Skip to content
EU AI Act Article 50 is in force. Grace period for existing AI systems ends 2 Dec 2026.EU AI Act Article 50 is in force. The grace period ended on 2 Dec 2026. Check your exposure →

com.originalpictures.dinov2-lsh256.1

DINOv2-S keyed LSH (256 bit) image fingerprint: Original Pictures' deployment of DINOv2 ViT-S/14 by Meta FAIR, with Original Pictures' keyed projection, with its own parameters, calibration and match threshold.

  • Match threshold op.dinov2-lsh256.hamming-19.v1
  • Encoded media types: image/avif, image/jpeg, image/png, image/tiff, image/webp
  • Registration requested with the C2PA soft binding algorithm list
All soft-binding algorithms

Identity

FieldValue
Algorithm identifier (alg)com.originalpictures.dinov2-lsh256.1
TypeFingerprint
Decoded media typeImage
Encoded media typesimage/avif, image/jpeg, image/png, image/tiff, image/webp
Underlying algorithmDINOv2 ViT-S/14 by Meta FAIR, with Original Pictures' keyed projection
Provider identity and versioncom.meta.dinov2.small.keyed-lsh256 hf-ed25f3a31f01-ae1e99fcefd5-cls224-simhash256
API value (fingerprint_algorithms)dinov2-lsh256 (computed when a request names it)
Calibrationop.dinov2-lsh256.tenant-key.v1
Match thresholdop.dinov2-lsh256.hamming-19.v1
Runtime revisionsop.image-bindings.sign10.1, op.image-bindings.sign10.2
LicencesCode: Apache-2.0 (facebookresearch/dinov2). Weights: Apache-2.0 (HF facebook/dinov2-small model card).

Pinned artefacts

Every file the runtime loads or builds from is pinned by SHA-256; a file with any other hash is refused.

FileKindSHA-256SizeSource
model.safetensorsweightsae1e99fcefd534ed978cdeb8326f08030c96e28b7a81ffcbc98a857c84d14be188.2 MBsource

How the fingerprint is computed

The same L2-normalised 384-dimension DINOv2 descriptor as com.originalpictures.dinov2.1 is multiplied by a 384 x 256 Gaussian matrix generated from a key derived for the signing account, and the sign of each of the 256 results is one bit of the fingerprint.

ParameterValue
Model weightsHugging Face facebook/dinov2-small at ed25f3a31f01
Projection384 x 256 Gaussian, from a per-account key
Fingerprint256 bits
KeyedYes: one key per Original Pictures account, never logged

How matching works

A candidate matches at a Hamming distance of at most 19 of 256 bits. A fingerprint is compared only with fingerprints of the same algorithm, calibration and threshold, within the account that signed the file. Compact learned hash under a per-tenant key; robust to edits, not invertible without the key.

What a positive result means

A match means the file looks or sounds like a file the signer's account signed, closely enough to pass the threshold above. It points to that file's C2PA manifest, which declares its origin. It is a probabilistic lead, not cryptographic proof: a fingerprint matches similar content, can miss heavily edited copies, and says nothing about whether the content is true. The signed manifest, where it survives, is the proof.

Measured performance

On Original Pictures' 2026 fingerprint benchmark (method DINOv2-S-LSH256), at the production threshold, which corresponds to a pair-level false-match rate of 1 in 10,000,000, 51.9% of transformed copies (95% interval 51.5% to 52.3%) were matched to their original, over the benchmark's transformations of its fixed corpus (re-encoding, resizing, cropping and overlays, and the edits typical of the media type). These are measurements on a fixed corpus, not a guarantee for every file.

The value a soft-binding assertion would carry

  • Value: The 256 bits as 64 lowercase hexadecimal characters, bit 255 first.
  • Scope: The whole image.
  • Encoding note: The C2PA schema defines a soft-binding value as a byte string. Original Pictures' signing engine writes it as text, as it already does for the ISCC binding, so the form above is the text a manifest would carry.
  • Emission: Planned after the identifier is assigned. Rotating an account's key is a new calibration version: values made under the old key are never compared with the new.

How to check a file

  • Content Credentials. Any C2PA-aware validator can read and check the manifest of a file that still carries one, without calling Original Pictures.
  • The fingerprint. Fingerprint recovery runs inside a verification: POST /v1/verifications on the Original Pictures API. When no manifest can be read, the verification compares the file's fingerprints with the recorded ones and reports a single match as recovery-only (VALIDATION_RECOVERY_ONLY), never as cryptographic validity; several plausible matches fail closed as ambiguous. Recovery searches only the bindings of the account that runs the verification. See lookup and recovery and fingerprints.
  • There is no public soft-binding resolution API. A third party can check a file on the signer's hosted verify page, if the signer publishes one; that page searches the signer's own fingerprints only when the signer has switched recovery on (recover_own_assets). Otherwise, contact the signer or us.
  • Comparing values yourself. No one without the signing account's key can recompute or compare these bits, so only Original Pictures can match them. A value read from a manifest identifies nothing on its own.

Relation to C2PA

When a fingerprint algorithm has an identifier on the C2PA soft-binding algorithm list, the manifest can carry a c2pa.soft-binding assertion that names it in its alg field. Registration for com.originalpictures.dinov2-lsh256.1 has been requested with the C2PA soft binding algorithm list; no identifier has been assigned yet. Until one is, and until Original Pictures ships the change that writes it, no manifest names this fingerprint: it is a server-side recovery signal only. Today the one fingerprint a manifest carries is ISCC Image-Code (io.iscc.v0). This page is the entry's informational URL.

Status and contact