A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW...

29
School of Computing Science, University of Newcastle upon Tyne A Dependability Analysis of the Chaum Digital Voting Scheme Jeremy Bryans and Peter Ryan Technical Report Series CS-TR-809 July 2003 Copyright c 2003 University of Newcastle upon Tyne Published by the University of Newcastle upon Tyne, School of Computing Science, Claremont Tower, Claremont Road, Newcastle upon Tyne, NE1 7RU, UK.

Transcript of A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW...

Page 1: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

School of Computing Science,University of Newcastle upon Tyne

A Dependability Analysis of theChaum Digital Voting Scheme

Jeremy Bryans and Peter Ryan

Technical Report Series

CS-TR-809

July 2003

Copyright c©2003 University of Newcastle upon TynePublished by the University of Newcastle upon Tyne,

School of Computing Science, Claremont Tower, Claremont Road,Newcastle upon Tyne, NE1 7RU, UK.

Page 2: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

� ����������� ��������������� ���������������! �#"$ %�& �'�)(*�+�! �, � �!���(.-0/1 ��&2�

354768479;:=<�6>:@?BA�CD?BA�EGF�47H�476JID:@?KALDM C�H�68?BNOH

P;Q;RBSTQ�UVQ�W7X0Y[Z]\^UV_�`KUVUV\bacWGaOdeXVfKQgSTQ�h7`B\bSVQ�i*Q�W7XTUjdkalS0YnmcacXV\bWBopUrq]UrXVQ�iJstXTfBQ�WuYZ]Q�XTYO\bvbQ�ZuZ]QwUV_�SV\bR]XT\xalWuaOdyXTfBQnz{fKYc`Bi|Z]\boc\xXTYcv}mlaOXV\bWBo=UT_+fBQ�i*Q�~ �O�e��\xXVf�SVQwUrR�Q�_)X0XVaXVfKQ�UVQeSTQ�h7`B\bSTQ�ijQ�W7XTU���tfB\^U}STQ�R�acSVX}\^U}\xW7XVQ�WKZ]QwZ�RBST\xi�YcSV\bvxqJXTa0RBSTa8m�\bZ]Q*Y0Z]Q�XTYc\xvbQ�Z;YOWKZ�s���Q�fBalR@Q�d�YO\bSTvxq

Yc_�_)QwUVUV\x�KvxQls{Z]QwUV_�SV\bR]XV\bacW�aOdeXVfKQXVQ�_+fKWB\b_�YOv�YlUrR�Q�_)XTUjaOdyZ]\boc\xXTYcv�mcaOXT\xWKo�STQ�h7`B\bSTQ�ijQ�W7XTUYOW@Z=XTfBQ�z{fKYc`Bi�UV_+fBQ�ijQc����XJZ]a�Q�UDWKaOX0UVQ�Q��=XVapQ��]RBvxalSVQ�Ycvxv�XVfBQ�R�alUTUV\x�BvbQ�UVa�_�\bYcv�sRKUVq]_+fBacvbacol\b_�YOv�s7R�acvb\xXV\^_�YOv�acS�Qw_)acWKacij\b_yYlUrR�Q�_)XTU�acd!ZB\xol\�X+YOv5mlaOXV\bWBo@�{�tfB\^U���QyvxQwY>mcQ�dkacSaOXTfBQ�S�STQ�R�acSVXTU��

� � �*�!���D��%/��!�����

 �alSVQ�XVQw_+fBWBalvxaloc\^_�YOvbvbq UralRBfB\^U¡XT\b_�Y8XVQwZ�Ycv�XTQ�STWKY8XT\xmlQ�U�XTa�XVfBQtXTSTYlZ]\�XT\xalWKYOv]R�Q�WDYcWKZ*RKYOR�Q�SijQ)XTfBa]ZBU�acd{_�YlU¡XT\xWKo0YOWKZ;_)al`BW7XV\bWBoDmcacXVQwU}YcSVQ�_�`BSTSVQ�WlXTvxq\bW�`KUVQ�\bW�i�YOW�q�_)al`BW7XVST\xQwU�sYOW@Z�YcSVQe�@Q�\xWKo*\bW�mcQwU¡XT\xo7Y8XVQwZD\bW�i�YcW7q0aOXVfKQ�S+U����tfBQy¢�£¤oca8mlQ�STWBijQ�W7X{fKYlU�U¡X+Y8XTQ�Z�\�Xw¥ UQ�W7XTf7`@Ur\^YcUVi¦dkalS}UV`K_+f�UT_+fBQ�ijQ�U�~�§w¨8�!YOWKZ�YDW7`Ki���Q�SeaOd�XVS+YO\bv^U�fKY>mlQy�@Q�Q�W�R�Q�SVdkacSTijQ�Z�sQc� oK�5~ ©8���ª�tfBQ�ijaOXT\xm8Y8XT\xalWJdkacStXVfK\bU�YcRBR�Q�YOS+U{XVaj��Qc«

¬  gYO��\xWKo�XTfBQ�_�YcUrXV\bWBojaOd�Y�mlaOXTQeijalSVQ _�acW�mcQ�WB\xQ�W7XtYcWKZYORBR�Q�Ycvx\bWBoji�Y>q0vbQ�YcZ0XVa\bijRBSTa8mcQ�Z0XV`KSVWBal`]X��

¬p­ vxQw_�XTSValWB\b_�XTYc�B`Bv^Y8XV\bacWJYOWKZ�_)al`BW7XV\bWBo�acd®mcacXVQwU1i�Y>q���Q�d�YlU¡XTQ�S�YOWKZ0vxQwUVU�v^YO��ac`BS\bW7XVQ�WKUr\bmcQl�

¬p¯ SVol`KYO�Kvxqls@Z]\boc\xXTYcv5XVQw_+fBWBalvxalocq�_�ac`Bv^ZRBSTa8m�\bZ]QyolSVQwY8XTQ�S�Yl_�_)`KSTYl_)q0YcWKZ�R�Q�STfKYORKUQ�mcQ�W�olSVQwY8XVQ�S�YOWBalW7q�ij\xX¡q�XVfKYcWJ_�acW�mcQ�W7XV\bacWKYcv�s�R�Q�W�YOWKZJRKYcR@Q�S�YORBRKSVa7Yc_+f5�

��X�\bU�WBacX{XTfBQ�RB`BSTR@a7UrQ}aOd5XTfB\bUtR@YOR�Q�S�XVajZ]Q��@Y8XVQ}XVfKQ}m8YOvb\^Z]\�X¡q�acd®XTfBQ�UVQe_�vbYc\xi�U{�B`]XXVaXTSVqgXVadkalSVi�YOvb\^UrQ*XVfKQDSVQwh7`B\xSTQ�ijQ�WlX+U�aOd�YmcacXV\bWBo�UV_+fBQ�ijQDYOWKZ;XVfKQ�WpYOW@YOvbq�UVQ*XVfBQQ)��XTQ�W7X XVa���fK\b_+fpY�R@YOSVXV\^_)`Bv^YOSyRBSTacR�alUVQ�ZnUT_+fBQ�ijQ�°kXVfBQ�z{fKYO`Bi'UT_+fBQ�ijQcs�RBSTQ�UVQ�W7XVQwZ\bW�~ �8�k±}Yl_+fB\bQ�mcQwU}XVfBQwUrQ*oca7YOv^U��� gYOW�q�aOd{XVfBQ�UT_+fBQ�ijQ�U}XTfKY8XyfKY>mlQ���Q�Q�W�RB`]XydkalSV�tYOS+ZYORKR@QwYOStXVajfKY>mlQ�vx\xXrXTvxQy\bWXVfBQy�tY>q�aOd�_+fBQw_+��UtalW0XTfBQ _)alSVSTQ�_)X�SVQw_)acS+Z]\bWBojYOWKZ�XTYcvxvbq�\xWKoaOd�mcacXVQ�U����tfKQ�z{f@YO`Bi¤UT_+fBQ�i*Q�\^U!aOd@\bW7XVQ�SVQwU¡X���Q�_�Yc`KUVQ{\xXªRBSTa8m7\^Z]QwU5XTfBQtmcaOXTQ�S!��\xXVf*XVfBQR�alUTUr\b�B\bvx\xX¡q�aOd�mcQ�SV\xdkq�\xWBo�XVf@Y8XyXVfKQ�\bSymcaOXTQ�\^UyYc_�_)`BS+Y8XTQ�vbq�\xW@_)vb`KZ]Q�Z�\bWgXTfBQj²KWKYcv!XTYcvxvbqcs��fB\bvxQyi�Yc\xW7XTYc\xWK\xWBo�XVfKQ UrQw_)STQ�_)q0aOd®XTfBQyQ�vbQ�_)XV\bacW5�¯ vxXVfBal`Bocf��{QeYOSTQ�\bWlXTQ�STQ�UrXVQwZ�\xWJZ]\boc\xXTYOv�mcacXV\bWBo�\bW0olQ�WBQ�STYcv�sl\xW0XVfB\^U�RKYOR�Q�S���Q���\bvxv

dka]_)`KUDac`BSDYOXrXVQ�W7XV\bacW�RBST\xi�YOST\bvxq[alW³XTfBQ;z{fKYc`Bi´UT_+fBQ�ijQl�u�tfBQ�SVQwYcUVacW³dkacSjXTfB\bUD\bUXVf@Y8X�XTfB\bUeUT_+fBQ�ijQyaOµ�Q�S+U�YjW�`Bi��@Q�S�acd!R@YOSVXV\^_)`Bv^YOSTvxq�\xW7XTQ�STQ�UrXV\bWBojdkQ�YOXV`BSTQ�U�dkSVali¶��aOXTfY�Z]Q�R@Q�WKZBYO�K\xvb\�X¡q�YOWKZnYcW�\bW7XVQ�STZ]\^UT_)\bRBvx\bWKYcSVq�R�ac\bW7X aOdtm�\xQ��y�0��X \^UyXVf�`KU�YcU�Q)�B_�Q�vbvxQ�WlX_�YcWKZ]\^ZBY8XTQedkacS�Yj·��¡¸�z�_�YlUrQyUrXV`KZ]ql�

§

Page 3: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

P;QJU¡X+YOSVX ��\�XTfpY�Z]\^UV_�`KUTUr\bacWnaOdtXTfBQDSTQ�h7`B\bSVQ�i*Q�W7XTU�aOd�Y�mlaOXT\xWBo�UVq]U¡XTQ�i�\xW���Qw_��XV\bacW��Bs�YcWKZ�\xW���Qw_�XT\xalWn¨ol\xmlQDY�BST\xQ�d�a8mlQ�STm7\bQ�� aOd�UralijQDZ]\xol\�X+YOvªmlaOXT\xWBo�UT_+fBQ�i*QwU��� W���Qw_�XV\bacW[����QDol\xmlQDYOW[\bWlXT`B\xXV\bmcQDa8mlQ�STm7\bQ�� aOdtXVfKQJz{fKYO`Ki UT_+fBQ�ijQ0YcWKZ;XVfBQ�Wp\bW��Qw_�XV\bacW@U��YOW@Z��YijacSTQDZ]Q)X+YO\bvxQwZpZ]Q�UT_)ST\bR]XV\bacW�XVfKQ0_)ali*i�`BWB\^_�YOXV\bacWnXVS+YOW@UVYl_�XV\bacW@U��Q)X¡��Q�Q�W0XVfBQ�mlaOXVQ�STU�slXVfBQ�mcacXV\bWBo*ijYl_+fB\bWBQeYcWKZ�XTfBQeXVST`KUrXVQ�QwU����tfBQ�_�Ycvb_�`Bv^Y8XV\bacW@U1XTfKY8XQ�Yl_+f�R@YOSVX¡qDi�`KUrX�R�Q�SVdkacSTi¦YOSTQyZ]Q�UT_)ST\x��Q�Z5sKYcUt��Q�vbv5YcU�XTfBQ�_+fBQw_+��U{XTfKY8X}YcSVQ�Y>m8YO\bvbYc�BvbQXVa*\bWKZ]Q�R�Q�W@Z]Q�W7X�RKYcSrXT\xQwUªXTfKY8X�Q�W@Ur`BSTQ}XVfKYOX�XTfBQ�UVQ�_�YOv^_)`KvbYOXV\bacWKUtYOW@Z0_)aliji�`BWB\^_�YOXV\bacWKUfKY>mlQ���Q�Q�Wn_�YOSTSV\bQ�Zgac`]X�_�acSTSVQw_�XTvxql��P�QDYOv^Ura\bWKZ]\^_�YOXVQj��fB\^_+f�RK\xQw_)Q�U�acd�\bW]dkalSVi�Y8XT\xalWYOSTQ UVQ�_)STQ)X�YcWKZ��fB\^_+f�YOSTQyRB`B�Bvb\^_O�tPGfBQ�STQ�YcRBRBSTacRBST\bYOXVQls]XVfBQ�STYOXV\bacWKYcvxQ�dkalS�Z]\xµ�Q�SVQ�WlXRKYcSrX+UjaOd�XTfBQ�UT_+fBQ�ijQ\bU0Z]\bUT_)`@UVUVQ�Z³\xW�XTQ�STijUjacd�XTfBQ�Y8XVXTYc_+�]Uj��fB\^_+f³XVfBQ�qpdkac\bv��G� W��Qw_�XV\bacW�*�{Q ZBSTY>��UVacijQy_)alWK_)vb`KUV\xalWKU��

� 47689� �A��������@:�tfBQJXVQ�SVi��rQ���mcacXV\bWBo��;YORBR�Q�YcSTU�XTa�f@Y>mcQJ�@Q�Q�W�SVQwUrQ�SVmlQ�Z[dkalS�UV_+fBQ�ijQ�U*XVf@Y8XDZ]anWBaOXSTQ�h7`B\bSVQ YcW7qJ��Q�UVR@al�cQ Qwhl`K\xRBijQ�WlX�YOWKZSTQ�vbqUralvxQ�vxqJacWXTfBQ�UrXTYcWKZBYOS+ZJ\xWBdkSTYlU¡XTSV`K_)XV`BSTQ�UUV`K_+f�YlU�XVfBQ�\bWlXTQ�STWBQ)Xw�ª�1q�RB\^_�Ycvxvbqcs]\bWYOWJQ���mcaOXT\xWKo�UT_+fBQ�ijQcs�XTfBQymcacXVQ�S���\bvbv��@QyYO�KvxQeXVaQ�W7XTQ�SªXTfBQ�\bS�mcaOXTQ�a8mcQ�S�XVfKQ�\bS{fBalijQ}_)alijRB`]XVQ�S���� W�XTfB\bU{RKYcR@Q�S{��Q�Z]a�WBaOXt_)acWB²KWBQ�al`BS��UVQ�vbmcQ�U�XTa�UV`K_+fjUV_+fKQ�ijQ�U��®P�Q�YOSTQ{\bW7XVQ�SVQwU¡XTQ�Z \bW�UV_+fKQ�ijQ�U�\bW*��fK\b_+fjZ]\boc\xXTYOv�XTQ�_+fBWKacvbacocq\^Ut`KUrQwZ�XTa*\bijRBSTa8mcQ}XVfBQ�mcacXV\bWBo*RBSVa]_�Q�UTU�s��B`]X�i�Y>qDUrXV\bvxv�\bW�mcalvxmlQe_�Q�SVXTYO\bW0RK`BSVR�alUVQ�Z]Q��UV\xolWBQ�Z�Qwh7`B\xRKi*Q�W7X�s7X¡q�RB\b_�YOvbvxq�_�YOvbvxQwZ��V·}\bSVQw_�X�¸�Q�_)alSTZB\xWBo ­ vbQ�_)XVSTacWB\^_��D°�·}¸ ­ ±1mcaOXT\xWKoi�Yc_+fB\bWBQwU����tf�`KU�s�dkalS}Q��]YcijRBvxQls�XVfBQDz{fKYc`Bi UV_+fBQ�ijQ�STQ�h7`B\bSVQwU}UVR@Qw_)\^YOv�RBST\xW7XV\bWBoJZ]Q��m�\b_�Q�UªYcWKZ�UVay�{al`BvbZ�UrXV\bvbvKSTQ�h7`B\bSVQtXTfBQ�mcacXVQ�S�XVa ��Q�RBf�q]UV\b_�YOvbvxq*_)a���vba�_�Y8XTQ�Z���\�XTf0Ur`@_+fjYZ]Q�m7\^_)Ql���tfBQ�qJ_�YOWKWBaOX�mcacXVQe`KUV\xWBo*XTfBQ�z{fKYO`Ki¶UT_+fBQ�ijQedkSVali XVfKQ�\bS�fBacijQy_)ali*RK`]XVQ�S��P�QySVQ�dkQ�StXVa�UV`K_+fUV_+fBQ�ijQ�U�YcU�ZB\xol\�X+YOv�mcacXV\bWBoK�¯ W������! �"�#%$�&�\^U�Z]Q)²@WBQ�Z;YcU�Y�h7`BQ�UrXV\bacWgYlUr�lQ�Z�acd�XVfBQ*R�acRB`Bv^Yc_�Qc�eP;Q*\bWK_)vb`KZ]Q�XVfBQ

R�alUTUr\b�B\bvx\xX¡qDaOd(')��*���'+��&-,/.efBQ�SVQl�¯10 $2"3�®\bU®XVfBQt_+fBal\b_�QªSVQw_)alSTZ]QwZ���q�Y�Ur\bWBocvbQ1mlaOXTQ�Sw�5��X�i�Y>q��@Q54768$�#9���!,}°�Z]Q�vb\b�@Q�STYOXVQ�vbq

acS*Yc_�_)\^Z]Q�W7XTYcvxvbqB±�����X*ijY>q���Q�Y�qlQ�U alS�WBa;_+fBac\^_)Qg°�YcU�\xW³Y�SVQ�dkQ�STQ�WKZB`BiD±�s�YgUV\xWKocvbQ_�YcWKZ]\^ZBY8XTQ�°�YcU{\xW0Y ²KS+U¡X)��RKYlU¡X)��XTfBQ���R�alUrX1Q�vbQ�_)XV\bacW@±1acS�Y S+YOWB��\bWBo�acd®Urali*Q}acS�YOvbv@acd5XVfBQR�alUTUr\b�BvbQ�_�YOWKZB\bZBYOXVQwUy°�YcUt\bW�Y;:ªSTacR�acSVXV\bacWKYcv�¸�Q�RBSTQ�UVQ�W7XTYOXV\bacWJQ�vbQ�_�XT\xalW@±��

< = �?>�%��)����&2���*��� ���u , � �!���( -D�0�®����&

� WnXVfK\bU�UrQw_�XV\bacW[��Q0Z]\^UT_)`KUTU�XVfKQ0STQ�h7`B\bSVQ�i*Q�W7XTUyacd�YmlaOXT\xWBo�UT_+fBQ�i*Ql���tfBQDRBST\xi�YcSVqSTQ�h7`B\bSVQ�i*Q�W7XTU�YOSTQ�Yc_�_)`BS+Yc_�qpYOWKZ��KYcvxvbaOX0UVQ�_�SVQw_)qc�A@�d�_�ac`BS+UrQls{��Q�i�`@U¡XDSTQ�_�acocWK\bUVQXVf@Y8X d�Yc\xvb`BSTQ�U acdtXVfBQJUrq]UrXVQ�i i�Y>q;a]_�_)`BSws�YcWKZ[UVagYOWpYc`]�]\xvbvx\^YOSTqgSTQ�h7`B\bSTQ�ijQ�W7X \^UyXVa��Q�Yc�BvbQ}XTa�Z]Q)XTQ�_�X�d�Yc\xvb`BSTQ�U���\xXVfSVQwUrR�Q�_)X{XTa�Yc_�_�`BS+Yc_)q�°kXVfB\^Ut\^U�dk`Bv�²@vxvbQ�ZJ��qDi�YO��\bWBo*YUT_+fBQ�ijQ�Yc`KZ]\xXTYc�BvxQ>±eYOWKZ�XVaJ�@QjYO�BvbQ�XVaJSVQw_)a8mcQ�S�dkSTaci XVfKQ�i�CBKYc\xvb`BSTQ�Ue��\xXVfgSTQ�UVR�Q�_�XXVaJUrQw_)STQ�_�qUVfBal`BvbZgYOv^UraD��QjZ]Q)XTQ�_�X+YO�BvbQcs��K`]X�YcSVQ�aOd1_�ac`BS+UrQ�\xSTSTQ�_)a8mlQ�S+YO�BvbQc���¡ZBQ�YOvbvbqYmcacXV\bWBojUV_+fBQ�ijQ UrfBal`Bv^Z�YcvbUVa���Qy`KUTYO�BvbQcsKQ�DD_)\bQ�W7X�s]`KW7�K\bYlUrQwZ�sKUT_�YOv^YO�KvxQeQ)X+_O��tfBQ�UVQ*SVQwhl`K\xSTQ�ijQ�W7X+U�i�Y>q�@Q*\xW�_)alWFEK\^_�X���\�XTfgQ�Yl_+f�aOXTfBQ�Sw�GBBalS}Q��]YcijRBvxQ�XVfBQ�SVQ

\^U YJXVQ�WKUr\bacWn��Q)X¡��Q�Q�W;XTfBQ�STQ�h7`B\bSVQ�i*Q�W7XydkacSy�KYcvxvbaOX�UVQ�_�SVQw_)qgYcWKZ;XVfKYOX aOd�YO`KZ]\xXTYc�B\bvH�\xX¡qc� ¯ WKYc\xmlQy\xijRBvbQ�ijQ�W7X+Y8XV\bacW�acdªYO`KZ]\xXTYc�B\bvx\xX¡q���ac`KvbZ\biji*QwZ]\^Y8XVQ�vxqJm�\xalvbYOXVQ UVQ�_�SVQw_)qc�z{fKYc`Bi _)alW2I¡Q�_)XV`BSTQ�U�\bW�~ �8��XVf@Y8X�\�X�\^U�\xijR�alUTUr\b�BvbQ�XTajYl_+fB\bQ�mcQeYO�KUVacvb`]XTQeYlUVUV`BS+YOWK_�Q�Uªacd

Page 4: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

`BWK_�acWKZB\�XT\xalWKYOv1Yl_�_�`BSTYl_)q�YcWKZ[UrQw_)STQ�_�qgUr\bi�`Kv�X+YOWBQ�ac`KUVvxql����\bU UT_+fBQ�i*Q�RKSVa8m�\^Z]Q�U�RBSTa��m�\bZBQ�U ��aOXTf[SVQwh7`B\xSTQ�ijQ�WlX+Uy`BR[XTag_)Q�SrX+YO\bW[RBSTac�KYc�B\xvb\^U¡XT\b_�YcWKZ[_)ali*RK`]XTYOXV\bacW[��ac`BWKZKU����Q _�acW2I¡Qw_�XT`BSVQwU�XVfKYOX�XVfBQ UT_+fBQ�i*Q�i�Y>q�Yl_+fB\bQ�mcQ�YOWalR]XV\bi�`Bi¶��\�XTfSVQwUrR�Q�_)X�XTajXVfBQwUrQ_)alWFEK\^_�XT\xWBo�_�acWKUrXVS+YO\bW7XTU��

����� ���� �������

PGfKYOX�RBSVQw_)\^UrQ�vxq���Q�ijQ�YOW��q0Yl_�_)`KSTYl_)qj��\xvbv®Z]Q�R@Q�WKZY8X���fKYOX�vxQ�mcQ�v���QyYOSTQ��{alSV��\bWBoYOW@Z���fBQ�STQ���Q�YcSVQ�Z]STY>��\bWBo�XTfBQjUrq]UrXVQ�i ��ac`BW@ZBYOST\xQwU�� ¯ X�XTfBQ�ija7U¡X�YO�KUrXVS+Yc_)X}vbQ�mcQ�v�s��Q0��ac`Bv^Z[vb\x�lQ0XTfBQ�al`]XT_�acijQ0acd}YOW=Q�vbQ�_�XT\xalW=alS�STQ)dkQ�SVQ�WKZ]`Bi XVanYc_�_)`BS+Y8XTQ�vbq;STQ�E@Q�_�XXVfKQ �V\xW7XVQ�W7XV\bacWKU+� acd®XVfKQ}Q�vx\boc\b�BvbQeQ�vxQw_�XTacS+Y8XVQl� ¯ XtXTfB\bU�vbQ�mlQ�v��{Qe��\bvxv�WBQ�Q�Z0XVaj_)acW@Ur\^Z]Q�SUVa�_�\bYcv�YcWKZRKUVq�_+fKacvbacoc\^_�Ycv5\^UVUV`BQ�U�XVfKYOX}ij\bocf7X�R�alUVQ��KYcSVST\xQ�STU�XTaDXTfBQ�RKYcSrXT\b_�\xR@Y8XV\bacW�acd_)Q�SrX+YO\bWJUVQ�_)XValSTU�aOd�UVa�_�\xQ�X¡qcs]�B\^YcU�XTfBQ _+fBal\b_�Q�U�i�YcZ]QyalS�\bW7XVSTa]Z]`K_)QymlaOXTQ�StQ�STSValS��

BBalS�XVfKQ RB`BSTR@a7UrQwU�aOd!XTfB\bU�RKYOR�Q�S}�{Qy��\bvbv®STQ�UrXVST\b_)X�ac`BS+UVQ�vbmcQ�U�XTa�XVfKQ RB`BSTQ�vbqDXTQ�_+fF�WB\^_�Ycv@h7`BQ�UrXV\bacW0aOd5Q�W@Ur`BST\bWBoyXVf@Y8X{mlaOXTQ�U1_�ac`BW7XTQ�Z�\bW�XVfKQ�²KWKYcvKX+YOvbvxq�Yl_�_)`KSTYOXVQ�vbq�STQ�E@Q�_�XXVfKQ mcacXVQ�U�_�YcUrX��{P;Q���\xvbv�YlUVUV`BijQ�XVfKYOX�\^UVUV`BQ�U�aOdªYO`]XTfBQ�W7XT\b_�Y8XV\bacWacd!mlaOXTQ�S+U�YOWKZRBSTQ��mcQ�W7XV\bacWJaOd�ZBac`B�BvbQymcacXV\bWBo*fKY>mcQ���Q�Q�W�YlZBZ]STQ�UTUrQwZ��� W*XVfB\^U!RB`BSTQ�vbqyXVQw_+fBWB\^_�Ycv�UVQ�W@UrQlscYc_�_)`BS+Yc_�qy��\xvbv]�@QtXTfBQtSVQwh7`B\xSTQ�ijQ�WlX�XVf@Y8X�XVfKQ{²@WKYOv

