{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:HX7J3D6WORCTJRUAGN6MK6WOKO","short_pith_number":"pith:HX7J3D6W","canonical_record":{"source":{"id":"1908.05127","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-14T13:50:07Z","cross_cats_sorted":[],"title_canon_sha256":"61c50f5f39db1469cd42c61427858db81a2d2f930e26ca78fcb16ffd4feacf18","abstract_canon_sha256":"0e3cda921a6bfba5eaf3ff41d0fcbfbf0dacc96c433891beb3d84b384e0d7d08"},"schema_version":"1.0"},"canonical_sha256":"3dfe9d8fd6744534c680337cc57ace5399ef9fc7e7d9b538694ae5a856ef24f4","source":{"kind":"arxiv","id":"1908.05127","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.05127","created_at":"2026-07-05T00:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"1908.05127v2","created_at":"2026-07-05T00:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.05127","created_at":"2026-07-05T00:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"HX7J3D6WORCT","created_at":"2026-07-05T00:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"HX7J3D6WORCTJRUA","created_at":"2026-07-05T00:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"HX7J3D6W","created_at":"2026-07-05T00:19:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:HX7J3D6WORCTJRUAGN6MK6WOKO","target":"record","payload":{"canonical_record":{"source":{"id":"1908.05127","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-14T13:50:07Z","cross_cats_sorted":[],"title_canon_sha256":"61c50f5f39db1469cd42c61427858db81a2d2f930e26ca78fcb16ffd4feacf18","abstract_canon_sha256":"0e3cda921a6bfba5eaf3ff41d0fcbfbf0dacc96c433891beb3d84b384e0d7d08"},"schema_version":"1.0"},"canonical_sha256":"3dfe9d8fd6744534c680337cc57ace5399ef9fc7e7d9b538694ae5a856ef24f4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:19:21.235619Z","signature_b64":"kuC6cQTHImTIOm4Ao3RKX6oEQ3IWEYfKHKDCcFd3oPBDaKOIN7Up/WTYO6OoiNTWwRqOKUpbfdJk00emXE07Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3dfe9d8fd6744534c680337cc57ace5399ef9fc7e7d9b538694ae5a856ef24f4","last_reissued_at":"2026-07-05T00:19:21.235128Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:19:21.235128Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.05127","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:19:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"E00zhBgxK9NNYGREl1OvKS1+Hijje+sMKBnXhpODrXZpcQlQzz6YiUaQ2SdtlJAXO49x3rA6BP926ySjzdyqBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T10:03:06.003691Z"},"content_sha256":"0814d1603eadd09afab23fd7f292ef770e287a534c0cb4a8249aef4bae23cf0d","schema_version":"1.0","event_id":"sha256:0814d1603eadd09afab23fd7f292ef770e287a534c0cb4a8249aef4bae23cf0d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:HX7J3D6WORCTJRUAGN6MK6WOKO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Breaking the encryption scheme of the Moscow Internet voting system","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alexander Golovnev, Pierrick Gaudry (CARAMBA)","submitted_at":"2019-08-14T13:50:07Z","abstract_excerpt":"In September 2019, voters for the election at the Parliament of the city of Moscow were allowed to use an Internet voting system. The source code of it had been made available for public testing. In this paper we show two successful attacks on the encryption scheme implemented in the voting system. Both attacks were sent to the developers of the system, and both issues had been fixed after that.The encryption used in this system is a variant of ElGamal over finite fields. In the first attack we show that the used key sizes are too small. We explain how to retrieve the private keys from the pub"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.05127","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.05127/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:19:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VEnl1UC4GK6byMSMmdLr3v0VQPynMgf85d/QdJroCdrcVlqtP0aXoAHfhhZsp3MM4S/JUDGUQxKeIpAGQ7XsDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T10:03:06.004317Z"},"content_sha256":"cc14ad80c3f460428beee27d8f7dfb4c651f86b356b0a063b5f6ec57c83e1595","schema_version":"1.0","event_id":"sha256:cc14ad80c3f460428beee27d8f7dfb4c651f86b356b0a063b5f6ec57c83e1595"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HX7J3D6WORCTJRUAGN6MK6WOKO/bundle.json","state_url":"https://