EncryptionHackers crack Nikon's image verification system

Published 4 May 2011

A cyber security firm recently announced that it had successfully hacked Nikon’s image verification system that protects digital photos; ElcomSoft, a cyber security firm, says that its hackers have successfully replicated the electronic signature code from Nikon images allowing it to manipulate photos that still pass authentication tests; Nikon’s Image Authentication System is aimed at verifying digital images to ensure that they have not been tampered with especially when used in forensics, accident reports, or construction documentation; ElcomSoft says that its goal was to raise awareness about the security vulnerability and the company has alerted Nikon to the weaknesses of its system

A cyber security firm recently announced that it had successfully hacked Nikon’s image verification system that protects digital photos.

ElcomSoft, a cyber security firm, says that its hackers have successfully replicated the electronic signature code from Nikon images allowing it to manipulate photos that still pass authentication tests.

Nikon’s Image Authentication System is aimed at verifying digital images to ensure that they have not been tampered with especially when used in forensics, accident reports, or construction documentation.

Many of Nikon’s cameras add a digital stamp to each image file, and with special software that stamp can be read and verified for its authenticity. But with ElcomSoft’s hack, any user can alter the digital signature of any image and make it appear legitimate by simply adding the Nikon stamp.

The company has posted several images online that have clearly been manipulated but pass image verification tests.

ElcomSoft says that its goal was to raise awareness about the security vulnerability and the company has alerted Nikon to the weaknesses of its system.

So far Nikon has not reacted to the company’s announcement as remedying the problem would prove to be a logistical nightmare. The firm would have to take the now cracked code out of circulation and install a new one on all existing cameras in addition to having every user update their computers to support the new code.

Last December ElcomSoft cracked the security code on Canon’s image verification software. The firm has also yet to respond.