XTYcvxvbq�aOd�mcacXVQ�UeQ��]Yl_�XTvxq�i�Y8X+_+f�XTfBQ�mcacXVQ�Ue_�YlU¡Xw��� W�RBS+Yc_�XT\b_�Qcs5Yc�KUralvx`BXVQjYcUTUr`BS+YOW@_)Q�acd_)alijRBvxQ�XVQDYl_�_)`KSTYl_)q�\^UyWBaOX�dkQ�YcUV\b�BvxQDYcWKZ�s�YOSToc`KYc�Bvxqls�XVa�a�UrXVSTacWBo�YSTQ�h7`B\bSVQ�ijQ�W7X�� ¯ijacSTQ�STQ�Ycvx\^U¡XT\b_�SVQwh7`B\xSTQ�ijQ�WlX{dkacStYOWDQ�vxQw_�XT\xalW0\^U1XTfKY8X�XVfKQ}al`]XT_�acijQ���QG�c_)alSVSTQ�_)X+�KsOQc� oK�XVf@Y8X�XVfKQ _�YOW@Z]\bZKY8XVQ���\xXVfJXVfKQyvbYcSVolQ�UrX�W�`Bi��@Q�S�aOd!mcaOXTQ�Ut��\bWKU��

����� ������������������� �!���"��#%$&�#%�'#(�*),+-�.�

��X!��\xvbv7X¡q7RK\b_�YOvbvxq���Q�Y�SVQwhl`K\xSTQ�ijQ�W7X5XTfKY8X�XVfKQ{�tY>qyYOW�q�\xWKZB\xm�\^Z]`KYOv7mcacXVQ�S�mlaOXVQwZySTQ�i�YO\bWUVQ�_)STQ)Xw���tfB\bUti�Y>q�\bWJUVacijQy_�YlUrQwU��@QyUrXVSTQ�WBocXVfBQ�WBQ�Z�«�mlaOXTQ�S+U1i�Y>qD�tYOW7X�XVaj�cQ�Q�RJQ�mcQ�WXVfKQ�d�Yl_�X�XVf@Y8X�XVfBQ�q�mcacXVQwZgYJUrQw_)STQ)X�� BBalS�UVacijQ�dkacSTi�U}acd{mlaOXVQjUVQ�_)STQ�_�qijY>q�WKaOXy�@QSTQ�h7`B\bSVQwZeYOX�Ycvxv�swdkacS®Q��BYOijRBvbQªmcacXV\bWBo�\bWyXVfBQ���al`KUrQ1aOd�z{acijijacW@U�� ¯ W�qemlaOXT\xWBo}UV_+fBQ�ijQi�`@U¡XDXTfBQ�STQ)dkalSVQg�@Qg_�vxQwYOS0Yc�@al`]X0XTfBQ E@Y>mlac`BS0aOd UrQw_)STQ�_�qpXVf@Y8X�\^UD��Q�\bWBopRKSVa8m�\^Z]Q�Z��/�Q�UV\bZBQ�U�XVfKQ WKY8XT`BS+YOv®Z]QwUr\bSTQ}dkalS�RBST\xm8Yl_)qcsK�KYOvbvxacX�UrQw_)STQ�_�q0UrQ�SVmlQ�U�XTa�RBSVQ�mcQ�WlX�_�a7Q�ST_�\xalWacStmlaOXVQ��B`Kq7\bWBo@�

0�acXVQ�XTfKY8X�Yc�KUVacvb`]XVQ�YlUVUV`BS+YOWK_�Q�U*aOd�XVacXTYcv�UrQw_)STQ�_�qpi�Y>q=WBacX0�@QgSVQwYOvb\bUrXV\^_JfBQ�STQc�� W³_�Q�SVXTYc\xWpQ��B_)Q�RBXV\bacWKYcv�_�\xS+_)`Bi�UrXTYcWK_)QwU�UVQ�_�SVQw_)qn��\xvbvt�@Qm�\bacv^Y8XVQwZ[\bW³YOW�q[_�YlUrQls�dkacSQ)�BYci*RKvxQls�\xd}Ycvxv1XVfBQJmcacXVQ�U��{Q�W7X�acWKQD��Y>ql�g �alSVQ0UV`B�]XTvxQ�Q)µ�Q�_)XTU*i�Y>q;��Q0R�alUTUr\b�BvbQc�� WpXTfBQ_)acW7XTQ)��X�acd�XVfBQ�z{fKYc`Bi UV_+fKQ�ijQcsªUVacijQJaOd�XVfKQ�UVQJYcSVQJZ]\bUT_)`@UVUVQ�Z[\bW�~ �w���[�®aRKYcSTYcRBfBS+YcUVQ�YUV_�Q�WKYcSV\ba0\bW�XVfB\^U�RKYOR�Q�Sws®_�acWKUV\bZBQ�S�YJUV\bi*RKvxQ*X¡��a��tY>q�SVQ�dkQ�STQ�WKZB`Bi \bW��fB\^_+f�f@YOvxd®XVfKQyQ�vbQ�_�XTacS+Y8XTQ}mlaOXVQ �rqlQ�U+��f@YOvxd�mcacXVQ��rWKa��B� ��`BRKR@a7UrQ�dk`BSVXVfKQ�StXVf@Y8XtXVfBQ�SVQ\^U�acWBvbqgalWBQji*\x��YcWKZgXVfKYOXyXVfBQ�STQ�mlQ�YOvbQ�Zgvx\bWB�]UD°�UrQ�Q*v^Y8XTQ�S�±�YOv^UraJfKYcRBR@Q�W�XVa�vbQ�YcZgXVa�rqlQ�U+��mlaOXTQ�U���� W�XVfK\bU�_�YcUVQ�RBSV\bm8Yc_�q�d�YO\bvbU�_�acijRBvbQ)XTQ�vbqc�

0�a8� UV`K_+fgYDUT_)Q�WKYOST\baD\bU}Q)��XTSVQ�i*Q�vxqJ`BWBvb\b�cQ�vbq\xW;UrQ�mcQ�S+YOv�SVQwUrR�Q�_)XTU21ws�Q�UVR@Qw_)\^YOvbvxq\xd��Q}YOSTQ}_�acWKUV\^Z]Q�ST\xWKo�Y�v^YOSTocQ�Q�vbQ�_�XTacS+Y8XTQcs7�B`]X�\�X�Z]a�Q�U{i�YO�lQ�XVfKQ}R�ac\bW7X{XTfKY8XwsB_)Q�SVXTYc\xWKvxq��fBQ�SVQD¸�YcWKZ]ali :�YOSVXV\^YOv{z{fKQ�_+��\xWKoJRKSVacXVa]_)alvbU YcSVQjQ�i*RKvxa8qlQ�Z�s®XVfBQ�SVQD\^U Y�_+fKYcWK_)Q�acd

35476�8:9;6�9�6-<*=?>A@A6-@CB:D�E�FA6�GHFA8:9H8:G5E;6-9'=?>CB2>A6�B:D�E�FA6�IJB2K?6�LNMB29�E�FPO.BQB2RSL T U�VXWYM�FABAZ[8:L;R26-@POS\]8E�6^8:G;FA6-9_E;B G-B2>AL�=?@A6-9�8�9;=?`2FaE_8:>A`2K?6'E�9;=b8:>c`2K?6dM�= E�FJL;eSfg8:9�6�L!B2>P8:K?KhE�FA9;6-6'L;=?@A6-L^Zi8:L�RQL�j;klL!E�Fg8XE�9�6�8:K?K \m 6-9�\%K?=?R26-K \onQ=?95p-qAr

¨

Page 5: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

UVacijQ \bW]dkacSTi�Y8XV\bacWgvxQwYO�8YOolQc��� W³~ �>��\xXe\^UeYOSToc`BQwZJXVfKYOX�s�dkacS}XVfBQDz{fKYc`Bi UV_+fBQ�ijQcs�XVfBQij\��]\bWBo���\bvbv7��Q�Ur`8D�_�\xQ�W7XVvbqeS+YORK\bZ XVa�Q�WKUV`BSVQ1XVfKYOX���\xXVf I¡`KUrX!YeUVijYcvxv7W�`Bi���Q�S!acdBi*\x�]Q�UXVfKQyvx\b�cQ�vx\bfBa�a]Z0acd�UV\xolWB\�²�_�YOW7X�vbQ�YO�8YcocQ�\bU�UV`FDD_)\bQ�W7XTvxqJUri�YOvbv�XVaj��QyWBQ�olvxQw_�XTQ�Z��� WKUrXVQ�YlZ�aOd��KYcvxvbaOX�UrQw_)STQ�_�q0��Q�ij\xolf7X�SVQwh7`B\xSTQ mlaOXVQ�S�YOWKacW�q�i*\xX¡qc� ¯ Xe²KS+U¡X}ocv^YOWK_�Q

acWKQ�ij\xolflX�Ur`BRKR@a7UrQ�XVfKYOX1XVfKQ�UVQ�YOSTQ�Q�h7`B\bm8YOvbQ�W7X���P�Q�dkacvbvba8�³XTfBQ}YcRBRBSTalYl_+f*acd �]_+fBWBQ�\H�Z]Q�S�~x§�©8��\bW�dkacSTijYcvx\^UV\xWBo�XVfBQ�WBacXV\bacW�aOd�YcWBacW�q�ij\�X¡qj`KUV\xWKo�z(�F:!� ¯ UVq�UrXVQ�i��pUTY8XT\bUr²KQ�UYOWKacW�q�i*\xX¡q0��\xXVfgSVQwUrR�Q�_)X�XVaJUrali*Q�UrQ�X�� YcWKZm�\xQ���R@al\xW7X}ol\xmlQ�W��q0XTfBQ�RKSVa]_)QwUVU}YO�F�UrXVS+Yc_�XT\xalW�� \xd¡«

��� «��� ��n°��]± ¬ �D°��ª±����D°���~ � �k±��fBQ�SVQ�~ � ��Z]Q�WKaOXVQwU�XVfBQ�z(�8:³STQ�W@YOij\xWKo*alR@Q�STYOXValS���tf�`KU�st\xdy�{QJXVS+YOW@U¡dkalSVi XVfBQ�UVq]U¡XTQ�i ��q�YOST�B\�XTSTYcSVq[R�Q�STi�`BXTY8XT\xalW�aOdeXVfBQgUVQ)XDacd

mcacXVQ�STU�scXTfBQ�SVQwUr`Kv�XT\xWBojUVq�UrXVQ�i \bU�\bWKZ]\^U¡XT\xWKoc`B\^Urf@YO�BvbQedkSVali$XVfBQ�acST\boc\bWKYOv�s7YOX�vbQ�YlU¡X�dkSTaciXVfKQ}m�\bQ���R�ac\bWlXtSTQ�RBSTQ�UVQ�W7XVQwZ���qjXVfBQyYc�KU¡XTSTYl_�XT\xalW�� �ª�tfBQ�YO�KUrXVS+Yc_)XV\bacW0UVQ�STmcQwUªXTa�fK\bZ]Q\bWlXTQ�STWKYOv!Z]Q�XTYO\bv^U}WKaOX�m7\^UV\x�BvbQ�XVaYOW�al`]XTUV\bZBQ�al�KUrQ�SVmlQ�Sw� BKacSeXVfKQ�z{fKYc`Bi UT_+fBQ�ijQcs�YcWac�@UrQ�SVmlQ�S*�{al`BvbZ=�@Q�Yc�BvxQJXTanUVQ�QJXTfBQm>Ycvx`KQ�U*R@a7U¡XTQ�Z³XVa;XVfKQ��{Q��=�B`]XDWKacWBQaOd}XVfBQ\bWlXTQ�STWKYOv@m8YOvb`BQ�U{`KUVQ�Z���q*XVfBQ�_)al`BW7XV\bWBo�RKSVa]_)QwUVUVQ�U��!z�YcSVQ}fKYcUªXVa��@Q}XTYc�cQ�W0\xW�XTfBQ�Z]Q)d9�\bWB\�XT\xalW0acd5XVfBQyYc�KU¡XTSTYl_�XT\xalW0YOWKZ0RBSTa�_�Q�UTU1Qwh7`B\xm8YcvxQ�WK_)Qe`KUVQ�ZD��fKQ�STQ�XTfBQeUVq]U¡XTQ�i i�YOWK\H�dkQ�UrXTU�WBalWF� Z]Q)XTQ�STi*\bWB\^Uri YcWKZ `]XT\xvb\^UrQwU�_�SVq�R]XTacocS+YORKfB\b_ªi*Qw_+fKYOWK\bUVi�U���:ªSTa�_�Q�UTU®YcvxolQ��BS+YO\^_dkacSTi�`KvbYOXV\bacWKU�aOd!WBalWF��\bW7XVQ�SrdkQ�SVQ�WK_)Q�YOSTQyYORBRBSTacRKSV\^Y8XTQ�fBQ�SVQlsKUrQ�QedkacS�Q)�BYci*RKvxQ�~x§��8���

0�acXVQ�XTfKY8Xws�`@Ur\bWBo�UV`K_+f[Y�Z]Q)²@WB\�XT\xalW5s�XVfBQ0UT_)Q�WKYOST\baJacd�Q�mcQ�SVqlacWBQjmlaOXV\bWBodkalSyXVfBQUTYOijQ�_�YOWKZ]\^ZBYOXVQ*�{al`BvbZgU¡XT\xvbv!�@Q�Z]Q�Q�ijQ�Z�XVa�UTY8XT\bUrdkq�YOWKacW�q�i*\xX¡q�B`]X��{al`Bv^Z�d�YO\bv�XVfBQ�KYcvxvbaOXyUrQw_)STQ�_�q�SVQwhl`K\xSTQ�ijQ�W7Xw���e\bmcQ�W;XVf@Y8X�UV`K_+f;YUT_)Q�W@YOST\xa�\bU�R�Q�SVdkQ�_)XVvbqgYcZ]ij\^UVUV\b�BvxQYOW@ZnXVfKYOXjXVfBQJm�\xalvbYOXV\bacWpacd��KYOvbvbaOX*UVQ�_�SVQw_)q[UVQ�Q�i�U�\xWKQ�m�\�X+YO�BvbQcsªXVfB\^U*�{al`BvbZ³UrQ�Q�i XVaUV`BocolQ�UrX{XTfKY8X�mlaOXVQ�S�YOWBalW�q7ij\xX¡q�\bU�XTfBQyijacSTQyYORBRBSTacRKSV\^Y8XTQ}STQ�h7`B\bSVQ�ijQ�W7X��

����� ��%$o+5� ���o+^��+5�i� ��#%$ ������� �(� � ���o+^��+5�i�

� WjXVST`BQeZ]Q�R�Q�WKZKYO�B\bvx\xX¡q�d�YcUVfB\xalW��{Q�SVQw_)acolWB\^UrQtXTfKY8XtYO�KUVacvb`]XVQ�ol`KYOS+YOW7XTQ�Q�U1YOSTQ�WBaOX{dkQ�Y2�UV\x�BvbQc� ��q]UrXVQ�i i�YOvxdk`BWK_)XV\bacWKU�YOW@Z�_)acijRBSTacij\^UrQwU���\bvxv@a�_�_)`BSw����X{\^UªQ�UTUVQ�W7XV\^YOvKXVfBQ�SVQ�dkacSTQXVf@Y8X�ijQ�_+f@YOWB\^Uri�Ut��Q RBSTa8m�\bZ]QwZ�XVa0Z]Q�XVQw_�X�s�_)alWlX+YO\bW�YOWKZJSTQ�_)a8mlQ�S�dkSTaci¶d�YO\bvx`BSTQ�U���\�XTfSTQ�UVR@Qw_�XeXVaJXVfBQ�STQ�h7`B\bSTQ�ijQ�W7XTU����tfBQwUrQjijQ�_+f@YOWB\^Uri�UeWBQ�Q�ZgXVa�@QjSTac�B`@U¡Xy\bWgXTfBQ*d�Yc_)QaOd!i�YOvb\b_�\xal`KU�YlU��{Q�vxv�YcU�Yl_�_)\^Z]Q�WlX+YOv�XTfBSVQwY8X+U�� ¯ mcacXV\bWBoDUrq]UrXVQ�i¶UVfBac`Bv^Z�XVfBQ�SVQ�dkacSTQy�@QYO`@Z]\�X+YO�BvbQ�°kalS 0 ��'�# ! ."����T±���q�XTfBQy\bWKZ]\bm7\^Z]`KYcv5mcacXVQ�STU�s]YcUt��Q�vbv5YOWYO`KZ]\xXV\bWBo���a]Z]qc� �`K_+fuacd�XVfBQ;acRBR�alUV\�XT\xalWuYOo7YO\bWKU¡X0·e¸ ­ ijYl_+fB\bWBQ�U�\bWGXTfBQ;¢�WB\�XTQ�Z1��XTY8XTQ�U�fKYcU

_)Q�W7XVQ�STQ�Z�YcSVal`BWKZ�Y�_�YOvbv�dkacS}Y��rmlaOXVQ�S���mcQ�SV\x²@Yc�BvxQyYc`KZ]\xX�XVS+YO\bv �Bs���fB\b_+fg\xW=~x§)�!\^U�X+YO�cQ�WXVajijQ�YcW

�TY�R�Q�STijYcWBQ�W7X®STQ�_�acS+Z�acdBQ�Yl_+femlaOXTQ�XVfKYOX�_�YcWy�@Q�_+fBQ�_+�lQ�Z}dkacS�Yc_�_�`BS+Yc_)q}��qXTfBQymcacXVQ�S���Q)dkalSVQ}XVfKQymcaOXTQ}\^U�UV`B�Bij\�XVXVQwZ�s@YcWKZD\^U�Z]\�D�_�`BvxX�acS�\bi*R�alUTUV\x�BvbQXTaDYOvxXVQ�S�Y8d XVQ�S�\�X�f@YcUt��Q�Q�W�_+fBQw_+�cQwZ�� �

�tfBQp\bijR@alSrX+YOW7X�R@al\xW7X�\^U�XTfBQ=YO�K\xvb\�X¡q�aOd*XVfBQ=\xWKZB\xm�\^Z]`KYOv�mcaOXTQ�S�XTauZ]Q)XTQ�STij\xWBQ��fBQ�XVfBQ�S�acS�WBacX�XVfBQ�\xS�mlaOXVQ�fKYlUt�@Q�Q�W�_)alSVSTQ�_)XVvbq�\xW@_)vb`KZ]Q�ZJ\bWJXVfBQ�X+YOvbvxql�¯ vxXVfBal`Bocf�aOXTfBQ�S®XVQ�_+fKWBacvbacol\xQwU®YOSTQ{UV`BolocQ�UrXVQwZ�\xW�~�§���YlU®R�alUTUr\b�BvbQªdk`]XT`BSTQ{\bijRBvxQ�ijQ�WF�

XTYOXV\bacWKU�acd�mlaOXTQ�S�mcQ�SV\x²@YO�K\xvb\�X¡qls�XVfKQjXVQ�UrXVQwZnYOWKZ;d�Y>mcal`BSTQ�Z�ijQ�XVfBa]Z�\bUyYR@YOR�Q�S YO`@Z]\�XXVS+YO\bv��

Page 6: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

����� ���h���o+^��+5�i�

�tfBQymlaOXV\bWBo�RBSTa]_)QwUVU�UVfBal`BvbZJWBacX���Q `BWBWBQw_)QwUVUTYOST\xvbq0Z]\�DD_)`BvxX�dkalS�YjmcacXVQ�S�XVa�Q���Qw_)`]XTQc���aOXT\xWKo�UrfBal`Bv^Z;��Q0_�acW�mcQ�WB\xQ�W7XyYcWKZ�Q�YlUrqgXVa�`BWKZBQ�S+U¡X+YOWKZ�����X�UrfKac`Bv^Z�WBaOX���Q�Q�STSTacS)�RBSTacWBQ{YOWKZy\xX�UrfBal`Bv^Zy�@Q{Q�YlUrq}dkacS�XVfBQ�mcacXVQ�S5XVaeZ]Q)XTQ�_)X�YOW@ZySVQw_)a8mlQ�S�dkSTaci YOW�qeij\bUrXTYc�cQ�U��Q)dkacSTQeXVfBQ�q�_�acijij\�X�XTa�XTfBQ�\bS�_+fBal\b_�Qc�¯ �KYOv^YOWK_�Q}i�Y>q�fKY>mlQ�XTa���QyU¡XTSV`@_+���@Q�X¡�{Q�Q�W_)acW�mlQ�WB\bQ�WK_�Q�alWDXVfKQealWBQ�fKYOW@Z0YOW@Z

XVfKQ*STQ�h7`B\bSTQ�ijQ�W7XTUeacd�Yc_�_)`BS+Yc_�q�YOWKZ;RBST\xm8Yc_�q�acWgXVfBQ�acXVfBQ�S��*�tf�`KU�s5dkacSyQ)�BYci*RKvxQls5\�Xij\xolf7X���Q{YOSToc`KQ�ZeXVf@Y8X�XVfBQ{i*a7U¡X!_)alW7mlQ�WB\bQ�W7X®�tY>q}XVa�mlaOXTQª�{al`Bv^Zy�@Q{a8mcQ�S5XVfKQ1\bWlXTQ�STWBQ)Xm�\bY�Y0fKacijQ�_�acijRB`]XTQ�S�acSe`KUV\xWBo0XVQ��7X)��ijQwUVUTYOol\xWBo@����X�UVQ�Q�ijU}`BWBvb\b�cQ�vbq�fBa8��Q�mlQ�S�XTfKY8XYORKRBSValRBST\bYOXVQ�vbQ�mlQ�v^UtaOd!YcUTUr`BS+YOW@_)QeaOd�Yl_�_�`BSTYl_)qDYcWKZ0RKSV\bm8Yc_)qD_�ac`Bv^ZJ�@Q�RBSTa8m�\bZBQ�Z���\�XTfUV`K_+f0ijQ�_+f@YOWB\^Uri�U��!��XtYcvbUVa*YcRBR�Q�YOS+U�Z]\HDD_�`Bv�XtXTa���QyUr`BSTQ}XVfKYOX�Y�STQ�ijaOXTQ}mlaOXVQ�S{\^U�WBaOX`BWKZBQ�S�Z]`BSTQ�UTU�YOW@Z0\^U�YO�KvxQeXVaD_�YcUrX�Y�dkSTQ�Q�mlaOXVQl�­ h7`KYcvxvbqcs5YcW7q�_+fKQ�_+��\xWKo0RBSTa]_)Q�ZB`BSVQwU}UVfBal`BvbZ;��Qj_�acW�mcQ�WB\bQ�W7XeYcWKZ�QwYcUVqXVa`BWKZ]Q�S��

UrXTYOW@Z��

����� � ���h��#o��� � � +-���

�tfBQ h7`BQwU¡XT\xalWJacd��K\bYlU�YOWKZJfBa8��XVaDY>mlac\^Z0\xX}YORKR@QwYOS+U�Y8X�YjW�`Bi���Q�S�aOd!RBvbYl_)QwUt��\�XTfB\xWXVfKQ}z{fKYO`Bi UV_+fKQ�ijQc�! �alUrX�\xijR�acSVXTYcWlXTvxqlsc\xX1UrfKac`Bv^Z�Y>mlac\^Z�\bW7XVSTa]Z]`K_)\bWBoyYOW�q �K\bYlU!\xW7XVaXVfKQ1mcacXV\bWBo�RBSTa]_)QwUVU����tfB\^U�_)ac`KvbZyf@YORBR�Q�W \xdKRKYcSrXT\b_�`Bv^YOS�UV`B�KUVQ)X+U5acdBXVfBQ{Q�vbQ�_)XVacS+Y8XTQª��Q�STQZ]\^UrQ�W]dkS+YOWK_+fB\^UVQ�Z�� BKacS�Q)�BYOijRBvbQcs�XVfBa7UrQ1��\�XTf�Y�vba8��vbQ�mlQ�vlaOd�XVQw_+fBWB\^_�YOvl��WBa8�(��fKa8�;_)al`Bv^Z��Q�RK`]XªaOµD��q�YcW*YcRBRKYOSTQ�W7X�WBQ�QwZ�XTa�`BWKZ]Q�STUrXTYcWKZyXTfBQtXVQw_+fBWB\^_�YOvb\xXV\bQ�U�aOd@XVfBQ�UVq]U¡XTQ�i����X\^U1YOv^UVa R@a7UVUV\b�BvxQ�XVfKYOX{RKYcSrXT\b_�`BvbYcS1_�YcWKZ]\^ZBY8XTQ�U1ijY>q*��Q�d�Y>mcal`BSTQ�Z*�@Qw_�Yc`KUrQ�aOd�XVfBQ}acS+Z]Q�S\bWg��fB\^_+f�XVfKQ*_+fBal\b_�Q�UeYOSTQ RBSTQ�UVQ�W7XVQwZ�s�YOvxXVfBal`Bocf�XVfB\^Ue�{al`BvbZ�XVfBQ�Wg��Q*Y�Z]\HDD_�`Bv�X¡q�acdYOvbijalUrX�YOW�qDmcacXV\bWBojUrq]UrXVQ�i� �acSTQ UVR@Qw_)\x²@_�Ycvxvbq�XVajXTfBQ*z{fKYc`Bi¶UVq]U¡XTQ�isBmlaOXVQ�STUti�Y>qJUrfBa8� Yj�B\^YcUtdkalS�_+fBalUV\xWKo

acWKQealS�aOXTfBQ�S�acd�XTfBQyv^Y>qcQ�S+U�aOd�XVfBQ�SVQw_)Q�\bR]Xw�1�tfB\^U��{al`Bv^ZDXTfBQ�W�i�YO�lQy_)Q�SVXTYc\xWY8XVXTYl_+��UacW�XVfKQ Urq]UrXVQ�i¶Y8X�vbQ�YcUrX�Urvb\bocf7XVvbqDijacSTQ�vx\b�cQ�vxq�XTa�Ur`K_�_)Q�Q�Z��

����� ��,�+���#%���"��#o$ �������-��� +���+-�.�

BBalS�Uri�YOvbv�UT_�YOvbQJQ�vbQ�_�XT\xalWKU*XVfKQ_�acijRB`]X+Y8XT\xalWKYOv�_)a7U¡X�R�Q�S�mlaOXVQJ\^Uj`BWBvb\x�lQ�vbq[XVan��QYvb\xij\xXV\bWBo�d�Yc_)XValS�s��B`]X dkalS Q�vbQ�_)XV\bacWKU�Y8X�Y�W@Y8XV\bacW@YOv1UT_�YcvxQjXTfBQDij\xvbvb\xalWKU acdtmlaOXTQ�U _�YcUrXi�`@U¡X��@Q�STQ�_�acS+Z]Q�Z5s�UrXValSVQwZgYcWKZg_�ac`BW7XVQwZg��\xXVfK\xWnY�ZKY>q�acSyUra@���tfBQjmcacXV\bWBoUV_+fBQ�ijQi�`@U¡X���Q Z]Q�UV\xolWBQ�Z�XTaj_�acR�Q���\�XTfXVfBQ UT_�YcvxQeaOd�XVfBQyQ�vxQw_�XT\xalW�\bWi*\bWKZ��

