Cryptology ePrint Archive: Report 2012/236

On Necessary and Sufficient Conditions for Private Ballot Submission

D. Bernhard and O. Pereira and B. Warinschi

Abstract: We exhibit the precise security guarantees that a public key encryption scheme needs to satisfy to guarantee ballot privacy when used in a large class of voting systems. We also identify new security notions for public key encryption that characterize the number of times that a public key can be used in different elections, and show that the most common ballot preparation approach that consists in encrypting the vote and adding a NIZK proof of its validity is sound, even without hardwiring the voter identity in the proof. Our results provide important steps towards proving the privacy of the ballot submission procedure in the widely deployed Helios voting system.

Category / Keywords: cryptographic protocols /

Date: received 27 Apr 2012

Contact author: olivier pereira at uclouvain be

Available format(s): PDF | BibTeX Citation

Version: 20120430:154117 (All versions of this report)

Short URL:

[ Cryptology ePrint archive ]