Powered by OpenAIRE graph
Found an issue? Give us feedback
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/ ZENODOarrow_drop_down
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/
ZENODO
Preprint . 2026
License: CC BY
Data sources: ZENODO
ZENODO
Preprint . 2026
License: CC BY
Data sources: Datacite
ZENODO
Preprint . 2026
License: CC BY
Data sources: Datacite
versions View all 2 versions
addClaim

Transcript Binding Failure in Fiat-Shamir Decryption Proofs: A Case Study in Swiss Post E-Voting Infrastructure

Authors: Sai Ganesh, Rajagiri;

Transcript Binding Failure in Fiat-Shamir Decryption Proofs: A Case Study in Swiss Post E-Voting Infrastructure

Abstract

We report a transcript binding failure in the Fiat-Shamir challenge construction of the DecryptionProofService component within the Swiss Post e-voting cryptographic primitives library (crypto-primitives v1.5.2.1). The vulnerability arises because the Fiat-Shamir auxiliary transcript omits the gamma component of the ElGamal ciphertext during challenge derivation. Since the challenge hash is computed over (phi, m) rather than the complete ciphertext (gamma, phi, m), a proof generated for one ciphertext may verify successfully against a distinct ciphertext sharing the same phi and plaintext m but with a different gamma. We demonstrate this class of weakness through proof-of-concept analysis, characterise the cryptographic conditions under which it manifests, assess the practical security implications for verifiable election systems, and propose a minimal one-line remediation. The finding was responsibly disclosed to the Swiss Post security team on March 10, 2026 under report YWH-R879012.

Keywords

zero-knowledge proof, decryption proof, e-voting, transcript binding, verifiable elections, Cryptography, Swiss Post, Fiat-Shamir, ElGamal

  • BIP!
    Impact byBIP!
    selected citations
    These citations are derived from selected sources.
    This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    0
    popularity
    This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
    Average
    influence
    This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    Average
    impulse
    This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
    Average
Powered by OpenAIRE graph
Found an issue? Give us feedback
selected citations
These citations are derived from selected sources.
This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Citations provided by BIP!
popularity
This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
BIP!Popularity provided by BIP!
influence
This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Influence provided by BIP!
impulse
This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
BIP!Impulse provided by BIP!
0
Average
Average
Average
Green