Abstract
Thoroughly auditing voting machine software has proved to be difficult, and even efforts to reduce its complexity have relied on significant amounts of external code. We design and implement a device that allows a voter to confirm and cast her vote while trusting only 1,034 lines of ARM assembly. The system, which we develop from scratch, supports visually (and hearing) impaired voters and ensures the privacy of the voter as well as the integrity of the tally under some common assumptions. We employ several techniques to increase the readability of our code and make it easier to audit.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Blaze, M., Cordero, A., Engle, S., Karlof, C., Sastry, N., Sherr, M., Stegers, T., Yee, K.-P.: Source code review of the Sequoia voting system. Technical report, California Secretary of State (July 2007)
Blum, L., Blum, M., Shub, M.: Comparison of two pseudo-random number generators. In: CRYPTO 1982: Advances in Cryptology (1982)
Bruck, S., Jefferson, D., Rivest, R.L.: A modular voting architecture (“Frogs”). In: WOTE 2001: Workshop on Trustworthy Elections (2001)
Calandrino, J.A., Feldman, A.J., Halderman, J.A., Wagner, D., Yu, H., Zeller, W.P.: Source code review of the Diebold voting system. Technical report, California Secretary of State (July 2007)
Eastlake, D.E., Crocker, S.D., Schiller, J.I.: RFC1750 - randomness recommendations for security, http://www.faqs.org/rfcs/rfc1750.html
ElGamal, T.: A public key cryptosystem and a signature scheme based on discrete logarithms. In: Blakely, G.R., Chaum, D. (eds.) CRYPTO 1984. LNCS, vol. 196, pp. 10–18. Springer, Heidelberg (1985)
Gardner, R.W., Garera, S., Rubin, A.D.: Designing for audit: A voting machine with a tiny TCB (full version) (2009), http://cs.jhu.edu/~ryan/min_tcb_voting/
Hall, J.L.: Transparency and access to source code in electronic voting. In: EVT 2006: USENIX/ACCURATE Electronic Voting Technology Workshop (2006)
Gibson, J.J.K.: Discrete logarithm hash function that is collision free and one way. In: IET Computers and Digital Techniques, vol. 138(6) (November 1991)
Kohno, T., Stubblefield, A., Rubin, A.D., Wallach, D.S.: Analysis of an electronic voting system. In: IEEE Symposium on Security and Privacy (2004)
Rukhin, A., Soto, J., Nechvatal, J., Smid, M., Barker, E., Leigh, S., Levenson, M., Vangel, M., Banks, D., Heckert, A., Dray, J., Vo, S.: A statistical test suite for the validation of random number generators and pseudo random number generators for cryptographic applications. In: NIST Special Publication 800-22 (2001)
Saraswat, V.: Java is not type-safe. Technical report, AT&T Research (August 1997)
Sastry, N., Kohno, T., Wagner, D.: Designing voting machines for verification. In: USENIX Security Symposium (2006)
Schnorr, C.P.: Efficient identification and signatures for smart cards. In: Brassard, G. (ed.) CRYPTO 1989. LNCS, vol. 435, pp. 239–252. Springer, Heidelberg (1990)
Senderek, R.: A discrete logarithm hash function for RSA signatures, http://senderek.com/SDLH/discrete-logarithm-hash-for-RSA-signatures.ps
Stein, R.M., Vonnahme, G., Byrne, M., Wallach, D.: Voting technology, election administration, and voter performance. Election Law Journal: Rules, Politics and Policy 7(2) (June 2008)
Thompson, K.: Reflections on trusting trust. Communications of the ACM 27(8) (1984)
von Neumann, J.: Various techniques used in connection with random digits. National Bureau of Standards Applied Mathematics Series, vol. 12 (1951)
Yee, K.-P.: Extending prerendered-interface voting software to support accessibility and other ballot features. In: EVT 2007: USENIX/ACCURATE Electronic Voting Technology Workshop (2007)
Yee, K.-P., Wagner, D., Hearst, M., Bellovin, S.M.: Prerendered user interfaces for higher-assurance electronic voting. In: EVT 2006: USENIX/ACCURATE Electronic Voting Technology Workshop (2006)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2010 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Gardner, R.W., Garera, S., Rubin, A.D. (2010). Designing for Audit: A Voting Machine with a Tiny TCB . In: Sion, R. (eds) Financial Cryptography and Data Security. FC 2010. Lecture Notes in Computer Science, vol 6052. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-14577-3_24
Download citation
DOI: https://doi.org/10.1007/978-3-642-14577-3_24
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-14576-6
Online ISBN: 978-3-642-14577-3
eBook Packages: Computer ScienceComputer Science (R0)