[karamanolev]

I would assume they can sign both RAWs and JPEGs. I can imagine a hardened coprocessor that can sign things coming from the sensor and image processor, so you get signed RAW and/or JPEG and you can't extract the private keys. Any modification later on means it's no longer signed. Unless I'm missing something, this is pretty good until someone extracts or leaks the private keys. Maybe they came up with something much smarter :)