French researcher hacks into Moscow's new e-voting system

The French researcher said a hacker would have needed only 10 minutes to crack the code
The French researcher said a hacker would have needed only 10 minutes to crack the code

A French researcher has exposed a security breach in an electronic voting system to be used in next month's municipal elections in Moscow, potentially giving hackers access to voters' choices.

The University of Lorraine and France's CNRS research institute said this week the cryptographer had taken up a challenge set by Echo of Moscow radio to test the system being rolled out for the vote.

"Less than a month before Moscow tries online voting for electing the city's new parliament, a French cryptographer has just exposed a for the protocol being tested," the two institutions said in a statement.

The researcher, Pierrick Gaudry, was able to crack into the being published daily as part of a public test since late July.

Gaudry needed only 20 minutes to break the encryption code, or "private key", that is supposed to protect voters' identities and choices. He used a standard computer and widely available free software.

"According to him, a hacker would have been able to get this private key in just 10 minutes," they said.

"In the , the votes of all the voters using this system would be revealed to anyone as soon as they cast their vote," Gaudry wrote of his findings in a posted online.

Since mid-July, Moscow has seen a wave of rallies drawing tens of thousands onto the streets after opposition figures were barred from standing in the elections to Moscow's city parliament on September 8.

The online voting system, available through the City Hall website, requires passport information, home address and other sensitive information, and uses text message verification.

Officials say the system testing won't be complete until next week, just days ahead of the election.

Since the publication of Gaudry's paper on August 14, Moscow authorities have said the encryption code has been made more complex, and will be divided into seven distinct parts kept separate until voting ends.

The editor-in-chief of Echo of Moscow, Alexey Venediktov, announced on his Telegram channel Tuesday that he had given Gaudry a prize of one million rubles ($15,000). Other awards would be offered to anyone else who exposed breaches in the system.

© 2019 AFP

Citation: French researcher hacks into Moscow's new e-voting system (2019, August 28) retrieved 19 March 2024 from https://techxplore.com/news/2019-08-french-hacks-moscow-e-voting.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.

Explore further

Swiss govt offers reward for hacking its electronic vote system

7 shares

Feedback to editors