VERIFYING APPLE REFERENCE IMAGES

Summary from the TLDR InfoSec newsletter

The Privacy Preserving Systems Lab released the first publicly available tool to verify Apple Reference Images captured using the new cryptographic authentication standard for the iPhone 18 Pro series. The system utilizes secure camera hardware alongside Apple's Private Cloud Compute infrastructure to cryptographically sign pixel data. The protocol embeds a developer-accessible reference image next to the main photo using JUMBF boxes, SHA-512 hashing ranges, and a composite ML-DSA and RSA signature.