C2PA Standard

The C2PA standard embeds a cryptographically signed manifest directly into a media file's metadata. This manifest acts as a chain of custody, recording every action taken on the asset, from initial capture to final export. Each assertion is hashed and linked to the previous one, creating an immutable history. Any subsequent modification invalidates the digital signature, making unauthorized alterations immediately detectable by verification tools. This provides a robust mechanism for distinguishing authentic content from manipulated media.

A core component of the C2PA architecture is the Ingredient assertion, which documents the lineage of composite media. When multiple source files are combined—such as inserting a stock photo into a video frame—each component is listed as a separate ingredient with its own provenance chain. This creates a granular, auditable family tree for the final asset. Key properties include:

• Document ID: A unique identifier for each ingredient.
• Relationship: Defines how the ingredient contributed (e.g., componentOf).
• Active Manifest: A direct link to the ingredient's own signed manifest.

To establish a root of trust at the point of capture, C2PA supports hard-binding. This process uses secure hardware enclaves within cameras or recording devices to cryptographically sign the initial manifest the moment a photo or video is captured. The private key is sealed within the device's secure element, preventing extraction. This binds the digital signature directly to the physical sensor data, providing the strongest possible attestation that the media originated from a specific device and has not been altered since the shutter was pressed.

C2PA does not make subjective judgments about content trustworthiness; it provides a verifiable credential structure. A validator tool parses the manifest, checks the cryptographic signatures against a public key infrastructure, and validates the certificate chain against a Trust List. The output is a deterministic report indicating whether the signature is valid, the signing identity is trusted, and the provenance chain is unbroken. This allows platforms to implement their own policies based on objective cryptographic evidence rather than opaque heuristics.

For content not captured on specialized hardware, C2PA defines soft-binding workflows. A cloud-based signing service authenticates the user or automated pipeline and attaches a manifest post-capture. While the root of trust is weaker than hard-binding, this approach enables provenance for synthetically generated media or legacy content. The manifest records the signing service's identity and the specific generative model or editing software used, creating an auditable trail from the creation tool to the published asset.

To balance transparency with privacy, the C2PA specification includes a redaction mechanism. Sensitive information within a manifest, such as GPS coordinates or the creator's personal identity, can be selectively removed without breaking the overall cryptographic integrity of the provenance chain. The redaction process replaces the specific data field with a null value and generates a new signature over the redacted manifest, while preserving the hashes of the original, unredacted data to maintain the chain's verifiability.

The systematic process of tracing the origin, movement, and transformation of data through a pipeline to verify integrity. In the context of C2PA, lineage auditing reconstructs the complete provenance graph—every ingest, edit, and export event—to validate that no unauthorized manipulation occurred. This is critical for programmatic content infrastructure where assets are assembled algorithmically from multiple sources.

A foundational security primitive where cryptographic keys are generated and stored within a secure enclave or Trusted Platform Module (TPM) on a device. For C2PA, this enables camera-born provenance—the assertion that a specific physical sensor captured the raw bytes at a specific time, signed by a key that never leaves the silicon. This creates the strongest possible origin claim, resistant to software-level spoofing.

The directed acyclic graph (DAG) representing the complete history of a digital asset. Each node is an assertion (camera capture, Photoshop edit, AI generation step), and each edge is a cryptographic signature linking child to parent. C2PA manifests encode this graph to answer:

• Who created or modified the asset?
• What action was performed?
• When did it occur?
• With what software or hardware?