Apple Details iPhone 18 Pro’s New Reference Image Camera Feature

Apple has published a new post on its Security Research website in which it details how the iPhone 18 Pro’s new Reference Image camera mode works. The feature is designed to make it easier for people to confirm the authenticity of photos and be sure that no AI features were used.

Apple has described its new system as a secure digital negative, one that contains all of the raw pixels captured during the shooting of a photograph as well as metadata. That information is then processed within Apple’s Private Cloud Compute system, with the camera sensor cryptographically signing the data immediately after the image is captured.

The creation of a secure digital negative begins with a secure boot of the camera sensor into a specialized reference capture mode. The mode instructs the sensor to cryptographically sign pixel data immediately after capture, and prevents the sensor firmware from modifying the data. This creates a hardware-enforced assurance that the operating system receives pixel data exactly as the hardware sensor captured it, preventing injection or tampering attacks.

Apple’s system also uses cryptographic timestamps as a way to verify exactly when a photo was taken rather than simply relying on the timestamp in the photo’s metadata.

Knowing when a photograph was captured is often a critical element in establishing its veracity. While prior industry systems have included a timestamp provided by the general device operating system, we believe this plainly falls short of the real-world assurance need. Instead, Apple Reference Image provides both a lower bound and an upper bound on capture time from Apple’s cryptographic timestamp service, and we guarantee the photo was taken between the two bounds.

The Secure Enclave built into the iPhone 18 Pro handles Face ID and other security features, and it is used to sign the metadata for captured photos before Private Cloud Compute verifies and confirms everything, and then bakes the digital negative into the final JPEG Reference Image file. Post-quantum cryptography is then used to sign the final image to ensure it can’t be altered even by future quantum-level attacks.

Notably, Apple points out that the Reference Image system was built in such a way that third parties can’t access information such as which device took a photo or who the photographer was.