Embed Size (px)
DESCRIPTION
Yossi Oren and Avishai Wool, . Attacks on RFID-Based Electronic Voting Systems. IEEE RFID’2010, Orlando FL. snipurl.com/e-voting. http://eprint.iacr.org/2009/422. Agenda. What’s the Israeli e-Voting Scheme? How can we break it cheaply and completely?. Not on the Agenda. - PowerPoint PPT Presentation
Citation preview
Attacks on RFID-Based Electronic Voting Systems
Yossi Oren and Avishai Wool,
http://eprint.iacr.org/2009/422snipurl.com/e-votingIEEE RFID’2010, Orlando FL
Agenda
What’s the Israeli e-Voting Scheme? How can we break it cheaply and
completely?
Not on the Agenda
Why the new scheme is legally unsound
Why our (ex-)ministers are all corrupt
The biometric database
Why do we have elections?
Elections
What’s a good election scheme? General Free Equal Fair
Preliminaries Definition: An election E is an NP
election, if…
N P
Conjecture: An election is only secure if it is NP-secure Claim: The Israeli Scheme is NP-insecure
How Do We Vote Today?
Israel votes by national list proportional representation
How Do We Vote Today?
Voter
Voting Booth
LocalElections
Committee
Ballot Box
Paper Ballots
Blank Ballots
Blank Ballots
Signed Envelopes
Blank Ballots
Blank Ballots
Cast Votes
List of Authorized
Voters
NP
Voter
Voting Booth
LocalElections
Committee
Ballot Box
Paper Ballots
Blank Ballots
Blank Ballots
Signed Envelopes
Blank Ballots
Blank Ballots
Cast Votes
List of Authorized
Voters
N
How Do We Vote Today?
NP
Voter
Voting Booth
LocalElections
Committee
Ballot Box
Paper Ballots
Blank Ballots
Blank Ballots
Signed Envelopes
Blank Ballots
Blank Ballots
Cast Votes
List of Authorized
Voters
How Do We Vote Today?
NP
•72.1% participation rate•Less than 1.3% disqualified votes
(including protest “blank ballot” votes)•99% final results 6 hours after poll closes
Public Trust
How Will We Vote Tomorrow?
Voter
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Cast Votes
Population Register Terminal
Tomorrow’s Ballot
How Will We Vote Tomorrow?
Voter
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Cast Votes
Population Register Terminal
How Will We Vote Tomorrow?
Voter
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Cast Votes
Population Register Terminal
How Will We Vote Tomorrow?
Voter
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Cast Votes
Population Register Terminal
N PN
How Will We Vote Tomorrow?
Voter
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Blank Ballots
Cast Votes
Population Register Terminal
N PN
Attacks on the Voting System
Relay Attacks Ballot Sniffing Single Dissident Ballot Stuffing
Non-Relay Attacks Zapper Remote Jamming Implementation Attacks
Relay Attacks Ballot Sniffing Single Dissident Ballot Stuffing
Non-Relay Attacks Zapper Remote Jamming Implementation Attacks
Relay Attacks
5 cm
HF RFID Reader HF RFID Tag
L
G
HF RFID Tag
The Ballot Sniffing Attack
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
P N
N
N
PPN
N
N PNP N
N
N
PPN
N
The Ballot Stuffing Attack
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
P N
N
N
PPN
N
N P
P
P
P
NP
P
P
The Zapper Attack
Voting Booth
LocalElections
Committee
Ballot BoxVoting and Counting Terminal
Verification Terminal
Blank Ballots
Blank Ballots
Blank Ballots
PPPP
P
P
PP
Zap!
Zap!
The Government’s Response…
:// . . /http www youtube com? = 3-watch v wxd YodOmM
Implementation Attacks
Session Hijacking Replay Attacks Semantic Insecurity …
Conclusion
Is the new e-voting scheme a good scheme? General Free Equal Fair
Is the new e-voting scheme a good scheme? General Free Equal Fair
Thank You!
If it ain’t broke, don’t fix it!
http://eprint.iacr.org/2009/422snipurl.com/e-voting
