ONVIF Media Signing Add-on secures H.264 and H.265 video integrity
ONVIF has released a candidate specification for its Media Signing Add-on, which enables cryptographic signing of H.264 and H.265 video streams at the point of creation. This standard provides a framework for verifying video authenticity and integrity in surveillance and professional video workflows.
Key Takeaways
- Cryptographic signing occurs at the point of encoding, enabling traceability to the original device for each frame.
- The specification currently applies only to live H.264 and H.265 video streams, with audio support potentially added in future versions.
- Conformant media players can verify signatures even after video files are copied, stored, or exported, provided the encoded data remains unchanged.
- Add-on status allows for version handling and updates over time, unlike traditional static ONVIF profiles.
Why It Matters
The release of the ONVIF Media Signing Add-on provides a critical interoperability layer for professional video workflows where evidentiary integrity is paramount. By standardizing how devices sign and clients verify metadata, the industry moves away from proprietary forensic tools toward a unified ecosystem for H.264 and H.265 content. This shift reduces the friction in verifying that surveillance or professional footage has not been tampered with during transport or storage. As deepfakes and sophisticated video manipulation become more prevalent, this hardware-level signing becomes a foundational requirement for trust in digital media. Watch for the final specification release and subsequent adoption rates among major IP camera manufacturers and video management software providers.
Additional Context
ONVIF has been building toward media integrity for several years, and the Media Signing Add-on represents the culmination of that effort within the physical security ecosystem. The organization, which counts more than 500 member companies including Axis Communications, Bosch, and Hanwha Vision, has published over 20 profile specifications since its founding in 2008. ONVIF Profile M, ratified in 2022, introduced standardized metadata and AI streaming for surveillance devices, establishing the metadata infrastructure that the Media Signing Add-on now extends with cryptographic guarantees. The candidate specification phase signals that ONVIF expects member feedback before final ratification, a process that typically takes six to twelve months based on prior profile timelines.
The regulatory and legal backdrop for video authenticity standards is tightening across multiple jurisdictions. The EU AI Act, which entered into force in August 2024, includes transparency obligations for AI-generated and manipulated content under Article 50, requiring that deepfakes and synthetic media be labeled as such. While the Act targets AI-generated content rather than surveillance footage directly, it establishes a legal expectation that video provenance can be verified, a gap the ONVIF Media Signing Add-on is designed to fill at the hardware level. In the United States, the National Institute of Standards and Technology released its Content Credentials guidance in 2024, providing a framework for content authenticity that aligns with cryptographic signing approaches. These regulatory signals are likely to accelerate adoption among manufacturers selling into compliance-sensitive markets such as law enforcement, transportation, and critical infrastructure.
On the technical side, the Media Signing Add-on operates within the same H.264 and H.265 codec ecosystem that dominates professional surveillance, but it faces competition from alternative provenance approaches. The Coalition for Content Provenance and Authenticity (C2PA) published version 2.1 of its technical specification in early 2025, which uses manifest-based signing for images and video and has been adopted by Adobe, Microsoft, and the BBC for editorial workflows. C2PA focuses primarily on post-production and distribution integrity, while ONVIF's approach targets the point of capture on constrained embedded devices. Axis Communications announced in 2025 that its ARTPEC-9 chip includes hardware support for secure boot and signed firmware, suggesting that silicon-level capabilities are already available to support the ONVIF signing framework without significant performance overhead. The distinction between C2PA's editorial focus and ONVIF's surveillance-first design means the two standards are more complementary than competitive, though convergence discussions have not yet been formally announced.
Read full article at onvif.org
Enjoy our coverage?
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source