Hello friends,

Here's the scenario: I'm currently developing a 1v1 turn based strategy game. Players can play online using the match-making server. Can I store player statistics locally (on the player's machine), such as number of victories and his rank according to his performance, in a way that the player cannot exploit (cannot = very very hard to)? I want to match players according to their rankings, but I don't want to make a player authentication system and store their scores on my server, it's just too much work.

My first thought was to cryptography their statistics, does that do the job? What are my options?

Thanks!

If you have a match-making server already, storing a few statistics should be trivial by comparison, so I don't understand why you think it's a problem.

I was going to say that you could encrypt or sign data to prove it hasn't been tampered with, before hplus0603 proved me wrong with an obvious exploit. A hypothetical workaround for that would be something like Bitcoin's blockchain - you store everybody's statistics on every player's computer (or some compact representation thereof), so that nobody can tamper with them. But that is wildly impractical, especially for a case like this where you don't really need that at all.

I don't trust my current base knowledge to properly handle people's password nor the budget to pay for this service. At the same time, not having a ranked match-making would take away much of the fun.

Follow up questions: If my game happens to be greenlit and is on Steam exclusively, can I store these statistics on Steam servers? Then the player wouldn't have to create an account for my game, right? What should I know about Steam API regarding to this that I'm asking?

Thanks for the help!