You barely need crypto. Ticket authentication would be enough.