Skip to main content

No Election Commission safeguard against electromagnetic hacking of EVM: Study

Counterview Desk 

Releasing a new study simultaneously in Chennai and Kolkata in view of the forthcoming elections in Tamil Nadu and West Bengal, the Citizens’ Commission on Elections (CCE) – a civil society initiative – has regretted “lack of integrity of EVM voting”, pointing out, the Election Commission of India (ECI) does not appear to safeguard against the possibilities of ‘side-channel attacks’, i.e, hacking electronic devices through electromagnetic and other methods.
Based on opinion from from Indian and foreign experts from well-known institutions, a CCE note on the study states, even the ‘software guard extensions’ of sophisticated Intel processors have “proved vulnerable to such interference and tampering, adding, these are important concerns because just a few EVMs can swing election results for a constituency.
The CCE note says, that the processor chip in the EVM is only one-time programmable is in doubt. In fact, the latest EVMs use the MK61FX512VMD12 microcontroller supplied by a US-based multinational, which has a programmable flash memory, demanding its “public technical audit.”

CCE note:

In a healthy democracy, citizens are expected to take an active interest in the process and conduct of elections. The Election Commission of India (ECI), set up under Article 324 of the Constitution of India, has often worked in close collaboration with independent organisations dedicated to the strengthening of democracy. Such bodies of citizens have provided valuable feedback to the Commission and have flagged issues of concern or alarm.
It is regrettable, therefore, that the ECI’s conduct of the parliamentary elections of 2019 invited serious controversy and its very fairness came to be questioned by several organisations on very valid grounds. The Association for Democratic Reforms, the Constitutional Conduct Group (CCG) of former civil servants, the Forum for Electoral Integrity, the Delhi Science Forum, the Aman Biradari Trust, People First and the Centre for Financial Accountability were among several groups which were compelled to draw public attention to the lack of integrity of EVM voting and the ECI’s departure from neutrality.
Many political parties, mainstream and digital media houses and civil society groups also voiced serious apprehensions at the manner in which the ‘model code of conduct’ was being violated by the ruling party without adequate retribution from the ECI. On the contrary, the ECI chose to respond to such justified criticism with an alarming silence or by aggressively defending its record, even when patent infirmities were specifically pointed out by several former civil servants who had themselves conducted/supervised elections.
Since it was clear that the ECI was unwilling to introspect on its failures, MG Devasahayam, IAS (Retd), a distinguished retired civil servant and an active member of several civil society groups, took the initiative to consult other independent civil society groups and apolitical platforms which had also expressed apprehensions over the ECI’s stances. 
In 2019 and 2020, seminars and wide-ranging public discussions were held on the issue. One of the unanimous suggestions that emanated from this process was the need to constitute a body of eminent and experienced persons with domain knowledge to delve into critical aspects related to elections in India.
The Citizens’ Commission on Elections (CCE) was thus constituted, with the mandate to draw upon expert advice where necessary and come up with appropriate suggestions to ensure that elections in the country are conducted with fairness and integrity. The CCE was set up on March 5, 2020, and comprised the following:
  1. Justice Madan Lokur, former Supreme Court Judge, Chair
  2. Wajahat Habibullah IAS (Retd), Former CIC, Vice-Chair [CCG]
  3. Justice Hari Paranthaman, former Madras High Court Judge
  4. Prof Arun Kumar, Eminent Economist
  5. Dr John Dayal, Civil Society Activist
  6. Pamela Philipose, Senior Journalist
  7. Dr Subhashis Banerjee, Professor, Computer Science, IIT, Delhi
  8. Member-Convener, Sundar Burra IAS (Retd), [CCG]. MG Devasahayam [People-First and CCG] functioned as the Coordinator of the Commission.
