Ballot secrecy is achievable with varying degrees of information leakage: At one extreme, winner-only secrecy reveals just the winning candidate. At the other, secrecy by anonymity reveals anonymised votes. I champion tally-then-decrypt secrecy for delivering on traditional privacy expectations, wherein an election reveals nothing more than a frequency distribution of voters' votes. The gulf between anonymised votes and vote frequency distributions is witnessed by mixnets revealing the contents of every individual ballot (i.e., anonymised votes), whilst homomorphically combining ballots reveals only a frequency distribution.
@misc{2024-tally-then-decrypt,
author = "Ben Smyth",
title = "{Championing tally-then-decrypt secrecy}",
year = "2024",
}