{"slug": "apple-explains-how-its-new-iphone-18-photo-verification-actually-works", "title": "Apple Explains How Its New iPhone 18 Photo Verification Actually Works", "summary": "Apple detailed how its new Apple Reference Image feature on iPhone 18 Pro models cryptographically signs camera sensor data to prove photos are not AI-generated, publishing a blog post Tuesday that describes a system combining RSA-3072 and ML-DSA-87 signatures processed through Apple's Private Cloud Compute. The sensor creates its own signing identity at factory initialization and is bound to the phone's Secure Enclave Processor, with signed pixel data packaged into a \"digital negative\" that Apple verifies before producing a final signed JPEG. Apple says the feature gives \"photographers, newsrooms, and everyday users renewed confidence that an image they're viewing is a photograph actually captured by a camera.", "body_md": "As AI deepfakes keep getting better, Apple is about to launch a new feature designed to prove that photos taken with its latest iPhones are real and show what the camera actually captured at the time.\n\nThe company revealed more details this week about the new camera mode that it’s calling Apple Reference Image\n\nApple first [announced](https://gizmodo.com/apple-launches-feature-to-prove-iphone-18-photos-are-not-ai-generated-2000809521) the feature last week at its event unveiling a slate of new products, including its first foldable phone, [the iPhone Duo](https://gizmodo.com/iphone-duo-2000808898).\n\n“Users can now prove the authenticity of a photo taken on iPhone 18 Pro models with Apple Reference Image, powered by the new sensor in the Main camera that can sign every pixel it sees,” Apple said in a [press release](https://www.businesswire.com/news/home/20260909172657/en/Apple-debuts-iPhone-18-Pro-and-iPhone-18-Pro-Max) at the time.\n\nEssentially, when a user takes a photo using the new Reference mode on an iPhone 18 Pro, the camera captures signed sensor data. That data is then processed using Apple’s Private Cloud Compute to create what the company says is an unalterable reference image.\n\nApple published a [blog post](https://security.apple.com/blog/apple-reference-image) Tuesday breaking down in detail how the new system on what it calls the “world’s most popular camera” actually works.\n\nIt all starts in Apple’s factories. When the camera sensor in an iPhone 18 Pro model is first initialized, it creates its own cryptographic signing identity and shares only the public key with the factory. The phone’s Secure Enclave Processor (SEP) similarily creates a separate signing identity. The two are then bound together in the device’s manifest, allowing Apple to later verify that a particular sensor and SEP belong to the same iPhone.\n\nLater when a user switches to Reference mode on the camera app, the sensor reboots into a special secure mode. When a photo is taken, the sensor cryptographically signs the pixel data immediately after capture and prevents its firmware from modifying the data. Metadata produced by the sensor is signed along with the image, while some metadata coming from elsewhere on the phone is separately signed by the SEP.\n\nApple also uses cryptographically signed timestamps before and after the photo is taken, creating a window that shows roughly when the image was captured.\n\nAll of that info is packaged into what Apple calls a “digital negative.”\n\nThat digital negative is then sent to Apple’s Private Cloud Compute. Apple says Private Cloud Compute is designed so that no one, including Apple itself, can see the image data being processed.\n\nPrivate Cloud Compute then verifies the signatures and checks that the camera sensor and SEP actually came from the same phone. It also runs a model that checks whether the raw image has the physical characteristics Apple would expect from the camera sensor\n\nIf everything checks out, Private Cloud Compute then runs the normal processing that turns raw sensor data into a regular photo, including demosaicing, tone mapping, and compression. That version is turned into a JPEG and given a final cryptographic signature.\n\nThat signature combines the traditional RSA-3072 cryptographic system with ML-DSA-87, an algorithm designed to remain secure against future attacks using quantum computers.\n\nThe company has also built a revocation system that can flag individual images or all Reference Images produced by a particular sensor if Apple discovers that it has been compromised.\n\n“The result is a verification model that offers photographers, newsrooms, and everyday users renewed confidence that an image they’re viewing is a photograph actually captured by a camera,” Apple says in the blog post.", "url": "https://wpnews.pro/news/apple-explains-how-its-new-iphone-18-photo-verification-actually-works", "canonical_source": "https://gizmodo.com/apple-explains-how-its-new-iphone-18-photo-verification-actually-works-2000812623", "published_at": "2026-09-16 17:00:50+00:00", "updated_at": "2026-09-16 17:10:51.457491+00:00", "lang": "en", "topics": ["ai-safety", "ai-products", "generative-ai"], "entities": ["Apple", "iPhone 18 Pro", "Apple Reference Image", "Private Cloud Compute", "Secure Enclave Processor", "iPhone Duo", "RSA-3072", "ML-DSA-87"], "alternates": {"html": "https://wpnews.pro/news/apple-explains-how-its-new-iphone-18-photo-verification-actually-works", "markdown": "https://wpnews.pro/news/apple-explains-how-its-new-iphone-18-photo-verification-actually-works.md", "text": "https://wpnews.pro/news/apple-explains-how-its-new-iphone-18-photo-verification-actually-works.txt", "jsonld": "https://wpnews.pro/news/apple-explains-how-its-new-iphone-18-photo-verification-actually-works.jsonld"}}