The CCE went into specific areas concerning elections. The findings of its first sectoral report deals with the ‘infallibility’ or ‘vulnerability’ of Electronic Voting Machines (EVMs) and VVPAT (Voter Verifiable Paper Audit Trail). The study was mentored by Dr Sanjiva Prasad, Professor of Computer Science and Engineering, IIT Delhi. The report is placed on the web as www.reclaimtherepublic.co/report
CCE’s expert group reviewed the functioning of EVMs primarily on the touchstone of whether and how far their use complied with important ‘democracy principles’ detailed in the enclosed summary. In short, it insists on absolute transparency in facilitating the voters’ right to choose a candidate of their choice and in ensuring that this is faithfully reflected in the votes stored and counted -- without the slightest deviation whatsoever.
Democracy principles also mandate that the voting procedure is easily understandable and verifiable by the voter and open to audit without complications even when relevant technology is utilised. There should be absolutely no scope for error or misrepresentation of the elector’s choice. The group has relied on depositions and expert opinions of several national and international experts and was informed of the reasons why even the most advanced countries of the world have preferred not to use EVMs during polls.
Among the domain knowledge holders who submitted depositions before this CCE group were Poorvi L. Vora and Bhagirath Narahari of George Washington University, USA; Alok Choudhary of Northwestern University, USA; Bappa Sinha of Free Software Movement of India (FSMI); Subodh Sharma of Computer Science and Engineering and of the School of Public Policy, IIT, Delhi; S Prasanna, Advocate, Delhi; Venkatesh Nayak, RTI activist; KV Subrahmanyam, Professor, Computer Science, Chennai Mathematical Institute, Chenna; Poonam Agarwal, media-person; Anupam Saraf, Professor and Future Designer; and MG Devasahayam, activist and retired civil servant.
The Commission was also privileged to receive the testimonies of some of the best international experts in the field, including Ronald L Rivest of the Massachusetts Institute of Technology, Cambridge, USA; Alex Halderman of the University of Michigan, USA; Douglas W. Jones of the University of Iowa, USA,; Nasir Memon of New York University, USA; Philip B. Stark of the University of California, Berkeley; and Vanessa Teague, Associate Professor, School of Computing and Information Systems, University of Melbourne, Cybersecurity, Australia.
In section 1.1, the report has examined technical details and the engineering design of the current EVMs as also the stage-by-stage processes they undergo during elections. In section 1.2, the report has analysed the concerns that have been articulated by concerned citizens of errors or intentional tampering for political gains in utilising EVMs. In the next section, No 2, issues relating to the trustworthiness of the custody chain and post-election are all examined.
That an EVM has not yet been detected to have been hacked provides no guarantee that it cannot be hacked. Elections must be conducted assuming EVMs may be tampered with
The report has devoted considerable time and expertise in scrutinising the technical architecture of EVMs and the accompanying VVPATs. It noted that ECI does not appear to safeguard against the possibilities of ‘side-channel attacks’, i.e, hacking electronic devices through electromagnetic and other methods. Even the ‘software guard extensions’ of sophisticated Intel processors have proved vulnerable to such interference and tampering. These are important concerns because just a few EVMs can swing election results for a constituency.
That the processor chip in the EVM is only one-time programmable is also in doubt. In fact, the latest EVMs use the MK61FX512VMD12 microcontroller supplied by a US-based multinational, which has a programmable flash memory. Further examination is possible only when ECI makes the EVM design and prototype available for a public technical audit.
