Technical specifications
The C2PA Content Credentials technical specification describes how actors can make cryptographically-signed assertions about a digital asset. CAWG develops and maintains the following technical specifications for C2PA assertions:
-
Identity Assertion: Describes an assertion that enables a credential holder to prove control over a digital identity and to use that identity to document the named actor’s role(s) in an asset’s lifecycle.
-
Metadata Assertion: Describes an assertion for binding metadata from standards such as XMP, IPTC, and Exif to a C2PA Manifest in a tamper-evident way. Unlike the c2pa.metadata assertion from the C2PA technical specification, this specification places no restrictions on which metadata fields may be included, so it supports a broader set of use cases. This makes it well-suited for use in gathered assertions in the C2PA claim schema, where the signer of the C2PA Manifest does not attest to the accuracy of the provided metadata but still ensures the integrity of the C2PA Manifest.
-
Training and Data Mining Assertion: Describes an assertion that enables someone to provide information about whether an asset with C2PA metadata may be used for data mining or AI/ML training.
-
Endorsement Assertion: An endorsement is a way of indicating approval for specific actions made on content after it has had a C2PA Manifest attached. The signer of an ingredient asset stores endorsements using the endorsement assertion. The endorsement assertion indicates that the asset signer trusts a particular actor to perform the actions indicated in the assertion. Then a validator uses that assertion when assessing whether the actions of the active C2PA Manifest are “endorsed” or not.
See the C2PA Technical Specification: Technical Overview for an explanation of the C2PA data model, including assertions.