next up previous
Next: Conclusion Up: Security Observation Previous: Unreusability and Unduplicatability

Untraceability

In the registration phase, the voters' tallying keys are blindly signed (blind signature). The blind factors dissociate the tallying keys from the voters. So none can associate a particular ballot with particular voter although it could be convinced that the ballot is valid because of the signature signed by corresponding validated voting key.



Qi He
Thu Dec 25 16:06:46 EST 1997