Ballot stuffing in a postal voting system

Ballot stuffing in a postal voting system. Véronique Cortier, Jérémie Detrey, Pierrick Gaudry, Frédéric Sur, Emmanuel Thomé, Mathieu Turuani, and Paul Zimmermann. In Revote 2011 - International Workshop on Requirements Engineering for Electronic Voting Systems, IEEE, Trento, Italie, 2011.

Download

[PDF]

Abstract

We review a postal voting system used in spring 2011 by the French research institute CNRS and designed by a French company (Tagg Informatique). We explain how the structure of the material can be easily understood out of a few samples of voting material (distributed to the voters), without any prior knowledge of the system. Taking advantage of some flaws in the design of the system, we show how to perform major ballot stuffing, making possible to change the outcome of the election. Our attack has been tested and confirmed by the CNRS. A fixed postal voting system has been quickly proposed by Tagg Informatique in collaboration with the CNRS, preventing this attack for the next elections.

BibTeX

@inproceedings{CORTIER:2011:INRIA-00612418:1,
    hal_id = {inria-00612418},
    title = {{Ballot stuffing in a postal voting system}},
    author = {Cortier, V{\'e}ronique and Detrey, J{\'e}r{\'e}mie and Gaudry, Pierrick and Sur, Fr{\'e}d{\'e}ric and Thom\'e, Emmanuel and Turuani, Mathieu and Zimmermann, Paul},
    abstract = {{We review a postal voting system used in spring 2011 by the French research institute CNRS and designed by a French company (Tagg Informatique). We explain how the structure of the material can be easily understood out of a few samples of voting material (distributed to the voters), without any prior knowledge of the system. Taking advantage of some flaws in the design of the system, we show how to perform major ballot stuffing, making possible to change the outcome of the election. Our attack has been tested and confirmed by the CNRS. A fixed postal voting system has been quickly proposed by Tagg Informatique in collaboration with the CNRS, preventing this attack for the next elections.}},
    booktitle = {{Revote 2011 - International Workshop on Requirements Engineering for Electronic Voting Systems}},
    publisher = {IEEE},
    address = {Trento, Italie},
    year = {2011},
}