By Jeremy Kirk
IDG News Service
November 30, 2010
A cryptographic system used by Canon to ensure that digital images
haven't been altered is flawed and can't be fixed, according to a
Russian security company that specializes in encryption.
Mid- to high-end Canon digital cameras have a feature called "Original
Decision Data" (ODD), which is a digital signature that can be verified
to see if a photo has been retouched or if data such as timestamps or
GPS coordinates have been changed. The Associated Press news wire uses
the system, which can also be used to verify photos used as evidence.
But the digital signature can be forged due to design flaws in Canon's
system, according to Dmitry Sklyarov, an IT security analyst with
Elcomsoft, which specializes in password recover systems. Sklyarov was
due to give a presentation on the flaws at the Confidence IT security
event in Prague on Tuesday afternoon.
Elcomsoft has published photos -- including one with an astronaut
planting the flag of the Soviet Union on the moon -- that, if checked
using a smart card and special software from Canon, confirm that the
photo has not been tampered with.
Tegatai Managed Colocation: Four Provider Blended
Tier-1 Bandwidth, Fortinet Universal Threat Management,
Natural Disaster Avoidance, Always-On Power Delivery
Network, Cisco Switches, SAS 70 Type II Datacenter.
Find peace of mind, Defend your Critical Infrastructure.