Open-Source & Security

Open-Source & Security

Information about KYBER's open-source and security.

NOTE: You may notice some links in this page are broken. KYBER’s source code will be released at the full launch of KYBER V2. We’re keeping it under wraps for now in order to keep some new features secret.

KYBER is open-source software, licensed under the GNU General Public License (v3). The main components are hosted in a monorepo at ArmchairDevelopers/Kyber. We operate what is known as a centralized peer-to-peer network, wherein servers are hosted on user machines, but with traffic being proxied through our own networks in order to hide IPs between server hosts and players, and not require server hosts to port-forward.

All KYBER servers communicate with our API, which puts the servers on our server browser, allows server hosts to remotely manage their servers, facilitates authentication and in-game statistics like leveling, and allows us to take global action on cheaters and repeat rule breakers. The API is open-source, and you’re free to host it yourself, if you’d like.

If we use Minecraft servers as an analogy, you could say that our hosted versions of the API, proxies, and related services, are like Mojang. When you join a Minecraft server, your game asks Mojang for a key that authenticates you to that server. When the server receives the key, it gives it to Mojang, who tells it that you are a valid player. The same process occurs on KYBER servers. You’re free to host your own versions of the API, proxies, and related services, but you won’t be able to see or join servers that aren’t also connected to your versions of those services.

To use KYBER, you must have a valid EA account which owns STAR WARS Battlefront II. To facilitate this, when you log into KYBER, the API receives a scope-limited EA token for your account, validates it locally, uses the account ID and username contained in it to create a KYBER account, and asks EA for your entitlements, to ensure you own the game. The tokens expire quickly and are not logged under any circumstances, and the source code for this process is fully available here. This is the same approach that similar projects, like Northstar, have taken.

In order to launch the game, KYBER utilizes our sister project, MAXIMA. It replicates the EA app’s game launching system and allows for the aforementioned EA account login. We started building it in 2023 for KYBER, but it is now a fully fledged cross-platform replacement for the EA app, and you can see a short demo of it at Ubuntu Summit 2024 here.

If you have any questions, please feel free to reach out to us at [email protected], or on our Discord server.

If you believe you have identified a security vulnerability affecting the services we provide, please contact [email protected].


Stay up-to-date on all things KYBER by joining our Discord and following us on X.