Every case opening on csmafia is verifiable. You can prove no result was tampered with — before or after the fact.
Before you open anything, the server generates a secret server seed and shows you its SHA-256 hash. The hash is a commitment — the server cannot change the seed afterwards without breaking it.
You get a client seed (you can set your own) and a nonce that counts up by one with every case you open. Both are fully visible to you.
Each opening’s outcome is HMAC-SHA256(server seed, "client seed:nonce"). The hash is turned into a number that selects the skin by weight. Same inputs always produce the same result.
When you rotate your seed pair, the old server seed is revealed. Hash it yourself — it must match the commitment from step 1. Re-compute every roll with the verifier — each must match what you got.
Sign in to see and rotate your seed pair.
Runs entirely in your browser (Web Crypto), independent of our servers. The hash it produces should match the roll recorded on your opening.