� ��� ��� � ����� ���u����&2� � ��(����� � , �y�����(.-0/1 ��&|���

¯ mcQ�SVq��BST\bQ)d�a8mlQ�STm�\xQ��uYOWKZJYcUTUrQwUVUVijQ�W7XtaOd�UVacijQ�YOvxXVQ�SVWKYOXV\bmcQeQ�vbQ�_)XVSTacWB\^_}YcWKZJZ]\xol\�X+YOvmcacXV\bWBojUV_+fBQ�ijQ�U��

¬ ·}Q�\b��acv^Z·}\bQ���acv^Z�XVal`K_+fKUT_)STQ�Q�WJQwh7`B\xRKi*Q�W7X}fKYlU���Q�Q�W�\xW�XVfBQ�WBQ���U}SVQw_)Q�WlXTvxql� ¯ vxXVfKac`BolfXTfBQ�qyYcSVQ �V�Bv^Yc_+� ����a>�8��Urq]UrXVQ�ijU�s8Ura�XVfBQ�\xW7XTQ�STWKYOv7_)a]Z]Q1\^U�Ur`BRKR@a7UrQwZeXVa���QtUrQw_)STQ)X�sYD�{Q��KUr\xXVQ�SVQw_)Q�W7XTvxqYORBR�Q�YcSVQwZ_)acW7X+YO\bWB\xWKo���fKY8X�_)v^YO\bi*QwZJXVaD��Q�Yl_�XT`KYOv®UVac`KST_�Q

Page 7: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

dkalSjacWBQJaOd�XTfBQ�\bSji�Yc_+fB\bWBQ�U�� ¯ Z]Q)X+YO\bvxQwZ=YOW@YOvbq�UV\^U��tYcU�RB`B�Bvb\^UrfBQwZ�~ >��acd�XVfBQ_�a]Z]Q*_�vbYc\xij\bWBo�XTa�fKY>mlQydkac`KWKZ�W�`BijQ�STac`@U�Q�STSTacS+U��e·�\bQ���acv^Zgh7`B\^_+��vxqJRBSTa�ZB`K_)QwZYpSVQ��B`]XrX+YOv}aOd�XVfBQ;_)v^YO\bijUg~ �8��s�YcWKZ�XVfBQgacST\xol\xWKYcv�YO`]XTfBacS+U�fKY>mlQ�RBSTa�ZB`K_)QwZ�YSTQ��K`]XrX+YOv5acd®XVfKQySVQ��B`]XrX+YOv1~ ¨>���

¬ �B_+fBWBQ�\bQ�S@}WKQ�aOdeXVfBQ�Q��BYOijRBvbQ �]_+fBWBQ�\xQ�S�Q�vbQ�_�XTSValWB\^_mcaOXT\xWKonUT_+fBQ�i*QwU�\bW ~x§ �w��SVQwh7`B\xSTQ�UmlaOXTQ�S+U�i�Yc�cQ{XVfBQ�\xS�a8��W*_+fBac\^_)Q�aOd�RKYcUTUr��acS+Z���fBQ�W�STQ�ol\bUrXVQ�SV\bWBoeacW XTfBQtQ�vbQ�_)XVacS+YOvSTacvbv��!�tfKQ�qj`KUVQ�XVfB\^U�RKYcUTUV�{alSTZ�XVa*_�YlU¡XTQ�XVfBQ�\xS�mcacXVQl� ¯ vxv�mcacXVQwU1YOSTQ�R�alUrXVQwZ�acWDY��Q���Ur\xXVQls7QwYc_+fDmlaOXTQ}YOvbacWKolUV\bZ]Q�XVfBQ�_)alSVSTQ�UVR@alWKZ]\bWBoyRKYlUVUV�{alSTZ5���tf�`KU1XVfBQemcacXVQ�S_�YOW�UVQ�YOS+_+f0alW0XTfBQ�\bS�RKYlUVUV��acS+ZDYOWKZ_+fBQw_+��XVf@Y8X�XVfKQ _)acSTSTQ�UVR@alWKZ]\bWBo�mlaOXVQ�\^U�YcU_�YcUrX��y�tfBQ�q�_�YOWKWBaOXefBa8�{Q�mcQ�S�RBSTa8mcQyXTaJYDXVfB\bS+Z�RKYcSrX¡qJXVf@Y8XeXVfB\^Ue\bU}XVfKQ�\bSemlaOXTQYlU�XVfBQ�SVQy\^UtWBaj�tY>q�dkacStXTfBQ�i¦XVajRBSTa8mcQ}XVfKYOX�XVfB\^U�\^UtXVfBQ�\xS�R@YcUTUr��acS+Z��

¬ ��acXVQc��Q�STQ¯ v�XTfBac`Kocf XVS+YcZB\�XT\xalWKYOvbvxq Y �r�Bv^Yc_+� ���@a>�8�³i�YOW�`]d�Yc_)XV`BSTQ�Sws�SVQw_)Q�WlXTvxq ��aOXTQQ��Q�SVQRKSVali*\^UVQ�Z�XTa³i�YO�lQ�XTfBQ�\bS�Ural`BST_�Q;_�a�ZBQ;RB`K�Bvx\^_�YcvxvbqGY>m8YO\bvbYc�BvxQl� ¯ X�XTfBQ�XV\bi*Qacd���ST\xXV\bWBo*XVfB\^U�fKYlU�I¡`KU¡X���Q�Q�WijYlZ]Q Y>m8YO\bvbYc�BvbQc�

� ��� ��� � ����� �����! �'" %�& ���)(*�+�! � � � �!���( ��/1 ��&|�

�tfBQ0z{fKYc`Bi�UT_+fBQ�ijQj\bUyYcRBR�Q�YOvb\bWBo\xWnUrQ�mcQ�STYcv�STQ�UVR�Q�_�X+UedkSVali�YOW�\bWlXTQ�S)��ZB\bUT_)\bRBvb\xWKYcSVqR�ac\bWlX�acd�m�\xQ��y�!��X�U¡XTSV\bmcQwU1XTa�RKSVa8m�\^Z]Q�XTfBQymcacXVQ�S���\xXVfJoca�a]ZDvbQ�mlQ�v^UtaOd!YcUTUr`BS+YOW@_)Q�XTfKY8XXVfKQ�\bS�mcaOXTQ}��\bvbv��@QyYc_�_)`BS+Y8XTQ�vbqjSVQw_)acS+Z]QwZ0YOW@Z�XVf@Y8X�XVfKQeRKSV\bm8Yc_)q�acd®XTfBQ�\bStmcaOXTQ���\xvbv��@Qoc`@YOS+YOW7XVQ�Q�Z��5� W*RKYcSrXT\b_�`BvbYcS�s8��\xXVf*STQ�UVR@Qw_�X!XVaeXVfKQtYl_�_�`BSTYl_)q�STQ�h7`B\bSVQ�i*Q�W7X�s>XVfKQ�UV_+fBQ�ijQRBSTa8m�\bZ]QwU�XVfBQ�`KUVQ�S���\xXVf�YeRBf�q]Ur\^_�Ycv]SVQw_)Q�\xR]XªYcWKZ XTfBQ�ijQ�YcWKU�XVa _+fBQw_+��s>XVfKYOX�XVfBQ�\xSªmlaOXTQ\^U�Yc_�_�`BS+Y8XVQ�vxq�STQ�RKSVQwUrQ�WlXTQ�Z�\xWJXTfBQ�²KWKYcv5_)ac`KWlXw�

@}WBQªacdlXTfBQªSTQ�i�YOST�8YO�BvbQ�dkQ�Y8XT`BSTQ�U�acd7XTfBQ1UT_+fBQ�ijQ�\^U�XVf@Y8X®\xX�UV\bZ]Q���UrXVQ�RKU�XTfBQ1UrXTYOW@ZBYOS+Z��\^UVZ]ali XVfKYOX{\xX�\^U1WKaOX{R�alUTUV\x�BvbQ�XTa�RBSTa8m�\bZBQ�Y mlaOXVQ�S1STQ�_�Q�\bR]X{��\xXVfBal`]Xtm7\bacv^Y8XT\xWKo mcacXVQ�SRBST\xm8Yl_)qc� ��acXVQ�S}RBST\xm8Yc_�q�\^U�QwUVUVQ�W7XT\bYcv�XVaJY>mcac\^Z0XVfBQ�R@a7UVUV\x�K\xvb\�X¡qJaOdª_�a7Q�ST_�\xalW�YOWKZmlaOXTQ�B`Bq�\bWBoK� ¯ WKYO\bmcQ�STQ�_�Q�\bR]X�XVf@Y8X0_)al`Bv^Z³RKSVa8m�\^Z]QRBSVa�acd}XTapY�XVfB\bSTZ�R@YOSVX¡qpaOd���fB\^_+f�tY>qDXVfKQ�mlaOXVQ���YlU�_�YlU¡X}�{al`BvbZgYOvbvxa8� mcacXVQ��K`Bq�\xWBo@� @}W�XTfBQ�UV`BSVd�Yc_)Q�aOdª\xX�s�\�X���ac`Bv^ZYORKR@QwYOS�XTa���Q�\bi*R�alUTUV\x�BvbQ�XTa�Z]Q�m�\^UrQ}YydkacSTi aOd�SVQw_)Q�\xR]X1XVfKYOX{��ac`Bv^Z�s7acWjXVfKQ�acWKQ�fKYOW@ZYOvbvba8�¤XTfBQ0mlaOXVQ�SyXVa�_+fBQ�_+�gXVfKYOX�XTfBQ�\bS�mlaOXTQD\bU�Yc_�_)`BS+Y8XTQ�vbqgSTQ�RBSTQ�UVQ�W7XVQwZ�\xW[XTfBQD²@WKYOvXTYcvxvbq0��fK\xv^U¡Xws@alWJXVfBQ acXVfBQ�S�fKYcWKZ�sKWKaOX�RBSTa8m�\bZB\xWBoDYcW�q0Q�m�\^Z]Q�W@_)Q�XVa�Y*XVfB\bSTZR@YOSVX¡q�YcUXVa��fB\^_+fn��Y>qXTfBQ�mcacXVQj�tYcUy_�YlU¡Xw�� �YOW�qg_�acijijQ�W7XTYOXVacS+U�acW;XVfKQDUr`B�8I¡Q�_�X�UVQ�Q�i XVaYcUTUV`BijQ�XVfKYOX�XVfB\^U�\^U�\bWKZ]Q�Q�Z\bi*R�alUTUV\x�BvbQc� BBalS�Q)�BYOijRBvbQcsKXVfBQ�YcUTUr`BijR]XT\xalW\bU�\bijRBvb\b_�\�X\bW0¸�Q���Q�_�_�Y� �Q�S+_)`BST\�¥ Uªh7`BQwU¡XT\xalW�§���aOd5fBQ�S{UVQ)X{acd®h7`BQ�UrXV\bacWKUªdkacS�Q�m8YOvb`KYOXVacS+U�acd5mcaOXT\xWKoUT_+fBQ�ijQ�U�s5~x§c§���«

�i��a8��\^UtmcaOXTQy_)acWB²KSVi�YOXV\bacWJRBSVa8m�\^Z]Q�Z0��\�XTfBac`BX��KYOvbvxacX���d�Yc_�QeSTQ�_�Q�\bR]X�� �� WDXTfB\bU�UVQ�_�XT\xalWD��Q���\bvxv�Y8XVXVQ�i*RBX{XTa�oc\bmcQ�XVfBQeSVQwYcZ]Q�S{YcWD\xW7XT`B\�XT\xalW0YcU1XVa�fBa8��XVfK\bU

\^U�Yl_+fB\xQ�mcQwZ[��\�XTfB\bWpXVfKQ�z{f@YO`Bi UT_+fBQ�ijQYOWKZ[\bWpXTfBQJvbYOXVQ�SjUVQ�_�XT\xalWKU*�{Q�RBSTa8m7\^Z]Q0YijacSTQyZ]Q)X+YO\bvxQwZ�Z]QwUV_�SV\bR]XT\xalW�acd�XTfBQyijQ�_+fKYcWB\bUVi�UtSVQwh7`B\xSTQ�Z5�

0�acXVQtXVf@Y8X�XVfKQ�YOWK_�\xQ�WlX �eSTQ�Q��]U�Yc_�XT`KYOvbvbq fKYcZ*Y�RKYcSrXT\bYcvBUralvx`]XT\xalW�XTaeXVfB\^UªRBSTac�KvxQ�iJ���aOXTQ�U!��Q�STQ�_�YcUrX!`KUr\bWBoyi�YOST�]U�acWjUrfKYcSTZKU�acd�R�aOXVXVQ�SVql���tf�`KU�YemcacXVQ�S!_�ac`Bv^Z*_+fBQ�_+�yXTfKY8X

©

Page 8: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

XVfKQ�\bS!UVfKYcSTZy�tYcU�\bWK_)vb`KZ]QwZ�\bW XTfBQ�²KWKYOv7X+YOvbvxqy��qySTQ�_)alocWB\^UV\xWBo�XVfBQ�\xS�UVfKYOS+Z����tfKQ�q _)al`Bv^ZWBacX�fBa8��Q�mlQ�S®RKSVa8mlQ�XVaeY�XTfB\xS+ZyRKYcSrX¡qeXTfKY8X�XVfB\^U���YlU�XTfBQ�\bS�UrfKYcSTZ5� @}WBQ{aOdBXTfBQ(�B_+fBWBQ�\bQ�SUT_+fBQ�ijQ�U{~�§2����swRKSVa8m�\^Z]Q�U5Y�Q�vbQ�_�XTSValWB\^_ªYOWKYcvxaloc`BQ�acd�XVfB\^U�«�mcacXVQ�S+U�i�YO�lQ!XVfBQ�\xS�a8��W _+fBal\b_�QaOd{RKYcUTUr��acS+Z��fBQ�W;STQ�ol\bUrXVQ�SV\bWBoDalW�XVfKQ*Q�vxQw_�XTacS+YOv®STacvbQc� �tfKQ�q�`KUVQ�XTfB\^U�RKYcUTUr��acS+ZJXVa_�YlU¡XjXTfBQ�\bS�mcacXVQc� ¯ vbv�mlaOXVQwU�YOSTQ�R�alUrXVQwZ=alW�Y���Q��GUV\�XTQcs1QwYc_+f�mcacXVQ�YOvbacWBo7Ur\^Z]Q�XVfBQ_)alSVSTQ�UVR�acWKZ]\bWBopR@YcUTUr��acS+Z�� �tf�`KU�XVfBQ�mcacXVQ�S_�YcW�UVQ�YcST_+fualWuXTfBQ�\bSRKYcUTUr��acS+ZGYOW@Z_+fBQw_+�0XTfKY8XeXVfBQj_)alSVSTQ�UVR�acWKZ]\bWBoDmlaOXTQ \bU�YlU�_�YlU¡Xw�y�tfBQ�q�_�YcWBWBacX}fBa8��Q�mlQ�S�RBSTa8mcQ XVa�YXVfK\xS+ZDRKYcSrX¡q*XTfKY8X�XVfB\^U�\bU{XTfBQ�\bStmcaOXTQ}YlUªXTfBQ�STQ}\^U�WBa��tY>q*dkacS{XVfBQ�i XVa�RBSTa8mcQ�XTfKY8X�XVfK\bU\^U�XVfBQ�\xS�R@YcUTUr��acS+Z�� �alUrX�acdyXVfBQ�YOvxXVQ�SVWKYOXV\bmcQgZB\xol\�X+YOv�mlaOXT\xWBo³UV_+fBQ�ijQ�UDSTQ�h7`B\bSTQ�XVfBQ�mcacXVQ�S�XVa=XVST`KU¡X

XVfKQef@YOS+Z]��YcSVQeYOWKZ��>acS�UVaOd X¡�tYOSTQ�XTfKY8X�RBSTa]_)Q�UTUVQ�U{XVfBQ�\xS�mlaOXTQeYcWKZ0RKSVa8m�\^Z]Q}vb\xXrXVvbQyacStWBaijQ�YcWKU�dkalS�XTfBQ�mlaOXTQ�S�°�acS}\xWKZBQ�Q�Z;YOW�qcalWBQw±tXVa�ZBQ)XVQw_�XyYjd�YO\bvb`BSVQ�\xWgXVfBQ�RBSTa�_�Q�UTUr\bWBoDacdmcacXVQwU��

� ��� ���+^��� ����� � � � �'�d�[�

�5Q�X{`KU{Ur`KRBR@a7UrQ�XVfKYOX ¯ vx\^_)Q}\bU{ac`BS{\xW7XTSVQ�RB\bZjmlaOXTQ�Sw��BKacS{UV\bi*RKvx\^_)\xX¡qcs�vbQ)X{`@U{YlUVUV`BijQ�dkacSXVfKQ}ijacijQ�WlX{XVfKYOX{XTfBQ�STQ�\^U I¡`KUrX�alWBQ���a�aOXVf®� ¯ vx\^_)Qe��\bvxv�UVfBa8�G`BR0YOXtY�mcaOXT\xWKo�U¡X+Y8XT\xalWYOW@Z�YO`BXVfBQ�WlXT\b_�Y8XTQ�fKQ�S+UrQ�v�dK\bWjUrali*Q��tY>qc���tfKQ�z{f@YO`Bi UT_+fBQ�ijQtYcUTUr`Ki*QwU�XVfKYOX�UV`B\xXTYc�BvxQUTY8dkQ���oc`@YOS+ZBUtYOSTQy\xW�RBv^Yc_�QyXVa�Q�WKUV`BSVQ�XTfKY8XeYOW�q0Q�vx\boc\b�BvbQ ijQ�i���Q�S}aOd�XVfBQ�Q�vbQ�_)XVacS+Y8XTQ�\bUYO�KvxQeXVa�_�YcUrX�Y�mlaOXTQ�YOX�i*a7U¡X�alWK_)Ql�

@}WK_)Q�YO`BXVfBQ�WlXT\b_�Y8XTQ�Z�s ¯ vb\^_)Q�\bU�STQ�YlZ]q*XVaj_�YcUrX{fKQ�StmcacXVQc���tfBQe��a7acXVf�RBSVQwUrQ�W7XTU{fBQ�S��\xXVf�Yj_+fBac\^_)Q�aOd!YOvxXVQ�SVWKYOXV\bmcQwU�� ��Q�Q B�\boc`BSTQj§yYcU�YOWQ��]YcijRBvxQl�

B�\boc`BSTQj§c« �]_�SVQ�Q�WJm7\bQ��

¯ vb\b_�Q}i�Yc�cQ�U{fBQ�St_+fKac\^_)Qcs7m�\bY�Y XTac`K_+fJUV_�SVQ�Q�WDR�Q�STfKYcRKU�s�YOW@ZDfBQ�StUVQ�vbQ�_)XV\bacWD\^U�WBa8�RBST\xW7XTQ�Z al`]X�YlU�X¡�{a}a8mcQ�STv^YO\^Z}RK\��]Q�v�RKYOXrXTQ�STWKU�acWyX¡��a}UVfBQ�Q�XTU�aOd�Yc_)Q�XTYOXVQ}°�UrQ�Q B�\boc`BSTQ �B� ±¯ U{vbacWBo*YcU1XVfBQeRKY8XVXVQ�SVWKU�YOSTQ}_�acSTSVQw_�XTvxq*a8mcQ�SVv^YO\^Z�scfKQ�StUrQ�vxQw_�XV\bacW0\bU�m�\bUV\b�BvxQeYcU�Y �KYcvxvbaOX\bijYcocQ�dkacSTi*QwZ�ac`BXeacd1Y0RKYOXrXTQ�STW�aOd1alRKYch7`BQ*YOWKZgUrQ�i*\���acRKYlhl`KQ�_)Q�vxv^U��GBKacSeQ)�BYOijRBvbQcsUV`BRBR�alUVQ�XVfKYOXeUVfBQ fKYlU�_+fBalUVQ�WJXTfBQC���ªQwU)�DacR]XT\xalW5sBXTfB\bU��{al`Bv^Z�@Q�_�acWKUrXVST`K_)XVQ�ZYlU�\bWB�\xol`BSTQG�B��tfBQyR�ac\bWlX�Yc�@al`]XtX¡�{ajv^Y>qcQ�STU�aOd�RB\x��Q�v5RKYOXrXVQ�SVW@Ut\bUtXTfKY8XwsBYOvxXVfBal`Bocf®s�XVfBQ _+fBal\b_�Q�\bU

m�\bUV\b�BvxQ*��fBQ�WgXTfBQ*X¡�{aJm�\xQ��{QwZg_)alSVSTQ�_)XVvbqa8mcQ�STv^YO\^Z�s�Q�Yc_+f;m�\xQ��{QwZgUVQ�RKYcSTYOXVQ�vbqSVQ�mcQwYOv^UWBacXVfB\bWBopYO��ac`BX0fBQ�S�_+fBac\^_)Ql� �tfBQ�ZBQ)XTYc\xv^UDacdefKa8�¦XTfB\bU0\bU�Yc_+fB\bQ�mlQ�Z�YOSTQvxQ�d X�`BW7XT\xv��Qw_�XV\bacW � �b§c����`8D�_�Q\�XjXVanUTY>qnYOXjXVfB\^UjU¡X+YOocQ�XVf@Y8X*XVfBQ�KYcvxvbaOXj\xi�YcocQJ\bU*ac�@UV_�`BSVQwZ��\xXVfgS+YOW@Z]aci WBal\bUVQ���fK\b_+f;\bU}�{a8mlQ�W���Q)X¡��Q�Q�W�XTfBQ�X¡��a0v^Y>qcQ�STU��ePGfBQ�STQ�R@YOSVXeacdªXVfBQ

Page 9: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

B�\bSTUrX5��fBQ�Q�X �]Q�_)alWKZ���fBQ�Q�X @}mcQ�STv^YO\^ZD� i�YOolQ

B�\boc`KSVQ �]«{z{alWKUrXVST`K_�XT\xalW�acd®XVfKQP/�YcvxvbaOX�� i�YOolQ

Q�W@_)STq7RBXVQ�Z0�KYOvbvbaOX�\xi�YcocQ�YORBR�Q�YcSTU{\xWY*SVQ�oc\bacWDacd�alWBQ}v^Y>qcQ�S�slXVfKQei�YOXT_+fB\bWBojSVQ�oc\bacWDacdXVfKQ*acXVfBQ�S�vbY>qlQ�S�_�YOSTST\xQwU�XTfBQjacRBR�alUV\�XTQ�acdªXVfKQ*S+YOW@Z]aci WBal\bUVQc�*�tf�`KU�s���fKQ�W;XVfBQ*X¡��aYOSTQea8mcQ�STv^YO\^Z�s7XVfBQyWBal\bUVQy_�YcWK_)Q�vbUtal`]X�SVQ�mcQ�Ycvx\bWBo�XVfBQy�@YOvbvxacXt\bi�YOolQc�¯ UTUr`Ki*\bWBo�XVfKYOX�XTfBQ1�KYcvxvbaOX�\xi�YcocQ�XTfKY8X�Q�ijQ�STocQwU�dkSTaci XVfBQ{RBST\xW7XVQ�S�alWyXVfKQ1a8mcQ�SVv^YO\^Z

UVfBQ�Q�XTU�\^U���f@Y8X ¯ vx\^_)Q�Q)�]R�Q�_�X+U�s�UVfBQ�_�YcW�Ur\bocW@YOv®fKQ�S�al�8Y>qc� ¯ X�XTfB\bU}R�ac\bWlXwsKXTfBQ���a�aOXTfYcUV�]U1fKQ�S�XVa*i�YO�cQ�Y*_+fBac\^_)Q}aOd�Q�\�XTfBQ�S�XTfBQ�`BRBR�Q�StacS�XVfKQevba8��Q�S�aOd5XTfBQ�RBSV\bW7XVQwZDv^Y>qcQ�S+U����fBQy��\bvbv�SVQ�XTYO\bW�XVfBQ _+fBa7UrQ�W�v^Y>qcQ�S�s���fB\bvbQ�XVfBQyacXVfBQ�S�vbY>qlQ�St��\xvbv���Q Z]Q�UrXVSTa8qcQwZ��

@}WK_)QtUVfBQ1fKYlU®i�YlZ]Q1XTfB\^U�_+fKac\^_)Qcs8UVacijQªdk`KSrXTfBQ�S!\bW]dkacSTi�Y8XV\bacW�\bU�RBST\xW7XVQwZ alWlXTa���aOXTfUVfBQ�Q�XTUeYOvbacWBo7Ur\^Z]QyXTfBQjRB\��]Q�v�RKYOXrXTQ�STWKU�RKSV\bW7XVQ�ZgQ�YcSVvb\xQ�S�� ¯ o7YO\bW5s��{Q�vxQwY>mcQyXTfBQjZ]Q)X+YO\bvbUaOd5Q��BYc_�XTvxqj��fKYOX{\bW]dkacSTi�Y8XT\xalW�\bU�RBST\xW7XTQ�ZDYOX1XVfK\bU�U¡X+YOolQ�`BW7XV\bv�vbYOXVQ�Sw� BBalSªXVfKQ}ijacijQ�WlX��QjUV\bi*RKvxq�WKaOXVQjXTfKY8X�XTfBQ�\xWBdkacSTijYOXV\bacW�acW;XVfBQD_+fKalUVQ�Wgv^Y>qcQ�S�\xWK_�vx`@Z]Q�Uy\bW]dkalSVi�Y8XT\xalWQ�W@YO�Bvb\xWKoj_�Q�SVXTYc\xW_+fBQ�_+�]U{XVa���QyR�Q�SVdkacSTi*QwZ0alW0XTfBQyRBST\xW7XTac`]X+U��¯ vb\b_�QWBa8�¦Z]Q�XTYc_+f@U�XTfBQ�UVfBQ�Q�XTU�dkSVali'XVfBQRBST\bWlXTQ�S�YOW@Z³UVQ�RKYcSTYOXVQwU XTfBQ�i ��Q)dkalSVQ

vbQ�Y>m�\xWKo�XVfBQ��@a�acXVf5�G@}W�Q)�]\xXV\bWBoDXTfBQ���a�aOXVf®s�UVfBQ�fKYOWKZKU�a8mlQ�S�XTfBQ*UVfBQ�Q)X}i�YcSV�lQ�ZJdkacSZ]QwU¡XTSV`K_)XV\bacWXTa0Y�mcacXV\bWBoDa/D�_�\bYcv®��fBa�UrfBal`Bv^ZmcQ�ST\x²@YO�Bvbq�ZBQ�UrXVSTa8qDXVfKQ�UVfBQ�Q�X}\bWdkSValWlXaOd�fBQ�S��1z{fKYc`Bi Ur`KococQwU¡X+U!XVf@Y8X�YyXVS+YOWKUVRKYOSTQ�W7XTvxq�fBac`KUVQ�Z0UrfBSTQ�ZKZ]Q�Sªij\bocf7X{��Q}UV`B\xXTYc�BvxQdkacStXTfB\^U���tfBQ�mcaOXTQ;_�YcUrXV\bWBo=UrXTYOolQg\^U0WKa8� a8mcQ�SJYcUDd�YOSYcU ¯ vb\b_�Q;\^U�_�acWK_�Q�STWBQ�Z5� ¯ U�YcW

