA model of post-shooting metadata cannot close on its own.
Reporting from 1 source: GIGAZINE.
Apple detailed Apple Reference Image, a technology announced on September 10, 2026 alongside the iPhone 18 Pro and Pro Max. The Secure Enclave Processor and the camera sensor each generate a signing key at the factory, and pixel data is signed inside the sensor right after capture. C2PA attaches provenance metadata after shooting; Apple's method makes the development processing verifiable.
The approach splits into two stages: creating a secure digital negative, then developing it. The factory links the sensor's public key, the Secure Enclave Processor's credentials, and the device manifest so the two can later be confirmed as belonging to the same iPhone. Hardware support is required, so at the time of writing the iPhone 18 Pro and iPhone 18 Pro Max are the only devices that can shoot with it.
Shooting requires switching the camera to a separate Reference Mode, which restarts the sensor in a dedicated secure state. Capture time is bounded by encrypted timestamps received over Apple Push Notification Service, taken before and after the shot, with the interval averaging about 15 minutes depending on network conditions.
Synthesized by Yomimono from the 1 cited source below, including Japanese-language reporting where cited, then editorially reviewed before publishing.