It noted that none of ECI’s experts have credentials in computer security and the ECI, by reposing trust in many other external entities and organisations, may have inadvertently lent itself to a system that lacks complete security. After tracking the various stages of the EVM’s movement within the election setup -- before and during polls, subsequent storage, counting and declaration of results -- the report opines that there are certain intervals during which the machines could be accessed without authority or could be tampered with.
The findings reveal that there is, indeed, no guarantee that the voter’s choice has been reflected with total fidelity in all cases. Domain experts therefore submit that immediate steps need to be taken to rectify the ECI’s current procedures, irrespective of the scale and extent of possible error or manipulation. Besides, domain experts have clearly stated that the present ‘quality assurance’ and testing strategies of the ECI certainly do not rule out scope for mischief or the manoeuvring of results.
The VVPAT (Voter Verifiable Paper Audit Trail) system was introduced later to ensure that voters were able to see and check physically the paper slips that emanated from the EVMs and the printers attached to them. The Supreme Court had ordered introduction of VVPAT as an additional stage to assure voters about the complete fidelity of their votes but the current procedure of voting does not seem to be in sync with this objective and leaves gaps that could be exploited. This paper trail has, for instance, been rendered ineffective as the ‘marked slips’ pop up for too brief a time for the voter to verify her/his vote before it moves away to its sealed box.
The ECI is reluctant to cross check the tally of counting VVPAT paper-slips with electronic results on the grounds that it entails unnecessary consumption of time, even though the total time taken now is considerably less than the time spent in counting paper ballots in the earlier system. Although VVPAT voting slips are required to be retained for a full year after the polls, in the 2019 instance the ECI destroyed these slips prematurely leading to grave apprehensions about the electoral process.
Rules regarding the mandatory recount of EVM results and the compulsory counting of VVPAT paper slips need to be scrupulously followed. The time required for all this should not be regarded as an impediment to the electoral process. Key concerns and suggestions from the domain experts of the CCE are:
  1. End-to-end verifiability: Pre-determined and pre-set test patterns are known to be inadequate for verification of the integrity of an EVM. The present EVM system is not verifiable and is therefore unfit for democratic elections. To ensure independence between software and hardware, end-to-end verifiable systems with provable guarantees of correctness must be introduced and the ECI must declare its publicly-verifiable guarantees against spurious vote injections.
  2. If the correctness of an EVM cannot be established then it is practically impossible to predict whether an EVM can be hacked or not. In particular, that an EVM has not yet been detected to have been hacked provides no guarantee whatsoever that it cannot be hacked. Thus, elections must be conducted assuming that EVMs may possibly be tampered with.
  3. There must be a post-election audit of the EVM counts against manual counting of the VVPAT slips. In fact, it may be sufficient to tamper only a few EVMs to swing an election if a contest is close. Thus, in practice, it may be necessary to test more EVMs than even what the civil society and political party’s demand (30% and 50% respectively) to ensure verification and reliable ascertainment of results.
  4. There must be a stringent audit of the electronic vote count before the results are declared. The audit should not be based on ad hoc methods but by counting a statistically significant sample of the VVPAT slips according to rigorous and well-established statistical audit techniques. The audit may in some cases -- depending on the margin of victory -- require a full manual counting of VVPAT slips.
The Citizens’ Commission on Elections urges every citizen to regard the exercise of their franchise as an act of great responsibility which furthers the democratic ethos of the country. It is to achieve this intent that this Report is being placed before the public at a crucially important moment before five important state elections are to take place.
---
Click here to read the full report