`BRKUrXTYcWKZ]\bWBo�ijQ�i���Q�S�aOd®Y�ZBQ�ija]_)S+Y8XV\^_�UVa]_)\bQ)X¡qjfBa8��Q�mcQ�S�slUrfBQeUrfKac`Bv^Z�WBacX�STQ�v^Y8��_)ali��RBvbQ)XTQ�vbq�Y8XtXTfB\bU�R@al\xW7X�«ªUVfBQ�\^U�Q�WK_�ac`BS+YOolQ�ZDXVajR@Q�SrdkalSVi¶Y�W�`Bi��@Q�S�aOd!_+fBQ�_+�]U��� WRKYOSVXV\^_)`Bv^YOSwsBUVfBQyUrfBal`Bv^Z�ST`BWJfBQ�S�SVQw_)Q�\bR]XtXVfKSVal`BocfY�Z]Q�m�\^_)QeXVf@Y8X�_�YcWR@Q�SrdkalSVi

UVacijQ�i�Y8XTfBQ�i�YOXV\^_�YOv�_+fBQw_+�]UªXTa�QwU¡X+YO�Bvb\bUVfDXTfKY8X�XVfKQeSTQ�_�Q�\bR]Xt��YlU{_�acSTSVQw_�XVvbq*ocQ�WKQ�S+Y8XVQwZ��qnXVfBQJ��a7acXVf5�=P;QJ��\xvbv�_)alijQ0XTfBQJUV\bocWB\x²@_�YcWK_)Q�aOd�XTfB\^U�YOWKZpXVfBQJaOXTfBQ�S�_+fBQw_+��U�\bW��Qw_�XV\bacWJ�K� ¨B�

� ��� ��� ��� ���^�5� +�#��,�(� ���d�

��YOvbvxq�\bWBon\bU�R�Q�SVdkacSTijQ�Z���q³YnW�`Bi��@Q�SDaOdeXVST`KUrXVQ�QwU�stYOvbv�acde��fBali fKY>mlQ��rSTQ�YcZ�YOW@ZYORKR@Q�WKZ8�jYc_�_)Q�UTU�XVaDY*RB`K�Bvx\^_�Ycvxvbq0STQ�YlZBYO�KvxQ���Q��KUV\�XTQc�ª�tfBQymlaOXTQ�U�YOSTQ�RKYcUTUVQ�Z0XVfBSTac`BolfYOvbv7XVfBQ{XVST`KUrXVQ�Q�U�s8��\�XTf�QwYc_+fyXTSV`KUrXVQ�Q1²@WB\bUVfB\bWBo}XVfBQ�\xS!��acST�e��Q)dkalSVQ�RKYlUVUV\xWKo�XVfKQ�STQ�_�Q�\bR]XTUacW�XVajXTfBQ�WBQ)��X�alWBQc��®a��Q�ol\xWn��\xXVf�XVfBQ���a�aOXTf;RKYlUVUVQ�UeXTfBQj\xWBdkacSTijYOXV\bacW�acW;XVfBQ�STQ�_�Q�\bR]X�XVaXTfBQj�{Q��

Page 10: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

UV\�XTQjXVa���QDRB`B�Kvx\^_)vbq;R�alUrXVQwZ[YOvbacWBo��\xXVfnXTfBQDaOXTfBQ�S�SVQw_)Q�\bR]X+U�dkacSyXTfBQDQ�vxQw_�XV\bacW®�J�tfBQdk`Bvbv®UVQ)X�aOd�SVQw_)Q�\xR]X+U�YOSTQyYOv^Ura*RKYcUTUVQ�Z�acWJXVa*XVfKQ�²KSTUrXtXVST`KUrXVQ�Ql�­ Yl_+fXVST`KU¡XTQ�Q�i�`KUrX}R�Q�SVdkacSTi¦X¡��a�X+YcUV��U�acW�XTfBQ��@Y8XT_+fgaOdªSTQ�_)Q�\xRBXTU�XTfBQ�qSTQ�_�Q�\bmcQc«

XVfKQ�q=UrXVST\xR�aOµ Y;v^Y>qcQ�S�acd}Q�WK_)STq�R]XV\bacW³dkSVali Q�Yl_+f³acd�XTfBQ�SVQw_)Q�\xR]X+UjYOWKZ=XVfBQ�q=i�`KU¡XR�Q�SVdkacSTi�Y�UVQ�_�SVQ�X�Urf�`���Q�acWnXTfBQD�KYOXT_+f5��tfBQ�qgXTfBQ�WpR�alUrXyXVfK\bU*Urf�`���QwZ�s�R@YOSVXV\^YOvbvxqZ]Qw_)STq7RBXVQ�ZgUrQ�Xeacd1SVQw_)Q�\xR]X+U}XVaDXTfBQj�{Q��gUV\�XTQ*YcWKZ�RKYlUVU}\xX}XTa0XTfBQ�WKQ)��X}XTSV`@U¡XTQ�Qc� �tfK\bU_)alW7XV\bW7`KQ�U�XTfBSVal`BocfnXTfBQ�UVQ)X*aOdtXVST`KUrXVQ�Q�U `KWlXT\xv{XVfKQ0v^YcUrX XVST`KUrXVQ�QJU¡XTSV\bRKU�aOµ=XTfBQD²@WKYOvv^Y>qcQ�Stacd�Q�W@_)STq7RBXV\bacW�XVa�STQ�mcQwYOv�XVfKQymcaOXTQ�Sw¥ U�alSV\boc\bWKYOv��KYcvxvbaOX�\bi�YOocQwU���tfBQDa8mlQ�S+YOvbv�Q�µ�Qw_�XyXTfBQ�W[\^U�XVa�f@Y>mcQjR@a7U¡XTQ�ZnalW;XTfBQ���Q��[Ur\xXVQls�\bWnXVfKQ�vxQ�d X�fKYOW@Z

_)alvx`Ki*WJUVY>qlscXTfBQ��KY8X+_+fDaOd�\xWB\xXV\^YOv�STQ�_�Q�\bR]XTU{R�alUrXVQ�Z0��qjXVfBQ���a7acXVf5�!� W0XVfBQ�ST\xolflX�fKYOW@Z_)alvx`Ki*W��{Q{��\xvbv�fKY>mcQ1XVfBQ{dk`Bvbvxq�Z]Q�_�SVq�R]XTQ�Zy�KYcvxvbaOX!\bijYcocQwU��®�tfKQ�STQ{��\bvxv]YcvbUVa���QtY}UrQ�X�acd_)alvx`Ki*W@U�\xW���Q)X¡��Q�Q�W��\�XTfXVfBQ \bW7XVQ�SVijQ�ZB\bYOXVQcsKRKYOSVXV\^YOvbvxqJZ]Q�_�SVq�R]XTQ�ZUVQ)XTU�aOd�SVQw_)Q�\xR]X+U��­ Yl_+f�_)alvx`Ki*W*��\bvxv]��Q�UralijQ�UVQ�_�SVQ�X�R�Q�STi�`]X+Y8XT\xalW�acdKXVfKQ�RKSVQ�m7\bac`@U�alWBQc��0�acXVQ{XVfKYOX�XVfBQQ�W@_)STq7RBXV\bacWnRBSTQ�mcQ�W7XTU�XTfBQ0R�Q�STi�`]X+Y8XT\xalW[�@Q�\xWBogSVQw_)acW@U¡XTSV`K_)XVQwZ;��qnUr\bijRBvbQ0i�Y8X+_+fB\xWKoaOd�Q�vbQ�ijQ�W7X+U��¯ UTUr`Ki*\bWBo�XVf@Y8X0YOvbv�XVfBQXTSV`@U¡XTQ�Q�Ujf@Y>mcQJR@Q�SrdkalSVijQ�ZpXVfBQ�\xSjXTSTYcWKUrdkacSTijYOXV\bacWKU*_)alS��

STQ�_�XTvxqlsBXTfBQ�STQ���\bvxv��@Q*Y�acWKQ���XVa���acWKQ _)acSTSTQ�UVR@alWKZ]Q�W@_)Qy��Q)X¡��Q�Q�WXTfBQ�Q�vxQ�ijQ�W7XTU�aOdªQ�Yl_+f_)alvx`Ki*W�YOWKZ�XVfBQ*WBQ��7Xw���tfBQ*Q)�BYc_)X�_�acSTSVQwUrR�acW@Z]Q�WK_�Qcs���fB\^_+fgSTQ�_)Q�\xRBXe\^U}XVfBQjZ]Q�_�SVq�R]XaOd!��fB\^_+fSVQw_)Q�\bR]X�\bWXVfBQ�RBSVQ�m�\xal`KU�_)alvx`BijW5s@��\xvbv5��Q fB\^ZBZ]Q�W�YOWKZJ��WBa8��WacWBvbq�XTa�XVfBQXVST`KUrXVQ�Q���fBa�R@Q�SrdkalSVijQwZ�XTfBQ�XVS+YOW@U¡dkalSVi�Y8XT\xalW;��Q)X¡��Q�Q�W�XVfBa7UrQD_�acvb`BijWKU����tf7`@U�s�XVfBQSTQ�_)Q�\xRBXTUe��\xvbv!fKY>mcQ�`BWKZ]Q�SVolacWBQ*i�`Kv�XT\xRBvbQcs5UVQ�_�SVQ�X�UVf�`���Q�Ue��Q)X¡��Q�Q�WgXVfBQ*²KS+UrX�_�acvb`BijWYcU}R�alUrXVQ�Zg��qXVfBQj��a7acXVf�YOWKZ�XVfBQ�²KWKYcv!ZBQ�_)STq�R]XVQwZg_�acvb`BijW5���tfB\^UeQ�WKUV`BSTQ�U�XVfKYOXeWBamcacXVQ�St_�YOWJ�@Qyvb\bWB�cQwZ0XTa*XVfBQ�\xS�mlaOXTQcsBUVa*Q�WKUV`BSV\bWBo*mcacXVQ�S�RKSV\bm8Yc_)q;°k�KYcvxvbaOX�UVQ�_)STQ�_�qB±���tfBQjd�Yc_)X�XVfKYOXyUVQ�mlQ�S+YOv�XVST`KUrXVQ�Q�UyYOSTQ*`KUrQwZgol\xmlQ�U�UVQ�mcQ�STYcv!vbY>qlQ�S+U�acd�Z]Q�dkQ�WK_�Q���\�XTf

STQ�UVR@Qw_�XªXTa�mcacXVQ�SªRBST\xm8Yc_�q�«�Q�mcQ�W�\xd®UVQ�mcQ�STYcvBaOd�XTfBQ�XTSV`@U¡XTQ�Q�U�s7�B`]X{WKaOX�Ycvxv�s�YOSTQ�_)ali*RKSVa/�ij\bUVQ�Z5s�XVfBQyvb\xWK�>YcocQyacd�mcacXVQ�STU���\xXVfJXVfBQ�\xS�mcaOXTQ�Ut��\bvxv�STQ�i�Yc\xWUrQw_)STQ)Xw��tfBQ�Z]Q�_�SVq�R]XTQ�ZgmcaOXTQ�U}��\xvbv�YOvbv!�@Q�Y>m8YO\bvbYc�BvbQ�\bWgXTfBQ�²@WKYOv�_)alvx`Ki*W�ac`BXVRB`]X�aOd{XVfBQ

v^YcUrX{XTSV`KUrXVQ�QeYcWKZJUra�XVfBQ�a8mcQ�STYcvxv�_)al`BW7X���\bvbv��@Qy_+fBQw_+�>Yc�BvbQ���qDYOW�qcalWBQc����X�ij\xolflX���QeY�B\xX�XVQwZ]\xal`KU!XTa Z]ay��q Q�qlQtdkacSªY�v^YOSTocQ�Q�vbQ�_�XT\xalW�YOWKZjYOW�q�Yc`]XVali�Y8XVQwZj_)ac`KWlXT\xWKoeRKSVa]_)QwUVU��ac`Bv^ZJfKY>mcQ�XTaD�@Q�Z]Q�R�Q�WKZKYO�BvbQ0°k�K`]XeYcW7qlacWBQ _�ac`Bv^ZJ��SV\xXVQ�Ur`K_+f�YjRKSVa]_)QwUVU�sKYcvxvba8��\xWKo_)STalUTU���_+fBQw_+��\xWBo�±��

� ��� � ��� � ��� � ��+�� ���_� +-�'#

�tfBQgZBQ�UT_)ST\xR]XT\xalWuUrapd�YOS0f@YcU0YlUVUV`BijQ�Z�XTfKY8XYOvbv�XTfBQgRBv^Y>qcQ�STU�s�XVfBQ;�@a�acXVfuYOW@Z�XVfBQXVST`KUrXVQ�Q�U�s]fKY>mcQe�@Q�fKY>mcQwZ0_�acSTSVQw_�XVvbqcs�\bWJYl_�_�acS+ZBYOWK_�Q���\xXVfJXVfKQeST`BvbQ�Utacd®XVfKQ�UT_+fBQ�i*Ql����dQ�mlQ�STqcalWBQ�ac��Q�q]U�XTfBQ�SV`BvbQ�U���Qe_�YOWJ�@QyUV`BSTQ�XTfKY8XtXVfKQeQ�vxQw_�XT\xalW���\bvxv���Q��@acXVfYc_�_)`BS+Y8XTQYOW@Z}RKSV\bm8Y8XVQl�®��d¡s>fBa8��Q�mlQ�Sws)XVfKQª�@a�acXVfyacS�YOW�q�acd7XTfBQ�XTSV`KUrXVQ�Q�U�_+fBQ�YOX�XVfBQ�WyXVfBQ{Yc_�_�`BS+Yc_)qYOW@Z;RKSV\bm8Yc_)q�_)al`BvbZn��QD`BW@Z]Q�STij\xWBQwZ��JP;QDSTQ�Ycvxvbq;ZBacW5¥ X��tYOW7XyXVa�fKY>mlQjXVa�RB`BX�Ur`@_+fY;vxQ�mcQ�vtacd�XVST`KUrX*\bW³XVfBQ�_)alijR@alWBQ�W7XTU*acd�XVfKQUT_+fBQ�i*Ql�p� W³XVfBQ��acS+ZBU�acde£�\^UVUV\bWBocQ�S��Q�UrfKac`Bv^Z �¡XTSV`@U¡Xe�B`]X�mcQ�ST\xdkq�� �B��P;Q�SVQwYOvbvxqJ��YcW7X���Y>q]U�XVa�_+fKQ�_+�JacW�XTfBQ���Q�fKY>m�\bac`BSaOd1XVfBQ*�@a�acXVf;YcWKZ�XTSV`@U¡XTQ�Q�U�XVa_�YOXT_+f�YOW�q�Y8XrXTQ�ijR]X+U�XTaJ_+fKQ�Y8Xj°kalSe\bWKZ]Q�Q�Z�XVaZ]Q)XTQ�_�X\bWBWBa]_)Q�WlX�i�YOvxdk`BWK_)XV\bacWKU+±��¯ vb\b_�Q�UrfBal`Bv^Z�R@Q�SrdkalSVi X¡��a�_+fKQ�_+�]U�XTfKY8XyUVQ�STmcQ XTaJZBQ)XVQw_�XyY8XVXVQ�ijR]X+UeXVa_+fBQ�YOX}��q

XVfKQ}��a�aOXVf®� ��fBQyUrfKac`Bv^ZDST`BW0fKQ�StSVQw_)Q�\xR]X�XVfKSVal`Bocf0Y�STQ�YcZBQ�StZ]Q�m�\^_)Q}XVfKYOX�_+fKQ�_+�]UªXTfKY8XXVfKQ�STQ�_�Q�\bR]X*f@YcU��@Q�Q�W�_)acSTSTQ�_�XTvxq;dkacSTijQ�Z=�7qnXTfBQJ�@a�aOXTf5����`K_+f�Z]Q�m�\^_)QwU*UVfBal`BvbZ=�@Q

Page 11: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

STQ�YcZB\xvbq�Y>m8YO\bv^YO�BvbQ�Y8XªXTfBQ�mcacXV\bWBo�UrXTYOXV\bacW*dkacSªQ��BYOijRBvbQ�YOWKZjRKSVa8m�\^Z]Q�Z*��q�\bWKZ]Q�R@Q�WKZ]Q�W7XacSTolYcWB\^UVYOXV\bacWKU�s8Ur`K_+fjYcU�XTfBQ ­ vbQ�_)XValSTYcv�¸�Q)dkacSTi ��a]_�\xQ�X¡q�acSªUV\bi*\bv^YOSw����`K_+f�Z]Q�m�\b_�Q�U!��\bvxvR�Q�SVdkacSTi�_)Q�SrX+YO\bW�ijYOXVfBQ�i�Y8XV\^_�Ycvc_)alijRB`]XTYOXV\bacWKU5acW�XVfKQ1ZBY8X+YtacWeXVfKQªSVQw_)Q�\xR]X�Yc_�_�acS+Z]\bWBoXVa³RB`B�Bvb\^_�YOvbvbq���WBa8��WuYcvxolacST\�XTfBi�U�� �tf7`@U�s�\bWuRBST\bWK_)\bRBvbQcs�YcW7qlacWBQ;_)ac`KvbZu_�acWKUrXVST`K_)XUV`K_+f�YD_+fBQ�_+�lQ�S�YcWKZi�YO�cQy\xX�dkSTQ�Q�vxqY>m8YO\bvbYc�BvxQl� ��\bij\xv^YOSTvbqJYcW7qlacWBQ���ac`Bv^ZJ�@Q*YO�BvbQ�XVaQ)�BYci*\bWBQ�UV`K_+f�Y�_+fKQ�_+�cQ�SeXVaQ�UrXTYc�Bvx\^UVfgXTfKY8X \xX ��YlU�R@Q�SrdkalSVij\bWBo�_)alSVSTQ�_)XVvbqc�j� WKZ]Q�Q�Z�s\xd�UVfBQ�\^UeSVQwYOvbvxq�Q�W7XVf�`KUV\bYlU¡XT\b_cs ¯ vx\^_)Qji�Y>q�_+fBa�alUVQ XTa�ST`BW�UrQ�mcQ�S+YOv!UV`K_+fg\bWKZ]Q�R@Q�WKZ]Q�W7X_+fBQw_+��U��

@}WK_)Q Ycvxv®XVfBQySTQ�_�Q�\bR]X��KYOXT_+fBQwUtfKY>mcQy��Q�Q�W�R@a7U¡XTQ�Z�XVaDXVfBQy��Q���UV\�XTQcs ¯ vb\b_�Q UrfBal`Bv^ZYOv^UVa*_+fBQw_+��XVf@Y8X�fBQ�S�SVQw_)Q�\bR]X�\^U�Yc_�_)`BS+Y8XTQ�vbq�SVQw_)acS+Z]QwZ�XVfKQ�STQc�¯ vbv®XTfB\^U}UVac`BW@ZBU�S+Y8XTfBQ�S�Q�vbYc�@alSTYOXVQ �K`]X}\^U�\bW7XVQ�W@Z]Q�ZXTaDRBSTQ�mlQ�W7X}_+fBQwY8XV\bWBo���qJXVfBQ

��a7acXVf5� �5Q�X�`KU�_)alWKUV\bZ]Q�S�fBa8��XVfBQ ��a�aOXTfJij\bocf7X�XVSTqDXTaD_+fBQ�YOX��1�tfKQ�Ur\bijRBvbQ�UrX�Y8XrX+Yc_+���q0XTfBQ���a�aOXTf��{al`Bv^Z�@Q�XVa��Vvxa7UrQ ��XVfBQ�SVQw_)Q�\bR]X�YOvxXVacolQ)XTfBQ�SwsKalS�XVaJYOvxXVQ�S}\�Xe\xW�d�Y>mcac`KSaOdªYcWBaOXTfBQ�S�_�YOWKZ]\^ZBYOXVQc�*/�`]X�\bWXVfK\bU}_�YcUVQ�XVfKQ mcacXVQ�S��{al`BvbZJQ�\�XTfBQ�S�²KWKZWBaDSTQ�_�acS+Z0acdXVfKQ�\bQ*STQ�_�Q�\bR]XyacW;XVfBQ���Q��@Ur\xXVQls5acSe²KWKZnYcW;YOvxXVQ�SVQwZgalWBQc�*� WnQ�\xXVfBQ�S _�YlUrQ�XVfBQ�qg_)al`Bv^ZZ]Q�i*alWKUrXVS+Y8XVQ}XVf@Y8X�XVfKQy�@a�aOXTffKYcZ_+fBQwY8XVQwZ����X}ij\bocf7X�XTSVq�XVa0YcSVS+YOWKocQedkacS ¯ vb\b_�QyXVaJUrQ�QyXVfKQ��KYcvxvbaOX�\bi�YOolQ�UrfKQ Q)�]R�Q�_�X+U���fK\xv^U¡X

RKYlUVUV\xWKo�acWgZBYOXTYjXTa�XVfKQ XVST`KUrXVQ�Q�U�dkacS�XTfBQ�ZBQ�_)STq�R]XV\bacW�YcWKZX+YOvbvxq�\bWBoDRBfKYlUrQ XVfKYOX}��\bvxvq�\xQ�vbZJY�Z]\xµ�Q�SVQ�W7XtmlaOXTQealWK_)QyYcvxv�XTfBQ Z]Qw_)STq7RBXV\bacWKU�fKY>mlQe��Q�Q�WR@Q�SrdkalSVijQ�Z5�

��`BRBR�alUVQXVf@Y8X�Y�ijacSTQ�U¡XTSTYc\xolf7XrdkacST�tYOS+Z[\xijRBvbQ�ijQ�WlX+Y8XT\xalW�acd}XTfBQ�UT_+fBQ�ijQ���Q�STQ`KUVQ�Z�«®XVfBQ���a�aOXTf*olQ�WBQ�STYOXVQwU�Y}v^Y>qcQ�S!aOd�STYcWKZ]aci¤WBac\^UrQt��fB\^_+fj\bU!RKSV\bW7XVQ�Z*alW*alWBQtaOd�XVfBQv^Y>qcQ�S+U��®�tfBQ���a�aOXVfjXTfBQ�W�olQ�WBQ�STYOXVQwU�XVfBQ�UVQ�_�acWKZ*v^Y>qcQ�SªUra�XTfKY8X�XTfBQ�a8mcQ�SVv^Y>qyaOd�XTfBQ�X¡��av^Y>qcQ�S+U�STQ�mlQ�YOv^U�XTfBQemcaOXTQ�S�\xi�YcocQc�!�tfB\^U�\bU{\xW0d�Yc_)X I¡`KUrX�XVfBQ�U¡X+YOWKZKYOS+Z�\xijRBvbQ�ijQ�WlX+Y8XT\xalWaOd@m7\^UV`KYOv]_)STq�R]XValocS+YORBf�q�YcU!Z]QwUV_�SV\b�@QwZ�\bW ��Q�_)XV\bacW � �x§l� ¯ vx\^_)QtSTQ)XTYc\xW@U®XTfBQ�UrQw_)alWKZ v^Y>qcQ�S°kWKaOXVQl«®XTfBQ�STQ���ac`Bv^Zj��Q�WBa R�ac\bW7X1fBQ�SVQ�STQ)X+YO\bWB\bWBoyXVfKQ�²KS+U¡X�vbY>qlQ�SªYcUªXVfB\^Uª\^U{RB`BSTQ�WBac\^UVQYOW@Z�XVacXTYcvxvbq�\xW@Z]Q�R�Q�WKZBQ�W7X aOd1fKQ�S�mcacXVQw±)���tfBQ*��a7acXVf�WBa8� RKYlUVUVQ�U}acW�Y_)acR�qaOd{XVfBQ�KYcvxvbaOX�STQ�_)Q�\xRBX�YcvxalWBoj��\�XTf\xW]dkalSVi�YOXV\bacWJacWJfBa8�uXTa�ocQ�WKQ�S+Y8XVQ}XVfKQyWBac\^UrQl�

