678 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
678 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
679 |
679 |
680 |
680 |
681 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
681 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
682 \mode<presentation>{ |
682 \mode<presentation>{ |
683 \begin{frame}[c] |
683 \begin{frame}<1-3>[c] |
684 \frametitle{\begin{tabular}{@ {}c@ {}}Lessons Learned\end{tabular}} |
684 \frametitle{\begin{tabular}{@ {}c@ {}}Lessons Learned\end{tabular}} |
685 |
685 |
686 \begin{itemize} |
686 \begin{itemize} |
687 \item keep a paper trail and design your system to keep this secure\medskip |
687 \item keep a paper trail and design your system to keep this secure\medskip |
688 \item make the software open source (avoid security-by-obscurity)\medskip |
688 \item make the software open source (avoid security-by-obscurity)\\ |
|
689 {\small\mbox{}\hfill source code for Estonian vote \textcolor{blue}{\url{http://goo.gl/oRMHAI}}}\medskip |
689 \item have a simple design in order to minimise the attack surface |
690 \item have a simple design in order to minimise the attack surface |
690 \end{itemize} |
691 \end{itemize} |
|
692 |
|
693 \only<2>{ |
|
694 \begin{textblock}{9}(3.4,7) |
|
695 \begin{tikzpicture} |
|
696 \draw (0,0) node[inner sep=2mm,fill=cream, ultra thick, draw=red, rounded corners=2mm] |
|
697 {\normalsize\color{darkgray} |
|
698 \begin{minipage}{9cm}\consolas\small |
|
699 def analyze(ik, vote, votebox):\\ |
|
700 \\ |
|
701 \# TODO: implement security checks\\ |
|
702 \# such as verifying the correct size\\ |
|
703 \# of the encrypted vote\\ |
|
704 \\ |
|
705 return [] |
|
706 \end{minipage}}; |
|
707 \end{tikzpicture} |
|
708 \end{textblock}} |
691 |
709 |
692 \end{frame}} |
710 \end{frame}} |
693 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
711 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% |
694 |
712 |
695 |
713 |