
We report a transcript binding failure in the Fiat-Shamir challenge construction of the DecryptionProofService component within the Swiss Post e-voting cryptographic primitives library (crypto-primitives v1.5.2.1). The vulnerability arises because the Fiat-Shamir auxiliary transcript omits the gamma component of the ElGamal ciphertext during challenge derivation. Since the challenge hash is computed over (phi, m) rather than the complete ciphertext (gamma, phi, m), a proof generated for one ciphertext may verify successfully against a distinct ciphertext sharing the same phi and plaintext m but with a different gamma. We demonstrate this class of weakness through proof-of-concept analysis, characterise the cryptographic conditions under which it manifests, assess the practical security implications for verifiable election systems, and propose a minimal one-line remediation. The finding was responsibly disclosed to the Swiss Post security team on March 10, 2026 under report YWH-R879012.
zero-knowledge proof, decryption proof, e-voting, transcript binding, verifiable elections, Cryptography, Swiss Post, Fiat-Shamir, ElGamal
zero-knowledge proof, decryption proof, e-voting, transcript binding, verifiable elections, Cryptography, Swiss Post, Fiat-Shamir, ElGamal
| selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | 0 | |
| popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network. | Average | |
| influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | Average | |
| impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network. | Average |