��`K_+f YcWy\xijRBvbQ�ijQ�W7X+Y8XV\bacW�\^U5m�`BvbWBQ�S+YO�KvxQ!XTa�YOW�Q�YlUrqeY8XVXTYc_+�}��qeY�UV`B��mcQ�SrXTQ�Ze�@a�acXVf5��tfBQDZ]\�DD_)`BvxX¡qg\^UyXTfKY8XyXTfBQ�STQ�\^UyWBa�ijQ�_+fKYcWB\^Uri�XVaXV\bQjXVfKQDWBac\^UVQ*`@UrQwZgXTa�ocQ�WBQ�S+Y8XTQXVfKQ�m�\^Ur`KYcv1v^Y>qcQ�S XVagXVfBQJWBal\bUVQ0`KUVQ�Zp�7q�XTfBQ0XTSV`@U¡XTQ�Q�U�XVa;SVQ�mcQwYOvªXTfBQJ\xi�YOolQ0alW[XVfBQSTQ�_)Q�\xRBX����tf�`KU�XVfBQ*�@a�acXVfgUV\xijRBvbq_+fBa�alUVQ�U�WKac\^UrQ alWXVfBQ�²KS+U¡XevbY>qlQ�S�XTfKY8X�UrfBa8��U�XVfBQmcacXVQ�S ��fKY8X�XVfBQ�q��tYOW7X XTagUVQ�QD��fB\bv^U¡X*RKYcUTUr\bWBo�WBal\bUVQDalWnXVa�XTfBQDXTSV`KUrXVQ�Q�U XVfKYOX���\bvxvSTQ�mcQwYOv�XVfKQ�mcaOXTQ*XVfBQjXTfBQ��@a�acXVfG°kalSy\�X+Uy_)acW7XTSValvxvbQ�S�±��tYOW7X+UeXVa�UVQ�Qc�� �alSVQjRBSTQ�_�\bUVQ�vbqcsXVfKQ}WBal\bUVQeRKYcUTUrQwZjXVa�XVfKQ�XTSV`KUrXVQ�Q�U���ac`Bv^Z���Q}XTfBQ �c_)alSVSTQ�_)X+�yWKac\^UrQeYcU�ocQ�WBQ�S+Y8XTQ�Z*dkSTaciXVfKQy�KYOvbvxacX�UrQ�SV\^YOv�W�`Bi��@Q�S�XVa�Q�WKUV`BSVQ�XTfKY8X�\xX���ac`Bv^ZJRKYcUTU�YOW�qJUr`K_+f��Q�vbvH��dkacSTijQ�Z]WKQ�UTU_+fBQw_+��U���tfBQ�RBf�q]Ur\^_�Ycv�v^Y>qcQ�S1XTa���Q Z]\^UV_�YOS+Z]Q�Z0_)ac`KvbZ��@Qy_+fBQw_+�cQwZ�dkacSt��Q�vbvH��dkacSTijQ�Z]WKQ�UTU1��Q��

dkacSTQtZ]Q�UrXVST`K_�XT\xalW5s8�B`]X�XTfB\^U!�{al`BvbZ�SVQwh7`B\xSTQtYOW�YlZBZ]\xXV\bacWKYcv]_)acijRB`KvbUVacSTqy_+fBQ�_+�y��Q)X¡��Q�Q�WXVfKQ��@a�aOXTfDYOWKZ�XTfBQ�UrfKSVQwZBZ]Q�SwscYcWKZ*\xWK_�SVQwYcUVQ�XVfBQ�Yci*al`BW7XªaOd�XV\bijQ�XVfKYOX�XVfBQtX¡��ayRBf�q]U �\^_�YOv�v^Y>qcQ�STUeacd{XTfBQ�SVQw_)Q�\xR]X�YcSVQ*XTacocQ�XVfBQ�S��D�tfK\bUyi�Y>q�XTfBQ�W[alR@Q�Wn`BR�XVfBQ�R�alUTUr\b�B\bvx\xX¡qaOd�_)a�Q�ST_�\xalWJalS�mcacXVQy�B`Kq7\bWBo@s@YcU�XVfBQ mlaOXTQ�S���ac`Bv^ZJ�@Q�YO�BvbQyXVaDZBQ�ijacWKUrXVS+Y8XTQ�XVfBQ���Y>qXVfKQ�q0f@YcZ�mcaOXTQ�Z����X�i*\bocf7X�UVQ�Q�i¶Y8X�²KSTUrX�Ur\bocf7X�XVfKYOXtXVfB\^U���ac`Bv^ZD��QyY*ZB\HDD_)`Kv�XtXVST\^_+�jdkacStXVfKQe��a�aOXTf

XVa�RB`Bvbv�acµ�«tXTaD²KW@ZX¡�{aJUrQ�XTU�aOdªWBal\bUVQ�UV`K_+f�XTfKY8Xws���fKQ�Wg_�aci��K\xWBQwZ��\�XTf�XTfBQ��KYcvxvbaOXSTQ�_)Q�\xRBX�s�acWBQ�qcQ�\xv^ZBU�XTfBQ*mcaOXTQ�S+U�_+fBal\b_�Q���fB\bv^U¡X}XVfBQ*aOXTfBQ�SeqcQ�\xv^ZBU�XVfBQ��@a�aOXTf5¥ Ue_+fKac\^_)Qc�� W*d�Yc_)X!\xXª\^Uªh7`B\�XTQtXVST\xm�\^YOv�scYOvbv�XVfKQ��@a�aOXTfjfKYcU�XTa Z]a�\bU!XTayUralvxmlQ{XTfBQ5�}vx\bWBQwYOS�Q�h7`KYOXV\bacWKU

§��

Page 12: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

\bW����c«

����� ��� ��� ��

��fBQ�SVQ�� \^U�XVfBQ @e� :=RKSV\bW7XVQ�Z�\bWDXVfKQeSTQ�_�Q�\bR]X�s�� XVfBQ�_)\bRBfBQ�StXVQ��7X�YcWKZ� XVfKQ}�KYcvxvbaOX\bijYcocQUrQ�Q�W���qnXVfBQ�mlaOXVQ�S�s{YOWKZ�� � \bU*XTfBQ @e� :¤R@YcUTUrQwZ[XVa�XTfBQJXVST`KU¡XTQ�QwU�YOWKZ� �XVfKQ�\xi�YOolQ*XVfBQjXTSV`KUrXVQ�Q�U���\bvxvªXVfBQ�W�STQ�mlQ�Ycv��j�tfB\^Uy\bU�STQ�Ycvxvbq I¡`KUrX�YJi�YOWBQ�dkQ�UrXTY8XT\xalW;acdXVfKQ��{Q�vxv����7WKa8��W=d�Yl_�XDXTfKY8XDdkalS�YnalWBQ���XV\bijQ�RKYcZ�Q�mcQ�STq=R�alUTUV\x�BvbQ�RBv^YO\bW�XVQ��7X�fKYcUDY_)alSVSTQ�UVR�acWKZ]\bWBo*_)\bRBfBQ�S�XVQ)��X�XTfKY8X���\bvxv�STQ�mlQ�Ycv�\xX���tfBQ�\bWlXTQ�ST�{QwY>m�\xWBo�aOd�XVfBQ�WKac\^UrQj\bijYcocQ�YOW@Z�XTfBQ��KYOvbvbaOXySVQw_)Q�\xR]Xy\bi�YOocQj��Q)X¡��Q�Q�W

XVfKQ}X¡��a*XVS+YOWKUVRKYcSVQ�WK_)qjv^Y>qcQ�S+U�YOvbacWBo*��\�XTfJXVfBQymlaOXVQ�S�_+fBac\^_)Qe�@Q�X¡�{Q�Q�W�XVfBQ�X¡��a*vbY>qlQ�S+UQ�W@Ur`BSTQ�U XVfKYOX�XTfBQ�STQ0\^UjY��B\bWKZ]\bWBo;�@Q�X¡�{Q�Q�WpXTfBQJWBac\^UrQ�`KUVQ�Z[\bWpXTfBQ�\bi�YOolQ0YOWKZpXVfBQWBal\bUVQ�RKYcUTUVQ�Z�XVapXVfBQgXVST`KU¡XTQ�QwU��  �alSVQ�RBSTQ�_�\bUVQ�vbqcstXTfB\^UDQ�W@Ur`BSTQ�U�XVfKYOXJYOW�q�Y8XrXTQ�ijR]X��qJXVfBQ*�@a�acXVf�XTa�Z]Qw_)al`BRBvbQ XVfKQ�UVQcs�YOvbacWBo0XVfBQ*vb\xWBQwU}UV`BolocQ�UrXVQwZ�YO��a8mcQls@ST`BWKUeY � � � � �_+fKYcWK_)Q�aOd��@Q�\xWKoDZ]Q)XTQ�_�XTQ�Z��ª�tfKQ�dk`Bvxv®ijYOXVfBQ�i�Y8XV\^_�Ycv5Z]Q)X+YO\bvbU�YOSTQ}RBSTQ�UVQ�W7XTQ�Z�vbYOXVQ�Sw�

� � �)��&2���*�!� ������ �#"$ %�& -0/1 ��&|�

�tfBQ�z{fKYc`Bi¶UT_+fBQ�ijQy_)ali��B\bWBQwU�XVfBSTQ�Q�RBSTQ���Q)�]\^U¡XT\xWBojijQ�_+f@YOWB\^Uri�U�«

¬ �}\bUV`KYcv®_)STq�R]XValocS+YORBf�q

¬p¯ WBacW�q�ij\bUV\bWBo�°�z{fKYc`BiD±�i*\x�]Q�U

¬ ¸�YOWKZ]alij\bUVQ�Z :�YOSVXV\^YOv®z{fBQw_+�7\bWBoP�Qy\xW7XVSTa]Z]`K_�QeQwYc_+fJaOd�XVfBQwUrQy\bWJXVfBQ�dkalvxvba8��\xWKo*UVQ�_)XV\bacWKU��

����� � + �[�%����� � ���%�[� �d� ��� �(�

��\^UV`KYOv�_)STq�R]XValocS+YORBf�q=�tYcU0\xW7XTSVa]Z]`K_�Q�Z�\xW¤~x§ �>���$PG\xXVfB\bWuXTfBQ[z{f@YO`Bi#UT_+fBQ�ijQcs}\�XRBSTa8m�\bZ]QwU YcUTUV`BSTYcWK_)Q*XTa�XVfBQ�mcacXVQ�S XVfKYOX XVfBQ�\xS�mcacXV\bWBo�\bWlXTQ�W7XV\bacW[f@YcUy��Q�Q�WpRBSTacR�Q�STvxqSTQ�_)alSTZBQ�Z�s�`KUV\xWKoJYcW;QwYcUVq�m7\^UV`KYOv�_+fBQw_+��� ��\^Ur`KYcvª_)STq�R]XValocS+YORBf�qJ\bUe\bWgd�Yl_�X YOW�m�\bUV`KYOv\bi*RKvxQ�i*Q�W7XTY8XT\xalW[aOd�Y�alWBQ���XV\bijQ���RKYcZG° @e� :{±����tfBQD\bW7XV`B\xXV\bacWp\^UyXTfKY8X*Y�ijQ�UTUVYcocQ�acS\bijYcocQD\^U�Q�WK_�a�ZBQ�Z[YcU*Y�olSV\^ZnaOd �����G�Bv^Yc_+��acS���fB\�XTQ�_�Q�vbvbU��g� W[XTfBQ0Q��BYOijRBvbQ0\bWB�\xol`BSTQ�¨Ks ����� � ��tfB\^U�\^U�WBa8� Q�WK_)STq�R]XVQwZ�`KUV\xWBo�Y�m�\bUV`KYOv�acWBQ���XT\xijQ���RKYlZ! ys�YOW@Z�YD_)\bRBfBQ�S�XTQ)��X"�*�

�tfBQwUrQ�YOSTQ}��aOXTfJ_�acijR�alUVQ�Z�aOd �#�$�gocST\^ZBU1acd 6 .2'�#9"&% !���9� 4�sBQwYc_+f�aOd���fK\b_+fJfKY>mcQ}acWBQaOd�X¡�{a*dkalSVi�U�sBUrQ�Q B�\boc`BSTQ��K�PGfBQ�W' YOWKZ�� YOSTQ�RKSV\bW7XVQ�ZgacWgXVS+YOWKUVRKYOSTQ�W7XeRKYOR�Q�S�YOWKZ;Ur`KR@Q�SV\bijR@a7UrQwZ�s�XVfBQwUrQ

X¡��apR@a7UVUV\b�BvxQ;_)Q�vbv�R@Y8XrXTQ�STWKUJ_)aci��B\bWBQ�m�\bUV`KYcvxvbq�YlU0UVfBa8��WG\bW B�\boc`KSVQ � �¦°��tfKQ(�*)acR�Q�S+Y8XTacSt\^U�XVfBQym�\^Ur`KYcv5_)ali��B\bWKY8XT\xalW�alR@Q�STYOXValS�� ±�tf�`KU�s@\xWal`BS�Q)�BYci*RKvxQls]XVfBQ�acWBQ�XT\xijQyRKYlZ! ij\xolflX�vba�ac��vx\b�cQ�XTfBQ�²KS+U¡X�UVfBQ�Q�X�\bW

B�\xol`BSTQG�B�

§c§

Page 13: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

B�\boc`BSTQy¨B« �]_�SVQ�Q�WJm7\bQ��

B�\boc`BSTQ��K«��tfBQyRKYcSV\xX¡q0_�Q�vbv�RKY8XVXVQ�STWKU��

�tfBQ�_)\bRBfBQ�S���XVQ���X!olSV\^Z �u\^U�WBa8�=_�acijRB`]XTQ�ZjUV`K_+f*XVfKYOX!��fKQ�Wj\�Xª\^U�a8mlQ�STvbYc\bZy��\xXVf� XVfKQ�\xi�YOolQ{\^U�STQ�UrXValSVQwZ�s8Q)�B_)Q�R]X!XVfKYOXª��fKY8X���Q�STQ�_)vbQ�YOS�_�Q�vbvbU�\bW�XVfBQ�alSV\boc\bWKYOv�°�B�\boc`KSVQ�¨l±YOSTQeWBa8��UVQ�ij\���alRKYOol`BQ}\bWJXVfBQ ZBQ�_)STq�R]XVQwZ0\bi�YOolQj°kXVfBQ�a8mcQ�STv^YO\^Z�\xi�YcocQ�\xW B�\boc`BSTQ �c±��PGfBQ�WgXVfBQwUrQ*_)Q�vxv^U�YcSVQ RKSV\bW7XVQ�Z�acW�XTSTYcWKUrR@YOSTQ�W7X�dkac\bvbU�s�XVfBQ�W�a8mcQ�SVv^YO\^Z_)Q�vxv^U�acd�XVfBQ

UTYOijQ�RKYOST\�X¡q�oc\bmcQyY�UVQ�ij\H��acR@Ych7`BQy_)Q�vxv�s@YcWKZJa8mcQ�STv^YO\^ZDRB\x�]Q�v^U�aOd�acRKR@a7Ur\xXVQyRKYcSV\xX¡qDol\xmlQYedk`Bvbvxq*acR@Ych7`BQ�_)Q�vxv����tf�`KU�scXVfBQ�RKYOST\�X¡q*_)Q�vxv^U�ac��Q�qjYOWjQ��]_�vx`@Ur\bmcQ�alS�° ���w±!vx\b�cQ}YOvbocQ��KSTYKs`BWKZBQ�StXVfKQym7\^UV`KYOv�alR@Q�STYOXVacS �*)7���Xy\bU}\xijR�acSVXTYcWlXeXVaJWBacXVQ�XVfKYOX}XTfBQ�m�\^Ur`@YOv ����� \^U}WKaOXyY�_�vxa7UrQwZ�YOvbocQ��BSTYK«tXVfBQ��*)

acR�Q�S+Y8XTacSe_�YOWgacWBvbq��@QjYORKRBvx\bQ�Z�XVa0XVfBQjUrQ�ij\H��acRKYlh7`BQ�_�Q�vbv�R@Y8XrXTQ�STWKU�s��K`]Xei�Y>qSTQ�UV`Bv�X\bWuYndk`Bvbvxq�acR@Ych7`BQ�RB\x�]Q�v}RKY8XVXVQ�STW5� ��a8�{Q�mcQ�S���\�XTfB\xWuXVfBQ�_)acW7XTQ)��X0aOd�XTfBQnz{fKYc`BiUT_+fBQ�ijQ*XVfB\^Uy\^U�R@Q�SrdkQw_�XTvxq�Yc_�_�Q�R]X+YO�BvbQc«�alWBvxq;UrQ�i*\���acRKYlhl`KQ�RKYOXrXTQ�STWKUyYOSTQjRBSV\bW7XVQwZgalWXVfKQ�XVS+YOWKUVRKYOSTQ�W7X�UrfKQ�Q)X+U�sBYcWKZ�XVfBQyalR@Q�STYOXValS{\^U�WBacX�YORBRBvb\bQ�Z�i*alSVQeXTfKYOWacW@_)Qc�

�5Q�X�� ��Q�XTfBQji�YORBRB\bWBoJ�KYc_+�dkSTaci XTfBQjRKYOST\xX¡q_�Q�vbvbUyYcWKZ�XTfBQ*dk`Bvbvxq�alRKYch7`BQ*_)Q�vxv\bWlXTa*XVfBQy�B\bWKYcSVqls]SVQ�RBSVQwUrQ�W7XVQ�Z0\xWJ²Kol`BSTQ�©K��tfBQ @e� : YOW@Z=XTfBQ�_)\bRBfBQ�S�XVQ���X$� ��\bvxv��@Q�\bW7XVQ�SVWKYcvxvbqpSTQ�RBSTQ�UVQ�W7XTQ�Z�YcU*X¡��a

�B\bWKYOSTqnU¡XTSV\bWBolU�s�Q�Yc_+f � ��vxalWBoK�g��d��{QDvbQ)X�$°%B�\xol`BSTQ �O± �@Q0XVfBQ0XVS+YOWKUVvbYOXV\bacW�dkSTaciXVfKQ�UVQe�K\xWKYcSVq�U¡XTSV\bWBolUt\bW7XVajRKYcSV\xX¡q0_)Q�vxv^U�«XVfBQ�WJXVfBQyQ��]Yl_�X�_)alSVSTQ�UVR�acWKZ]Q�WK_)Qe��Q)X¡��Q�Q�W!� YOWKZ � ) \^U

�}°��°���±��*) �t°��B±V± �� ���

acS�_�Y8XVQ�ocalSV\^_�Ycvxvbqj\xW B�\xol`BSTQ �K��tfBQDUT_+fBQ�ijQj_)ac`KvbZ;�@Q�\bijRBvbQ�ijQ�W7XVQwZ�Q�W7XV\bSVQ�vxq�\bW[Uracd X¡��YcSVQJ°kalSyfKYOS+Z]�tYOSTQw±���\�XTf

XVfKQ�� @e¸ �@Q�\xWBo�R�Q�SVdkacSTijQ�Z�s�XVfKQ�WnXVfKQDSVQwUr`Kv�XyXT`BSVWKQ�Zn\bWlXTa�f�`Bi�YOWnSVQwYcZBYc�BvbQ�dkalSVi��tfBQ RKSVal�BvxQ�i¶��\xXVf�XVfB\^U�\^U�XTfKY8Xeqcac`��ac`Bv^ZfKY>mlQ�XVa0Z]Q�R@Q�WKZ�Q�WlXT\xSTQ�vbqJacWp° XTSV`@U¡Xe\xW@±XVfK\bUeUracd X¡��YcSVQl���tfBQ�m�\^Ur`@YOv!_)STq7RBXVacolSTYcRBf�q0UVacvb`]XV\bacWgYcvxvba8��U�Ycvxv�XVfB\^U�XVa0��QjZ]acWBQ�\xWgYXTYcWBoc\b�BvbQt��Y>q YcWKZ�YlUVUV`BSTQ1XTfBQ�mcacXVQ�S!XVfKYOX�XTfBQ�_)alSVSTQ�_)X�mlaOXTQ�\^U!�B`BST\bQ�Z*\xW*XTfBQtQ�WK_�a�ZB\xWBo��\xXVfBal`]X�WBQ�QwZ]\bWBo*XVa�\bW7mlac�lQeYcW7q�\bW7XVQ�SVmlQ�WB\bWBo�Uracd X¡��YcSVQl�

§ �

Page 14: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

�*)

� )

� )

�*)

B�\xol`BSVQ � «!�tfKQ�� ) acR�Q�S+Y8XTacStacWRKYcSV\xX¡qD_)Q�vxv^U��

� �

� �

� �

B�\boc`BSTQy©B«��tfBQ ��i�YORBRB\bWBo

����� ���%���o) � +��*� �

z{fKYc`Bi ij\��]Q�U���Q�STQ1alSV\boc\bWKYOvbvbqe\bW�mcQ�WlXTQ�ZyRKSV\bi�YOST\xvbqeXVaeRBSVa8m�\^Z]Q{YcWBacW�q�ij\�X¡q�dkalS�Q�i�YO\bv�s�B`]X�XTfBQ�alSV\boc\bWKYcv�RKYcR@Q�S�sª~ � ��s5YOv^UVa�UV`BocolQ�UrXVQ�Z�XVfBQ�\xS�R�alUTUr\b�BvbQ*YcRBRBvb\b_�Y8XT\xalW�XVaJmcacXV\bWBoK�0�acXVQjXTfKY8X�YcWBacW�q�ij\�X¡q;fBQ�STQ�ijQ�YcWKU�XVf@Y8X�YcW�QwY>mcQwUVZ]STacRKR@Q�S�UVfBal`BvbZ�WBacX���Q0YO�BvbQjXVaZ]Q�XVQ�STij\xWKQjXVfBQ0_�aciji�`KWB\b_�Y8XT\xalWKUyvb\xWB����Q)X¡��Q�Q�W ¯ WBWBQ0YcWKZ /�ac�5�J�1q�RB\^_�Ycvxvbqg\xX���\bvxvUrXV\bvxv��@Q}R@a7UVUV\b�BvxQ�dkacS ¯ WBWBQeYOWKZ /{al�jXVa*YO`]XTfBQ�W7XV\^_�YOXVQ*°k\^Z]Q�W7XV\xdkqB±ªQwYc_+f�acXVfBQ�S1\bW�XVfBQwUrQ\bWlXTQ�S+Yc_)XV\bacWKU�����`BRKR@a7UrQ ¯ WKWBQ���YcW7XTU}XVaUrQ�WKZ�Y�ijQwUVUTYOolQ XVa /�ac�®� ��fBQ�Z]Q�XVQ�SVij\bWBQ�UY�SVal`]XVQem�\bYjY�W7`Ki���Q�S�aOd�ij\��]Q�StWBa]Z]QwU � 1�� � � ����� �� �sBYcWKZDdkalSVi�UtYOWJacWK\xalW�YOSTac`KWKZXVfKQ ijQ�UTUVYcocQc�t�tfBQ al`]XVQ�S�v^Y>qcQ�S�\bU�YcW�Q�WK_�SVq�R]XT\xalW���\�XTfXVfBQ�RB`B�Bvb\^_y�cQ�q0aOd � 1 �t�tfK\bUacWK\xalWD\bUtUVQ�W7X1XTa � 1 ��fBa*_�YOWJU¡XTSV\bRDacµJXTfB\^U{al`]XVQ�S{v^Y>qcQ�S{acd5Q�WK_�SVq�R]XT\xalWDXTa�STQ�mcQwYOv@XVfBQYcZKZ]SVQwUVU}aOd�� �*YcvxalWBo0��\xXVfnY0dk`BSrXTfBQ�Syv^Y>qcQ�S}acd1Q�W@_)STq7RBXV\bacWg`@Ur\bWBo�XVfBQjRB`B�Kvx\^_*�cQ�q�acd� �O� � 1 XTfBQ�W�dkacST�tYOS+ZBU5XTfBQtQ�WK_�vxa7UrQwZ ijQ�UTUTYOocQ1XVa�� �csO��fKa}\bW�XT`BSTW�UrXVST\xRKU�acµ�XVfBQtWBQ��7Xv^Y>qcQ�S�aOdKQ�WK_)STq�R]XV\bacW�XVaeSVQ�mcQwYOvlXVfBQ�YcZKZ]SVQwUVU�aOd ���tYcWKZ�YcWBaOXTfBQ�S�acWB\bacW�Q�WK_�SVq�R]XTQ�Z���\�XTf� ���� RB`B�Bvb\b_ �cQ�ql�1�tfB\^U�_)alW7XV\bW7`KQ�Ut`BW7XV\bv�²KW@YOvbvxqlsB��fBQ�WXTfBQ �� �vbY>qlQ�S�aOd!Q�W@_)STq7RBXV\bacWJ\bUUrXVST\xRBR�Q�Z�aOµ!sKXTfBQ�ijQ�UTUTYOocQ YcWKZJ²KWKYcv�YlZBZ]STQ�UTU�\^U�STQ�mcQwYOvbQ�Z����tfKQy²KWKYcv�ijQ�UTUTYOocQyi�Y>q��Qydk`BSVXVfBQ�S}Q�WK_)STq�R]XVQwZ�UraDYlU�XVa0�@Q�SVQwYcZBYc�BvxQyalWBvbq���q /{al��\�dª_�acW]²@ZBQ�W7XV\^YOvb\�X¡qJ\^U�YOv^UVaSTQ�h7`B\bSVQwZ����dªi�YOW�qJUV`K_+fijQ�UTUVYcocQwU�YOSTQ EKq�\xWKo0YOSTac`BW@Z0XTfBQ�WKQ)X¡��acST��sK\�Xe\bU�R@a7UVUV\x�KvxQyXTaDQ�Yl_+f

aOd�XTfBQ�ij\x�jWKa�ZBQ�U�XTa�Yl_�_)`Ki�`Bv^Y8XTQ�YyW�`Bi���Q�S{aOd5ijQ�UTUTYOocQwU���Q)dkacSTQ�al`]XVRB`BXV\bWBo XTfBQ�i$\bWUVacijQ�UT_)S+YOi��BvxQwZ�acS+Z]Q�S����tfB\^U}f@YcU�XVfBQ*Q)µ�Q�_)X�\^UeZ]\bUVoc`K\bUV\xWKoDXVfKQ*STac`BXVQ�acd{YOW�qoc\bmcQ�W

§�¨

Page 15: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

������� ����

��� ���B�\boc`BSTQC��«��tfBQ �=ijYcRBRB\bWBo

��� � ��� �� ���

� � � �� ) �� � �

B�\boc`BSTQG�B«{z�Y8XTQ�olacST\b_�YOvbvxq

ijQ�UTUVYcocQ}XVfBSTac`Kocf�XVfBQyWBQ�X¡�{alSV�DUVa�_)alWK_)QwYOvb\xWBo�XVfKQyvx\bWB�0��Q)X¡��Q�Q�W ¯ WBWBQ�YcWKZ /{al�5��tfB\^U�\^Z]QwYg\^U�STQ�YlZ]\bvxq[YcZKYOR]X+YO�BvbQ0XTagmlaOXV\bWBo�UV_+fBQ�ijQ�U�sª\xW@Z]Q�QwZpRKYcSrXT\b_�`BvbYcSVvbq��{Q�vxv

