SECURITY& VERIFIABILITY IN CONTEXT

OLV VOTE INDIVIDUAL UNIVERSAL

SECURE &
PRIVACY ELIGIBILITY CORRECT-
VERIFICATION INTEGRITY VERIFICATION
NESS

VERIFIABLE End-to-End Cast-as- Counted-

ONLINE
Encryption Intended as-Recorded
Eligibility Recorded- Bulletin
Verification as-Cast Board

VOTING
Audit
Vote Ballot Box
Correctness Integrity
Check

THE STEPS
A citizen’s vote
is encrypted on
the voter’s
device,
CREDENTIALS PHASE

ensuring the
Voting Cedentials

vote remains Encrypted

secret votes are also
throughout
VOTING CARD
digitally signed VALIDATION CODE
0921 Receipts
the voting and on the voter’s
RETURN CODES

allows to
01
VOTING CARD A 1131
B 2348

tallying
VALIDATION CODE

device using a
C 1056

voters to verify
0921
RETURN CODES CONFIRMATION CODE
35274673

process.
A 1131

key roaming if their votes

B 2348 FINALIZATION CODE
C 1056
15149002
CONFIRMATION CODE

mechanism, have been

35274673
FINALIZATION CODE
15149002

protecting the stored in the

integrity of ballot box
votes and 1 by checking a
ensuring voter public Bulletin
VALIDATION
CODE

eligibility. 0921 Board.

2
RETURN CODES

1131

1.1
VOTING PHASE

A B C Ballot box

02
Voting

RETURN CODES
integrity can be
1
1131
verified by
using the
Bulletin Board,
digital Mathematical
signatures proofs
4 and produced by
mathematical the Mix-net
proofs of the and
votes. decryption
processes
3
Mathematical
provide
proofs
Immutable
evidence of
produced by
Ballot Box Recording

Bulletin
Board the accuracy
Voting Return Codes the Mix-net
of the
servers can allow voters to and
counting
check if the check against decryption
process and
contents of their voting processes
therefore, the
03 the
encrypted
votes are
cards if the
encrypted
vote received
0011100011010
00111011011100
accuracy of
the results.
can be
published in
an Immutable
11101101000101
valid by the server Bulletin Board
without contains the to facilitate
needing to selected 2
public audits.
decrypting voting options,
them, again without 0011100011010
00111011011100

allowing to breaking vote 11101101000101

double secrecy.
check that
invalid votes
are not cast
Ballot Box Verification

accidentally
by voters, all
this without
breaking
vote

04 secrecy. 0011100011010
00111011011100
11101101000101

0011100011010
00111011011100
11101101000101
TALLY PHASE

Mixing

05
Decryption

06
A

C B A

Votes are
decrypted
A
C using a
verifiable
Mix-net and a
secret sharing
Tallying

07
scheme. This ELECTION
AUTHORITY

EA
ELECTION
AUTHORITY

EA
ELECTION
AUTHORITY

EA

Immutable
ensures that Bulletin
Board
the anonymity
A B C
of voters is
maintained
when vote
74% 65% 42%
26% 74% 35% 65% 58% 42%

contents are
counted.

Verifiability Matters
End-to-end verifiability ensures that both Individual Verifiability and Universal
Verifiability are enabled. This allows voters to verify that the ballot they cast includes
the selections they intended, check that their vote has been stored in the ballot box
and verify that their vote has been tallied in the final results. E2E verifiability can be
further improved by adding eligibility verifiability and vote correctness processes.

Individual Verification & Universal Verification

Cast-as-Intended Recorded-as-Cast Counted-as-Recorded