Comments

TRENDING

Economist-editor's allegations on Narmada defamatory, baseless: Medha Patkar

Counterview Desk  In a reply directly addressed to well-known economist, journalist and columnist Swaminathan S Anklesaria Aiyar’s two articles in the Times of India (republished here and here ), calling them defamatory and wondering whether they were borne out of “ignorance or a conspiracy through political alliance”, Narmada Bachao Andolan leader Medha Pakar has said that the Narmada Sardar Saravar Project and the people's movement by adivasis, farmers, labourers, fish workers, potters and all the generations’ old communities from the river valley have suddenly come to be focused on, since the Gujarat elections are in the doorstep. She believes that while the “defamatory accusations with baseless conceptions such as ‘urban naxals’ are to be laughed at as the electoral strategic moves, one gets shocked to read the articles by a known old columnist like Swaminathan Ankalesaria Aiyar, published in a reputed daily like the Times of India." According to her, Aiyar’s two articl

Hindutva groups threat to peace, freedom: US diaspora groups tell FBI, other govt depts

By Our Representative  The Islamophobic and neo-Nazi ideology of Hindutva is a clear and present danger to peace and freedoms in the United States, a coalition of civil rights organizations told key officials of the U.S. Attorney General’s Office, the US Department of Justice (DOJ), and the Federal Bureau of Investigation (FBI) at a recent event in Edison, New Jersey. At the event titled United Against Hate, activists from American Muslims for Democracy (AMD), Hindus for Human Rights (HfHR) and Indian American Muslim Council (IAMC) made detailed presentations on this ideology of Hindu supremacism that is committing mass persecution of India’s Muslims and Christians and is rearing its ugly head in New Jersey as well as across the US. Attending the event were David S Leonardis, Special Investigator from the New Jersey Department of Law & Public Safety; Michael E Campion, Chief of the Civil Rights Division for the US Attorney General's Office; and Jonathan R Norbut of the U.S. Dep

Facing tough times, Rajasthan's Raika herders hold first-ever camel cheese festival

By Rosamma Thomas*  During the pandemic, the annual Pushkar camel fair in Rajasthan did not occur for fear of contagion; in 2022, it was called off again as lumpy skin disease affected cattle. At Sadri in Pali district, however, festivity continues – a two-day Camel Cheese Festival was held on November 23 and 24, 2022. Visitors spent time with the camel herds and their Raika, drank camel-milk tea with the herders and then returned to lunch at the Kumbhalgarh Camel Dairy, from where the Kumbhalgarh Fort is visible, to taste camel cheese. The Raika herders have been facing a tough time – camels are no longer used as much for transport or agriculture in Rajasthan. The animals have limited utility, but their milk is prized. Camel Charisma, the dairy at Kumbhalgarh, sends camel milk across the country to people who use it in therapy – for autistic children, improved blood sugar levels, or even to treat cancer. It is believed that the health benefits of the camel milk is because the animals

As polls approach, electorate 'failing to realise': Gujarat model is in a shambles

By DN Rath*  Gujarat assembly elections, scheduled to be held on 1 and 5 December 2022, is viewed by many as dress rehearsal for the 2024 Lok Sabha elections. When the suffering people have been pointing towards redressal of some local issues like absence of cleanliness, sewage problem, shortage of water supply, troubles created by stray cattle, insufficiency of streetlights, etc., it is evident that they are not fully aware that assembly elections are being fought on ideological standpoints and policy decisions. Nor is there the realisation that the state is in a shambles and the much-trumpeted ‘Gujarat model’ of development has proved to be a hoax. Like other states, the people of Gujarat are also back-broken by steep rise in prices to the tune of 400% in last 20 years. It is not that the government cannot control the spurt in prices if it so wants. Apart from the fact that price rise is an inevitability in a capitalist economy, artificial shortage triggered by massive hoarding, b

Shedding Hindu-Hindi-Hindustan? New Modi-Shah love for Tamil Nadu 'ignores' Periyar

By Sandeep Pandey*   The Rashtriya Swayamsewak Sangh (RSS) or the Bhartiya Janata Party (BJP) have long argued for ‘Hindu-Hindi-Hindustan’, which into recent years has translated into a crisper English expression: ‘One Nation-One Religion-One Language’. Given this backdrop, it is curious that the BJP government has organised the Kashi Tamil Sangamam in Varanasi, the Prime Minister’s constituency. Why did the BJP and RSS feel the need for such an event? All Narendra Modi events are highly publicised and have multiple political objectives. It is never an innocuous religious/cultural event as it may appear from the face of it. Afterall, RSS calls itself a cultural organisation, but has never ceased to surprise us with its political designs. Tamil Nadu has a long history of opposing imposition of Hindi by Union governments. Periyar EV Ramasamy had opposed the idea of compulsory teaching in Hindi as far back as in 1937. The 1960s witnessed violent protests against Hindi in which a number

Buddhist shrines were 'massively destroyed' by Brahmanical rulers: Historian DN Jha

Nalanda mahavihara By Our Representative Prominent historian DN Jha, an expert in India's ancient and medieval past, in his new book , "Against the Grain: Notes on Identity, Intolerance and History", in a sharp critique of "Hindutva ideologues", who look at the ancient period of Indian history as "a golden age marked by social harmony, devoid of any religious violence", has said, "Demolition and desecration of rival religious establishments, and the appropriation of their idols, was not uncommon in India before the advent of Islam".

