Blockchain-Based Voting Considered Harmful?
- 8 June 2022
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Network and Service Management
- Vol. 19 (3) , 3603-3618
Abstract
Blockchains (BC) and Distributed Ledgers (DL) offer favorable properties, especially immutability and decentralization, which are suitable for voting systems’ Bulletin Boards (BB). In recent years, an influx of BC-based voting systems have been observed. Distributing trust among multiple trustees is a crucial reason to adopt BCs and DLs in voting systems. The practical deployment must be decentralized, too, and not just done through virtualizing interconnected systems. As discussed widely, adopting a BC or DL can incur threats to a system that assumed a trusted and centralized Public Bulletin Board (PBB). Therefore, the exploitation of BCs or DLs requires careful consideration of cryptographic mechanisms and the overall system design, as well as the adversary model. Besides these operational necessities, the long-term privacy of ballots is essential. Thus, the key question investigated in this article is: Can BC, and DL-based voting systems be considered harmful? Hence, first (i) requirements of BC-based voting systems are provided, followed by (ii) terminology definitions, and (iii) complemented by the design and implementation of a fully decentralized voting system: Æternum, which achieves Unconditional Privacy (UP) and neither relies on computational hardness assumptions nor on a trusted Trusted Third Party (TTP). Achieving UP is crucial because future adversaries may be able to break hardness assumptions. Æternum does not present a Single-Point-of-Failure (SPoF) either, since (i) the PBB in use is based on a permissioned DL, and (ii) the final tally and proofs can be verified by anyone, without requiring trust in any authority.Keywords
Funding Information
- University of Zürich UZH, Switzerland, and (b) the European Union’s Horizon 2020 Research and Innovation Program (830927)
This publication has 49 references indexed in Scilit:
- SecDevOps: Is It a Marketing Buzzword? - Mapping Research on Security in DevOps2016
- Coercion-Resistant Internet Voting with Everlasting Privacy2016
- Selene: Voting with Transparent Verifiability and Coercion-Mitigation2016
- Verifiable Internet Elections with Everlasting Privacy and Minimal Trust2015
- The New South Wales iVote System: Security Failures and Verification Flaws in a Live Online Election2015
- Privacy and verifiability in voting systems: Methods, developments and trendsComputer Science Review, 2013
- Civitas: Toward a Secure Voting System2008 IEEE Symposium on Security and Privacy (SP 2008), 2008
- Software Engineering Using RATionaleJournal of Systems and Software, 2008
- Seeking absolute securityNature, 2007
- Political Trust and TrustworthinessAnnual Review of Political Science, 2000