Ballot secrecy and ballot independence coincide

This paper presents a formal definition of ballot independence as a cryptographic game and proves that ballot secrecy implies ballot independence.

Ben Smyth & David Bernhard (2013) Ballot secrecy and ballot independence coincide. In ESORICS'13: 18th European Symposium on Research in Computer Security (LNCS), 463–480, Springer.

Abstract

We study ballot independence for election schemes:

  • We formally define ballot independence as a cryptographic game and prove that ballot secrecy implies ballot independence.
  • We introduce a notion of controlled malleability and show that it is sufficient for ballot independence. We also show that non-malleable ballots are sufficient, but not necessary, for ballot independence.
  • We prove that ballot independence is sufficient for ballot secrecy under practical assumptions.

Our results show that ballot independence is necessary in election schemes satisfying ballot secrecy. Furthermore, our sufficient conditions will enable simpler proofs of ballot secrecy.

$ curl -s https://publications.bensmyth.com/files/Smyth13-ballot-independence-for-election-schemes.bib | cat
@inproceedings{Smyth13-ballot-independence-for-election-schemes,
  title = {{Ballot secrecy and ballot independence coincide}},
  year = {2013}, author = {Ben Smyth and David Bernhard}, doi = {10.1007/978-3-642-40203-6\_26},
  url = {./},
  url-pdf = {./files/ballot-independence.pdf},
  url-bib = {./files/ballot-independence-for-election-schemes.bib},
  url-yaml = {./files/ballot-independence-for-election-schemes.yml},
  url-md = {./files/ballot-independence.md}
}