UV`B\�XTQ�ZDXVa*mcaOXT\xWKoK�!�tfBQ}\^Z]QwY�\^UªXTa�f@Y>mcQ�XTfBQemcaOXT\xWKo���a7acXVf0dkacSTi Ur`K_+f0acWB\bacWKU�YOSTac`KWKZQ�Yl_+f�mcaOXTQ1YOW@ZeXVfBQ�WyXVa�f@Y>mcQ1Y�UVQ�h7`BQ�WK_)Q1aOd�XVST`KUrXVQ�QwU®Yl_�XV\bWBo�YlU5ij\x��QwU�XTa�RBSTacocSTQ�UTUV\xmlQ�vbqUrXVST\xR acµ�XTfBQ�Q�WK_�SVq�R]XT\xalW vbY>qlQ�S+U5YOW@Z R�Q�SVdkacSTi Y}UrQw_)STQ)X�UT_)S+YOi��Bvb\xWBo�aOdBXTfBQ1alSTZ]Q�S®acdBXVfBQmcacXVQwU����tfBQ�vbYlU¡X�acd@XTfBQtXVST`KUrXVQ�QwU!ac`]XTRB`]X+U�XVfKQ�mcaOXTQ�U�\bWj_�vxQwYOSw��� W*XTfBQ}z{fKYO`Ki¤UV_+fKQ�ijQcsQ�Yl_+f�XTSV`@U¡XTQ�Q1Yl_�XV`@YOvbvxq}R@Q�SrdkalSVi�U�X¡��a�Z]Q�_�SVq�R]XT\xalW��8UT_)S+YOi��Bvx\bWBo{XVS+YOWKUrdkacSTi�Y8XT\xalWKU��5�tfK\bU\^U�dkacStXVQw_+fBWB\^_�Ycv5SVQwYcUVacWKU�YcUTUVa�_�\bYOXVQwZ0��\xXVfJXVfKQ ¸�YOWKZBacij\bUVQ�Z :�YOSVXV\^YOv®z{fBQw_+��\xWBo@�

����� � ��#%$ �() + �h��$�� ��� � +��������%�����*+�#��

¯ U�vxalWBo0YlU�Y8XevxQwYcUrX�acWKQ aOd!XVfKQ XVST`KUrXVQ�Q�U�_�YOW���Q�STQ�vb\bQ�ZacWXTaDR�Q�SVdkacSTi YDocQ�W�`B\bWBQ�vxq`BWBRKSVQwZ]\b_)XTYc�BvxQ�YcWKZ�UrQw_)STQ)X�R@Q�SVi�`]XTYOXV\bacW�acW�XVfKQ�mcaOXTQRKYc_+�8YOolQ�U�s�XVfKQ�W��{Q���\bvbv��@QYcUTUV`BSVQwZ0acdªYOWBalW7q�ij\xX¡qc� ¯ U�\xXeUrXTYcWKZBU�fKa8�{Q�mcQ�StXTfB\^U�UT_+fBQ�ijQ RBSTa8m�\bZBQ�UtWBa0YlUVUV`BS+YOWK_�QaOdªYl_�_)`KSTYl_)qc� ¯ W�qJaOd!XVfBQ�RBv^Y>qcQ�S+U�_)al`Bv^ZJd�YOv^Ur\xdkq�mlaOXTQ�U���qZ]SValRBRB\bWBoDUVacijQcs@\xW2I¡Qw_�XT\xWBod�YO�lQ�alWBQ�UjalS�YOvxXVQ�ST\bWBo�UVacijQl���tfB\^Uj\^Uj��fBQ�STQJXVfBQ�¸�YcWKZ]acij\^UrQwZ :�YcSrXT\bYcv�z{fKQ�_+��\xWKo°�¸5:�zt±t_)alijQ�U�\xW®��tfBQ�\^Z]Q�Ynacd�¸�YcWKZ]ali*\^UVQ�Z :�YOSVXV\^YOv�z{fBQ�_+��\bWBoG~ �O��\^U�Q�ijRBvba8qcQwZpXTa�Q�WKUV`BSVQXTfKY8X

XVfKQD_+fKYOWK_�Q�aOd�YOW�qgol\xmlQ�W;XVST`KUrXVQ�QD_+fKQ�Y8XT\xWKo�`BWKZ]Q�XVQ�_)XVQwZn\bUyQ���XVSTQ�ijQ�vbq;UVi�YOvbv��0�tfK\bUQ�W@Ur`BSTQ�U�XTfKY8X!XVfKQ�_+fKYOWK_�Q{acdKXTfBQtXVST`KUrXVQ�Q�_+fBQwY8XT\xWBoe`BWKZBQ)XVQw_�XTQ�Z*acW��jmcaOXTQ�U!Z]\bij\xWB\^UVfBQ�UQ)�]R�acWBQ�W7XV\^YOvbvxqD��\xXVf����¯ U®WBaOXTQ�ZeRBSTQ�m�\xal`KUVvxqls�Q�Yl_+feXVST`KU¡XTQ�Q�R�Q�SVdkacSTi�U�X¡�{a�Z]Qw_)STq�R]XV\bacW��8R@Q�SVi�`]XTYOXV\bacW}XVS+YOWKU��

dkacSTi�Y8XT\xalWKU5\bW�UVQ�h7`BQ�W@_)Qc� ¯ X�Y�vbYOXVQ�S�U¡X+YOolQcs>Q�Yl_+fyaOd]XVfKQ1XTSV`KUrXVQ�Q�U�\bU�STQ�h7`B\bSVQwZeXVa�STQ�mlQ�YcvYjS+YOWKZ]alijvxqJUrQ�vxQw_�XVQwZJfKYOvxd�aOd!XVfBQ�vx\bWB�]U�acd�XTfBQ ²KS+UrX�XVS+YOWKUrdkacSTi�Y8XV\bacW®�{�tfBQ�q�YOSTQ YOv^UVaSTQ�h7`B\bSVQwZ�XVajSTQ�mlQ�YOv�fKYcv�d!aOd�XVfBQyvb\bWB�]UtaOd®XTfBQ�\bS�UVQ�_)alWKZ0XVS+YOWKUrdkacSTi�Y8XV\bacW��B`]X�XTfBQ�UVQyYOSTQ_+fBa7UrQ�W�XVa��Q�Z]\bU%I¡ac\bW7X�dkSVali XVfBQ*²KS+UrXyUVQ)Xyacd{vb\xWB�]U�s5\�� Ql�xs5WKacWBQjaOd{XVfBQ�vb\bWB�]U}vb\bWBQ�`BR5sYOW@Z�UVa�XVfBQ�SVQ�_�YOWj�@Q�WKa _)acijRBvbQ)XTQ�RKY8XTf*dkSVali XVfBQ�Q�WK_)STq�R]XVQwZ�XVa�XVfKQ�Z]Q�_�SVq�R]XTQ�Z*mcacXVQc���Q�WK_)Q0\�X�\^UyWBacX�R�alUTUr\b�BvbQjXVa�²KW@Z[YmcaOXTQDYOWKZ;XTSTYl_+�g\xX XVfBSTac`Kocfn�@acXVfnXTSTYcWKU¡dkalSVi�Y��XV\bacW@U�s�UrayQ�WKUV`BSV\bWBoyXTfKY8X�WBa \bWBRB`]X�acWB\bacWD_�YOW���Q�YcUTUVa�_�\bYOXVQwZ���\xXVfDXVfBQe_)acSTSTQ�UVR@alWKZ]\bWBoac`BXVRB`]X�alWB\bacW5�

@}W�Q�Yl_+f�aOd!XVfKQ�UVQ�STQ�mcQwYOvbQ�ZJvb\xWB�]U}�{Q�_�YOWgWBa8� _+fBQ�_+��XVfKYOX�XTfBQ XTSV`KUrXVQ�Q fKYlU�_)alS��STQ�_�XTvxqnR�Q�SVdkacSTijQ�ZnXTfBQJZBQ�_)STq�R]XV\bacW®�;P�Q�vbQ�Y>mlQ�XVfKQJZ]Q�XTYc\xv^U�acd�XVfBQwUrQ_+fBQw_+��U XVa;XVfBQ

§��

Page 16: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

i�Y8XTfBQ�i�Y8XT\b_�YOv1ZBQ�UT_)ST\xR]XT\xalW�UVQ�_)XV\bacW5� ¯ U ��\xXVf�XTfBQ0_+fBQw_+��U�R�Q)dkalSVijQwZ;alW�XVfBQ��KYcvxvbaOXSTQ�_)Q�\xRBX�ac`]X+Ur\^Z]QeXVfBQ�R@alvxvb\xWKoDU¡X+Y8XV\bacW®s�XVfBQ i�YOXVfBQ�ijYOXV\^_�Ycv5Z]Q)X+YO\bvbU�acd�fKa8��XTa�R@Q�SrdkalSViXVfKQ�UVQ�_+fBQ�_+�]U�\^U�RK`B�Bvb\b_�YOvbvxqJ��WBa8��W�Ura@sK\bW�RBST\xWK_�\xRKvxQls@YOW�qlacWBQ _�YOW�_)a]Z]Q�`BRXVfBQ*YOvboca/�ST\�XTfBi�U�YOWKZJR�Q�SVdkacSTi XVfBQ _+fKQ�_+�]U��

� �����!%�� �/��

�tfBQDz{fKYO`Ki UV_+fBQ�ijQ�_�YcWg��Q�`@UrQ�dk`Bvxvbq�m�\xQ��{QwZ�\bW�XTQ�STijU}aOd1XVfBQ�Z]Q�R@Q�WKZBYO�K\xvb\�X¡q�_�acWF�_)Q�R]XV`@YOv�ija]Z]Q�v�sKUVQ�QedkacS�Q��]YcijRBvxQD~x§��8���� WGXVfK\bUJUrQw_�XT\xalW5s���Q�`KUVQ�XVfKQnz{fKYc`Bi UT_+fBQ�i*Q�YcU�Y[mcQ�fB\b_�vxQ�XVa=\bvbvx`KUrXVS+Y8XTQgYOW@Z

Z]\^UV_�`KUTU{YcRBRBSTalYc_+fKQ�U!XTaKs]YOWKZ0_+fKYOvbvxQ�WBocQwU�slXVa�XVfBQeQ�UrXTYc�Bvb\bUVfBijQ�W7X�YOWKZ�i�Yc\xW7XVQ�WKYOW@_)Q�acdYcUTUV`BSTYcWK_)Q}\xW�Y�_�acijRBvbQ)��sB_)ali*RK`]XVQ�S����KYcUVQ�Z�Urq]UrXVQ�iJ�P;QtX+YO�lQtXVfBQtXTQ�STi �cYlUVUV`BS+YOWK_�Q ��XVa�ijQ�YOW*XTfBQ�Yc_�hl`K\bUV\�XT\xalW�acd�_�acW]²�Z]Q�WK_�QtXVfKYOX�XVfBQ

��Q�fKY>m�\bac`BS5acdBY�RKYOSVXV\^_)`KvbYcS®Urq]UrXVQ�i���\bvxv7��Q1\bW Yc_�_�acS+ZBYOW@_)Q���\xXVf _)Q�SrX+YO\bWySVQwh7`B\xSTQ�ijQ�WlX+U���®Qw_+fBWB\^h7`BQ�U�dkacS�o7YO\bWB\bWBoDYcUTUr`KSTYcWK_)Q�\bWXVfBQ*_)acSTSTQ�_�X���Q�f@Y>m7\bac`KS�aOdªYDUVq]U¡XTQ�i���\�XTf

STQ�UVR@Qw_�XyXVa�UVacijQ�STQ�h7`B\bSVQ�ijQ�W7X�_�YcW���Q�R�alUV\�XT\xalWBQ�Z[YcvxalWBo�Y�UrR�Q�_)XVST`Bi«�Y8X alWBQ�Q�W@ZXVfKQ�STQ \bU�XVfBQ�RB`BSTQ mcQ�SV\x²@_�YOXV\bacWYORBRKSVa7Yc_+f5sB��fK\xv^U¡XeY8X�XTfBQ�acXVfBQ�S�Q�WKZ\^U�XTfKY8XeaOd�ijacWF�\xXVacST\bWBo0dkalS YOW�qgZ]Q�RKYOSVXV`KSVQwU�dkSTaci XVfBQ�STQ�h7`B\bSVQ�ijQ�W7Xj°kd�YO\bvx`KSVQwU�\xW�XVfKQDZ]Q�R�Q�WKZKYO�B\bvx\xX¡qXVQ�SVij\bWBacvbacolqB±��!�®QwU¡XT\xWBoj_�YcW0��QeXVfBal`Bocf7XtaOd�YlU1vbq�\xWBojUVacijQ���fBQ�SVQ}�@Q�X¡�{Q�Q�W�XVfBQwUrQ}X¡��aQ)��XTSVQ�i*QwU��!acd�_)al`BS+UrQls7\bWJRBSTYl_�XT\b_�Qe��Q�UrfBal`Bv^Z0WBacX�_)acWB²KWBQ�ac`BS+UVQ�vbmcQ�U1XVajQ�i*RKvxa8q�\bWBo*YUV\xWBolvxQ�YcRBRBSTalYc_+f®s��B`]X�UVfBac`Bv^Z�_)aci��B\bWBQ�YORBRBSTalYl_+fBQ�UeZ]S+Y>��WgdkSTaci�R@al\xW7XTUyYcvxalWBoJXVfBQUVR@Qw_�XVST`Bi�·�\bQ���acv^ZpYcRBR@QwYOS+U�XVa�vb\bQ0Y8X XTfBQ0mlQ�ST\�²�_�Y8XT\xalW;Q�WKZnaOdtXTfBQ�UVR@Qw_�XTSV`Bi�� �alSVQ�RBSTQ��

_)\^UVQ�vbqcs�XVfKQj·}\bQ���acv^Z;UVq]U¡XTQ�i Z]a�Q�UeWBacXyRBSVa8m�\^Z]Q�YcW�q�i*QwYOWKU}XTaJijalWB\�XTacS}XVfBQ�UVq]U¡XTQ�iR�Q�SVdkacSTijYcWK_)Q�Y8X�SV`BW8��XT\xijQtYOWKZ�UraeYOW�q YcUTUr`KSTYcWK_)Qª��Q1i�Y>q�fKY>mlQ1i�`@U¡X!SVQ�vxqyalW0°�_�vbYc\xi�UaOd+±�mcQ�ST\x²@_�YOXV\bacW0acd�XTfBQ _)a]Z]Ql���tfBQyRBSTac�BvbQ�i ��\xXVf�UV`K_+f�YOWYORBRKSVa7Yc_+f0\^U�XVf@Y8X�«

¬ BK`Bvbv�mlQ�ST\�²�_�Y8XT\xalWaOdªQ�mlQ�W�ija]Z]Q�UrXeUVq]U¡XTQ�i�U}\bU�WBaOXTacST\xal`KUrvbqZ]\HDD_�`Bv�X�YOWKZ�Q�STSValSRKSValWBQc�1��aDh7`BaOXTQC0�Q�QwZ]fKYciJs�UrR�Q�Yc��\xWBojacd!UVQ�_�`BSV\xX¡qDRBSTaOXTa]_)acv^U�«G�¡XVfKQ�q0YcSVQ ¨�XVa� vb\xWKQyRB\xQw_)QwU�aOd!_)a]Z]Q�XVf@Y8X�R@Q�acRBvbQ UrXV\bvxv5i�YcWKYOolQ�XTa�ocQ)X���STacWBo �B�

¬p­ mcQ�W0Ur`KRBR@a7Ur\bWBo�dkacStY ijacijQ�W7X�XVfKYOX{��QeZBa�UV`K_�_�Q�Q�ZD\xW�mcQ�ST\xdkq7\bWBoyXTfBQ�Urq]UrXVQ�is��Q�UrXV\bvbv�WKQ�Q�Z=ijQ�_+fKYcWB\bUVi�U XTagol`KYOS+YOW7XVQ�Q�XVf@Y8X�XTfBQUrq]UrXVQ�i'XTfKY8X*\bUjYl_�XV`@YOvbvxq²@Q�v^Z]Q�Z�Z]a�Q�U*Q)�BYl_�XVvbq[i�Y8X+_+fpXVfKQUVq]U¡XTQ�i'XTfKY8X��tYcU�mcQ�ST\x²KQ�Z��p�tfK\bU�_�YOvbvbU�dkacSUV`BR�Q�STm�\bUVQ�Z�vxa7YcZ]\bWBojaOd!_)a]Z]Qls]XTYci*R�Q�S�STQ�UV\^U¡X+YOW7X �8Q�m�\bZBQ�W7XtZBQ�m�\b_�Q�U�Q�XT_c�

¬ ��Q�SV\x²@_�Y8XV\bacW�\bUJacd�WBQ�_�Q�UTUr\xX¡qG��\xXVf SVQwUrR�Q�_)X�XTa³m8YOST\bac`KUJYcUTUr`Ki*RBXV\bacWKU�s�Q�\�XTfBQ�SQ��]RBvx\^_)\xX�YO��ac`]XJXVfKQ;Q�W7m�\bSValWBijQ�W7X�alS�\bijRBvb\b_�\�X�\bW�XTfBQ;ija]Z]Q�vbUJ`KUVQ�ZudkacSJXVfBQmlQ�ST\�²�_�Y8XT\xalW5�0��d�YcW7q;aOdtXVfKQ�UVQ0YcUTUr`Ki*RBXV\bacWKU YcSVQ�\bW�m8YOvb\bZBYOXVQwZgXTfBQ�WnXTfBQD��fBalvxQ�@YcUV\bUtacd�XTfBQymcQ�SV\x²@_�YOXV\bacW�ijY>q0�@QySTQ�WKZBQ�STQ�Z�\xW�m8YOvb\bZ5�

�tfBQ�z{fKYc`Bi�UV_+fBQ�ijQ�vx\bQ�U0Q�UTUrQ�WlXT\bYcvxvbq³YOXDXVfKQ�aOXTfBQ�SDQ�WKZ�aOd�XTfBQgUVR@Qw_�XVST`Bis�Y8XvbQ�YcUrX ��\xXVfpSTQ�UVR@Qw_�X XTa�XVfKQ0Yc_�_)`BS+Yc_�qgSTQ�h7`B\bSVQ�i*Q�W7X�� ¯ UTUr`BS+YOW@_)QjXVf@Y8X�mlaOXVQwUy��\bvxv��@QYc_�_)`BS+Y8XTQ�vbq;STQ�ol\bUrXVQ�SVQwZpZ]a�Q�U*WBacXjZBQ�R�Q�WKZ³acW³RBvbYl_)\bWBo�XTSV`@U¡X�\bW³_)alijR@alWBQ�W7XTU*acd�XVfBQUVq�UrXVQ�i� �tfBQg�@Q�fKY>m�\xal`BS�aOdyQ�Yl_+f�aOdeXVfBQ�_)acijR�acWBQ�W7XTU�\^UD_)vbalUVQ�vbq=ijalWB\�XTacSTQ�Z�YOW@ZYOW�qjZ]Q�m�\^Y8XT\xalWjdkSVali¤XTfBQeUVR�Q�_)\x²KQwZ��@Q�fKY>m�\xal`BSª\^U�s���\xXVfDfK\xolf�RBSVal�KYO�K\xvb\�X¡qls7ZBQ)XVQw_�X+YO�BvbQc�

§ �

Page 17: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

@}WK_�QeY�d�YO\bvx`KSVQ�aOd!Y�_�acijR�acWBQ�WlXt\^U�Z]Q)XTQ�_�XTQ�Z�sKm>YcSV\bac`@U1STQ�_�a8mcQ�STq*i*Qw_+fKYOWK\bUVi�U�_�YOWJ�@QZ]Q�RBvxa8qlQ�Z�«

¬ �¡UVacv^Y8XT\xalW�acd®XTfBQyaOµ�Q�WKZB\xWBoD_�acijR�acWBQ�WlXw�

¬ ¸�acvbvH���KYc_+�DXVa0YcWJQwYOSTvx\bQ�SwsB_)alSVSTQ�_)X�U¡X+YOocQyacd�XTfBQ�_�acijRB`]X+Y8XV\bacW�YcWKZJSVQw_)acijRB`BXTY2�XT\xalW5�

�tfBQ�Ur\xXV`@Y8XV\bacW;\bU�UV`B�]XTvxqgZB\�µ�Q�STQ�W7XedkacSeXVfBQjmlaOXVQ�SeYcWBacW�q�ij\�X¡qp°�UrQw_)STQ�_�q]±�SVQwh7`B\xSTQ��ijQ�W7X�� ¯ WKacW�q�i*\xX¡q�\^UyYOW;\xW]dkalSVi�YOXV\bacW EKa8�ys5YOWKZ;fBQ�WK_)QjWBalWF��Q�W]dkacS+_)QwYO�BvbQ�RKSValR@Q�SrX¡q~x§ � ���nz{alWKUrQwh7`BQ�W7XVvbqcs�d�Yc\xvb`BSTQ�U ��\xXVf³SVQwUrR�Q�_)X XVa�YOWBalW�q7ij\xX¡q;��\bvbv{WBacX�\bWpocQ�WBQ�S+YOv{�@QZ]Q�XVQ�_)XTYc�BvxQl� BB`KSrXTfBQ�STijacSTQcs�Q�mcQ�W[��fBQ�STQ�UV`K_+fnd�Yc\xvb`BSTQ�U�YcSVQ�Z]Q)XTQ�_�XTQ�Z�s�\xX�\^U�ZB\HDD_)`Kv�XXVa�SVQw_)a8mlQ�Sw«1acW@_)Q�Y�UrQw_)STQ)X�\^U�al`]X�s�\xXe\^U�al`]X�� z{acW@UrQwhl`KQ�W7XVvbq�\xX}\^U}Q�UTUrQ�WlXT\bYcv5XTfKY8XeXVfBQUVQ�_)STQ�_�q�RBSTacR�Q�SVXV\bQ�U���QDZ]Q�UV\xolWBQ�Z;\bW�YcWKZ�mcQ�ST\x²KQ�Z����tf�`KU�s5\xX \bUy\bijR@alSrX+YOW7X�XVfKYOXyXVfBQXVST`KUrXVQ�Q�U���Q�Z]QwUr\bocWBQwZ�XVa \bijRBvxQ�ijQ�W7XªXVST`Bvbq�S+YOW@Z]aci Urf�`���\bWBolU�alW*XVfBQ��@YOvbvxacX1�KY8X+_+fBQ�UYOW@ZDXTfKY8X�XTfBQ�qJ_�YOWJ��QySVQ�vx\bQ�Z�acWJXVaj�lQ�Q�R�XVfKQ�UVQ UrQw_)STQ)X��

��Q�SVQls7S+Y8XTfBQ�S�`BW�`KUV`KYOvbvbq�dkalS�Y*UVQ�_)STQ�_�q�RKSValR@Q�SrX¡qlslSTQ�RBvb\^_�Y8XT\xalW0_)alijQ�U1XVa*ac`BS�fBQ�vbR5��tfBQ�d�Yc_)XXVfKYOXJXTfBQ[UV_+fKQ�ijQ;Q�ijRBvxa8q]UY�W�`Bi���Q�SaOd�XVST`KUrXVQ�QwU�s�YcUTUV`BijQ�Z�\xWKZBQ�R�Q�WF�Z]Q�WlXws�ijQwYOWKU XVfKYOX�YOvbv1��ac`Bv^Z�fKY>mcQjXTa���Q0_)ali*RKSVali*\^UVQ�Z�\xW[alSTZBQ�S�XVagm7\bacv^Y8XTQ�mcacXVQ�SYOWKacW�q�i*\xX¡qc�

0�acXVQ�YOv^Ura;XVf@Y8X0Z]\bmcQ�STUV\�X¡q[f@YcUjY�SValvxQ�XVanRBv^Y>qp\bW=XTfBQ�UV_+fBQ�ijQc���tfBQd�Yc_)X*XTfKY8XXVfKQ�_+fKQ�_+�]UtYOSTQ�Ycvxv�Yl_�_)alSTZB\xWBo�XVajRB`K�Bvx\^_�YcvxvbqD��WBa8��WYOvbocalSV\xXVfBi�U{ijQ�YOW@U�XVfKYOX�YOW�qcalWBQ_�YcW=R�Q�SVdkacSTi'XVfBQ�_+fKQ�_+�]U�YcSVQJRBSTa8m�\bZ]QJ\bi*RKvxQ�i*Q�W7XTY8XT\xalWKU*aOd�_+fBQ�_+��\bWBo�ZBQ�m�\b_�Q�UjYOW@Z\bi*RKvxQ�i*Q�W7XTY8XT\xalWKUtaOd�XVfKQ YOvbocacST\xXVfBi�U��

� � ��� ���y���0/����p�c��� #�!���(*�)� � �y�!�

� W�XVfK\bU�UrQw_�XV\bacW®s���QªRBSTQ�UVQ�W7X5\bW Z]Q)X+YO\bvOXVfKQtz{fKYc`Bi�RKSVacXVa]_)alv>dkacS�Y�UV\bWBocvbQªmcacXVQls�Q���RKvbYc\xWF�\bWBo*XVfBQ _�aciji�`BWK\b_�Y8XV\bacW@U�YOWKZJ_�Ycvb_�`BvbYOXV\bacWKU�XTfKY8X�i�`KU¡X�X+YO�lQeRKvbYl_)QyY8X�QwYc_+fU¡X+YOocQl�

� �@H�?]H %��A0�acXVQeXVf@Y8X�ac`KS�WBaOX+Y8XV\bacWZ]\xµ�Q�STU�\xWJRBv^Yc_)QwU�dkSVali�~ �8���

¬������ SVQ�RBSTQ�UVQ�W7XTU{XVfKQyQ�WK_�SVq�R]XT\xalW�acd � `BWKZ]Q�S�YOWQ�WK_�SVq�R]XT\xalW��lQ�q �7�

¬ ��\^U�XVfBQyW�`Bi��@Q�S�aOd�XVST`KU¡XTQ�QwU��

¬� \^U�XVfBQyW�`Bi��@Q�S�aOd�vbY>qlQ�S+U�aOd�Q�WK_)STq�R]XV\bacWJacWQwYc_+f0mlaOXTQcsBYOW@Z 1� ���

¬ � WBdkacSTijYOXV\bacW�\xW7XTQ�STWKYOv�XTaJXVfBQD��a�aOXTfnYcWKZ;XVST`KUrXVQ�QwU���\xvbv�dkSTQ�h7`BQ�WlXTvxq;�@QDUrXValSVQwZYcWKZJXVS+YOW@Urij\xXrXVQwZYcU � �;�K\�X+U¡XTSVQwYOi�U�s@�B`]X�RKSVQwUrQ�WlXTQ�Z�XVajXTfBQ STQ�YlZ]Q�S�YlU � � �i�YOXVST\b_�Q�U�� P;QjR�Q�SVdkacSTi ��\xvbv�R�Q�SVdkacSTi XVfBQ�XVS+YOWKUVv^Y8XV\bacW;�@Q�X¡�{Q�Q�WgXVfBQ�°�� � �®±i�YOXVST\���YcWKZ�XVfBQ�� �g�K\�X+U¡XTSVQwYOi¦YlU

��������� � �� ��� 1�� � � ���fKQ�STQ" �!�� \^UtXVfKQyijYOXVST\��0dkacSTiJsBYcWKZ� XVfBQy�B\xXTUrXVSTQ�Yci�

