The Candid Eye

May 4, 2010

India’s Electronic Voting Machines Proven Insecure

In a collaborative study, a team of Indian and international experts have revealed that the electronic voting machines used in Indian elections are vulnerable to fraud. Even brief access to the machines, known in India as EVMs, could allow criminals to alter election results.

These research findings are at odds with claims made by the Election Commission of India, the country’s highest election authority, which has maintained that weaknesses found in other electronic voting systems around the world do not apply to India’s EVMs. Less than a year ago, it stated: “Today, the Commission once again completely reaffirms its faith in the infallibility of the EVMs. These are fully tamper-proof, as ever.” [1] As recently as two days ago, the Chief Election Commissioner described electronic voting machines as “perfect” and claimed that “till today, no individual could prove that the EVMs used by the EC can be tampered with.” [2]

Almost the entire population of India votes on electronic voting machines. There are around 1.4 million of the machines in use, all of the controversial “Direct Recording Electronic” (DRE) variety. Such machines record the votes only to internal memory and provide no paper records for later inspection or recount. With DREs, absolute trust is placed in the hardware and software of the voting machines. Paperless electronic voting systems have been criticized globally and more and more countries and US states are abandoning such systems altogether.

EVM : Image Courtesy -

In a video released today, the researchers show two demonstration attacks against a real Indian EVM. One attack involves replacing a small part of the machine with a look-alike component that can be silently instructed to steal a percentage of the votes in favor of a chosen candidate. These instructions can be sent wirelessly from a mobile phone. Another attack uses a pocket-sized device to change the votes stored in the EVM between the election and the public counting session (which in India can be weeks later).

This study was performed by researchers at NetIndia, (P)Ltd., in Hyderabad, the University of Michigan in the United States, and at a non-profit in the Netherlands that specializes in electronic voting related issues.

Inside EVM : Image Courtesy -

The researchers were also surprised to find that the vote-counting software in the EVMs is programmed into so-called “mask programmed microcontrollers,” which do not allow the software to be read out and verified. Because these chips are made in the US and Japan, this has led to a situation in which nobody in India knows for sure what software is in these machines or whether it counts votes accurately.

Hari Prasad is a computer engineer and managing director of NetIndia, a Hyderabad-based technology firm. Prasad organized the study and says the findings are the culmination of a seven month investigation. “Everywhere I looked there were more security problems. I am glad that with the presentation of this work, the debate over whether India’s EVMs are secure is over. We need to look forward now. India deserves a transparent election process, which these machines simply cannot deliver.”

Rop Gonggrijp, a security researcher from the Netherlands, also took part in the study. Says Gonggrijp: “Never mind what election officials say, this research once again shows that the longstanding scientific consensus holds true—DRE voting machines are fundamentally vulnerable. Such machines have already been abandoned in Ireland, the Netherlands, Germany, Florida and many other places. India should follow suit.”

Gonggrijp continues: “In order to have any transparency in elections, you need to have votes on paper. Computers can be programmed to count votes honestly, but since nobody can watch them, they might just as easily be programmed to count dishonestly. How is the voter supposed to tell the difference?”

Professor J. Alex Halderman of the University of Michigan helped develop the new attacks along with his students. “Almost every component of this system could be attacked to manipulate election results,” says Dr. Halderman. “This proves, once again, that the paperless class of voting systems has intrinsic security problems. It is hard to envision systems like this being used responsibly in elections.”

The newly released video and technical report can be found at

[1] ECI press release, August 8, 2009
[2] Interview with Navin B Chawla, India news, April 26, 2010

For more information, please contact


May 28, 2009

Electronic Voting Machines – Are they 100% tamper proof??

Filed under: Elections '09 — thecandideye @ 3:00 AM
Tags: , , , ,

The AIADMK in TamilNadu has passed a resolution recently that the Election Commission should revert to voting through ballot boxes.Excerpts on the same with my emphasis.

Accusing the Dravida Munnetra Kazhagam of using money power and malpractices to win the Lok Sabha polls, the All India Anna Dravida Munnetra Kazhagam said the Election Commission should revert to voting through ballot boxes.

Taking stock of the Lok Sabha election results, the party’s executive council meeting in Chennai, presided over by AIADMK general secretary Jayalalithaa, passed a resolution, stating that some developed countries reverted to ballot system of voting due to irregularities in the Electronic Voting Machines.

While there are some incidents in which the EVMs malfunctioned and changed the results of the election in that consituency,still they are considered fool proof by many people.These EVMs are manufactured by Bharat Elecronics,Bangalore and Electronic conrporation of India, Hyderabad.Election Commisson of India says there are a number of benifits using Electrnic machines instead using old ballot boxes and measures are taken to avoid possible malfunctioning.But still, some questions naturally arise regarding the EVMs.They are:

1) Some of the EVMs are malfunctioning  even though it is manufactured by Navaratna status company BEL. What is the quality control being followed for these machines in these companies?Are these measures stringent enough to avoid malfunctioning of the machines?

2) Are the EVMs used in India sufficiently shielded against Van Eck Phreaking?

3) I believe calibration is done properly for these machines.Are recalibration facilities/methods easily and quickly available in the event of malfunctioning?There are repeated incidents of EVMs switching votes in India similar to the one happened in West Virginia in 2008. In Tamilnadu, the switching happened in favour of DMK led alliance in number of places.Why did this not happen for AIADMK led alliance?

4) What are the information exchange protocals/standards being followed for the EVMs used in India?Whether EVMs are using the standards such as Election Markup Language(EML)?

5) I don’t think that the voting machine software has been made available for the people to analyse and improve as it is done in Australia under free software license.

Blog at