SECURITY Signal 498
Open-source camera embeds cryptographic proof of photo authenticity in pixels via steganography
↗
Illustration only Photo by Aneta Pawlik on Unsplash
An open-source camera project uses steganography to embed a signed perceptual hash directly into image pixels, surviving compression and resizing where metadata-based signatures fail.
Metadata-based photo authentication, like Apple's Reference Image or the C2PA standard, fails when platforms strip EXIF data for privacy. Embedding the signature in the image pixels themselves via steganography ensures the proof of authenticity survives common sharing workflows like WhatsApp compression, though it still cannot prevent screen-replay attacks.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
The project uses an ATECC608 cryptographic chip to sign a perceptual hash of the photo at capture time, and the private key never leaves the chip.
Instead of storing the signature in metadata, the camera hides it in the image pixels using a frequency-domain watermark (DWT + DCT) that survives compression and resizing.
Unlike Apple's approach, which relies on Private Cloud Compute and ignores the C2PA standard, this open-source hardware project costs under $100 to build.
THE CLUSTER