Apple Announces "Apple Reference Image" to Prove Photo Authenticity, Available on iPhone 18 Pro Series

Apple Reference Image is a technology that combines hardware-based signatures with cloud-side verification processes. First, immediately after capturing an image, the iPhone's camera sensor applies an electronic signature to the pixel data within the sensor itself. During this process, the linkage between the sensor and the Secure Enclave Processor (SEP: a processor that encrypts sensitive data), the device manifest, and an encrypted timestamp using the Apple Push Notification Service (APNs) are recorded to prevent data tampering.

The generated digital negative (the signed data immediately after capture) is sent to Apple's Private Cloud Compute (PCC). After verifying the data's signature, PCC performs image processing such as demosaicing (the process of creating an image from raw sensor data) and compression to generate a reference JPEG image. In this process, a neural network evaluates whether the image appears to be legitimate sensor output.

The completed JPEG image is attached with a signature combining RSA-3072 and ML-DSA-87, and a unique Photo GUID is generated. This makes it possible to verify that the captured data was taken by the correct device's sensor during a specified time period.