Live data from Hacker News

Swiss evoting system – IsProbablePrime is incorrect for input 19

gitlab.com

11–20 of 49 posts

Re: Swiss evoting system – IsProbablePrime is incorrect for input 19

#11
post #3

Can someone explain how such a simple and easily-testable bug existed in a seemingly-important system like this? I don't know much about Swiss e-voting, but seems even the most brain-dead unit test of the IsProbablePrime function should have caught this.

It is brain dead but this is old code from what I recall. We do not have e-voting at this time although the Post which outsourced this first nightmare of a version is still trying to push for it. I highly doubt we will see e-voting here until there is a verifiable proof that it is verifiable. There was a lot of bad press about this and people don't trust this crap. They tried a similar thing for E-ID which was suppos…

Well, unfortunately they do plan to relaunch their e-voting system next year, after having "tested their system against more than 60'000 attacks from hackers" (whatever that is supposed to mean)...

https://www.srf.ch/news/schweiz/elektronische-stimmabgabe-ha...

https://www.heise.de/news/Schweizer-Post-Hacker-konnten-E-Vo...

Re: Swiss evoting system – IsProbablePrime is incorrect for input 19

#13

For context: Switzerland doesn't have evoting. This is just some big company trying to re-sell a evoting system to the government. It has been in the news a few times, due to software and cryptographic quality issues.

> big company

Isn't it the Swiss post?

Re: Swiss evoting system – IsProbablePrime is incorrect for input 19

#15

For context: Switzerland doesn't have evoting. This is just some big company trying to re-sell a evoting system to the government. It has been in the news a few times, due to software and cryptographic quality issues.

https://www.evoting.ch/en

Do the bare minimum research before posting please.

Re: Swiss evoting system – IsProbablePrime is incorrect for input 19

#16
post #11

Earlier quoted context omitted.

It is brain dead but this is old code from what I recall. We do not have e-voting at this time although the Post which outsourced this first nightmare of a version is still trying to push for it. I highly doubt we will see e-voting here until there is a verifiable proof that it is verifiable. There was a lot of bad press about this and people don't trust this crap. They tried a similar thing for E-ID which was suppos…

Well, unfortunately they do plan to relaunch their e-voting system next year, after having "tested their system against more than 60'000 attacks from hackers" (whatever that is supposed to mean)... https://www.srf.ch/news/schweiz/elektronische-stimmabgabe-ha... https://www.heise.de/news/Schweizer-Post-Hacker-konnten-E-Vo...

Hm, but it sounds quite solid(I only know, what is written in the links):

They made an open public intrusion test with a bug bounty and they released the sources. And so far no one could find a real weakness.

Re: Swiss evoting system – IsProbablePrime is incorrect for input 19

#17
post #3

Can someone explain how such a simple and easily-testable bug existed in a seemingly-important system like this? I don't know much about Swiss e-voting, but seems even the most brain-dead unit test of the IsProbablePrime function should have caught this.

It is brain dead but this is old code from what I recall. We do not have e-voting at this time although the Post which outsourced this first nightmare of a version is still trying to push for it. I highly doubt we will see e-voting here until there is a verifiable proof that it is verifiable. There was a lot of bad press about this and people don't trust this crap. They tried a similar thing for E-ID which was suppos…

"their claim at the poles was"

Sorry for being a bit of a pedant but: A pole is a simple structure (eg flag pole), a Pole is a person from Poland and a poll is what you meant 8)

Re: Swiss evoting system – IsProbablePrime is incorrect for input 19

#19
post #15

For context: Switzerland doesn't have evoting. This is just some big company trying to re-sell a evoting system to the government. It has been in the news a few times, due to software and cryptographic quality issues.

https://www.evoting.ch/en Do the bare minimum research before posting please.

That's exactly the company and the product. You could've scrolled a bit more:

https://www.evoting.ch/en#transparenz

Voting in Switzerland is either in person or by mail.

Re: Swiss evoting system – IsProbablePrime is incorrect for input 19

#20
I would be very weary of changing such constants as this

19 should have been tested by a lookup table, there's no need to apply such heavy test to it

However, by changing that constant (if not properly verified) I'd worry it might change the primality test for some classes of numbers. Where this might be later manipulated to produce a weak key

Post reply on HN