Russia’s Blockchain-Based Voting System Makes It Possible To Decipher Votes Before The Official Count
Russia’s Blockchain-Based Voting System Makes It Possible To Decipher Votes Before The Official Count
July 2, 2020
Russia’s Blockchain-Based Voting System Makes It Possible To Decipher Votes Before The Official Count
Russia’s Blockchain-Based Voting System Makes It Possible To Decipher Votes Before The Official Count
July 2, 2020

Russia’s blockchain-based voting system for the constitutional amendments had a vulnerability that made it possible to decipher votes before the official count. 

It has been reported by Russia-language news outlet Meduza that when the constituents casted their vote through a special website, the results would get encrypted by a JavaScript library called TweetNaCl.js

However, this is an implementation of the “Networking and Cryptography (NaCi), cryptography library created by the mathematician Daniel J. Bernstein and cryptographers Tanja Lange and Peter Schwabe

As per the report, the voting system relied on the so-called deterministic encryption, which means that using the same parameters lead to identical ciphertexts.

Both the sender and the receiver received a shared key, which could be used for encryption or decryption of the message. Any constituent could theoretically decipher their own vote before it would get decrypted by the electoral commission, or even allow third parties to do so. In order to do that, the voter had to save their private key.

ALSO READ :  Coinbase Reveals Faster Way For Its Customers To Move Digital Currencies Out Of Crypto And Into Their Bank Accounts

Likewise, to retrieve the private key, the constituent had to go to the e-bulletin page, open the developer console in their web browser and make a minor adjustment to the election.js library (add logpoint, enter: voter secret key is’, encryptor.keyPair.secretKey) and then cast their vote. 

It has been analyzed that Meduza conducted an experiment where all participants retrieved their private keys and were reportedly able to decipher all of the votes as a result. 

According to the publication, the vulnerability theoretically allows employers to make sure that their employees voted, and even check their votes after inducing them to save their private keys, as there have been reports suggesting that state-funded entities in Russia push their employees to vote at the government’s request.

In contrast, the same bug could be used to increase the transparency of the vote in the scenario where the electoral commission refuses to publish the decryption of each vote, as it did after the Moscow City Duma election in 2019, where blockchain was also supposedly used.

ALSO READ :  Atari To Get Into Blockchain Space With New Functionalities On Its Upcoming Console

Thus, Meduza stated:

“For example, supporters of one specific candidate may agree to install the same browser extension. That way, they can track the minimum number of votes that their candidate should definitely get after the count.”

Source: Cointelegraph | Image: Sudbury


Disclaimer

Crypto News Point a news platform of Digital Notice Media Labs is primarily a regular publication of information, commentary and articles focused extensively on fintech, blockchain technology, cryptocurrency, blockchain-based tokens, cryptocurrency market trends, and trading strategies. We do not provide individually tailored investment advice and does not take a subscriber’s or anyone’s circumstances into consideration when discussing investments, nor is Crypto News Point registered as an investment adviser or broker-dealer in any jurisdiction. Information contained herein is not an offer or solicitation to buy, hold, or sell any digital assets.

Affiliate Disclosure: To help support the work we do here at CNP, we often link to products and deals from around the web. Should you buy some of these, we may get a portion of the sale.

We in generally gather content from the major websites. In every article there is always a clear link and attribution to the source publication. If you have any issue with any of our published content taken from your site, kindly let us know so that we can take appropriate action. In any case, the content of the pages of this website is for your general information and use only. It is subject to change without notice.

You May Also like

Ishita Bora

Ishita Bora is a Senior Content Creator at Digital Notice Media Labs with an experience of 1 year. She has completed her Master's Degree in Language and Linguistics in 2019 from Gauhati University, India. Her interest lies in blockchain technology and cryptocurrency space, as she loves writing about blockchain and other blockchain-related articles. Currently, she is working on blockchain-based news, reviews, featured articles, and guides.