Breaking the encryption scheme of the Moscow Internet voting system

Pierrick Gaudry,Alexander Golovnev
DOI: https://doi.org/10.48550/arXiv.1908.05127
2019-11-16
Abstract:In September 2019, voters for the election at the Parliament of the city of Moscow were allowed to use an Internet voting system. The source code of it had been made available for public testing. In this paper we show two successful attacks on the encryption scheme implemented in the voting system. Both attacks were sent to the developers of the system, and both issues had been fixed after <a class="link-external link-http" href="http://that.The" rel="external noopener nofollow">this http URL</a> encryption used in this system is a variant of ElGamal over finite fields. In the first attack we show that the used key sizes are too small. We explain how to retrieve the private keys from the public keys in a matter of minutes with easily available <a class="link-external link-http" href="http://resources.When" rel="external noopener nofollow">this http URL</a> this issue had been fixed and the new system had become available for testing, we discovered that the new implementation was not semantically secure. We demonstrate how this newly found security vulnerability can be used for counting the number of votes cast for a candidate.
Cryptography and Security
What problem does this paper attempt to address?