Skip to content

The Election Record

The record of an election should be a full accounting of all of the election artifacts. Specifically, it should contain the following.

  • Date and location of an election
  • The ballot coding file
  • The baseline parameters
  • Primes 𝑝 and π‘ž and integer π‘Ÿ such that 𝑝=π‘žπ‘Ÿ+1 and π‘Ÿ is not a multiple of π‘ž
  • A generator 𝑔 of the order π‘ž multiplicative subgroup β„€*p
  • The number 𝑛 of election guardians
  • The quorum threshold π‘˜ of guardians required to complete verification
  • The base hash value 𝑄 computed from the above
  • The commitments from each election guardian to each of their polynomial coefficients
  • The proofs from each guardian of possession of each of the associated coefficients
  • The election public key
  • The extended base hash value 𝑄 computed from the above
  • Every encrypted ballot prepared in the election (whether cast or spoiled)
  • All of the encrypted options on each ballot (including β€œplaceholder” options)
  • The proofs that each such value is an encryption of either zero or one
  • The selection limit for each contest
  • The proof that the number of selections made matches the selection limit
  • The device information for the device that encrypted the ballot
  • The date and time of the ballot encryption
  • The tracker code produced for the ballot
  • The decryption of each spoiled ballot
  • The selections made on the ballot
  • The cleartext representation of the selections
  • Partial decryptions by each guardian of each option
  • Proofs of each partial decryption
  • Shares of each missing partial decryption (if any)
  • Proofs of shares of each missing partial decryption (if any)
  • Lagrange coefficients used for replacement of any missing partial decryptions (if any)
  • Tallies of each option in an election
  • The encrypted tally of each option
  • Full decryptions of each encrypted tally
  • Cleartext representations of each tally
  • Partial decryptions by each guardian of each tally
  • Proofs of partial decryption of each tally
  • Shares of each missing partial decryption (if any)
  • Proofs of shares of each missing partial decryptio(if any)
  • Lagrange coefficients used for replacement of any missing partial decryptions (if any)
  • Ordered lists of the ballots encrypted by each device

An election record should be digitally signed by election administrators together with the date of the signature. The entire election record and its digital signature should be published and made available for full download by any interested individuals. Tools should also be provided for easy look up of tracking codes by voters.