Summary

Apple has described an opt-in Reference Image mode debuting on the main camera of the iPhone 18 Pro and iPhone 18 Pro Max. The system combines sensor signatures, secure timestamps and Private Cloud Compute to create a tamper-evident photograph without publicly identifying the photographer.

Apple has detailed an opt-in Reference Image camera mode that will debut on the main camera sensor of the iPhone 18 Pro and iPhone 18 Pro Max. The company says the feature creates a securely timestamped image tied to what the phone’s camera sensor captured, while processing the photograph in Apple’s privacy-preserving Private Cloud Compute (PCC) infrastructure.

The system is designed for cases where a photograph needs to serve as evidence that an event occurred. Apple’s security researchers describe it as a way to establish that an image came from a genuine iPhone camera at a particular time, without requiring the photographer to attach a public identity to the file.

Contents

A signed record of the camera capture

Modern phone cameras do not simply save the raw output of an image sensor. The camera pipeline performs operations such as demosaicing, which reconstructs colour information from sensor pixels, and tone mapping, which adjusts brightness and contrast for viewing. Apple’s design therefore divides the process into two stages: creating a protected “secure digital negative” and developing that negative into a viewable reference image.

When Reference mode is selected, the camera sensor reboots into a specialised capture mode. The sensor signs the digitised pixel data immediately after capture and prevents its firmware from modifying that data. Sensor-generated metadata is signed at the same time. Other camera values, including digital zoom and lens-related parameters, are signed by the iPhone’s Secure Enclave Processor.

The device also records a cryptographic time interval rather than relying only on the phone’s ordinary system clock. A timestamp token received through the device’s regular network heartbeat provides a lower bound for when the image was captured. After capture, the phone requests another token that provides an upper bound. Apple says these heartbeat timestamp requests occur globally about every 15 minutes on average, although the interval depends on local network conditions.

If the phone is offline, the upper-bound timestamp may be added later when a request succeeds. The pixels, signatures, timestamps, device information and secure-boot information are stored in a DNG-format secure digital negative on the device.

How Apple develops the image

When the user chooses to create the reference image, the secure digital negative is uploaded to PCC. Apple says PCC verifies the sensor signature, the Secure Enclave signature, the certificate chains and the binding that confirms the sensor and Secure Enclave belong to the same iPhone.

PCC then performs the image-processing steps needed to produce the visible file, including demosaicing, tone mapping and compression. Apple says the production PCC software is recorded in an append-only cryptographic transparency log, its binaries are available for inspection, and a device sends data only to a node that can attest to running a logged build.

The developed image is compressed as a JPEG and assigned a hash that contributes to its photo identifier. Before signing, PCC also calculates a confidence score based on whether the image has the physical characteristics expected from the company’s camera sensors. The resulting JPEG receives a composite signature using the ML-DSA-87 and RSA-3072 algorithms, with the signature embedded in the file.

The client verifies that signature whenever a reference image is displayed. It also checks an updated revocation list, allowing Apple to revoke an individual image or images from a sensor later judged to be compromised.

Security, privacy and practical limits

The system’s device identity is established during manufacturing. The sensor creates a signing key whose private portion remains inside the sensor, while the Secure Enclave creates a separately attested key. A device manifest binds the two identities together, allowing PCC to check that the capture came from a valid sensor-and-phone pairing.

Apple says the final signature is designed to resist quantum attacks as well as conventional cryptographic attacks. The revocation system is intended to address the possibility that a sensor or device could eventually be compromised: affected photographs can be revoked without publicly revealing which other images came from the same sensor.

Privacy is a central part of the design. Apple says Reference Image does not require a photographer’s public credential and is designed to prevent observers from determining whether two images were taken by the same device. The company also says PCC nodes cannot access the image data during processing, including Apple itself. Timestamp requests use Oblivious HTTP, while signing and revocation requests are made from within PCC to limit network information exposed to those services.

Reference Image is opt-in and, according to Apple’s description, initially applies to the main camera sensor of the iPhone 18 Pro and iPhone 18 Pro Max. Creating the finished reference image requires PCC processing, so network conditions affect when the upper capture-time bound can be secured. After successful development, the secure digital negative is moved to the Deleted Photos folder and is automatically purged after 30 days unless it is recovered or separately preserved.

Sources