eprint.iacr.orgpaperReverse Engineering IVXV: A Specification and Security Analysis of Estonia’s Internet Voting System
Reverse Engineering IVXV is an October 2026 ePrint paper by Tingfeng Yu and Thomas Haines that reconstructs a specification of Estonia's IVXV internet voting system from public source code and documentation, with an executable TLA+ model checked in TLC. It analyses individual and universal verifiability, privacy, coercion resistance and eligibility, compares IVXV with Belenios and Swiss Post, and reports new vulnerabilities, some confirmed with proof-of-concept tests, plus mitigations.
TL;DR Reconstructs IVXV's protocol spec and TLA+ model, finds new privacy and verifiability flaws in Estonia's e-voting system, and proposes mitigations.
Organisations named here
- Estonia
- Thomas Haines
- Tingfeng Yu
Technologies named here
- TLA+
- IVXV, Estonia's internet voting system
- TLC
- Belenios
- Swiss Post
- Proof-of-concept tests
- IVXV
Related in AppSec
github.comadvisoryFlowise MCP Security Bypass Enables RCE
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
github.comrepoOASIS
blog.trailofbits.comwriteup