Powered by OpenAIRE graph
Found an issue? Give us feedback
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/ ZENODOarrow_drop_down
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/
ZENODO
Preprint
Data sources: ZENODO
addClaim

Transcript Binding Failure in Fiat-Shamir Decryption Proofs: A Case Study in Swiss Post E-Voting Infrastructure

Authors: Sai Ganesh, Rajagiri;

Transcript Binding Failure in Fiat-Shamir Decryption Proofs: A Case Study in Swiss Post E-Voting Infrastructure

Abstract

We report a transcript binding failure in the Fiat-Shamir challenge construction of the DecryptionProofService component within the Swiss Post e-voting cryptographic primitives library (crypto-primitives v1.5.2.1). The vulnerability arises because the Fiat-Shamir auxiliary transcript omits the gamma component of the ElGamal ciphertext during challenge derivation. Since the challenge hash is computed over (phi, m) rather than the complete ciphertext (gamma, phi, m), a proof generated for one ciphertext may verify successfully against a distinct ciphertext sharing the same phi and plaintext m but with a different gamma. We demonstrate this class of weakness through proof-of-concept analysis, characterise the cryptographic conditions under which it manifests, assess the practical security implications for verifiable election systems, and propose a minimal one-line remediation. The finding was responsibly disclosed to the Swiss Post security team on March 10, 2026 under report YWH-R879012.

Powered by OpenAIRE graph
Found an issue? Give us feedback