The output of mwscript extensions/SecurePoll/cli/dump.php for an encrypted election seems to strip out the encryption and signing keys, which means that to tally the election they need to be added back manually.

The output used to be like this:

[snip]
<property name="disallow-change">0</property>
<property name="encrypt-type">gpg</property>
<property name="gpg-encrypt-key">[public encryption key]</property>
<property name="gpg-sign-key">[private sign key]</property>
<property name="include-list">1303/list/include-list</property>
<property name="max-registration">20211001000000</property>
[snip]

We would then add <property name="gpg-decrypt-key">[public decryption key]</property> to the XML dump file, and tally it with tally.php. However, for some reason I can't work out, dump.php strips out all keys, meaning they need to all be added, which isn't ideal.

I wonder if this has something to do with T290277?