‘No EVM can be hacked. An embedded programme fused on the processor can’t be changed from outside’

What’s the story behind switching from ballot paper to EVMs?In the 1980s, then CEC Peri Shastry studied poll processes globally. He proposed automating India’s ballot paper process, while retaining the procedure. Col GK Rao, then R&D director at BEL, had a rudimentary EVM successfully tested in BEL’s trade union elections. BEL then developed semi-production EVM models – about 100 units were used in Kerala polls, 1986.In 1988, Rajiv Gandhi called for a demonstration. In attendance were Shastry, defence minister KC Pant, and a BEL team that included me as project head. Gandhi had concerns about rigging, ballot stuffing and booth capturing. He suggested introducing a time gap between each button press on the Ballot Unit (BU) to limit the number of votes that could be rapidly cast – so that no more than two votes could be polled per minute. This modification was carried out. Gandhi’s practical input to prevent misuse was crucial in making EVMs a secure and reliable voting system. What was the initial opposition reaction? Opposition parties alleged Congress wanted to ‘rig’ elections via EVMs. VP Singh and George Fernandes called for a demo, claiming any software controlled equipment can be meddled with. That whichever button voters pressed on BU, it was all ‘programmed’ to automatically shift votes to Congress candidates. What was Rajiv Gandhi’s response?He set up a high-level team headed by LK Advani to study these objections and recommend solutions. Experts from IITs, IETE, and DRDO, were tasked with attempting to “tamper” with EVMs within five days, to establish if these could be rigged/manipulated. At IIT Delhi, Prof PV Indiresan led a team of four PhD scholars and experts who worked round the clock for five days, using high-end equipment and simulators. Despite their best efforts and Indiresan’s assertion that any electronic device can be hacked, they couldn’t tamper with EVMs. After this failed attempt, production and supply of indigenous EVMs went smoothly. Has anything changed since and can EVMs be hacked now?No! But even if we, for a moment, give credence to those claiming the machines can be tampered with, there is another argument against EVMs’ vulnerability. It’s hard to manipulate machines on such a large scale. For instance, how many machines does one have to manipulate in order to rig an assembly election? It is basic maths.Say mean electoral win/loss margin in an assembly election is 5,000 votes. Each EVM can hold up to 3,000 votes. However, the number of voters in a booth is generally around 1,200. Let’s say 50% of these, that is 600, are manipulated to go in favour of a certain party. To manipulate 5,000 votes, one would have to manipulate a maximum of 9 machines. Also remember each vote added to someone is also one vote deducted from someone. So, to alter the result, one has to manipulate five machines for 50% votes. So, if EVMs are hacked, 50% manipulation at 3% of booths can subvert process integrity?Not a single EVM can be hacked. An embedded programme fused on the processor simply cannot be changed from outside. It’s like claiming the encryption algorithm on STARS-V (army’s basic communication system) can be changed from outside or through external wires/cables.How can anyone change a software programme without knowing the programme? If any expert wants to try his hand, he can visit me – I’ll give a printed circuit board with an embedded programme fused on the chip (not of EVM, but equivalent processor card) and will ask him to change it in my presence, or with experts. EVMs use ‘non-writable microprocessors’. What exactly does that mean?A non-writable microprocessor is a simple microchip. The writing pin is physically disabled. The processor has ROM (read only memory) and not ‘Read & Write’ version. Hence, the ‘core’ programme based on high-level encrypted algorithm is embedded/fused – can’t be changed. Argument is there are ways to write over such chips…No. It’s impossible to manipulate input or programme through BU to CU (control unit) via cables. The 64-pin IC (integrated circuit) is soldered on CU-PCB by wave soldering process. It cannot be accessed directly through cables.Also, the argument that a microchip on the wire can manipulate input to get a desired output without touching BU or CU doesn’t hold. I will reiterate it for those who keep asking if EVMs can be hacked through outside networks. No, simply because an EVM, including VVPAT, isn’t connected to the internet or any wireless network.