§�©

Page 18: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

¬ P�Qy`KUVQ�XVfBQ _�acW�mcQ�W7XV\bacWKYcv@RBSTaOXTa]_)acv�WKaOXTYOXV\bacW

� � � ��� ���� «��

XTa�ijQ�YOW�XVf@Y8X ¯ WKWBQ UrQ�WKZBUtijQ�UTUTYOocQ�� XVa /�ac�5�

�(� � � �

�tfBQjmcacXVQ�SeQ�W7XVQ�S+U�YJmcaOXTQcs 0s®\bWlXTa0XTfBQ�i�Yc_+fB\bWBQl�*�tfB\^U���\bvxv���Q�_+fBalUVQ�WgdkSVali�YJvx\^U¡XRBSTQ�UVQ�W7XVQwZ0��q0XVfBQyi�Yc_+fK\xWBQ�XTa*XVfBQ mlaOXTQ�Sw� ­ Yc_+fJR@a7UVUV\b�BvxQymlaOXTQe��\bvbv5�@QyRKSVQwUrQ�WlXTQ�ZYcUY�� � �;i�Y8XTSV\x�0alW0XTfBQ UV_�SVQ�Q�WJ\xWalSTZ]Q�S�XVaj�@QySTQ�YlZBYO�KvxQ���q�XVfKQyf7`KijYcWmcaOXTQ�Sw�P;Qy��ST\xXVQ�XVfKQ�²KSTUrX�U¡XTQ�R�YcU

°¡§>± �� � � �� ���� �� � � «

�(� � � �

�tfBQ�WKQ)��X{_)aliji�`BWB\^_�YOXV\bacW�UrXVQ�R�\^U�XTfBQ�mlaOXV\bWBoyi�Yc_+fK\xWBQ�RBSV\bW7XV\bWBoyXTfBQ�²KS+U¡X{R@alSrXT\xalW*acdXVfKQ�SVQw_)Q�\bR]Xw�_��a8�{Q�mcQ�S!��Q)dkalSVQtXTfB\bU1_�YOW*fKYcRBR@Q�W5sOXTfBQ�i�Yc_+fK\xWBQti�`KU¡X1ZBa�XVfBQtdkalvxvba8��\xWKo_�Ycvb_�`Bv^Y8XV\bacW@U��

� ��� � �'#�� �[�Y�%��� +�#�� � � � $ �(��� �

/�Q)dkalSVQ1XVfBQ�mcacXVQ�S!_+fBa�alUVQ�U®XVa}XTYc�cQ{Q�\xXVfBQ�S�XTfBQ{XVacR�acS�XVfKQ{��aOXVXVaci v^Y>qcQ�S�acdBXVfKQ{STQ�_�Q�\bR]X�sXVfKQyijYl_+fB\bWBQyi�`KUrX�Z]Q�²KWBQyXTfBQ�X¡�{a �TZ]acvbvbU+� � � � YcWKZ�� � �}° � � \^UtXTfBQ Z]acvbv®YlUVUVa]_)\^Y8XVQwZ��\xXVfXVfKQyXValR�vbY>qlQ�SwsKYOWKZ�� � \^U�XTfBQ v^Y>qcQ�S�YlUVUVa]_)\^Y8XTQ�Z���\�XTf�XVfBQ��@acXrXVali¶v^Y>qcQ�S�� ± @}WBQaOd�XTfBQ�UVQ�Z]alvxv^Uª��\bvxv�v^Y8XVQ�Sª��Q�`KUVQ�Zj��q�XVfBQ�XVST`KU¡XTQ�QwU�XVa�Z]Q�_�SVq�R]XªXTfBQ}_+fKalUVQ�WjvbY>qlQ�Sw���tfBQacWKQ�WBaOX�_+fBa7UrQ�Wn��\xvbvªfKY>mlQ*\xXTU�UrQ�Q�Z�STQ�mcQwYOvbQ�Z;\xWnXTfBQ�STQ�_)Q�\xRBX�s!YOWKZnYOWn\bWKZ]Q�R@Q�WKZ]Q�W7X_+fBQw_+�cQ�S���\xvbv���QYc�BvbQ0XTa�mlQ�ST\�dkq�XTfKY8XjXVfKQZBacvbv��tYcUj_�acSTSVQw_�XVvbq�dkacSTijQ�Z�s�°�UrQ�Qgz{fBQ�_+��K� ¨l±)sc�B`BX{��\xXVfBal`]X{STQ�mlQ�YOvb\bWBoyYOW�q�\bW]dkacSTi�Y8XT\xalWDYO��ac`]XªXTfBQ�mlaOXTQc�!�tfB\bU1RBSTa8m7\^Z]QwUªUralijQYcUTUV`BSTYcWK_)Q�acd�\xW7XVQ�ocST\�X¡q�« ¯ i�YOvb\^_)\bac`KU1ijYl_+fB\bWBQ���fB\^_+fD�tYOW7XVQwZ*XVa RBSTa]Z]`K_�Q}Y _�acSTSV`BRBXZ]alvxvlXVa�UrQ�WKZyXTa�XTfBQ{XVST`KU¡XTQ�QwU®��ac`Bv^Z f@Y>mcQ1Y}acWBQ���\bWF��X¡�{a}_+fKYOWK_�Q1acdKfKY>m�\xWKo�XVfKQ�_�acSTSV`BRBXZ]alvxv5_+fBQw_+�cQwZ0\bW�z{fKQ�_+�0�@� ¨K��tfBQ�X¡��a Z]Qw_)STq7RBXV\bacWDZ]alvxv^U � � YcWKZ�� � YcSVQ�QwYc_+f�i�YcZ]Q�`BRDaOd v^Y>qcQ�STU�sO��fBQ�SVQ \bU

XVfKQ�W�`Bi���Q�S{aOd�RKYcSrXT\bYcv@Z]Qw_)STq7RBXV\bacWKU!XTfKY8X���\xvbv@XTYO�lQ�RBv^Yc_�Qc� ­ Yc_+fjv^Y>qcQ�Sª\bUC�r��S+YORBR�Q�Z ���\xXVf=Y;Z]\�µ�Q�STQ�W7XjRB`B�Bvb\^_D�cQ�q �>RBST\xm8YOXVQD�lQ�qnZ]Q�_�SVq�R]XT\xalW[dk`BWK_)XV\bacW5�n�tfBQ0RK`B�Bvb\b_��cQ�q�UYOSTQy��WBa8��WJXVaDQ�mcQ�SVqlacWBQ��BQ�Yl_+f�RBSV\bm8Y8XTQy�cQ�qJ\^U���WBa8��WacWBvbq�XVa�XTfBQ�STQ�vbQ�m8YOW7X�XTSV`KUrXVQ�Qc�PGfBQ�W�XTfKY8X�XTSV`@U¡XTQ�Q �r`KW7��S+YOR@U)��XVfBQ�\xS1vbY>qlQ�S!Q�WBal`Bocfj\bW]dkacSTi�Y8XT\xalW�\^UªY>m8YO\bvbYc�BvbQ1dkalS�XVfBQXVST`KUrXVQ�Q}XTaD_�Ycvb_�`BvbYOXVQeXVfKQ�\bS�RKYOSVX�aOd�XVfBQ Z]Qw_)STq�R]XV\bWBoj�cQ�qc��®aj�B`K\xv^ZJXVfBQ ZBacvbvbUw°%B�\boc`BSTQ 7±{XVfBQymlaOXT\xWBoji�Yc_+fK\xWBQ�STQ�h7`B\bSVQwU

¬�� «yYUVQ�h7`BQ�W@_)QjW�`Bi���Q�SD°���fB\b_+fn_�YcW;��QD_)alWKUVQ�_)`BXV\bmcQ*acS�vx\bWB�lQ�ZgXVaJXVfBQ�mlaOXTQ�S�±�tfKQ�STQe\^U�Y*`BWB\^h7`BQ UVQ�h7`BQ�W@_)Q�W�`Bi���Q�StdkalS�Q�Yc_+fJmcacXVQ�S��

��� B:E�6aZiE�FA6(E�6-9;<*=?>AB2K?B2`:\ B:Ddj;B2>A=?B2>AL�q%E�6->A@AL�E�BoO.6'fAL;6-@P=?>JE�FA6�G-B2>aE;6��SEdB:D8:>AB2>a\c<*=?L�=?>A` < 8:=?K r� FA6-L;6d8:9�6�6�L�L;6->aE;=b8:K?K \ E�FA6�LH8:<*6�8:L E�FA6%j;@AB2K?K?L;q�fAL;6-@ =?> E�FA6 m B:E;=?>A`�L;GHFA6-<*62r

§ �

Page 19: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

� � � ��� � � � �� � � 1 � � 1� �� �

� �� �

� �

� �

B�\xol`BSTQ K«��tfBQ �®Y>qlQ�S+U1acd!Yj·}acvbv��

¬ � � «!XVfBQwUrQyYOSTQ�RKUVQ�`KZ]a/��S+YOW@Z]aci UVQ�h7`BQ�W@_)Qedk`BWK_)XV\bacWKU���fK\b_+fJ��fBQ�W�_�acijR@a7UrQwZq�\bQ�v^ZY�R@UrQ�`KZ]a���S+YOWKZ]ali �B\bWKYOSTq0UVQ�h7`BQ�W@_)Q�aOd�vxQ�WBoOXTf � �����

¬ � � YOWKZ�� � «�RBST\xm8Y8XTQyUr\bocWKYOXV`BSTQedk`BWK_)XV\bacWKU���WBa8��WJacWKvxq�XTa*XVfBQymlaOXV\bWBoji�Yc_+fB\bWBQl�

¬ ��� s@��fBQ�STQj§� ��� «!XTfBQ�UVQ YOSTQ�RB`B�Bvb\^_yQ�WK_�SVq�R]XT\xalW��lQ�q]UtaOd�XVfKQyXVST`KUrXVQ�QwU�� BBacSQwYc_+f��lQ�qls@XTfBQ*RBSV\bm8Y8XTQ�_)al`BW7XVQ�SVRKYcSrX}\bUe��WBa8��W�alWBvxq��qJXVfBQ�XVST`KUrXVQ�Q�\bW;_+fKYcSVolQacd�XTfKY8X�R@YOSVXtacd®XTfBQ Z]Q�_�SVq�R]XT\xalW�°�UrQ�QC��Q�_)XV\bacW ��� ¨l±)�

BBalS��@acXVf�Z]alvxv^U�sBXVfBQ i�Yl_+fB\xWKQeRKSVQ�RKYOSTQ�U m8YOST\bYc�BvbQ�U � �� sK��q�UVQ�QwZ]\bWBo*XVfBQ�dk`BW@_�XV\bacW YcUt��Q�vba8�y� BBalSy§� ��� s

� � �� « �° � � � � � ��±� � �� « �° � � � � � ��±

YOW@Z�XVfBQ�W�RBSTQ�R@YOSTQ�U�XTfBQ;X¡�{a ��v^Y>qcQ�SVQwZGZ]acvbv^U�s���qGQ�WK_)STq�R]XV\bWBo=QwYc_+fGv^Y>qcQ�S0��\xXVf�YZ]\xµ�Q�SVQ�W7XtQ�WK_)STq�R]XV\bacWJ�cQ�q ���¡� BBalSy§� ��� s

� � �� ]° � � � �� � �c° � � �� � � 1 ° � � � 1 ±r±V±� � � �° � � � �� � �c° � � �� � � 1 ° � � � 1 ±V±r±

� ��� � �'#�� �[�Y�%��� +�#�� � � � �-� �'� � � � � � ���%��+^#(�[�!$ � �!����+ �%�

� � YcWKZ � � °�UVQ�Q B�\boc`KSVQ�§��l±�YOSTQ���fKYOXe\^U}RBSV\bW7XVQwZ�acW�XVfBQ�XValR;YOW@Z��@acXrXTaci v^Y>qcQ�S+U�acdXVfKQ�SVQw_)Q�\xR]Xw���tfBQ�qjYOSTQ�RBST\xW7XVQwZ�Ura XVfKYOX1��fBQ�W�YOvb\xolWBQ�ZjZ]\bSVQw_�XTvxq*acWjXTacR�aOd�QwYc_+f�aOXTfBQ�SXVfKQDmcacXVQ�S�_�YOWpUVQ�QDXVfBQJ_+fBalUVQ�Wn�KYcvxvbaOX�\bi�YOolQ�Ds!�B`]X*��fBQ�W[al�KUrQ�SVmlQ�Z�\bWKZ]\bm7\^Z]`KYcvxvbqXVfKQ�q0acµ�Q�S�WBaj\xWBdkacSTijYOXV\bacW�XVa*XVfKQyac�KUVQ�STmcQ�S���tfB\^U�STQ�vb\xQwU�alW[XVfKQ��rm�\^Ur`@YOvt_)STq7RBXVacolSTYcRBf�qF��acd�~�§ �w��s�Q)�]RBv^YO\bWBQ�Z[\bW �]Q�_�XT\xalW � �b§c�

�tfBQ _�YOv^_)`Bv^Y8XT\xalW0RBSTa]_)Q�QwZBUt��qDdkalSVij\bWBo*XVacRYOW@Z���aOXVXVali �r��fK\�XTQ �*i�Y8XVST\^_)Q�U � � YOW@Z� � s5Q�Yl_+fgacd{Ur\���Q�� � ���B� ­ Yl_+fgaOd1XVfBQwUrQj\^U}�K`B\xvxXy��q ����� \bWBo �$�/�D�K\�X+U¡XTSV\bWBolU° XTfBQ � � � YOWKZ � � � acd B�\boc`KSVQD§ �l±�XTacolQ)XVfKQ�SwsBXVfKQ�W;_�acW�mcQ�SrXT\xWKo�XTfBQ�STQ�UV`BvxXV\bWBo0�K\�X+U¡XTSV\bWBolU\bWlXTa � �$�/��ijYOXVST\b_�Q�U���tfBQ��$�/�j�B\xXTUrXVSTQ�YOi�UeYOSTQ�olQ�WBQ�STYOXVQ�ZR@UrQ�`KZ]a���S+YOWKZ]alijvxqJ`KUV\xWBo0XVfBQ � � � m8YOST\H�

YO�KvxQwUtocQ�WKQ�S+Y8XVQwZDRBSTQ�m�\bac`KUVvbq0YcUtUVQ�Q�ZKUtdkacS � �BBalSy§� ��� s

� � � « � ° � � �� ±� � � « � ° � � �� ±

P;Q�RBSTa]Z]`K_)Q{XVfKQ � �#YcWKZ�� � i�Y8XTSV\^_)QwU5dkSTaci YcvxvlXVfKQ�UVQ{�B\xXTUrXVST\bWBolU���q ��� � \xWKo�XVfKQ�iXValocQ�XVfBQ�StYcWKZ�dkacSTij\xWBo*XTfBQyi�Y8XVST\^_)Q�U�YlU�dkacvbvxa8��U�°�YOSTSVa8��Ue§yYOWKZ���\xW B�\boc`BSTQj§��l±)«

� � ��� � « ° � � � � � � 1 ������� � � � 1 ±�� ��� 1 � ��� �� � ��� � « ° � � � � � � 1 ������� � � � 1 ±� ��� 1 � ��� �

§ �

Page 20: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

� ���� � U� �

� �� �

� �

��§

� ���� � U� �

� �� �

���

� �

� �

��RBvb\xX� � ���

� � � �

�¨ ��

� � � � � � � ���

� � � � � � � � � � � � � � ���

�������������

����� �"!$#� ���%���"!�#©

������������������������� & �� �

� ' � '

� �

B�\xol`BSTQ*§ �B«�·}\bYcocS+YOi aOd�UrXVQ�R �B«ªz{alWKUrXVST`K_�XT\xWBo*XTfBQySVQw_)Q�\xR]X

§

Page 21: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

�tfBQjX¡��a�RKYOSVXTU � � YOWKZ � � YcSVQ�_�acWKUrXVST`K_�XTQ�Z;`KUV\xWBo � � YcWKZ � � YcWKZ;XVfBQ��KYcvxvbaOX\bijYcocQ �UV`BRBRKvx\bQ�Zg�7qXTfBQjmcacXVQ�Sw��z{acW@Ur\^Z]Q�S}XVfKQ*�@YOvbvxacXe\bi�YOocQ�\xW;XVfKQ*i�YOXVST\��dkacSTi �!�� ���tfK\bU}i�Y8XVST\x�J\^U��BSTac�lQ�W�\bW7XVa � ¶YOWKZ � �°kQ�Yl_+f�aOd1UV\ ��Q � � �/�c±�YlU�dkalvxvba8��U��­ Yl_+fDSTa8�uaOd� �!�� \^U � �B\xXTUtvbacWBo@� ¯ v�XTQ�STWKY8XTQ�RB\��]Q�v5Urq�i���acv^U�acWJQ�Yl_+f0STa8�uaOd� �!��YOSTQ Q��7XTSTYl_�XTQ�Z�YcWKZ�_)a7YOvbQ�UT_)QwZXVa0dkacSTi¶XTfBQ*ijYOXVST\b_�Q�U � ¶YcWKZ � °kalR@Q�STYOXV\bacWKU}¨0YOW@Z��\bW B�\boc`BSTQ�§ �l±1�tfB\bU�\^UªXTfBQ��V_+fBQw_+�cQ�SV��alYcSTZ]\bWBo ��RBSTa]_)QwUVU{ijQ�W7XV\bacWBQwZD\bWDXTfBQ}alSV\boc\bWKYcvRKYcR@Q�S ~ �c��� �]a�\xW B�\xol`BSTQ*§l§eXVfBQ�UTh7`KYOSTQ�Ut_�acvbac`BSTQ�Z���fB\xXVQ YOSTQ�`KUVQ�Z�XVajdkalSVi � 0sKYOW@ZXVfKQ UVh7`KYcSVQwU�_�acvbac`BSTQ�Z0�Bv^Yc_+�0YcSVQe`KUVQ�Z�XVa*dkacSTi � 0�

:ª\x�]Q�v5UVq7i��@alvbUt`@UrQwZ�\bW � :ª\x�]Q�v5UVq7i��@alvbUt`@UrQwZ�\bW �

B�\boc`BSTQj§c§l«!�tfKQ _+fBQ�_+�lQ�ST�@a7YOS+Z]\xWKo�RBSTa]_)Q�UTU

 �acSTQedkacSTi�YOvbvxqls�XVfB\^U�\^U�Yc_+fB\bQ�mlQ�ZJYcU

� ��� � « �!����� � ��� � ������� � �� ��� � « �!����� � ��� � � � 1 ����� � �

�tfBQ��VSVQwZ8�0i�YOXVST\�� � \^U Z]Q�UV\bocWBQwZ�UVaXVf@Y8X ��fBQ�W[\�X \^U�Ycvx\bocWBQwZg��\xXVfnXTfBQD��fB\xXVQi�Y8XTSV\x��� XTfBQ1�KYcvxvbaOX�\xi�YOolQª\^U5RBSTa]Z]`K_)QwZ��®� W�XTfBQ{UTYOijQª�tY>q�XTfKY8X�XVfBQ{��fB\xXVQªi�Y8XTSV\x��\bU�V_+fKQ�_+�cQ�SV��alYcSTZBQ�Z8�t\bW7XVaeX¡�{aei�Y8XTSV\^_)QwU � �|YOW@Z � � s8XTfBQti�Y8XVST\x� � \^U�_+fBQ�_+�lQ�ST�@a7YOS+Z]Q�Z\bWlXTa�X¡��a;i�YOXVST\b_�Q�U � � YOWKZ � � � ­ Yc_+f[aOd � � YcWKZ � � ° XVfKQJi�YOXVST\b_�Q�U���fB\b_+f³��\xvbvt�@QRBST\xW7XTQ�Z*acW*XVfKQ�SVQw_)Q�\xR]X�±!��\bvxvB��Q�i�YcZBQ�dkSVali Y�ijQ�UVfB\bWBo�XValocQ�XVfBQ�SªaOd�Y�SVQwZjYOWKZj��fB\xXVQi�Y8XTSV\x����tfBQ X¡��aDRKYcSrX+U � � YcWKZ � � YcSVQ�_)acW@U¡XTSV`K_)XVQwZ�`KUV\xWBoDXVfBQ*acR�Q�S+Y8XTacS*� ) s@XVfBQ*m�\bUV`KYOv

_)ali��B\bWKYOXV\bacWJacR�Q�S+Y8XValS�s7��fB\^_+fac��Q�q]U�XVfBQyST`BvbQ�Ut\bW B�\boc`KSVQ � �BBalSVi�YOvbvbqcs�XVfKQyijYOXVST\b_�Q�U � � YOWKZ�� � YOSTQ�Z]Q)XTQ�STi*\bWBQwZJUVa*XVfKYOX�XVfBQ�X¡��ajQ�h7`KYOXV\bacWKU

� � �*) � � � °¡§w±� � �*) � � �

fBacv^Z����tfBQ � � RB\x�]Q�v^U�YcSVQDZ]Q�SV\bmcQwZ;dkSVali���aOXTfnXVfBQ�� � YcWKZ;XVfBQ � RB\x�]Q�v^U�s!YOW@ZUV\xij\bvbYcSVvbq � � RB\x�]Q�v^U{YcSVQ�ZBQ�ST\xmlQ�Z*dkSTaci$�@acXVf�XTfBQ � � YOWKZjXTfBQ � ¤RB\x��Q�vbU���/�Q�_�Yc`KUVQ�XVfBQ� YOWKZ! i�Y8XVST\^_)Q�U}YOSTQ YOvbSVQwYcZ]qJZ]Q)XTQ�STij\xWBQwZ�s@XVfBQ�SVQ�\bU}Y�`BWB\^h7`BQ�UVacvb`]XV\bacWdkalS���aOXTf� � YcWKZ�� � ��tfBQ�RBST\xW7XTQ�Z�vbY>qlQ�S+U � � YcWKZ � � YcSVQ�WBa8�³_�acWKUrXVST`K_)XVQ�Z*YcU�dkalvxvba8��U����tfBQtXTacR*RBSV\bW7XVQwZ

v^Y>qcQ�S�° � � ±�\^U�XTfBQ�_+fKQ�_+�cQ�SV��alYcSTZB\xWBo�acd�XVfBQ � � i�Y8XVST\x��YcWKZXTfBQ � � ijYOXVST\���s�YOWKZ�XVfBQ��aOXrXTaci RKSV\bW7XVQ�Z*v^Y>qcQ�S�° � � ±�\bU�XVfBQ�_+fBQw_+�cQ�ST��alYOS+Z]\bWBo�acd � � YcWKZ � �.°kalR@Q�STYOXV\bacWKU � YOW@Z©*\xW B�\boc`BSTQj§��l±)� BBacSTi�YOvbvxqls

� � ��� � ��� � � � 1 ����� � � « � � ��� �� � � � � ��� � ������� � � « � � ��� �

� �

Page 22: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

YOW@Z� � ��� � ��� � � � 1 ����� � � « � � ��� �� � � � � ��� � ������� � � « � � ��� �

�tfBQyi�Yc_+fB\bWBQ�RBST\xW7X+U�XVfBQ�²KS+UrX�RKYOSVXTUtacd�Q�Yl_+f�v^Y>qcQ�StaOd®XTfBQySTQ�_)Q�\xRBX�YcU

°�� ]± � � � � � � �� � � « � � � � � � � � � �°����)± � � � � � � �� � � «�� � � � � � � � � �

��fBQ�STQ � s � � YOWKZ � � YOSTQ�XTfBQ _)alijRBvxQ�ijQ�W7XVQwZ0dkalSVi�Utacd � s � � YOW@Z � � � ���� 4�N��5C������ ���������tfBQjmlaOXVQ�S _+fBQ�_+�]Uj°km�\^Ur`@YOvbvxqB±�XVfKYOX � � � ) � � 0�j�tfK\bU

ijQ�YcWKU1_+fBQw_+��\xWBo XVfKYOX{XTfBQ}_+fBa7UrQ�W��KYOvbvbaOX{\bi�YOolQ�\bU{STQ�YcZKYO�BvbQ�XVfKSVal`BocfjXTfBQ�X¡��ayXTSTYcWKU �RKYcSVQ�WlX�vbY>qlQ�S+U1acd5XVfKQeSTQ�_�Q�\bR]X��ª�tfKQ}mlaOXVQ�S�YcvbUVaj_+fBQ�_+�]Ue°�YOo7YO\bW0m�\^Ur`KYcvxvbqB±�XTfKY8X�UVQ�_�acWKZ�sXVfK\xS+ZGYOWKZGdkac`BSVXVfu_�acijR@alWBQ�W7X+UDaOd�XTfBQ�X¡��apv^Y>qcQ�S+U�YOSTQ�XTSV`BQ;_)acijRBvbQ�ijQ�WlX+U�� �tfK\bUijQ�YcWKUtXVf@Y8X�XTfBQ�R@YOSVX�aOd!XVfBQ�SVQw_)Q�\xR]X}acW���fB\^_+fXVfBQwUrQ�_)acijR�acWBQ�W7XTU�YcSVQyRKSV\bW7XVQ�Z\^U�YUVacvb\bZ��Bv^Yc_+���

�(� � � � ��� � �

�tfBQ�mcaOXTQ�S*WBa8� Z]Qw_)\^Z]Q�U���fB\^_+f=v^Y>qcQ�S�aOd�XTfBQJSVQw_)Q�\bR]X�XVa�SVQ�XTYO\bW=YOX�XVfKQ�Q�WKZpacd�XVfBQXVS+YOW@UVYl_�XV\bacW®s�YcWKZJ_)aciji�`BWB\^_�Y8XTQ�U�XTfB\bU�_+fBac\^_)QeXVa*XTfBQymcacXV\bWBojijYl_+fB\bWBQc�

°�¨7± �� � � �� ���� �� � � « � � ��fBQ�STQ ��� � � � � �tfBQDi�Yc_+fK\xWBQ0WBa8� Q�WK_)STq�R]XTUyXVfBQ�²@mcQ���XV`KRBvxQ ��� � � � � � � � � � � � � � � ��\�XTf � �YOW@Z

RBST\xW7X+U \xX*YOW@Z�XVfBQ�RBSVQ�m�\xal`KUrvbqn_�YOv^_)`KvbYOXVQ�Z � � � � s!acWnXTfBQDXTacRpv^Y>qcQ�S aOdtXTfBQ0STQ�_�Q�\bR]X���tfBQy_)alijRBvxQ�ijQ�W7XTU�acd®XTfBQ�UVQ _)ali*R�acWKQ�W7XTU�YcSVQ�RBST\xW7XTQ�Z�acWJ�@acXrXVali¦v^Y>qcQ�S��

