Anti-Tamper

How LibreAuth protects sessions — and what your client must do.

INFO

Panel toggles explained in detail: Access Controls — maps 1:1 to Settings → Access Controls in your panel.

Protection Layers

Feature	Description
Ed25519 signing	Client verifies response authenticity
AES encryption	Encrypted wire body with enckey
Anti-Tamper	IP bind, replay block, HWID session lock
Hash Check	Exe MD5 must match server whitelist
Nonce Chain	One-time nonce per request
Token File Check	Validate token + thash on init (C++)

Client Requirements

Send hash= MD5 (and/or sha256) of exe on init when hash check is enabled
Use correct Ed25519 public key from init response
Send same hwid on login, license, and check
Return nonce from init on every subsequent request
Call check() periodically (SessionGate watchdog ~15s)
Call Integrity.Seal() at startup — silent kill only; อย่าใช้ข้อความ packer เด่นๆ เช่น File corrupted! — ดู Hardening

SDK Integrity modules

Language	Module	Pulse
C# / WPF / VB / Unity	`Integrity.cs`	thread after `MarkLicensed`
C++	`integrity.hpp` · SecureLoader `anti_tamper.hpp`	`PulseTick`
PHP / Perl / Lua	`Integrity.*`	`PulseTick` with watchdog
Python / Ruby / Java / Go / Rust / JS / TS	`integrity.*`	background timer/thread

API: Seal · Verify · VerifyOrDie · StartPulse / PulseTick · fail → DieSilent (no UI string for crackers to xref).

Endpoint lock: ApiSeal — XOR-seal the API URL; Resolve() only after AntiRe.Gate() Arms. Strip the gate without Arming and HTTP calls fail closed.

Opaque packs สำหรับผู้ค้า: ดู Ship Opaque — โหลดจาก SDK Portal แล้วทำตาม Production Lock บน Panel

Common Errors

Message	Fix
Hash required / E04	Send hash on init
E05	Exe MD5 mismatch — hash troubleshooting
Invalid nonce / E11	Update SDK · send nonce on every request after init
Session IP mismatch / E10	Reconnect from same network
Duplicate request / E12	Don't replay captured requests — wait before retrying
HWID session mismatch / E13	Send same hwid on all requests

INFO

Native hardening: Hardening Guide · Signing: Response Signing