Nouvelles faiblesses dans sVote

Le test d’intrusion que Swiss Post a organisé pour son système de vote, est arrivé à sa fin ce dimanche 24 mars.

Suites de la découverte d’une trappe dans sVote.

Il y a deux semaines, Sarah Jamie Lewis, Vanessa Teague et moi annoncions l’existence d’une trappe dans l’un des mécanismes que le système sVote utilise pour prouver que l’intégrité des votes a été préservée lors du processus de dépouillement — il s’agissait plus précisément d’une trappe dans la preuve de mélange des bulletins de vote, qui permettrait de modifier ces votes de manière indétectable.

La publication de cette trappe ne devait avoir de conséquence pour aucune élection: le système publié par Swiss Post n’a pas encore été utilisé.
Il est cependant apparu que le code dans lequel la trappe était présente, qui a été réalisé par la société Scytl, était déployé au même moment pour des élections dans l’état du New South Wales (NSW) en Australie, au travers du  système iVote dont le code n’est pas ouvert à l’examen public. La Commission électorale de l’état du NSW (NSWEC), a immédiatement déclaré que l’erreur avait été corrigée, à temps avant que le décompte n’ait lieu, et que l’élection ne serait pas affectée. Le NSW a ainsi pu bénéficier des effets de l’ordonnance de la Chancellerie fédérale suisse imposant le libre accès au code source de ses systèmes de vote (à partir d’un certain niveau d’usage), soulignant ainsi les avantages d’un débat public sur la sécurité de systèmes critiques.

Un nouveau problème

Nous faisons état aujourd’hui de notre découverte d’un second problème critique dans sVote, totalement indépendant du premier: il est possible d’invalider des bulletins de vote parfaitement valides, sans que les processus d’audit ne le détectent. A nouveau, le problème se situe dans les mécanismes de preuve d’intégrité des bulletins de vote du protocole sVote, qui permettent cette fois à une machine en charge du déchiffrement des bulletins de vote d’invalider un nombre quelconque de bulletins, tout en apportant toutes les preuves requises par le système. Notre rapport montre en effet qu’il est possible de falsifier les preuves de correction des opérations de déchiffrement utilisées dans sVote, et de convaincre n’importe quel auditeur que des bulletins sont invalides, alors que ces bulletins sont en réalité valides.

Interpellés par ce problème, nous avons immédiatement averti Swiss Post et NSWEC de notre découverte, et des premiers pas de notre investigation de ses conséquences: ce problème, qui aurait dû pouvoir être examiné en détail hors de tout déploiement du système Swiss Post, se trouvait à présent susceptible d’avoir un impact sur une élection en cours en NSW. Ce samedi, la NSWEC a spontanément annoncé que ce nouveau problème n’avait pas d’impact sur leur système.

Une tentation pourrait être de minimiser l’importance de cette nouvelle faille dans la mesure où, pour le moment, elle semble “seulement” permettre d’invalider des bulletins de vote. Et ces bulletins déclarés invalides, bien que conformes aux procédures d’audit du système, risquent de susciter des questions. (Trouver la réponse à apporter à ces questions semble par contre plus complexe: comment détecter qui a triché sans violer la confidentialité des votes si on ne peut pas croire les preuves fournies par le système?)

Ce serait passer à côté de deux autres points. Premièrement, le problème n’est pas isolé, ce qui soulève la question de la présence d’autres faiblesses.  Outre la trappe identifiée précédemment, notre rapport fait état d’un certain nombre d’autres faiblesses dans les mécanismes de preuve présents dans le code de sVote: le problème identifié dans la preuve de déchiffrement se retrouve à d’autres endroits dans le système, d’autres difficultés existent, mais leur impact nous est encore inconnu. Deuxièmement, et de manière plus fondamentale, mesurer l’importance des faiblesses du protocole sVote à leur impact en terme d’attaques possibles passe à côté de l’objectif principal que vise ce protocole, et qui est requis par la Chancellerie fédérale suisse: offrir des élections vérifiables.

