Page MenuHomePhabricator

Dump should return decrypted votes
Closed, DeclinedPublic

Description

The dump provided for encrypted elections includes the decryption key anyway, so why just return the votes as encrypted messages? Instead, the dump should return the decrypted votes as well.

Event Timeline

Huji triaged this task as Lowest priority.Sep 15 2016, 2:43 PM

https://gerrit.wikimedia.org/r/#/c/310824/ should address this. I will await review and approval for that patch. If approved, I will also create a similar patch for the CLI code.

Change 310824 had a related patch set uploaded (by Huji):
Dump should return decrypted votes

https://gerrit.wikimedia.org/r/310824

Change 310824 merged by jenkins-bot:
Dump should return decrypted votes

https://gerrit.wikimedia.org/r/310824

Mentioned in SAL (#wikimedia-operations) [2017-05-18T18:37:37Z] <dereckson@tin> Synchronized php-1.30.0-wmf.1/extensions/SecurePoll/includes/pages/DumpPage.php: Revert "Dump should return decrypted votes" (T145695) (duration: 00m 48s)

@Jalexander what about we modify the interface such that the user can choose whether they want the votes decrypted or not.

Removing task assignee due to inactivity, as this open task has been assigned to the same person for more than two years (see the emails sent to the task assignee on Oct27 and Nov23). Please assign this task to yourself again if you still realistically [plan to] work on this task - it would be welcome.
(See https://www.mediawiki.org/wiki/Bug_management/Assignee_cleanup for tips how to best manage your individual work in Phabricator.)

I think we went the opposite way with this one. Following T288924 the decryption key no longer appears in the dump, so this task may be moot.

Boldly closing this since I believe the direction taken in T288924: Private keys visible to anonymous users in SecurePoll dump implies this is not desirable behaviour.