26 reputation
4
bio website
location
age
visits member for 2 years, 6 months
seen May 6 '12 at 18:02

May
6
comment Voting System, is there a hole here?
+1. Would you happen to know anywhere i may submit a paper?
May
6
comment Voting System, is there a hole here?
I thought of a few solutions but i'd like to refine it and ask questions on the crypto board. I'll leave a comment when i decided on a method.
May
5
awarded  Commentator
May
5
comment Voting System, is there a hole here?
the same software is used it could lie behind your back and give you someone elses information who voted the way you wanted but use your ticket to vote for someone else. I guess now the problem is how do the software itself isn't cheating you. That is a good problem to think about. +1
May
5
comment Voting System, is there a hole here?
To make things simpler the party whos duty to send results to other parties can pick a GUID so each party can display the vote result as that instead of their unique party ticket id. As for the verficiation phase. Any software compatible with the protocol may be used although software could be used to identify you and track your information. But thats outside of the scope and doesn't affect your voting. Actually it could if...
May
5
comment Voting System, is there a hole here?
That is very interesting. I have thought about how to present this to the users. Non-experts do not need to understand how the technology works. Its great the scope is limited to "voting and counting can be verified reliably and without expert knowledge". The counting is simply all parties making ticket-id (which are anonymous) with who they voted for public. One can simply see if their vote shows up to see that they indeed voted and counted towards the results.
May
5
awarded  Supporter
May
5
comment Voting System, is there a hole here?
bump for further thoughts if you have any
May
4
comment Voting System, is there a hole here?
@HendrikBrummermann: I'm interested in what part I fail. I'm not sure why I failed as I believe I met my two goals (full annoying and pretty close to tamper proof if not tamper proof). I did leave out how someone may be verified as it would depend heavily on what is being elected. If its a school just punching in a username and password should be enough. If its a government they may let you do the same if you have a vote online account. or maybe you'll go somewhere with id and a smartphone which you use to scan your verification ticket. There are lots of possibilities.
May
4
awarded  Editor
May
4
revised Voting System, is there a hole here?
added 203 characters in body
May
4
comment Voting System, is there a hole here?
Those are pretty good questions and thoughts! I actually didn't think about what happens if C1 tampers (but i did imagine leak or be cahoots with another party)
May
4
comment Voting System, is there a hole here?
I also assumed no link will go down. If it does that pretty much stop things. I did try to have it load balance in both phases. But the verification phase the voter must know for at least that session. If C1 fakes you, you won't receive your tickets. Thats another reason who there is X+1 public keys. C1 can't see the public key you expect the data to be in. That would raise suspicion and have voters mad that something has been tampered. In voting phase C1 can't bc only the final party can see the vote tickets. In which case my question mentions. The voter would simply check and notice.
May
4
comment Voting System, is there a hole here?
I imagine if it is a real election you would get some kind of signed card and go to a building showing proper identification (like 2 gov issue id's) and get a token there which you use to start the process. It doesn't matter it depends what kind of election (if its a school it doesnt have to be that complex). The entire process I assume all parties record ALL the data it can get on you and at least one party is not in cahoots. If all parties are than it doesn't matter what you do anyways as they can all just claim they implement this and do something else.
May
4
comment Voting System, is there a hole here?
The entire data doesn't have to be encrypted with the public key. It just needs a way from hiding the next public key from the previous parties. Encrypting a key with the public key than encrypting the rest of data with the key is perfectly fine. Your gist of it is roughly correct. The verification-party is out of scope but it would have a public key which all parties know in advance to check if it is properly signed.
May
4
comment Voting System, is there a hole here?
Bullet 3: I just state the voter generate the keys but the voter isn't sending it to anyone unless stated. They are used in the encrypted data step. Each party have a public available and thats how the voter encrypts each key to make 'encrypted data' in step 4. The party would use its private key to decrypt. Public keys is decrypted because otherwise it would be the same down the chain and final party can partner up with first party to associate the voter and the tickets.
May
4
awarded  Student
May
4
comment Voting System, is there a hole here?
@CodeInChaos Interesting. I never heard of that. Thanks for telling me about it but are you suggesting I should change something here? I don't believe anything has to be signed blindly. I still need to separate the verification and the voting phase and I can't see what could change if I want to avoid parties seeing the voters IP address
May
4
asked Voting System, is there a hole here?