pith.science/pith/HX7J3D6WORCTJRUAGN6MK6WOKO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HX7J3D6WORCTJRUAGN6MK6WOKO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T10:03:06Z","links":{"resolver":"https://pith.science/pith/HX7J3D6WORCTJRUAGN6MK6WOKO","bundle":"https://pith.science/pith/HX7J3D6WORCTJRUAGN6MK6WOKO/bundle.json","state":"https://pith.science/pith/HX7J3D6WORCTJRUAGN6MK6WOKO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HX7J3D6WORCTJRUAGN6MK6WOKO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:HX7J3D6WORCTJRUAGN6MK6WOKO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0e3cda921a6bfba5eaf3ff41d0fcbfbf0dacc96c433891beb3d84b384e0d7d08","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-14T13:50:07Z","title_canon_sha256":"61c50f5f39db1469cd42c61427858db81a2d2f930e26ca78fcb16ffd4feacf18"},"schema_version":"1.0","source":{"id":"1908.05127","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.05127","created_at":"2026-07-05T00:19:21Z"},{"alias_kind":"arxiv_version","alias_value":"1908.05127v2","created_at":"2026-07-05T00:19:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.05127","created_at":"2026-07-05T00:19:21Z"},{"alias_kind":"pith_short_12","alias_value":"HX7J3D6WORCT","created_at":"2026-07-05T00:19:21Z"},{"alias_kind":"pith_short_16","alias_value":"HX7J3D6WORCTJRUA","created_at":"2026-07-05T00:19:21Z"},{"alias_kind":"pith_short_8","alias_value":"HX7J3D6W","created_at":"2026-07-05T00:19:21Z"}],"graph_snapshots":[{"event_id":"sha256:cc14ad80c3f460428beee27d8f7dfb4c651f86b356b0a063b5f6ec57c83e1595","target":"graph","created_at":"2026-07-05T00:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.05127/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In September 2019, voters for the election at the Parliament of the city of Moscow were allowed to use an Internet voting system. The source code of it had been made available for public testing. In this paper we show two successful attacks on the encryption scheme implemented in the voting system. Both attacks were sent to the developers of the system, and both issues had been fixed after that.The encryption used in this system is a variant of ElGamal over finite fields. In the first attack we show that the used key sizes are too small. We explain how to retrieve the private keys from the pub","authors_text":"Alexander Golovnev, Pierrick Gaudry (CARAMBA)","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-14T13:50:07Z","title":"Breaking the encryption scheme of the Moscow Internet voting system"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.05127","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0814d1603eadd09afab23fd7f292ef770e287a534c0cb4a8249aef4bae23cf0d","target":"record","created_at":"2026-07-05T00:19:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0e3cda921a6bfba5eaf3ff41d0fcbfbf0dacc96c433891beb3d84b384e0d7d08","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-14T13:50:07Z","title_canon_sha256":"61c50f5f39db1469cd42c61427858db81a2d2f930e26ca78fcb16ffd4feacf18"},"schema_version":"1.0","source":{"id":"1908.05127","kind":"arxiv","version":2}},"canonical_sha256":"3dfe9d8fd6744534c680337cc57ace5399ef9fc7e7d9b538694ae5a856ef24f4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3dfe9d8fd6744534c680337cc57ace5399ef9fc7e7d9b538694ae5a856ef24f4","first_computed_at":"2026-07-05T00:19:21.235128Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:19:21.235128Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kuC6cQTHImTIOm4Ao3RKX6oEQ3IWEYfKHKDCcFd3oPBDaKOIN7Up/WTYO6OoiNTWwRqOKUpbfdJk00emXE07Bg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:19:21.235619Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.05127","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0814d1603eadd09afab23fd7f292ef770e287a534c0cb4a8249aef4bae23cf0d","sha256:cc14ad80c3f460428beee27d8f7dfb4c651f86b356b0a063b5f6ec57c83e1595"],"state_sha256":"e02aae997469d382a8c6e15314c13b5b0264add11c9be460ff4f25d2a0e7f433"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2Xthv38UZQLxPsbHOjTbKHxyI/AnAVOa/w1SGGfVhUWbCI9YibvD03lwXw7pUbt2kBDyabwnjft8aYzUB6LsBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T10:03:06.009878Z","bundle_sha256":"b04dc37360241d1d4f9a8f9d8cca93d8485d51936b93748d5662cd6f87208f32"}}