AI News
官方更新 Google Developers Blog 正文 ok 521 words

Google 推出 Credentio：用于 C2PA Content Credentials 的开源 C++ 库

英文标题：Introducing Credentio: Open Source C++ Library for C2PA Content Credentials from Google

Google 发布开源 C++ 库 Credentio，用于在客户端和服务器应用中本地验证 C2PA Content Credentials，初始支持 C2PA 2.2 和 2.4 规范版本。该代码已支撑近 40 款符合 C2PA 标准的 Google 产品，为数百亿个图像、视频、音频和文档资产提供溯源能力。Credentio 采用本地优先架构，无需将媒体文件上传至云端，可降低带宽和延迟开销并保护数据隐私，同时针对数 GB 级大型媒体文件保持较低内存占用。对开发者而言，该库提供可配置信任列表、深度凭证解析和详细验证报告，未来还计划支持生成并嵌入 Content Credentials。
打开原文相关 2 · 机会 5
media11.7 KB media2.9 MB media56.1 KB media47.4 KB media532.1 KB media51.9 KB media774.4 KB

中文

随着 AI 透明度法规和媒体溯源标准在全球各地陆续生效，确定内容来源已成为现代媒体应用的一项关键要求。为帮助开发者构建高性能溯源工具，今天我们推出 Credentio：一个开源 C++ 库，专为处理 内容来源与真实性联盟（C2PA）的 Content Credentials 而设计，初始支持规范版本 2.2 和 2.4。这套代码已为近 40 款符合 规范要求的、支持 C2PA 的 Google 产品提供支持，并已扩展至数百亿个生成资产，涵盖图像、视频、音频文件和文档，以及多种文件格式。

面向性能、隐私与可扩展性的本地优先验证

Credentio 提供了一套 API，旨在完全在开发者应用内部的本地环境中运行。这消除了为验证而将媒体文件发送至云服务器的需求，避免了隐私、延迟、带宽和文件大小限制问题。

使用 Credentio 时，媒体文件无需传输回 Google 或外部验证端点，同时可提供：

  • 零带宽开销： 通过在本地验证媒体文件，Credentio 消除了外部数据传输需求。
  • 即时验证结论： 通过在本地验证媒体文件，Credentio 可最大程度降低验证延迟，即使在高吞吐量工作流中也能立即提供结果。
  • 完整数据隐私： 媒体内容始终安全地保留在本地环境中。

验证大型数字资产中的溯源记录——例如数 GB 的视频文件或高分辨率图像——会给传统库带来计算和资源方面的挑战。Credentio 专门为解决这些性能瓶颈而设计。

在验证大型文件时，Credentio 的内存使用量显著低于其他解决方案。无论是验证小型图像，还是验证大小达到数 GB 的视频文件，Credentio 都能维持较小的内存占用。这使其非常适合集成到资源受限的客户端应用、服务器处理管线或高性能边缘软件中。

详细验证与灵活的信任管理

目前，Credentio 专注于精确验证 Content Credentials。开发者可通过 API 直接传入自定义信任列表或官方 C2PA 信任列表，以根据已知权威机构评估凭证的真实性。

Credentio 的核心验证能力包括：

  • 信任列表集成： 支持可配置的信任列表，包括官方 C2PA Trust List 和 C2PA TSA Trust List。
  • 全面解析： 深度检查嵌入媒体文件中的 manifests、assertions、数字签名和声明结构。
  • 详细结论报告： 提供清晰、可操作的验证结果，准确指出各项验证状态及潜在完整性错误。

为开发者打造，并着眼未来

Credentio 专为希望构建高性能、企业级 C2PA 验证器产品的开发者量身打造。无论是在开发桌面应用、移动端软件，还是后端媒体处理服务，Credentio 都能简化 C2PA 合规工作，同时不牺牲速度或控制能力。

随着 C2PA 规范持续演进，Credentio 也将同步发展。我们期待根据社区需求持续推进该库的发展，并计划将 Credentio 的能力从验证扩展至完整支持生成 Content Credentials，并将其无缝直接嵌入媒体文件。

开始使用与参与贡献

Credentio 现已作为开源项目发布。你现在即可通过 mediaprovenance.googlesource.com 访问其代码仓库。

我们欢迎开发者社区贡献力量！无论你有兴趣提交 Bug 修复、添加新功能，还是优化性能，我们都邀请开发者、安全研究人员和媒体生态系统合作伙伴与我们协作，共同塑造本地 C2PA 验证的未来。

English / 原文

As AI transparency regulations and media provenance standards come into effect around the globe, determining content provenance has become a crucial requirement for modern media applications. To support developers in building high-performance provenance tools, today we are introducing Credentio , an open-source C++ library designed for working with Coalition for Content Provenance and Authenticity (C2PA) Content Credentials, starting with specification versions 2.2 and 2.4. This is the same code that has powered nearly 40 different conformant C2PA-enabled Google products to scale to tens of billions of generated assets, including images, videos, audio files, and documents across many file formats.

Local-First Validation for Performance, Privacy, and Scalability

Credentio provides an API designed to run completely locally within developer applications. This removes the need to send media files to cloud servers for validation, which incurs privacy, latency, bandwidth, and file size limitations.

With Credentio, media files never need to be transmitted back to Google or external validation endpoints while offering :

  • Zero Bandwidth Overhead: By validating media files locally Credentio eliminates external data transmission requirements.
  • Instant Validation Verdicts: By validating media files locally, Credentio minimizes verification latency and delivers immediate results even in high-throughput workflows.
  • Complete Data Privacy: Media contents remain securely within your local environment.

Validating provenance records in large digital assets—such as multi-gigabyte video files or high-resolution imagery—presents computational and resource challenges for traditional libraries. Credentio was engineered specifically to solve these performance bottlenecks.

Credentio uses significantly less memory than other solutions when validating large files. Whether validating small images or video files reaching multiple gigabytes in size, Credentio maintains a small memory footprint. This makes it ideal for integrating into resource-constrained client applications, server pipelines, or high-performance edge software.

Detailed Validation & Flexible Trust Management

Currently, Credentio focuses on validating Content Credentials with precision. Developers can pass custom or the official C2PA trust lists directly through the API to evaluate credential authenticity against known authorities.

Credentio’s key validation capabilities include:

  • Trust List Integration: Supporting configurable trust lists, including the official C2PA Trust List and C2PA TSA Trust List.
  • Comprehensive Parsing: Deep inspection of manifests, assertions, digital signatures, and claim structures embedded within media files.
  • Detailed Verdict Reports: Clear, actionable validation results pinpointing exact verification statuses and potential integrity errors.

Built for Developers & Looking to the Future

Credentio is tailored specifically for developers seeking to build performant, enterprise-grade C2PA validator products. Whether you are building desktop apps, mobile software, or backend media processing services, Credentio simplifies C2PA compliance without compromising speed or control.

As the C2PA specification continues to evolve, so will Credentio. We look forward to advancing the library alongside community needs and we plan to expand Credentio beyond validation—introducing full capabilities to generate Content Credentials and seamlessly embed them directly into media files.

Get Started & Contribute

Credentio is now available as an open-source project. You can access the repository today at mediaprovenance.googlesource.com.

We welcome contributions from the developer community! Whether you are interested in submitting bug fixes, adding new features, or optimizing performance, we invite developers, security researchers, and media ecosystem partners to collaborate with us and help shape the future of local C2PA validation.