Skip to content
EU AI Act Article 50 is in force. Grace period for existing AI systems ends 2 Dec 2026.EU AI Act Article 50 is in force. The grace period ended on 2 Dec 2026. Check your exposure →

com.originalpictures.dinov2.1

DINOv2-S descriptor image fingerprint: Original Pictures' deployment of DINOv2 ViT-S/14 by Meta FAIR, with its own parameters, calibration and match threshold.

  • Match threshold op.dinov2-small.cosine-0.957.v1
  • Encoded media types: image/avif, image/jpeg, image/png, image/tiff, image/webp
  • Registration requested with the C2PA soft binding algorithm list
All soft-binding algorithms

Identity

FieldValue
Algorithm identifier (alg)com.originalpictures.dinov2.1
TypeFingerprint
Decoded media typeImage
Encoded media typesimage/avif, image/jpeg, image/png, image/tiff, image/webp
Underlying algorithmDINOv2 ViT-S/14 by Meta FAIR
Provider identity and versioncom.meta.dinov2.small hf-ed25f3a31f01-ae1e99fcefd5-cls224
API value (fingerprint_algorithms)dinov2 (in the image default set when a request names none)
Calibrationop.dinov2-small.calibration.v1
Match thresholdop.dinov2-small.cosine-0.957.v1
Runtime revisionsop.image-bindings.sign10.1, op.image-bindings.sign10.2
LicencesCode: Apache-2.0 (facebookresearch/dinov2). Weights: Apache-2.0 (HF facebook/dinov2-small model card).

Pinned artefacts

Every file the runtime loads or builds from is pinned by SHA-256; a file with any other hash is refused.

FileKindSHA-256SizeSource
model.safetensorsweightsae1e99fcefd534ed978cdeb8326f08030c96e28b7a81ffcbc98a857c84d14be188.2 MBsource

How the fingerprint is computed

The whole image is resized to 224 x 224 pixels (bicubic, antialiased, no centre crop, so the borders a crop removes are still seen) and passed through DINOv2 ViT-S/14. The descriptor is the 384-dimension CLS token after the final layer norm, L2-normalised and stored as float32.

ParameterValue
Model weightsHugging Face facebook/dinov2-small at ed25f3a31f01
Input224 x 224, whole image, bicubic
Descriptor384 float32 components, L2-normalised
KeyedNo

How matching works

A candidate matches at a cosine similarity of at least 0.957. A fingerprint is compared only with fingerprints of the same algorithm, calibration and threshold, within the account that signed the file. The most robust permissively licensed image descriptor measured; survives crops and overlays best.

What a positive result means

A match means the file looks or sounds like a file the signer's account signed, closely enough to pass the threshold above. It points to that file's C2PA manifest, which declares its origin. It is a probabilistic lead, not cryptographic proof: a fingerprint matches similar content, can miss heavily edited copies, and says nothing about whether the content is true. The signed manifest, where it survives, is the proof.

Measured performance

On Original Pictures' 2026 fingerprint benchmark (method DINOv2-S), at the production threshold, which corresponds to a pair-level false-match rate of 1 in 10,000,000, 61.2% of transformed copies (95% interval 60.8% to 61.5%) were matched to their original, over the benchmark's transformations of its fixed corpus (re-encoding, resizing, cropping and overlays, and the edits typical of the media type). These are measurements on a fixed corpus, not a guarantee for every file.

The value a soft-binding assertion would carry

  • Value: The 1536 bytes of the 384 little-endian float32 components, as base64 (2,048 characters).
  • Scope: The whole image.
  • Encoding note: The C2PA schema defines a soft-binding value as a byte string. Original Pictures' signing engine writes it as text, as it already does for the ISCC binding, so the form above is the text a manifest would carry.
  • Emission: Not emitted, and not planned to be without an owner decision: Original Pictures' evidence rules keep a float descriptor inside its processing boundary, out of every manifest and public response, because a raw descriptor reveals more about the image than a hash does.

How to check a file

  • Content Credentials. Any C2PA-aware validator can read and check the manifest of a file that still carries one, without calling Original Pictures.
  • The fingerprint. Fingerprint recovery runs inside a verification: POST /v1/verifications on the Original Pictures API. When no manifest can be read, the verification compares the file's fingerprints with the recorded ones and reports a single match as recovery-only (VALIDATION_RECOVERY_ONLY), never as cryptographic validity; several plausible matches fail closed as ambiguous. Recovery searches only the bindings of the account that runs the verification. See lookup and recovery and fingerprints.
  • There is no public soft-binding resolution API. A third party can check a file on the signer's hosted verify page, if the signer publishes one; that page searches the signer's own fingerprints only when the signer has switched recovery on (recover_own_assets). Otherwise, contact the signer or us.
  • Comparing values yourself. The model is public, so anyone can compute a descriptor of a candidate image, but the signed file's descriptor is not published, so only Original Pictures can compare the two.

Relation to C2PA

When a fingerprint algorithm has an identifier on the C2PA soft-binding algorithm list, the manifest can carry a c2pa.soft-binding assertion that names it in its alg field. Registration for com.originalpictures.dinov2.1 has been requested with the C2PA soft binding algorithm list; no identifier has been assigned yet. Until one is, and until Original Pictures ships the change that writes it, no manifest names this fingerprint: it is a server-side recovery signal only. Today the one fingerprint a manifest carries is ISCC Image-Code (io.iscc.v0). This page is the entry's informational URL.

Status and contact