Attacks on RFID-Based Electronic Voting Systems

Yossi Oren and Avishai Wool,

http://eprint.iacr.org/2009/422snipurl.com/e-voting

IEEE RFID’2010, Orlando FL

Agenda

What’s the Israeli e-Voting Scheme? How can we break it cheaply and

completely?

Not on the Agenda

Why the new scheme is legally unsound

Why our (ex-)ministers are all corrupt

The biometric database

Why do we have elections?

Elections

What’s a good election scheme? General Free Equal Fair

Preliminaries

Definition: An election E is an NP election, if…

N P

Conjecture: An election is only secure if it is NP-secure Claim: The Israeli Scheme is NP-insecure

How Do We Vote Today?

Israel votes by national list proportional representation

How Do We Vote Today?

Voter

Voting Booth

LocalElections

Committee

Ballot Box

Paper Ballots

Blank Ballots

Blank Ballots

Signed Envelopes

Blank Ballots

Blank Ballots

Cast Votes

List of Authorized

Voters

NP

Voter

Voting Booth

LocalElections

Committee

Ballot Box

Paper Ballots

Blank Ballots

Blank Ballots

Signed Envelopes

Blank Ballots

Blank Ballots

Cast Votes

List of Authorized

Voters

N

How Do We Vote Today?

NP

Voter

Voting Booth

LocalElections

Committee

Ballot Box

Paper Ballots

Blank Ballots

Blank Ballots

Signed Envelopes

Blank Ballots

Blank Ballots

Cast Votes

List of Authorized

Voters

How Do We Vote Today?

NP

•72.1% participation rate•Less than 1.3% disqualified votes

(including protest “blank ballot” votes)•99% final results 6 hours after poll closes

Public Trust

How Will We Vote Tomorrow?

Voter

Voting Booth

LocalElections

Committee

Ballot BoxVoting and Counting Terminal

Verification Terminal

Blank Ballots

Blank Ballots

Blank Ballots

Blank Ballots

Blank Ballots

Cast Votes

Population Register Terminal

Tomorrow’s Ballot

How Will We Vote Tomorrow?

Voter

Voting Booth

LocalElections

Committee

Ballot BoxVoting and Counting Terminal

Verification Terminal

Blank Ballots

Blank Ballots

Blank Ballots

Blank Ballots

Blank Ballots

Cast Votes

Population Register Terminal

How Will We Vote Tomorrow?

Voter

Voting Booth

LocalElections

Committee

Ballot BoxVoting and Counting Terminal

Verification Terminal

Blank Ballots

Blank Ballots

Blank Ballots

Blank Ballots

Blank Ballots

Cast Votes

Population Register Terminal

How Will We Vote Tomorrow?

Voter

Voting Booth

LocalElections

Committee

Ballot BoxVoting and Counting Terminal

Verification Terminal

Blank Ballots

Blank Ballots

Blank Ballots

Blank Ballots

Blank Ballots

Cast Votes

Population Register Terminal

N PN

How Will We Vote Tomorrow?

Voter

Voting Booth

LocalElections

Committee

Ballot BoxVoting and Counting Terminal

Verification Terminal

Blank Ballots

Blank Ballots

Blank Ballots

Blank Ballots

Blank Ballots

Cast Votes

Population Register Terminal

N PN

Attacks on the Voting System

Relay Attacks Ballot Sniffing Single Dissident Ballot Stuffing

Non-Relay Attacks Zapper Remote Jamming Implementation Attacks

Relay Attacks Ballot Sniffing Single Dissident Ballot Stuffing

Non-Relay Attacks Zapper Remote Jamming Implementation Attacks

Relay Attacks

5 cm

HF RFID Reader HF RFID Tag

L

G

HF RFID Tag

The Ballot Sniffing Attack

Voting Booth

LocalElections

Committee

Ballot BoxVoting and Counting Terminal

Verification Terminal

Blank Ballots

Blank Ballots

Blank Ballots

P N

N

N

PP

N

N

N PN

P N

N

N

PP

N

N

The Ballot Stuffing Attack

Voting Booth

LocalElections

Committee

Ballot BoxVoting and Counting Terminal

Verification Terminal

Blank Ballots

Blank Ballots

Blank Ballots

P N

N

N

PP

N

N

N P

P

P

P

N

P

P

P

The Zapper Attack

Voting Booth

LocalElections

Committee

Ballot BoxVoting and Counting Terminal

Verification Terminal

Blank Ballots

Blank Ballots

Blank Ballots

P

PP

P

P

P

P

P

Zap!

Zap!

The Government’s Response…

:// . . /http www youtube com? = 3-watch v wxd YodOmM

Implementation Attacks

Session Hijacking Replay Attacks Semantic Insecurity …

Conclusion

Is the new e-voting scheme a good scheme? General Free Equal Fair

Is the new e-voting scheme a good scheme? General Free Equal Fair

Thank You!

If it ain’t broke, don’t fix

it!

http://eprint.iacr.org/2009/422snipurl.com/e-voting