AntiTamper.Net 1.0.0-alpha

AntiTamper.Net Project

Overview

The AntiTamper.Net project is designed to ensure the integrity of an application at startup.

App binaries are checked at startup, and if no tampering found, your application launches.

Key Features

• Authenticode Integrity Check: Verifies the authenticity of executables and DLLs by comparing their digital signatures against a specified certificate thumbprint.
• Multiple Trust Levels: Supports different trust levels for certificates:
  • Require Full Trust: Only accepts fully trusted certificates.
  • Allow Untrusted: Permits the use of untrusted certificates.
  • Allow Self-Signed and Untrusted: Supports self-signed certificates as well as untrusted ones.
• Platform-Specific Implementation: While focused on Windows, cross-platform support is planned for the future using a Detached Signature design.

Usage

The primary class ApplicationSecurity offers methods like AuthenticodeAppIntegrityCheck for performing integrity checks on your application's binaries. The results provide detailed information on the trustworthiness and integrity of each binary file.

Dependencies

• Microsoft.Security.Extensions: Handles the security extensions required for signature verification.

Example

using System;
using System.IO;
using Krugertech.Security;

class Program
{
    static void Main(string[] args)
    {
        var result = new AntiTamper().AuthenticodeAppIntegrityCheck("CERTIFICATE_THUMBPRINT");
        Console.WriteLine(result.Success ? "App integrity good." : $"App integrity bad.\nError: {result.Error}");

        // Print info for each app binary checked
        foreach (var item in result.Files)        
            Console.WriteLine($"{Path.GetFileName(item.FileName)} -> value={item.Result.Success} -> reason={item.Result.Reason}");        
    }
}

⚠️ Warning: Alpha Release

This library is currently in alpha and may not be stable. Features are subject to change, and the library should not yet be used in production environments.