Abstract: In various embodiments, systems and methods for generating attested video image data are provided. In some embodiments, an ISP pipeline incorporates a secure cryptographic signing mechanism to digitally sign content-based outputs in a way that attests to the authenticity of the process by which the content was processed before output from the camera. The ISP pipeline may include a hardware security module that inputs video image data from an image sensor, and generates an attestation package that includes attestations about the video content, in combination with an attestation of how it was produced, and signs those attestations together using a key to produce an output comprising attested media data. The ISP pipeline may apply supplemental attestations to the attestation package representing facts associated with the video content that evidence the authenticity. The digital signature applied to the attestation package may use a zero-knowledge proof to describe the signing key.

Abstract: Systems, methods, and media may provide secure data storage. A request may be transmitted for a requested container to a database, the request comprising a requested container identifier of the requested container. The database may comprise containers, wherein each container is identified by a container identifier and comprises at least one record, a container session key table configured to store the container identifiers of the containers, a container session key share table configured to store encrypted user keys, and a container session key table configured to store session key shares, wherein each session key share corresponds to at least one encrypted user key. The requested container may be received from the database, and the database may provide the requested container by using the container session key table to identify the requested container.