Article of our Co-Founder Ariane in IM+ioArticle・4 minArticle for IM+io of the August-Wilhelm Scheer Institut of our Co-Founder Ariane Scheer-Danielsson towards the need for a Trust Layer in Physical AI.
DPoP, HMAC, One-Time Nonces, AES-GCM: Anatomy of a Zero-Trust Certificate Issuance APICrypto Engineering・3 minOur SDK lets any browser obtain a signing certificate from AWS Private CA. That makes the issuance endpoint our most security-critical surface. Here is how it is defended, layer by layer.
One Signer Interface, Four Runtimes: Bridging C2PA Signing into Native iOS and Android CryptoCrypto Engineering・5 minOn mobile, signing keys belong in the keystore, not JavaScript. How callback-injected signers, browser key lifecycle management, and ASN.1/P1363 conversion let one manifest codebase run anywhere.
Building Your Own RFC 3161 Timestamp Authority on AWS KMS and LambdaCrypto Engineering・3 minA C2PA signature proves who signed, not when. How we run a standards-compliant TSA serverlessly: KMS key custody, salted DynamoDB serial numbers, and one nasty DER trap.
Signing a 2 GB Video in a Mobile Browser: Streaming C2PA with Lazy Blobs and BMFF Offset PatchingC2PA・3 minC2PA demos are easy with a small JPEG. The engineering starts when the asset is a gigabyte-scale video in a mobile browser. Lazy Blob slices, chunked exclusion hashing, and iloc/stco/co64 repair.
Whitepaper: Zero Trust at the Source – Maximum Security for Decentralized DataWhitepaper・6 minZero Trust at the Point of Origin: A Software Trust Layer and Cryptographic Trust Label for Decentralized Sensor Data Integrity.
Build vs. Buy for Provenance: Why We Own the C2PA EngineArchitecture・3 minMature C2PA tooling exists. We built our own engine anyway. The architectural reasoning, what ownership enables, and an honest look at what it costs.
We Built a Full C2PA Library in TypeScript. Here's What the Spec Doesn't Tell YouC2PA・8 minJUMBF boxes, COSE signatures, custom assertions, and the edge cases only implementers discover. What we learned building a complete C2PA stack that runs in browsers, Lambda, and React Native.
Why Decentralized Trust Requires Different Network Protocolstech-insight・4 minWhen autonomous systems interact, trust is no longer a matter of centralized servers, but of decentralized verifiability. “Real-time capability” becomes the bottleneck.
TrustNXT at MKS Leipzig 2026Events・1 minTrustNXT Solution at the Messekongress Schadenmanagement & Assistance
Materna & TrustNXT: A Partnership for Digital Trust ProtectionPartnership・2 minMaterna and TrustNXT Announce a Technology Partnership to Protect Digital Content in the Public Sector
From Trust to Evidence: The Future of BodycamsBodycams・4 minMore Than Just Recording: Why Transparency Needs a Mathematical Guarantee
More momentum. More talent.Company News・1 minNew Senior Product Manager & Founders Associate on board!
€1.6 Million Pre-Seed Financing for TrustNXT: Deep Tech to Combat AI Manipulation of Images and VideosCompany News・4 minThe Hamburg-based deep-tech startup TrustNXT, a spin-off of Basler AG, has received 1.6 million euros in pre-seed funding. The funding round is backed by investors D11Z. Ventures and HTGF.