Breaking the encryption scheme of the Moscow Internet voting system · HackerPapers discussions

Breaking the encryption scheme of the Moscow Internet voting system — mentioned by aazaa

Mon, 26 Aug 2019 12:50:14 GMT

The paper notes another, distinct, attack possibility: > Before going to this, we mention quickly another mistake in the design that could in itself have led to devastating attacks. The generators that are given in public- key.json are generators of the whole multiplicative group. However, due to the Chinese remainder theorem, it is a good practice to use a generator of prime order. In the present case, the generators will have their order divisible by 2, and therefore there is a huge risk that one bit of information leaks from a ciphertext. In a context like e-voting where a ballot can have…

Paper and discussion history. A mention is not an endorsement.

Breaking the encryption scheme of the Moscow Internet voting system — mentioned by cyphar

Mon, 26 Aug 2019 09:58:59 GMT

The paper[1] makes it much clearer. They aren't using elliptic curves, they're using prime fields with ElGamal (with a weird construction using three separate keys for some reason). The security is similar to RSA-256 (in other words, "awful") -- it makes sense that they could crack it in 20 minutes. [1]: https://arxiv.org/pdf/1908.05127.pdf

Paper and discussion history. A mention is not an endorsement.

Breaking the encryption scheme of the Moscow Internet voting system — mentioned by cyphar

Mon, 26 Aug 2019 09:55:38 GMT

The article doesn't mention this, but if you look at the paper[1] it turns out they aren't using ElGamal with elliptic curve fields -- instead they're using prime fields. In that case, you'd want similar key sizes to RSA. (The "less than 256 bit" part is a red herring, the problem is that they are using key sizes that would only be safe if they were using elliptic curves.) [1]: https://arxiv.org/pdf/1908.05127.pdf

Paper and discussion history. A mention is not an endorsement.

Breaking the encryption scheme of the Moscow Internet voting system — HN submission

Wed, 21 Aug 2019 15:58:17 GMT

Breaking the encryption scheme of the Moscow internet voting system

2 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

Breaking the encryption scheme of the Moscow Internet voting system — HN submission

Fri, 16 Aug 2019 06:57:13 GMT

Breaking the encryption scheme of the Moscow internet voting system

4 points; 1 discussion reply on HN. Paper and source history. A submission is not an endorsement.