To provide verifiability, many e-voting protocols use Non-Interactive Zero-Knowledge proofs (NIZKs). Thanks to their non-interactive nature, NIZKs allow anybody, including third parties that do not participate in the protocol, to verify the correctness of the tally. Therefore, NIZKs can be used to obtain universal verifiability. Additionally, NIZKs also improve usability because they allow voters to cast a vote non-interactively.
The disadvantage of NIZKs is that their security is based on setup assumptions such as the common reference string (CRS) or the random oracle model. The former requires a trusted party for the generation of a CRS. The latter, though a popular methodology for designing secure protocols, has been shown to be unsound.
In this paper, we address the design of e-voting protocols that provide verifiability without any trust assumptions, where verifiability here is meant without eligibility verification. We show that Non-Interactive Witness-Indistinguishable proofs can be used for this purpose. All our e-voting schemes are private under the Decision Linear assumption, while the verifiability holds unconditionally. We first present a general construction that supports any tally function but with the drawback of representing the computation as a circuit. Then, we show how to efficiently instantiate it for specific types of elections through Groth-Sahai proofs.
To our knowledge, this is the first private e-voting scheme with perfect universal verifiability, i.e. one in which the probability of a fake tally not being detected is 0, and with non-interactive protocols that does not rely on trust assumptions.Category / Keywords: e-voting, verifiability, witness indistinguishability, bilinear maps Date: received 8 Oct 2016, last revised 24 Feb 2017 Contact author: vinciovino at gmail com Available format(s): PDF | BibTeX Citation Note: This version consists of a major revision of the previous one. The main scheme for general tally functions is untouched but we now added a more efficient instantiation for specific tally functions from Groth-Sahai proofs. Version: 20170224:115126 (All versions of this report) Short URL: ia.cr/2016/975 Discussion forum: Show discussion | Start new discussion