Content Authenticity: Building Digital Trust with C2PA
As a member of the Content Authenticity Initiative, Lumethic uses the C2PA open standard to verify photo authenticity and issue Content Credentials. We bridge the gap for photographers using cameras without built-in C2PA support.
Our Membership
Lumethic is a Content Authenticity Initiative Member
Lumethic is proud to be a member of the Content Authenticity Initiative (CAI), a cross-industry coalition led by Adobe dedicated to restoring trust in digital content. We share CAI's vision of a world where creators can attach verifiable provenance to their work.
By implementing the C2PA technical standard, we contribute to an open ecosystem where provenance can be read across platforms, applications, and devices. Our forensic verification approach complements hardware-based solutions, so photographers can document how an export relates to its RAW file today, regardless of their camera equipment.
Technical Standard
How Lumethic Implements C2PA
The Coalition for Content Provenance and Authenticity (C2PA) defines an open technical specification for cryptographically signing media files. After successful forensic verification, Lumethic issues a Lumethic-attested C2PA credential that records the result in a tamper-evident way.
Cryptographic Signing
Each verified image is signed using ECDSA P-256 (ES256) with RFC 3161-compliant timestamps from DigiCert's timestamping authority. This creates a mathematically verifiable proof of when the verification occurred.
C2PA Manifests
Verification results are embedded as C2PA manifests directly in the image file. These manifests contain custom Lumethic assertions with verification IDs, SHA-512 hashes, and links to detailed forensic reports.
Tamper-Evident Binding
The cryptographic signature binds to the exact image content. Any modification to the image after signing invalidates the signature, making unauthorized alterations immediately detectable.
Lumethic's C2PA Implementation
Built on the official c2pa-python library, our implementation follows published JSON Schemas and writes credentials in the standard C2PA format, attested by Lumethic.
- ECDSA P-256 (ES256) cryptographic signatures
- RFC 3161 timestamps from DigiCert TSA
- Custom com.lumethic.verification assertions
- Readable by standard C2PA tools such as Content Credentials Verify
Core Workflow
Verify-Then-Sign: Authenticity Before Credentials
Unlike systems that sign content at creation without verification, Lumethic follows a verify-then-sign approach. We first run forensic checks, testing whether the photo carries real camera sensor data and matches the original RAW data, before issuing Content Credentials.
Forensic Verification
Upload your RAW file and JPEG. Our system runs multiple independent checks: sensor authenticity analysis, structural similarity comparison, screening for recapture indicators, and metadata validation.
Checks Passed
Only photos that pass all forensic checks receive credentials. This ensures Content Credentials represent genuine verification, not just a timestamp of when something was signed.
Credentials Issued
Upon passing verification, your image receives a Lumethic-attested C2PA credential embedded directly in the file. The credentials are portable and machine-readable.
Why This Matters
A signature on its own records who signed and when; it says nothing about the content. Lumethic's verify-then-sign approach means its Content Credentials, attested by Lumethic, record that the image passed forensic checks against its RAW file before signing.
Hardware Gap Solution
Content Credentials for Any Camera
While some camera manufacturers are beginning to implement C2PA signing in hardware, the vast majority of cameras in use today, including professional DSLRs and mirrorless systems, lack this capability. Photographers using these cameras have had no way to issue Content Credentials for their work.
Lumethic bridges this gap. By forensically checking that your JPEG derives from your camera's RAW file, we can issue Lumethic-attested Content Credentials retroactively, without waiting for camera manufacturers to catch up.
Workflow Integration
Lightroom Plugin: Verify and Sign in Your Workflow
The Lumethic Plugin for Adobe Lightroom Classic brings forensic verification and Content Credentials directly into your editing workflow. Export photos with embedded C2PA credentials without leaving Lightroom.
Select photos in Lightroom, export through the Lumethic plugin, and the system automatically locates the corresponding RAW files, performs forensic verification, and embeds Content Credentials in your exported JPEGs. The verify-then-sign process runs in the background.
Mobile Capture
Lumethic Capture: Signed Photos from Your iPhone
For those who don't shoot RAW or want signed photos directly from a mobile device, Lumethic Capture for iOS provides an alternative path to Content Credentials. The app captures photos and signs them on-device, creating verifiable images without the RAW verification workflow.
Lumethic Capture uses secure on-device signing to create Content Credentials at the moment of capture. The app records device attestation data and signs the image before it ever leaves your phone, providing a chain of custody from capture to sharing.
The iPhone 18 Pro adds Apple's own capture record, Apple Reference Image, for one camera in an opt-in mode, viewable only on Apple's platforms. What it establishes and what it does not, and why Lumethic Capture still covers every other iPhone.
Verification
Reading Lumethic Credentials
Content Credentials issued by Lumethic use the C2PA format and are attested by Lumethic. Standard C2PA tools such as Content Credentials Verify can read them, but may show them as "unrecognized signer" until Lumethic is on the C2PA trust list. The credentials include links to the detailed forensic reports on lumethic.com.
How approaches differ
Where Lumethic sits among authenticity methods
Several methods aim to establish whether an image can be trusted, and they work in different ways. The table sets out the main approaches and the gap each one leaves.
| Approach | How it works | What it does not cover |
|---|---|---|
| Lumethic | Compares a photo with its RAW file, then signs a C2PA credential once the checks pass. | Needs a RAW file, so it does not cover photos that exist only as compressed JPEG or HEIC. |
| Capture-time signing | Records authenticity at the moment of capture through a controlled app or signing hardware. | Requires a specific app or new hardware, so it does not reach existing cameras or older photos. |
| Signature infrastructure | Signs and timestamps a file so any later change is detectable. | Does not inspect the image, so it signs a generated picture as readily as a real one. |
| AI detectors | Estimate from pixel statistics how likely an image is to be generated. | Returns a guess that loses accuracy as generators improve and flags real photos as fake. |
Applications
Who Needs Content Credentials
Content Credentials provide a portable provenance record that travels with the image. They're valuable wherever trust in visual content matters.
Photography Contests
Provide judges with forensic evidence your submissions are authentic camera captures, not AI-generated or heavily manipulated.
Many competitions now require or prefer entries with Content Credentials. Lumethic verification satisfies these requirements even for cameras without built-in C2PA.
News and Editorial
Give editors confidence in freelance submissions with checkable provenance records.
As deepfakes spread, Content Credentials help newsrooms maintain editorial standards and reader trust.
Legal and Evidentiary
Document photographic evidence with Lumethic-attested verification records.
Records that protect the account of whoever vouches for the photograph: a dated receipt for every frame and a verified link from exhibit to original, both checkable by the other side.
Documentation and Advocacy
Human rights organizations and NGOs can document how their photos relate to the original camera files, supporting credible advocacy.
When visual evidence supports important causes, a checkable verification record makes bad-faith dismissal of legitimate documentation harder.
Learn More
Explore the Content Authenticity Ecosystem
Learn more about the standards and organizations working to restore trust in digital content.
Start Verifying Your Photos
Join photographers worldwide who document their work against its camera originals. Get Content Credentials for your photos and contribute to a more trustworthy visual ecosystem.