Another thing about crypto: If you use encryption and you live in the USA or want to deploy your game from a server in the USA, you need a CCATS. This means that you must send all relevant crypto sources to a sub division of the NSA and let them review the code. Even if you use an already reviewed crypto library!
This process can take up to two months so better let them review before your game is finished so you don't have to wait up to two months to release the game (without the CCATS, you violate U.S. export rules and this can get VERY expensive!)

You don't need a CCATS if you use encryption for authentication or anti piracy, you also don't need it if your algorithm uses < 64 bit (symmetric) or < 1024 (asymmetric) bit keys. If your program uses encryption for any other purpose or if you use a larger key, you need this CCATS.

Of course, if you aren't an U.S. citizen and use a eg. an european server, you don't need a CCATS.


Shitlord by trade and passion. Graphics programmer at Laminar Research.
I write blog posts at feresignum.com