Re: DEP-16 Confidential votes

From	Russ Allbery <rra@debian.org>
Newsgroups	linux.debian.project
Subject	Re: DEP-16 Confidential votes
Date	2021-04-14 01:00 +0200
Message-ID	<C3AaK-3QQ-3@gated-at.bofh.it> (permalink)
References	<C3zRo-3H2-3@gated-at.bofh.it>
Organization	The Eyrie

Show all headers | View raw

Timo Röhling <timo@gaussglocke.de> writes:

> I would like to implement a cryptographic protocol that provides the
> same level of verifiability for secret votes as the currently used
> public votes. In particular, I would like to see some additional proof
> that the published hash values actually belong to eligible voters.

As Kurt mentioned (but buried in one of those debian-vote threads), take a
look at Belenios if you aren't already familiar with it.

https://www.belenios.org/

It presumably would need some work to be usable for Debian votes due to
needing integration with PGP signatures and our keyring, and unfortunately
we can't use the really cool homomorphic encryption mode because we want
to do Condorcet, but it otherwise seems like the right sort of direction.
As a bonus, the developer is a member of the Debian project.

I would rather an existing system like that, which has already undergone
some cryptographic peer review, than for us to try to come up with
something novel.  Secure online voting is an insanely hard problem, and
while we have enough unique conditions that we can probably relax the
constraints that make it unsafe for general population political
elections, there are still a lot of ways it can go wrong that are very
inobvious.

-- 
Russ Allbery (rra@debian.org)              <https://www.eyrie.org/~eagle/>

Thread

DEP-16 Confidential votes Timo Röhling <timo@gaussglocke.de> - 2021-04-13 11:10 +0200
  Re: DEP-16 Confidential votes Pierre-Elliott Bécue <peb@debian.org> - 2021-04-13 11:30 +0200
    Re: DEP-16 Confidential votes Timo Röhling <timo@gaussglocke.de> - 2021-04-13 11:50 +0200
      Re: DEP-16 Confidential votes Sam Hartman <hartmans@debian.org> - 2021-04-13 15:40 +0200
      Re: DEP-16 Confidential votes Adrian Bunk <bunk@debian.org> - 2021-04-13 18:20 +0200
        Re: Re: DEP-16 Confidential votes Timo Röhling <timo@gaussglocke.de> - 2021-04-14 00:40 +0200
          Re: DEP-16 Confidential votes Russ Allbery <rra@debian.org> - 2021-04-14 01:00 +0200
            Re: DEP-16 Confidential votes Pierre-Elliott Bécue <peb@debian.org> - 2021-04-14 18:50 +0200
              Re: DEP-16 Confidential votes Timo Röhling <timo@gaussglocke.de> - 2021-04-14 21:00 +0200
            Re: DEP-16 Confidential votes Timo Röhling <timo@gaussglocke.de> - 2021-04-14 19:10 +0200
              Re: DEP-16 Confidential votes Stéphane Glondu <glondu@debian.org> - 2021-04-16 18:10 +0200
                Re: DEP-16 Confidential votes Timo Röhling <timo@gaussglocke.de> - 2021-04-18 23:10 +0200
                Re: DEP-16 Confidential votes "Andrew M.A. Cater" <amacater@einval.com> - 2021-04-18 23:50 +0200
                Re: DEP-16 Confidential votes Kurt Roeckx <kurt@roeckx.be> - 2021-04-19 00:40 +0200
                Re: DEP-16 Confidential votes Thomas Goirand <zigo@debian.org> - 2021-04-19 00:20 +0200
                Re: DEP-16 Confidential votes Olek Wojnar <olek@debian.org> - 2021-04-19 07:00 +0200
                Re: DEP-16 Confidential votes Kurt Roeckx <kurt@roeckx.be> - 2021-04-19 09:10 +0200
                Re: DEP-16 Confidential votes Thomas Goirand <zigo@debian.org> - 2021-04-19 14:50 +0200
                Re: DEP-16 Confidential votes Olek Wojnar <olek@debian.org> - 2021-04-19 19:20 +0200
                Re: DEP-16 Confidential votes Olek Wojnar <olek@debian.org> - 2021-04-19 07:00 +0200
                Re: DEP-16 Confidential votes Thomas Goirand <zigo@debian.org> - 2021-04-19 14:50 +0200
                Re: DEP-16 Confidential votes Sam Hartman <hartmans@suchdamage.org> - 2021-04-19 15:20 +0200
                Re: DEP-16 Confidential votes Timo Röhling <timo@gaussglocke.de> - 2021-04-19 16:40 +0200

csiph-web