Is the JCJ voting system really coercion-resistant? - Inria - Institut national de recherche en sciences et technologies du numérique
Pré-Publication, Document De Travail Année : 2022

Is the JCJ voting system really coercion-resistant?

Résumé

Coercion-resistance is a security property of electronic voting, often considered as a must-have for high-stake elections. The JCJ voting scheme, proposed in 2005 by Juels, Catalon and Jakobsson, is still the reference paradigm when designing a coercion-resistant protocol. We highlight a weakness in JCJ that is also present in all the systems following its general structure. This comes from the procedure that precedes the tally, where the trustees remove the ballots that should not be counted. This phase leaks more information than necessary, leading to potential threats for the coerced voters. Fixing this leads to the notion of cleansing-hiding, that we apply to form a variant of JCJ that we call CHide. One reason for the problem not being seen before is the fact that the associated formal definition of coercionresistance was too weak. We therefore propose a definition that can take into accounts more behaviors such as revoting or the addition of fake ballots by authorities. We then prove that CHide is coercion-resistant for this definition, and that JCJ is coercionresistant for a slightly weakened version of our definition, that models the leakage of information in JCJ.
Fichier principal
Vignette du fichier
chide.pdf (327.16 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03629587 , version 1 (04-04-2022)
hal-03629587 , version 2 (17-05-2023)
hal-03629587 , version 3 (13-02-2024)

Identifiants

  • HAL Id : hal-03629587 , version 1

Citer

Véronique Cortier, Pierrick Gaudry, Quentin Yang. Is the JCJ voting system really coercion-resistant?. 2022. ⟨hal-03629587v1⟩
362 Consultations
226 Téléchargements

Partager

More