New Features, Enhancements, and Changes

>Service Pack: 10.3.100  

>Release: 10.3  

NOTE   If you are upgrading from a version of Sentinel LDK that is earlier than 10.2, be sure to review the release notes for all intervening versions. Significant enhancements and changes are introduced in each version of Sentinel LDK. Download a ZIP file that contains all Sentinel LDK release notes to see the changes.

Service Pack: 10.3.100  

>Android Libraries Now Support 16 KB Page Size Alignment

>Updated Windows Samples and Tools for MSVC 2015

>Sentinel LDK Licensing REST API Now Supports OpenAPI Specification 3.0.1

>RTE Installation Now Runs from the Program Files Directory

>Enhancements to Sentinel LDK Envelope

•Slim Licensing API Support for Windows V3 Envelope

•YAML-Formatted Project Files for Script Envelope

Android Libraries Now Support 16 KB Page Size Alignment

Sentinel LDK now supports the Google Play 16 KB page size requirement for Android applications. To achieve this alignment, the build process compiles Android libraries with Android NDK r27d. To build your Android application with 16 KB page size alignment, see the Sentinel LDK Getting Started Guide for Android.

As part of this change, Sentinel LDK now delivers 64-bit (ARMv8-A) Android libraries only. The latest version supporting 32-bit Android libraries is Sentinel LDK 10.3. To request the 32-bit version, contact your Thales customer representative.

Updated Windows Samples and Tools for MSVC 2015

Sentinel LDK provides updated Windows samples and tools for Microsoft Visual C++ (MSVC) 2015. This update ensures that the Windows samples and tools are compatible when compiled using the MSVC 2015 toolchain.

Sentinel LDK Licensing REST API Now Supports OpenAPI Specification 3.0.1

The Sentinel LDK Licensing REST API now supports OpenAPI specification 3.0.1. Use this specification to understand the available APIs, generate client SDKs, automate integration development, and validate API requests and responses with OpenAPI-compatible tools.

For more details, see the Sentinel LDK Licensing REST API Reference Guide.

RTE Installation Now Runs from the Program Files Directory

Sentinel LDK Run-time Environment (RTE) now uses a dedicated installation location within the Program Files directory instead of the Windows Temp folder when extracting and running installer components. This change reduces false-positive malware detections during installation.

Enhancements to Sentinel LDK Envelope

The following enhancements to Sentinel LDK Envelope have been implemented in this release:

>Slim Licensing API Support for Windows V3 Envelope

Sentinel LDK Envelope with the Windows V3 engine now supports the Slim Licensing API. The Slim Licensing API omits the embedded License Manager, which significantly reduces the file size and memory footprint of protected program files.

To enable this feature, select the EXTERNAL_LM_ONLY advanced protection parameter in the advanced settings of the Windows V3 engine. You must provide an alternative License Manager on the end-user machine, either deploy the External License Manager (hasp_rt.exe) in the application directory or install the Sentinel LDK Run-time Environment (which contains the Admin License Manager) on the end-user machine.

For more details, see the Sentinel LDK Envelope for Windows Guide.

>YAML-Formatted Project Files for Script Envelope

Script Envelope now uses human-editable YAML-formatted project files with the .sprjx extension. YAML-formatted project files are the recommended format for Python protection projects. Script Envelope continues to support the legacy JSON format to maintain backward compatibility.

To assist with migration, Script Envelope provides a convert utility to convert an existing JSON project file to YAML using the following syntax:

scriptenv convert input.sprjx output.sprjx

Additionally, Script Envelope provides detailed format-specific syntax suggestions when a project file fails validation, allowing you to resolve syntax errors quickly.

For more details, see the Sentinel LDK Envelope for Windows Guide.

Release: 10.3  

>Ability to Configure LDK REST API Session Timeout Using KeepAliveTimeout

>Envelope Plus for Windows Applications

>Java Resource Protection for Windows

>Improved Performance for .NET Method-Level Protection

>IPv6 Link-Local Address Support

>Static Build Requirement for Linux Systems with Older glibc Versions

Ability to Configure LDK REST API Session Timeout Using KeepAliveTimeout

REST API session duration can now be configured using the KeepAliveTimeout parameter in Sentinel License Manager.

This enhancement enables vendors to reserve a license seat for client applications that use the REST API for a defined period of time without requiring the client to refresh the logged-in session.

The session timeout can be specified as part of the REST API login request, allowing the seat to remain reserved for the client for the configured period. The minimum timeout is 900 seconds (15 minutes, default), and the maximum timeout is 9,000,000 seconds.

Envelope Plus for Windows Applications

Envelope Plus is an add-on option for Sentinel LDK Envelope that provides advanced code obfuscation, anti-tamper protection, and anti-trace protection for native 32-bit and 64-bit Windows applications. Envelope Plus identifies functions in the application and enables selection of the functions to protect, with no source code changes or build process modifications required. After selection, the functions are lifted from the binary, additional protection is applied, and the functions are then recompiled and embedded back into the original application.

In this release, Envelope Plus is available for evaluation in demo mode. To unlock full functionality, contact your Thales customer representative to request a full evaluation or a subscription license.

For more details, see the Sentinel LDK Envelope for Windows Guide.

Java Resource Protection for Windows

Sentinel LDK Envelope now supports the protection of Java resource files inside JAR applications on Windows, enabling encryption-based protection for non-class resource files within Java JAR applications. This enhancement encrypts sensitive assets such as configuration files, embedded JAR files, and property files.

For more details, see the Sentinel LDK Envelope for Windows Guide.

Improved Performance for .NET Method-Level Protection

Runtime performance is improved for applications that use .NET method-level protection, reducing execution overhead.

IPv6 Link-Local Address Support

IPv6 link-local addresses are now supported when specifying machines for remote Sentinel License Managers, providing compatibility with modern network environments.

Static Build Requirement for Linux Systems with Older glibc Versions

Starting with Sentinel LDK 10.3, when building a client application in static mode on Linux systems that use glibc versions earlier than 2.34, you must explicitly include the -ldl flag during the build process.