Qu’est-ce qu’une élection vérifiable?

L’organisation d’élections vérifiables passe par deux étapes:

  1. La définition d’un processus d’audit qui indique la procédure à suivre pour vérifier les résultats d’une élection, et
  2. La démonstration qu’un audit réussi garantit que le résultat de l’élection est correct.

La faille que nous avons identifiée montre, tout comme la précédente, que les hypothèses faites dans cette démonstration ne sont pas satisfaites, parce que les preuves fournies par le système peuvent être falsifiées. En l’état, sVote ne permet donc pas l’organisation d’élections vérifiables.

Pour plus d’informations:

Cette recherche a bénéficié du soutien du F.R.S.-FNRS via le projet SeVote.

203 Replies to “Nouvelles faiblesses dans sVote”

  1. Interesting read! Understanding player psychology is key, especially with evolving platforms. Seeing innovations like streamlined registration at bwinph login makes access easier, potentially shifting game dynamics. Good analysis!

  2. Yo, 898bet1 looks promising! New site, seems legit. Quick deposits and withdrawals are a major plus. I’m putting some money here and see how it goes. My friend recommend it for new players. Sign up through this link: 898bet1

  3. G’day fellas! Giving 898bet3333 a whirl. The graphics are pretty sharp, and they seem to have a good range of games. Customer service was alright too, quick to respond when I had a question. Worth a punt! Start placing your bets here: 898bet3333

  4. Hi, I do think this is an excellent blog. I stumbledupon it 😉 I am going to return once again since i have book-marked it. Money and freedom is the best way to change, may you be rich and continue to guide others.

  5. Yo, PT888slot is my go-to when I’m looking for some quick spins. The website’s easy to use, and I’ve actually won a few times! Give it a shot and see if luck’s on your side. Check it out here: pt888slot

  6. Sup! So, I browsed dk999game the other day, and while it’s not gonna blow your mind, it’s got some interesting titles worth a look. Definitely a place to dig around if you’re in a ‘what to play’ crisis. Hop on dk999game and discover a gem

  7. cwin666, eh? Gave it a shot, not bad! Good selection of slots, and the bonuses are alright. Could be better, but hey, I’ve seen worse Plus, the mobile site works well. Give it a try at cwin666

  8. My brother suggested I would possibly like this web site. He was entirely right. This put up truly made my day. You can not imagine just how so much time I had spent for this information! Thanks!

  9. You PERFO?? must make certain that’s mounted i?eal, yet when you do, it will function terrif?c. Yes, that looks insane uneven away from package, yet this is actually discussed on a ?ellow ta? c?nne?ted to the gate!

  10. Hi, I do think this is an excellent web site. I stumbledupon it 😉 I may come back yet again since i have bookmarked it. Money and freedom is the greatest way to change, may you be rich and continue to guide others.

  11. I’ll right away take hold of your rss as I can’t to find your email subscription hyperlink or e-newsletter service. Do you’ve any? Kindly let me understand so that I may just subscribe. Thanks.

  12. You’ve made some good points there. I checked on the internet for more information about the issue and found most people will go along with your views on this website.

  13. Your style is unique compared to other people I have read stuff from. Thanks for posting when you have the opportunity, Guess I’ll just bookmark this page.

  14. I just could not leave your site prior to suggesting that I really enjoyed the standard info an individual supply on your visitors? Is going to be back continuously to investigate cross-check new posts

  15. The following time I read a blog, I hope that it doesnt disappoint me as a lot as this one. I imply, I know it was my option to learn, however I actually thought youd have one thing attention-grabbing to say. All I hear is a bunch of whining about something that you may fix in case you werent too busy looking for attention.

  16. I’m curious to find out what blog platform you have been utilizing? I’m having some small security problems with my latest website and I’d like to find something more risk-free. Do you have any solutions?

  17. I will immediately grab your rss as I can’t find your e-mail subscription hyperlink or e-newsletter service. Do you have any? Kindly let me know so that I could subscribe. Thanks.

