Machine-Checked Proofs of Privacy Against Malicious Boards for Selene & Co

Privacy is a notoriously difficult property to achieve in complicated systems and especially in electronic voting schemes. Moreover, electronic voting schemes is a class of systems that require very high assurance. The literature contains a number of ballot privacy definitions along with security pr...

Full description

Saved in:
Bibliographic Details
Published in2022 IEEE 35th Computer Security Foundations Symposium (CSF) pp. 335 - 347
Main Authors Dragan, Constantin Catalin, Dupressoir, Francois, Estaji, Ehsan, Gjosteen, Kristian, Haines, Thomas, Ryan, Peter Y.A., Ronne, Peter B., Solberg, Morten Rotvold
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.08.2022
Subjects
Computer security
e-voting
Electronic voting
Formal-verification
Privacy
Selene
Usability
Online AccessGet full text

Cover

More Information
Summary:Privacy is a notoriously difficult property to achieve in complicated systems and especially in electronic voting schemes. Moreover, electronic voting schemes is a class of systems that require very high assurance. The literature contains a number of ballot privacy definitions along with security proofs for common systems. Some machine-checked security proofs have also appeared. We define a new ballot privacy notion that captures a larger class of voting schemes. This notion improves on the state of the art by taking into account that verification in many schemes will happen or must happen after the tally has been published, not before as in previous definitions. As a case study we give a machine-checked proof of privacy for Selene, which is a remote electronic voting scheme which offers an attractive mix of security properties and usability. Prior to our work, the computational privacy of Selene has never been formally verified. Finally, we also prove that MiniVoting and Belenios satisfies our definition.
DOI:10.1109/CSF54842.2022.9919663