mhtirogla
Home
Systems
API
Pricing
About
Log in
← Back
Home
›
Systems
›
Security and identity
content-provenance
content provenance signing
C2PA
System
Techniques · 4
Primitives · 17
content-provenance
Certificate revocation
security · medium: CRLs, OCSP, OCSP stapling, short-lived certificates and CRLite-style filters for revoked certificates
Invisible watermarking
security · medium: Embedding robust imperceptible marks in images/audio/video or token sampling for later detection
Remote attestation
security · medium: Hardware-signed evidence (TPM quotes, SGX/TDX quotes, SEV-SNP reports, key attestation) proving device, key or enclave state to a verifier
Measured boot
security · medium: Each boot stage hashes the next into TPM PCRs (extend) and logs events for later attestation
ECDSA signatures
security · low: The elliptic-curve signature standardised in FIPS 186-5 (P-256) and used by secp256k1 ledgers; 64-byte signatures, but a repeated or biased nonce leaks the private key.
›
X509 certificates
security · low: Certificate chains, path validation, SANs, revocation and short-lived issuance
Cryptographic hashes (SHA-2, BLAKE3)
security · low: Collision-resistant fingerprints of data; SHA-256 for interoperability, BLAKE3 for speed, HMAC/HKDF for keyed uses.
›
Hardware backed keystore
security · low: Non-exportable keys in Secure Enclave, StrongBox, TPM: generation, use policies, biometric gating
Merkle tree
data-structures · low: Hash tree for verifying and diffing large datasets with logarithmic proofs
Perceptual hashing
search-sort · low: Compact fingerprints (64 to 256 bits) of an image that stay close under resizing and recompression, compared by Hamming distance; pHash, dHash and Meta's PDQ.
›
Cbor cose
security · low: CBOR binary encoding and COSE signing/encryption structures (WebAuthn, C2PA, attestation)
Trusted timestamping
security · low: RFC 3161 time-stamp tokens: a TSA signs a hash with time, proving data existed then
Bloom filter
data-structures · low: Bit array answering "definitely not present" or "probably present" in about 10 bits per key for 1 % false positives; inserts are cheap, deletes impossible.
›
HTTP caching semantics
networking · low: The rules (RFC 9111) that decide whether a stored response is still fresh, and how a cheap conditional request revalidates it when it is not.
›
Convolutional networks
ml-training · low: Layers that slide a small shared kernel over a grid, giving translation equivariance and few parameters; still the most compute-efficient choice for many vision tasks.
›
Discrete cosine transform
numerics · low: Fast integer DCT/DST block transforms used by image and video codecs
PRNGs (PCG, xoshiro)
numerics · low: Small, fast, statistically strong non-cryptographic generators: PCG32 and xoshiro256**, with seeding, parallel streams and unbiased ranges.
›
Forward error correction
signal-processing · low: Add redundancy (LDPC, Reed-Solomon, XOR parity) so receivers repair loss without retransmit
Csprng
security · low: OS-backed cryptographically secure random numbers (getrandom), and when a fast PRNG is not enough
Trusted execution environments
security · low: Enclaves/confidential VMs with remote attestation for computing on sealed data
+ 1 more primitives
System
Techniques · 4
Primitives · 17
content-provenance
Certificate revocation
security · medium: CRLs, OCSP, OCSP stapling, short-lived certificates and CRLite-style filters for revoked certificates
Invisible watermarking
security · medium: Embedding robust imperceptible marks in images/audio/video or token sampling for later detection
Remote attestation
security · medium: Hardware-signed evidence (TPM quotes, SGX/TDX quotes, SEV-SNP reports, key attestation) proving device, key or enclave state to a verifier
Measured boot
security · medium: Each boot stage hashes the next into TPM PCRs (extend) and logs events for later attestation
ECDSA signatures
security · low: The elliptic-curve signature standardised in FIPS 186-5 (P-256) and used by secp256k1 ledgers; 64-byte signatures, but a repeated or biased nonce leaks the private key.
›
X509 certificates
security · low: Certificate chains, path validation, SANs, revocation and short-lived issuance
Cryptographic hashes (SHA-2, BLAKE3)
security · low: Collision-resistant fingerprints of data; SHA-256 for interoperability, BLAKE3 for speed, HMAC/HKDF for keyed uses.
›
Hardware backed keystore
security · low: Non-exportable keys in Secure Enclave, StrongBox, TPM: generation, use policies, biometric gating
Merkle tree
data-structures · low: Hash tree for verifying and diffing large datasets with logarithmic proofs
Perceptual hashing
search-sort · low: Compact fingerprints (64 to 256 bits) of an image that stay close under resizing and recompression, compared by Hamming distance; pHash, dHash and Meta's PDQ.
›
Cbor cose
security · low: CBOR binary encoding and COSE signing/encryption structures (WebAuthn, C2PA, attestation)
Trusted timestamping
security · low: RFC 3161 time-stamp tokens: a TSA signs a hash with time, proving data existed then
Bloom filter
data-structures · low: Bit array answering "definitely not present" or "probably present" in about 10 bits per key for 1 % false positives; inserts are cheap, deletes impossible.
›
HTTP caching semantics
networking · low: The rules (RFC 9111) that decide whether a stored response is still fresh, and how a cheap conditional request revalidates it when it is not.
›
Convolutional networks
ml-training · low: Layers that slide a small shared kernel over a grid, giving translation equivariance and few parameters; still the most compute-efficient choice for many vision tasks.
›
Discrete cosine transform
numerics · low: Fast integer DCT/DST block transforms used by image and video codecs
PRNGs (PCG, xoshiro)
numerics · low: Small, fast, statistically strong non-cryptographic generators: PCG32 and xoshiro256**, with seeding, parallel streams and unbiased ranges.
›
Forward error correction
signal-processing · low: Add redundancy (LDPC, Reed-Solomon, XOR parity) so receivers repair loss without retransmit
Csprng
security · low: OS-backed cryptographically secure random numbers (getrandom), and when a fast PRNG is not enough
Trusted execution environments
security · low: Enclaves/confidential VMs with remote attestation for computing on sealed data
Secure boot chain
security · low: Each boot stage verifies the signature of the next before running it, anchored in an immutable ROM key hash, with version counters against downgrade and a TPM log of what ran.
›
Copy for AI
Similar systems
Share the most building blocks with this one.
remote-attestation
29 %
ai-watermarking
15 %