GM mustard not swadeshi, it's a patent of MNC Bayer, GoI 'misleading' SC: Modi told

Counterview Desk  In a representation to Prime Minister Narendra Modi, as many as 42 farmers’ organisations though their representatives , backed by senior scientists and experts, have said that the Government of India (GoI) should stop misleading the Supreme Court “with untrue and incorrect” statements on GM mustard. Insisting that India does not need unsafe GM mustard, in their representation, they urged the Supreme Court to order immediate uprooting of GM mustard crop in various locations. The representation comes even as a penal of experts, coming down heavily on the GoI for refusing to see how in less than a week’s time the pollen from GM mustard will “start contaminating” non-GM mustard fields with transgenes, including male sterility and herbicide tolerant traits. Alleging that the GoI is actively misleading the Supreme Court with untrue and incorrect statements on GM mustard, Kavitha Kuruganti of the Coalition for a GM-Free India said, “We can list at least five areas where Gov

BJP poll gimmick? Bilkis Bano rape case 'pardon' vs Rajiv assassins' release

By Sandeep Pandey*  Supreme Court has released six convicts in the Rajiv Gandhi assassination case. This was bound to happen as earlier AG Perarivalan was released in the same case, setting a precedent. Even though four of them are Sri Lankans but a popular Tamil sentiment favoured the release of these convicts which is why Tamil political parties supported this and resolutions were passed by different governments in Tamil Nadu to his effect.  Rajiv Gandhi paid the price of sending Indian Peace Keeping Force to Sri Lanka where it got entangled with Liberation Tigers of Tamil Eelam and eventually the whole operation ended up is a fiasco.  However, most importantly Sonia and Priyanka Gandhi and probably Rahul too do not have any objections to the release of these convicts. In fact, Sonia Gandhi played an important role in getting the death sentence of the only lady among the convicts Nalini commuted to life term through the Tamil Nadu Governor. Priyanka visited Nalini in Vellore Jail and

Never-ending saga of sin tax: What if murder is taxed at Rs 1 crore, rape at Rs 5 crore?

By Moses Raj GS, Sangeetha Thomas*  What should have ended by June 30, 2022 as a 5 year experiment has resurfaced. The government has extended the levy of GST compensation cess by another 4 years till March 31, 2026. This cess, dubbed as the sin tax imposed on sin(ful) goods, is double the highest slab on indirect taxes. But only a few pay for it and the majority benefit, unendingly. The year 2017 is a landmark year for indirect taxes. With the grand idea of ‘One Nation, One Tax’ as a fiscal slogan subsuming all State based taxes such as octroi /entry tax, Value Added Tax (VAT), sales tax, taxes on lottery, betting and gambling, luxury tax, purchase tax, entertainment tax, property tax, professional tax and central sales tax into a single framework of Goods and Services Tax (GST) changed the contours of revenue collection. Complicating it further, India, with each State having its own size and revenue problems, has the most complex and highly centralised indirect tax structure in the w

Demand to withdraw 'anti-environment, anti-adivasi' forest conservation rules 2022

By Gopinath Majhi*  The Campaign for Survival and Dignity (CSD), Odisha, a coalition of adivasis and forest dwellers’ organisations, has sent a memorandum to the Ministry of Environment, Forest and Climate Change (MoEFCC) raising serious concerns over Forest (Conservation) Rules, 2022, notified by the Centre on June 29.  Contending that recent amendments and a host of executive orders/guidelines issued by the ministry undermine and dilute the FRA and threaten the rights of adivasis and forest dwellers, CSD demands that the 2022 FC Rules should be rescinded forthwith. Demanding withdrawal of such anti-people and anti-environment rules CSD Odisha organised a protest Dharana in front of State Assembly today on 25th November 2022 and submitted memorandums to the Hon’ble Governor of Odisha, Chief Secretary and Commissioner-cum-Secretary, ST & SC Development Department for conveying our concerns against the FC Rules 2022 to the Central Government for its withdrawal. The memorandums w