Protegendo o sistema operacional e chaves criptográficas numa urna eletrônica do tipo T-DRE

Abstract

Este documento mostra a nova configuração de chaves da Urna Eletrônica (UE), que agora está assentada em uma segurança computacional dentro do modelo ROM (Random Oracle Model), o que permitirá a abertura livre do código-fonte para a sociedade. Os modelos anteriores, baseados em guarda de chaves no código-fonte ou a sua derivação em tempo de execução, foram substituídos pelo uso de um módulo de segurança embarcado, que caracteriza as urnas brasileiras como do tipo T-DRE.

libharpia: a New Cryptographic Library for Brazilian Elections

“…In the beginning, the UE was based on personal computers, implementing a VirtuOS and Windows CE, and was designed by third parties. From 2005 onwards, the development of the most critical parts of the systems has been developed by TSE's engineers, including a new operating system based on Linux deployed in 2008 [Monteiro et al 2019]. In 2009, the security of the system was greatly improved by the adoption of a hardware trusted computing base (TCB) for direct recording electronic voting architecture, T-DRE in short.…”

“…We note that the vulnerabilities found are always patched by TSE and the fixes presented to researchers. In addition to the TPS, TSE has progressively been opening the system by open-sourcing parts of the solution [Alessandre 2021] and through academic publications [Coimbra et al 2017, Monteiro et al 2019].…”