Thread by @matthew_d_green

@SarahJamieLewis @ciphergoth None of these parameters are even close to being cryptographically secure. This seems like a really big red flag, even if they’re just an example configuration.

Also who the hell doesn’t fix secure group params?! That by itself is a sev:high.

@SarahJamieLewis @ciphergoth If they actually ship this with 256 bit groups it’s not just broken, it’s catastrophically broken. You can decrypt and forge anything.

@SarahJamieLewis @ciphergoth Change votes, collide Pedersen commitments, completely own the election.

And if they don’t use properly-generated groups produced verifiable from a seed (as in FIPS 186) then there are other attacks a malicious election admin can pull off.

@SarahJamieLewis @ciphergoth I hate this kind of stuff. They’re clearly being boneheads who have no idea what they’re doing, but they’ll have just enough cover to claim that “it was just test code, don’t worry we’ll get it right for the real election.”