Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
The paper introduces ACE, a new electronic voting protocol designed to balance public auditability with voter privacy. ACE uses a publicly verifiable, tally-hiding aggregation mechanism combined with an Audit-or-Cast challenge to ensure votes are cast as intended, even with untrusted clients. By employing tallier-side re-randomization, ACE achieves information-theoretic receipt-freeness, assuming at least one honest tallier, while maintaining end-to-end verifiability and publicly tally-hiding results.
Finally, a voting protocol that lets you prove your vote was counted without revealing *how* you voted.
Electronic voting systems must balance public verifiability with voter privacy and coercion resistance. Existing cryptographic protocols typically achieve end-to-end verifiability by revealing vote distributions, relying on trusted clients, or enabling transferable receipts - design choices that often compromise trust or privacy in real-world deployments. We present ACE, a voting protocol that reconciles public auditability with strong privacy guarantees. The protocol combines a publicly verifiable, tally-hiding aggregation mechanism with an Audit-or-Cast challenge that enforces cast-as-intended even under untrusted client assumptions. Tallier-side re-randomization eliminates persistent links between voters and public records, yielding information-theoretic receipt-freeness assuming at least one honest tallier. We formalize the security of ACE and show that it simultaneously achieves end-to-end verifiability, publicly tally-hiding results, and strong receipt-freeness without trusted clients.