Josh Benaloh. Senior Cryptographer Microsoft Research

Transcription

1 Josh Benaloh Senior Cryptographer Microsoft Research

2 September

3

4

5

6

7 Findings and Recommendations The election equipment market and certification process are badly broken. We need better ways to incentivize innovation.

8 Findings and Recommendations Congressional funding should be provided to better support Election Assistance Commission, state and local jurisdictions, research, and NIST standards (VVSG).

9 Findings and Recommendations States should provide more election funding, participate in cross-state registration list matching programs, and provide vote-by-mail tracking.

10 Findings and Recommendations Internet Voting should not be done today (and never with blockchains).

11 Findings and Recommendations There was extensive Russian intrusion into the 2016 election in the form of disinformation and infiltration of voter registration databases. However, there is no evidence of tampering with actual votes.

12 Findings and Recommendations Nevertheless, the vote casting and tabulation systems are extremely vulnerable.

13 Prof. J. Alex Halderman University of Michigan My undergraduate security class could have changed the results of the 2016 election.

14 Findings and Recommendations We should replace existing paperless voting systems with paper-based systems.

15 Findings and Recommendations We must apply best practices to our election registration and voting systems. However, this is not sufficient. The challenge is asymmetric.

16 Findings and Recommendations Since we can t ensure that our election systems cannot be corrupted, good auditing is essential. We can at least detect tampering even if we can t prevent it.

17 Findings and Recommendations Two kinds of auditing are recommended. 1. Administrative: Risk-Limiting Audits 2. Public: End-to-End Verifiability

18 Risk-Limiting Audits Advanced statistical methods and new techniques can enable far more efficient traditional administrative audits.

19 End-to-End (E2E) Verifiability Cryptographic techniques can enable public audits that shift the paradigm and democratize the electoral process.

20 What is Possible? Technology exists that enables any inaccuracies and tampering of election tallies to be detected not just by election officials, but also by any candidate, media outlet, voter, or other observer and not just external tampering, but corruption by election officials, equipment vendors, and others. This is known as End-to-End (E2E) Verifiability.

21 End-to-End Verifiable Elections An election is end-to-end verifiable if 1. Voters can verify that their own selections have been correctly recorded. 2. Anyone can verify that the recorded votes have been correctly tallied.

22 I d love to describe how but I could easily spend 90 minutes. Here s the 90 second version.

23 Privacy must be Enforced Voters must be unable to disclose their votes to others. Open-ballot elections would be sooo much easier to secure.

24 Elections Prior to Secret Ballots The County Election George Caleb Bingham 1852

25 A Public Election Ledger Voter Name Alice Smith Bob Williams Carol James David Fuentes Ellen Chu Vote Jefferson Adams Adams Jefferson Jefferson Totals Jefferson 3 Adams 2

26 An End-to-End Verifiable Election Voter Name Alice Smith Bob Williams Carol James David Fuentes Ellen Chu Vote Jefferson Adams Adams Jefferson Jefferson Totals Jefferson 3 Adams 2

27 A Secret-Ballot E2E-V Election Voter Name Vote Alice Smith Jefferson X37BM6YPM Bob Williams Adams 2J8CNF2KQ Carol James Adams VRSF5JQWZ David Fuentes Jefferson MW5B2VA7Y Ellen Chu Jefferson 8VPPS2L39 Totals Jefferson 3 Adams 2

28 A Secret-Ballot E2E-V Election Voter Name Vote Alice Smith Jefferson X37BM6YPM Bob Williams Adams 2J8CNF2KQ Carol James Adams VRSF5JQWZ David Fuentes Jefferson MW5B2VA7Y Ellen Chu Jefferson 8VPPS2L39 Totals Jefferson 3 Adams 2

29 A Secret-Ballot E2E-V Election Voter Name Vote Alice Smith Jefferson X37BM6YPM Bob Williams Adams 2J8CNF2KQ Carol James Adams VRSF5JQWZ David Fuentes Jefferson MW5B2VA7Y Ellen Chu Jefferson 8VPPS2L39 Totals Jefferson 3 Adams 2

30 A Secret-Ballot E2E-V Election X37BM6YPM 2J8CNF2KQ VRSF5JQWZ MW5B2VA7Y 8VPPS2L39 Totals Jefferson 3 Adams 2

31 A Secret-Ballot E2E-V Election Mathematical Proof X37BM6YPM 2J8CNF2KQ VRSF5JQWZ MW5B2VA7Y 8VPPS2L39 Totals Jefferson 3 Adams 2

32 A Secret-Ballot E2E-V Election Voter Name Vote Alice Smith Jefferson X37BM6YPM Bob Williams Adams 2J8CNF2KQ Carol James Adams VRSF5JQWZ David Fuentes Jefferson MW5B2VA7Y Ellen Chu Jefferson 8VPPS2L39 Totals Jefferson 3 Adams 2

33 Current Technology This is not speculative new technology. The basic techniques have existed for decades and there are several ways to realize them. But new refinements are now making this practical just at a time when the need is being appreciated.

34 Real-World Deployments Helios ( Adida and others Used to elect president of UC Louvain, Belgium. Used in Princeton University student government. Used by ACM, IACR, and other professional societies. Scantegrity II ( Chaum, Rivest, many others Used for 2009 & 2011 municipal elections in Takoma Park, MD. STAR-Vote Benaloh, Byrne, Eakin, Kortum, McBurnett, Pereira, Stark, Wallach Designed for use in Travis County, Texas.

35 2015 U.S. Vote Foundation study Internet voting in public elections should never be done without E2E-verifiability.

36 New (draft) 2018 EAC standards (VVSG): Compliant systems must either be paper-based or E2E-verifiable.

37 Thank you.

38 What About Blockchain Voting? Can blockchain technology be used to enable secure online voting?

39 Applications of Blockchains Distributed Currency Contracts Distributed Public Ledger Applications Voting?

40 Blockchains and Elections Elections have central authorities. Set the ballot contents Set and maintain eligibility requirements Set start/end time of election Note that authority need not be trusted!

41 Blockchains and Elections An election s designated central authority can simply post the same information (digitally signed) on a public web site.

42 Blockchains and Elections Blockchains do not provide anonymity and authentication. These can be provided with cryptography. But once the cryptography is added, the blockchains become superfluous.

43 Blockchains and Elections Blockchains don t solve fundamental problems with online voting. Client malware can change votes. Targeted DoS can disenfranchise voters. Voters are subject to coercion.

44 Blockchains and Elections Blockchains create new problems. There is no accountability. There is no certainty. A mining majority has total control.

45 Variations? Not all blockchains look like bitcoin. Private rather than public blockchains Proof of stake rather than proof of work DAGs rather than chains