  18. Hello, i feel that i saw you visited my blog so i came to “go back the favor”.I’m attempting to to find things to enhance my site!I suppose its adequate to use a few of your concepts!!

  19. Definitely imagine that that you stated. Your favorite reason seemed to be at the web the simplest factor to take note of. I say to you, I definitely get irked even as other folks consider issues that they just don’t recognize about. You managed to hit the nail upon the top as well as defined out the whole thing without having side-effects , folks could take a signal. Will probably be again to get more. Thank you

  20. Just had a session on h666. Not gonna lie, it’s got some interesting games. Payouts could be a bit better but hey, can’t win ’em all, can ya? h666

  21. There are actually numerous particulars like that to take into consideration. That is a great level to convey up. I offer the ideas above as normal inspiration however clearly there are questions just like the one you bring up the place crucial thing shall be working in trustworthy good faith. I don?t know if greatest practices have emerged round issues like that, but I am positive that your job is clearly recognized as a fair game. Both girls and boys feel the affect of just a second’s pleasure, for the rest of their lives.

  22. I want to show my appreciation to you just for rescuing me from this particular issue. Right after surfing around throughout the world-wide-web and getting basics that were not helpful, I figured my life was gone. Existing without the strategies to the issues you have sorted out through your main site is a crucial case, as well as those that might have adversely damaged my entire career if I had not discovered your web page. Your own ability and kindness in handling every aspect was very helpful. I don’t know what I would have done if I hadn’t encountered such a thing like this. I can at this point relish my future. Thanks for your time so much for this expert and effective guide. I will not be reluctant to propose the website to anyone who would like recommendations on this problem.

  23. The discovery of this backdoor highlights why transparent code review is essential for critical digital systems. As we see more digital transformation across industries, maintaining public trust through security-first thinking becomes paramount. That’s why platforms like jili333 club prioritize regular security audits and transparency in their gaming infrastructure.

  24. Good website! I really love how it is easy on my eyes and the data are well written. I’m wondering how I might be notified whenever a new post has been made. I have subscribed to your RSS which must do the trick! Have a nice day!

  25. Pingback: finasteride spray
  26. I do agree with all the ideas you’ve presented in your post. They’re really convincing and will certainly work. Still, the posts are very short for beginners. Could you please extend them a bit from next time? Thanks for the post.

  27. The Swiss Post penetration testing highlights why transparent security audits are crucial for any digital platform. Just as voting systems need public scrutiny to ensure integrity, online gaming platforms must demonstrate robust security to build user trust. That’s why platforms like ninong gaming app casino prioritize certified RNG and SSL encryption—security isn’t optional, it’s foundational.

  28. Heard good things about ph90, so I made an account. The interface isn’t flashy, but gets the job done. A solid option if you’re looking for something reliable. ph90

  29. I was curious if you ever thought of changing the layout of your blog? Its very well written; I love what youve got to say. But maybe you could a little more in the way of content so people could connect with it better. Youve got an awful lot of text for only having one or two pictures. Maybe you could space it out better?

  30. The vulnerability discovery underscores that trust in any complex system-be it civic infrastructure or advanced AI-must be built on absolute transparency. Ensuring verifiable integrity is paramount. It’s a fascinating parallel to how deep, reliable personal connections, like those built with a sophisticated system such as claw friend, require consistent, auditable data handling.

  31. OKVIP13win is on my radar now. The games are good so far, plus the bonus promotions are great. It has a lot to offer a bunch of players. Give it a try, what’s the worst that could happen? Come on over to: okvip13win

  32. Pingback: cenforce fm 100mg
  33. The emphasis on code transparency is vital. This vulnerability highlights that trust in any critical digital infrastructure, be it voting or complex entertainment platforms, must be backed by rigorous, auditable security protocols. Understanding these risks is key to building resilient systems, even when considering premium services like 89jl vip.

Leave a Reply to mvhyreyd Cancel reply

Your email address will not be published. Required fields are marked *