the "authoritative" game coordinator that wasnt

▤ Summary

This article dissects a broken crypto implementation in Tower Unite's backend coordinator and shows how the protocol could be decrypted off the wire. It explains that the shipped RSA modulus was factorable, the runtime key generator was weak, and the decrypt routine leaked uninitialized heap. It also notes that the studio replaced the homemade RSA layer with secp256k1 and libsodium after the issue was reported. The write-up further highlights a remaining authentication gap and a separate server-side condo admin validation bug.

▦ Linked Companies