°���]± ���� �� � � � � � � � « � � � � � ��� � � � � � � � � � � � � � � � �°���)± ���� �� � � � � � � � « � � � � � � � � � � � � � � � � � � � � � � �

��� 4�N��������tfKQ�mcacXVQ�S�_+fBQ�_+�]U�m7\^UV`KYOvbvxq�XVf@Y8X�XTfBQ�STQ�i�Yc\xWKZBQ�S�acd!XVfBQ�X¡�{aDv^Y>qcQ�STU�YOSTQXVST`BQ _�acijRBvbQ�ijQ�W7XTU�s®°�YOolYc\xW��q0al�KUVQ�STm7\bWBo�Yj`BWB\xdkacSTi¦�KvbYl_+�]±{XTfBQ�WX+YO�lQ�UtXTfBQySVQw_)Q�\xR]XYOW@Z[vxQwY>mcQwUyXVfKQ���a�aOXVf®��@}`BXTUV\bZ]Q0XVfBQJ��a7acXVf5sªXVfBQ�mcaOXTQ�SjUr`KSVSTQ�WKZBQ�S+U�XVfBQJv^Y>qcQ�S�WBaOX_+fBa7UrQ�WnXVa�XTfBQ0R�acvbv��{alSV�lQ�Sw���tfBQ0mlaOXVQ�S WBa8� fKYlU�Y;Ur\bWBocvbQ0UVfBQ�Q�X�sª_�acijRBST\bUV\xWKo�XVfBQUV\�� ��XV`BRBvbQ

� � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � ���°kP�QtYcUTUr`BijQ{��\�XTfBac`]X!vbalUTU®acdBocQ�WKQ�S+YOvb\�X¡q}XVfKYOX�XTfBQ�vbYlU¡X�X¡�{ae_)acijR�acWBQ�W7XTU�aOdBXTfBQ{mlaOXTQ�S+UUVfBQ�Q�X�YcSVQ�WBacX�\xW_)alijRBvxQ�ijQ�W7XVQwZ0dkalSVi� ±�P;Qy��\bvxv�_�YOvbv�XVfK\bUtXTfBQySTQ)XTYc\xWKQ�Z�vbY>qlQ�Sw��tfBSTQ�Q�_+fBQ�_+�]Ueac`BXTUV\bZ]Q*XTfBQ��@a�acXVfnYOSTQ*i�YlZ]Qj`KUr\bWBo�Y��KYOS+_)a]Z]QjSTQ�YcZBQ�Sw��BBalS�XVfBQ

²KS+U¡XtX¡��aKs�XTfBQy�KYOS+_)a]Z]Q�STQ�YlZ]Q�Sti�`@U¡X���WBa8�

¬ � ����� s�� ����� s � � ��� s]YcWKZ � � ��� «ª�tfBQ}RK`B�Bvb\b_e�cQ�q]U{_�acSTSVQwUrR�acWKZB\xWBo XVa � � s � � s � ��sBYcWKZ � ��sXTfBQyRBST\xm8YOXVQy�cQ�q]U{acd�XTfBQy��a7acXVf5�

� � FcBQB2L�=?>A` E�FA6PKb8�\a6-9oB2> M�FA=?GHF E�B"!A9�=?>SE E�FA6PG�B2<#!cK?6�<*6->aE;6-@ D B29�<*L�=?L 8:> 8:9;OA= E�9H8:9N\ @A6-L;=?`2>@A6-G-=?L;=?B2>o>AB:E�< 8:@A6�=?> T $:Wlr

�]§

Page 23: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

��� 4�N�� �������t�tfBQymcacXVQ�S�_+fBQw_+�]Ue°�`KUV\xWBo��@YOS+_)a]Z]QeSVQwYcZ]Q�S+±1XVf@Y8X � � � � � � � ��� � ���� 4�N�� ��� � �t�tfBQymcacXVQ�S�_+fBQw_+�]Ue°�`KUV\xWBo��@YOS+_)a]Z]QeSVQwYcZ]Q�S+±1XVf@Y8X

� � � � � � � � � � � � � � � � � � � � � ��� � � � � � � � � � � � � � � ���� 4�N�� ��� ���t�tfBQymcacXVQ�S�_+fBQw_+�]Ue°�`KUV\xWBo��@YOS+_)a]Z]QeSVQwYcZ]Q�S+±1XVf@Y8X

� � �� ° � � � �� � � ° � � �� � � 1 ° � � � 1 ±r±V±��fBQ�SVQ

� � �� �° � � � � � ��±ydkalSª§� ��� ��a�ijYc�cQD_+fBQw_+���K� ¨Bs�XVfKQD�KYOS _�a]Z]QDSTQ�YcZBQ�Syi�`@U¡X ��WBa8� � � � � °�Y>m8YO\bvbYc�BvxQ*dkSTaci�XVfBQSTQ)XTYc\xWKQ�Zyv^Y>qcQ�S+±)s�XTfBQ{R@UrQ�`KZ]a���S+YOWKZ]ali UVQ�h7`BQ�WK_)Q1dk`BWK_)XV\bacW *YcWKZyQ�Yl_+f aOd]XTfBQ{XVST`KU¡XTQ�Ql¥ URB`B�Kvx\^_DQ�WK_)STq�R]XV\bacW[�lQ�q]U ��� �gPG\xXVfpXVfB\^U�\bW]dkalSVi�Y8XT\xalWnXVfBQZ]alvxv � � _�YOW[��Q�Q�W7XV\bSVQ�vxqSTQ�_)alWKUrXVST`K_�XTQ�Zn°k��qRB`B�Bvb\^_�YOvbvbqY>m8Yc\xv^YO�BvbQ UVaOd X¡�tYOSTQy��\�XTfB\xW�XVfBQ��KYOS+_)a]Z]Q STQ�YlZ]Q�S�±tYOW@Z_)alijRKYOSTQ�Z0��\�XTf�XTfBQ _)alR�qDacW�XVfBQySTQ�_�Q�\bR]X��ª�tfK\bUtQ�WKUr`KSVQwU�XVfKYOX�\�d�Y*ijYcvx\^_)\bac`@UtmcaOXT\xWKoi�Yc_+fB\bWBQ�UVfBa8��UªXVfBQ}mcaOXTQ�SªalWBQ�\bi�YOocQlscXTfBQ�W�_)STQ�Y8XTQ�U{Y�d�YOv^UrQ}Z]acvbv@��fK\b_+fD��\bvbvKRBSTa]Z]`K_)QXVfKQ���STacWBo;\xi�YcocQcs1\�X�fKYlU*Y;acWKQ�\bWpX¡��a�_+f@YOWK_�Q0aOd}�@Q�\xWBo[_�YO`BolflX*ac`]X���Q)dkalSVQ�XVfBQZ]Qw_)STq7RBXV\bWBojRBSVa]_�Q�UTU{��Q�ol\xW@U��

�(� � � � ��� ���

�tfBQ�Q�WlXT\xSTQ�STQ)XTYc\xWKQ�Zjv^Y>qcQ�S!\^UªR�alUrXVQwZ���q�XVfBQ�mcaOXT\xWKoei�Yl_+fB\xWKQ�acW7XVaeXTfBQ�Q�vbQ�_)XV\bacW���Q��F�UV\�XTQc�*��Xy_�YOWgXVfBQ�SVQ�dkacSTQ*��Q�_)alWKUr\^Z]Q�SVQwZ�RB`B�Kvx\^_�YcvxvbqgY>m8YO\bvbYc�BvbQc�]/�Q�_�YO`KUVQ*Q�Yc_+fgXVST`KUrXVQ�Q\bWpd�Yc_)X*Z]a�QwU�X¡��agZ]Qw_)STq�R]XV\bacWKU�s���Q0��\bvxvtvbQ)X*XVfBQJW�`Bi���Q�S*aOd�XTSV`@U¡XTQ�Q�U���Q$��sª��fKQ�STQ � ��s�YOWKZ \^UyXTfBQ0W�`Bi��@Q�S�acd�ZBQ�_)STq�R]XV\bacW@UyR@Q�SrdkalSVijQwZ����tfBQDmlaOXV\bWBo�i�Yc_+fK\xWBQYOv^UVa�RKYlUVUVQ�U�XTfBQySTQ)XTYc\xWKQ�Z�vbY>qlQ�StacW7XVa�XVfKQ�XVfBQ���XTf�XTSV`@U¡XTQ�Qc�

° � ± � � � � � ��� � � � � � � « � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �°�©7± � � � � � � � �� � � ��� � « � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � � �� ��� ��� ��� �'��� � � �%� � ����� �[��� �

�5Q�X �G��Q;XVfBQ[Z]\^UV_�YOS+Z]Q�ZuvbY>qlQ�Sw��°�\�� Qc�¦UVQ)X � � � � � � YcWKZ �� ��� ±�¸�Qw_�Ycvxv � �\^UDdkalSVijQ�Z���q³XTfBQn_+fBQ�_+�lQ�ST�@a7YOS+Z]\xWKo[aOd � � YOWKZ � � s}YcWKZ�XTfKY8X� � \bU0dkacSTijQ�ZG��qXVfKQ0_+fBQ�_+�lQ�ST�@a7YOS+Z]\bWBo�acd � YOWKZ � ��¸�Qw_�YOvbv{YcvbUVap° dkSTaci ­ h7`KYOXV\bacW�§w±�XVfKYOX � \bUXVfKQ*m�\^Ur`@YOv�_)ali*R�alUV\xXV\bacWgacd � YOWKZ � � �*�tfBQ*XTYcUV��aOd1XVfBQjXTSV`KUrXVQ�Q�Ue\^U�XTfBQ�STQ)dkalSVQ�XVaRBSTacolSVQwUVUV\xmlQ�vbqgUV`B�]XVS+Yc_)X � dkSTaci XTfBQ � � _)ali*R�acWKQ�W7X�acd � � ���tfB\^U���\xvbvtvxQwY>mcQ � Ds��fB\^_+f5s@Ycv�XTfBac`Kocf\�X}\bU�WKaOX�XTfBQ Q�W7XT\xSTQy�KYOvbvbaOX�\bijYcocQlsB\bU�Q�WBal`Bocfacd�XTfBQ �KYcvxvbaOX�\bi�YOolQ°k��Q�_�YO`KUVQ0acd�XVfKQ�RB\x�]Q�v�SVQwZ]`BWKZKYOWK_�qnYOX�XTfBQ�dkacW7X�vbQ�mlQ�v ±yXTa;Z]Q�XVQ�STij\xWKQ0XTfBQ�alSV\boc\bWKYcvmcacXVQy_�YlU¡Xw��®ST`KUrXVQ�Q ��`KUVQ�U{\xXTU{²KS+U¡X�RBSV\bm8Y8XTQeZ]Qw_)STq�R]XV\bacWD�lQ�q � � 1 °�SVQw_�Ycvxv � �®±ªXVa*Z]Q�_�SVq�R]X

� YOWKZJ_�Ycvb_�`BvbYOXVQeXVfKQD°kRKYcSrXT\bYcv5UrQ�Q�Z�sKZBacvbv^±�RKYc\xSw�

� � � � 1 « � � � � � 1

�/�

Page 24: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

XVfKQ�W`KUVQ�U � °k��fB\^_+f\bUt��WBa8��WJ��q0YOvbv�XTfBQ�XVST`KUrXVQ�QwU�YOWKZJYO`@Z]\�XTacS+UT±1XTaD_�YOv^_)`KvbYOXVQ

� ° � � ±�« �

¸�Q�_�YOvbv5XTfKY8X � � \bU�XVfBQ*_+fBQ�_+�lQ�ST�@a7YOS+Z]Q�Z0�B\�XeaOd � � ��fB\b_+f�\^U�STQ�YlZ`KUV\xWBo � � �5Q)X� � � � � ���®ST`KUrXVQ�Q*��R�Q�SVdkacSTi�U1XTfBQ}²KSTUrXtRKYOSVX�acd5XVfKQ�ZBQ�_)a]Z]\bWBo�aOd5XTfBQ��KYOvbvxacX�\bi�YOolQ��q ��� � \bWBo � �YcWKZ � � *YcUt��Q�vba8�y�

� �� � � � � � � 1YOW@Z0R�alUrXTUtXTfBQ � � � 1 alW�XTfBQy��Q��KUV\�XTQcsBYcvxalWBo���\xXVfXTfBQ � � 1 �

° �O± � �� � � ��� ����� � � � � � � « � � � 1�� � � 1�®a�d�Yc_�\xvb\�X+Y8XTQ�XTfBQ}STQ�mlQ�Ycvx\bWBoyaOd�vx\bWB�]U}°�UrQ�Q ��Qw_�XT\xalW �l±ªQ�Yl_+f�XVST`KUrXVQ�Q}i�`KUrXtR@Q�SrdkalSVi

XVfKQ�YO��a8mcQ�UVQ�h7`BQ�W@_)QJX¡��\b_�Qc� �®ST`KUrXVQ�Q � XTfBQ�STQ)dkalSVQR�Q�SVdkacSTijU�XVfBQgYc�@a8mlQ�UrQwhl`KQ�WK_�QYOo7YO\bW5s7XVfB\^UtXT\xijQy`KUV\xWKo*\xXTU�UrQw_)acW@Z�UVQ�_�SVQ�X�ZBQ�_)STq�R]XV\bacWJ�cQ�q � � 1 � 1

� � � 1 � � 1 � 1« � � � 1 � � � �

�tfBQyUTYOijQedk`BWK_�XT\xalW � \^U�`KUVQ�Z0XVa�olQ�WBQ�STYOXVQ}XVfBQyWKQ)��X�RKYOSVX�aOd � «

��° � � � 1 ±�« � � 1YOW@ZDXTfBQySVQwUr`Kv�X�`KUVQ�Z�XVajR�Q�SVdkacSTi XTfBQ UrQw_)alWKZ�ZBQ�_)STq�R]XV\bacW

� � 1 � � � � 1 « � � � �

� � � � YcWKZ � � � YOSTQ�XTfBQ�WR�alUrXVQwZ�alW0XTfBQy��Q��KUV\�XTQc�

°��l± � �� � � ��� ����� � � � � � � « � � � � � � � �

�tfB\^U�XV\bijQcs@XVST`KUrXVQ�Q ��R@YcUTUrQwU � � � ��YOWKZ � � � acWXVaDXVST`KU¡XTQ�Q ���D§c��°kalS�s@Q�h7`B\bm��YOvbQ�W7XTvxqls1XTSV`KUrXVQ�Q ���;§JSTQ�YlZBU*XVfKQ�i dkSTaci XVfBQg�{Q��KUr\xXVQl� ± ��ST`KU¡XTQ�Q ���g§�Z]Q�_�SVq�R]X+U�sZ]Qw_)a]Z]Q�U�sBYOW@Z0R�alUrXTU

°%7± � � � � ��� ����§ ��� � � � � � � « � � � � � � � �

YOW@Z°¡§��7± � �� � � ��� ����§ ��� � � � � � � « � � ��� � � ���

­ Yl_+f XVST`KUrXVQ�Q�SVQ�R@QwY8XTU�XTfB\bUªRKY8XVXVQ�STW5scYcWKZ���fBQ�W*XVST`KUrXVQ�Qe§tfKYlU�²KWB\^UrfKQ�Z�scXVfBQtSTQ�UV`Bv�XR�alUrXVQ�Z�acWJXTfBQy�{Q��KUV\�XTQe\^U � ��� °& � � ±)s]��fB\b_+f\^Utf�`Bi�YOWSVQwYcZBYc�BvbQc��tfBQyR�alUrXV\bWBo�YOSTQeR�Q�STi�`BXVQ�Z5sKYcUtQ���RKvbYc\xWBQwZ0��Q�vba8�y�

�O¨

Page 25: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

� � ���J���('�! � � �y�!������ �� ���� � �)�����( �������|����O���ª&2����)���

� WjXVfKQ�RBSTQ�m�\bac`KU{UrQw_�XV\bacW®sl��Q�Z]QwUV_�SV\b�@QwZ*XVfBQ}RBSTacocSTQ�UTU!aOd®YcW�\xW@Z]\xm�\^Z]`KYcv@mlaOXVQ�XVfBSTac`BolfXVfKQ�Urq]UrXVQ�i��� W�XVfB\^UDUVQ�_�XT\xalW5st�{Q�ZBQ�UT_)ST\x��QXVfBQgi*Qw_+fKYOWK\bUVi dkalS�Q�WKUV`BST\xWBonXTfKY8X0YRKYcSrXT\b_�`BvbYcS�ZBQ�_)STq�R]XVQwZDmlaOXVQ�_�YcWBWBacX���QeXVS+Yc_)QwZD�KYl_+�jXVa*\�X+UtacST\xol\xW@YOv�Q�WK_�SVq�R]XTQ�Z�dkalSVi�¯ U�Q��]RBvbYc\xWKQ�Z�Q�YcSVvb\xQ�S�s�XTfBQ�Q�W@_)STq7RBXVQ�Z;mcacXVQwU � � YOWKZ;XTfBQ�\bS _)alSVSTQ�UVR@alWKZ]\bWBoZ]acvbvbU �YOSTQ��lQ�R]X{XVacolQ)XTfBQ�StZ]`BST\xWKo XVfKQ}Z]Qw_)STq7RBXV\bacWDRBSTa]_)QwUVU���� W0XVfBQ}vbYcWBoc`@YOocQ�aOd1~ �O��XVfBQ�q�YOSTQdkacSTijQ�Z�\xW7XTa ,� $ 4��¯ X1XTfBQ�UrXTYOSVX1acd�XTfBQ}ZBQ�_)STq�R]XV\bWBoyRBSTa]_)QwUVU�sc��Q)dkalSVQ�XTfBQ}ZB`BalU{YOSTQt²KSTUrX1RB`K�Bvx\^UVfBQ�ZjalW

XVfKQy�{Q��5s]XVfKQ�qYOSTQeolSVal`BR�Q�Z�\xW7XVaDUVQ)X+U�aOd�Z]`Ba7U�s@_�YOvbvbQ�ZJ�KY8X+_+fBQ�U��1�tfBQwUrQ��KYOXT_+fBQwU���\bvxv��Q�XTSVQwY8XVQwZ0UVQ�RKYcSTYOXVQ�vxqls7YcWKZDmlaOXVQwU1��\bvbv��@Q�Urf�`���QwZ0YOSTac`KWKZD��\xXVfB\bWDXTfBQ�UVQ��KY8X+_+fBQ�U�Y8XQ�Yl_+fJUrXTYcocQeaOd�XVfBQ ZBQ�_)STq�R]XV\bWBojRBSTa]_)Q�UTU�°�UVQ�Q B�\boc`BSTQj§ �]� ±

�7�Y� � � � � #� �� �

������������������������ � �! #" � ��$%� &('

�) �+*�&%,���'-'

��&%,���'�'

� ���������.&���0/ �!1

�&%,���'-'

� ����������'$2� �3) / �41 &('

�) �5*�&%,���'-'

�+687

9 99 99 99 99 99 99 99 99 99 :

; ;; ;; ;; ;; ;; ; <

� � � � � �>=

? ? ? ? ? ?A@

B BB B

B BB B

BBDC

E E E E E E E E E E E E F

� � � � � �>=

E E E E E E E E E E E E F

B BB B

B BB B

BBDC

? ? ? ? ? ?A@

; ;; ;; ;; ;; ;; ; <

� � � � � �>=

G G G G G GAHI I I I I I I I IIDJ

� � � � � �>=

B�\boc`BSTQj§ �B« ¯ vxv®vx\bWB�]U

P;Q�dkalvxvba8�uXTfBQyRBSTacolSVQwUVU{aOd!acWBQyUV`K_+fJ�KY8X+_+f5��tfBQ�° dk`Bvbvbq���Q�W@_)STq7RBXVQ�Z;Z]`Ba7UT±}YOSTQ�RK`B�Bvb\bUVfBQ�ZgacWgXVaJXVfBQ*��Q��g��q�XTfBQ*mcaOXT\xWKo�i�Y2�

_+fB\bWBQl°�B�\xol`BSVQ�§ �]s�\xWK\�XT\bYcv{R�alUrXV\bWBo7±)� ¯ d XVQ�S�XTfBQ�XTSV`KUrXVQ�QDfKYlU acR�Q�WKQ�Z�XVfKQDac`]X+Ur\^Z]QDacd

�8�

Page 26: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

Q�Yl_+f�acd�XTfBQ�Z]alvxv^U�sKYOWKZZ]alWBQ�XVfKQ RKYOSVXV\^YOv5ZBQ�_)STq�R]XV\bacWacd!Ycvxv�XTfBQ mlaOXVQwUt\xWXTfBQy�KYOXT_+f5sXVfKQ�qgYcSVQjYOo7YO\bWgRB`B�Kvx\^UrfKQ�Z�acWgXVfBQ���Q��5s®\xWnYZ]\�µ�Q�STQ�W7Xws®S+YOWKZ]alij\bUVQ�Z�s�alSTZBQ�Sw��°��tfK\bUR�alUrXV\bWBo�\bU�YcvbUVa�_�YcvxvbQ�ZY�� #��y\bWn~ �O��� ±j�tfBQyacS+Z]Q�S�\^U�_+fBa7UrQ�W���qlsKYOWKZJ��WBa8��WJacWBvbqDXTaKsXVfKQ�XVST`KU¡XTQ�Q Z]al\xWKo�XTfBQ Z]Qw_)STq7RBXV\bWBoK� ¯ STQ�_�acS+ZDacd�XTfBQyR@Q�SVi�`]XTYOXV\bacW`KUVQ�ZJ\^U�SVQ�XTYc\xWBQwZ��q�XVfKQ�XVST`KU¡XTQ�QlsB�B`]X�WBacX�RB`B�Bvb\bUVfBQwZ��¸�Q�_�YOvbv7XVfKYOX�QwYc_+fyXTSV`KUrXVQ�Q{R�Q�SVdkacSTi�U5X¡��a}ZBQ�_)STq�R]XV\bacW@U®alW Q�Yl_+f�Z]`Ba@sOYOWKZ XVfBQ�SVQ�dkacSTQ

Q�Yl_+f=XTSV`@U¡XTQ�QR@Q�SrdkalSVi�UjX¡��anR@Q�SVi�`]XTYOXV\bacWKUjalW�Q�Yc_+f��KYOXT_+f5� ¯ d XVQ�SDXVST`KU¡XTQ�Q � fKYcU²KWB\^UVfBQ�Z�stXTSV`@U¡XTQ�Q � � §gSVQwYcZBUjXTfBQ�STQ�UV`BvxXTU�dkSTaci´XVfKQ��{Q��KUV\�XTQgYOWKZ�R�Q�SVdkacSTi�UjX¡��a°�ZBQ�_)STq�R]XV\bacW®sOR@Q�SVi�`]XTYOXV\bacW@±�RKYc\xS+U�sORB`B�Bvb\^UrfB\bWBoeXVfKQ�SVQwUr`BvxXTU!alW�XTfBQt�{Q��KUV\�XTQ�YcU�XVST`KUrXVQ�QW�Z]\^Z�°�YOo7YO\bW�UVQ�QGB�\xol`BSVQj§ �]� ±

��a8��Q�mlQ�Sws7\xd�WBa*dk`BSVXVfBQ�S�\xWBdkacSTijYOXV\bacWYO��ac`]X�XTfBQyRBSTa]_)Q�UTUt�tYcUtSTQ�mcQwYOvbQ�Z�s7XTSV`KUrXVQ�Q�U_)al`Bv^Z�Ycv�XTQ�SDmlaOXTQ�Uj��\xXVfBal`]XDdkQ�YcSDaOdyZ]Q�XVQ�_)XV\bacW5� BBalSDQ)�BYOijRBvbQcst\xd}XTfBQ�v^YcUrX�XVST`KUrXVQ�QUV\xijRBvbq�RB`B�Bvb\^UrfBQwZYOvbv@XTfBQe²KWKYcv5Z]Q�_�SVq�R]XTQ�ZDmlaOXTQ�UtYcU���Q�\bWBoj\xW�d�Y>mcal`BS1acd�Y�RKYOSVXV\^_)`Bv^YOS_�YcWKZ]\^ZBY8XTQcs�\xX}��ac`Bv^Z���Q*Z]\�DD_)`BvxXeXVaJRBSVa8mlQ�XVfKYOX�YcW�qlXTfB\bWBo0\bvxvbQ�o7YOv�fKYcZ�XTYO�lQ�W�RBv^Yc_�Qc�¯ UVacvb`]XV\bacWRBSTacR�alUVQ�ZJ\bWn~ �O��\bU}Z]Q�ST\xmlQ�Z0dkSVali�~ �8���{��SV`@U¡XTQ�Q�U�YOSTQySVQwhl`K\xSTQ�Z0XVa�RBSTa8m�\bZBQ4�$�� �tvb\xWB�8YcocQy\bW]dkacSTi�Y8XV\bacW��Q)X¡��Q�Q�W�XTfBQymcacXVQwU�«ªQ�WBac`Kocf�XVa�i�YO�lQ�XVfBQyR�alUTUr\b�B\bvx\xX¡q0acdUV`K_�_�Q�UTU¡dk`Bv�_)alSVST`BR]XT\xalWDYc_�_)Q�RBXTYO�Kvxq�UVijYcvxv�s7�B`]XtWBaOXtQ�WBal`BocfDXVa�Ycvxvba8�GYOW�qjaOd�XTfBQ�²@WKYOvZ]Qw_)STq7RBXVQ�Z�mcacXVQwU�XVaj�@Q�XTSTYl_)QwZ0�KYl_+��XVa*XTfBQyacST\xol\xW@YOv�mcacXVQ�U�_�YcUrX���tfBQ RKYcSrXT\bYcv5Z]Q�_�SVq�R]XT\xalWR@a7U¡XT\xWBo7U�dkacS�QwYc_+f�KYOXT_+f�YOSTQ�ocSTac`BR�Q�Z�\xW7XTaD_)acW7XT\xol`Bac`KU

UVQ�h7`BQ�W@_)Q�U�aOd!dkac`BS�R@a7U¡XT\xWBo7U�� BKacS�QwYc_+fR@a7U¡XT\xWKoDfKYOvxd�aOd!XVfKQ \xWKRB`]X}vb\bWB�]U�YOWKZf@YOvxd!acdXVfKQ0ac`BXVRB`]X*vx\bWB�]U*YOSTQ�SVQ�mcQ�YcvxQwZ�s�\xW[XTfBQ�dkacvbvxa8��\bWBo��tY>qc����YO�cQDXVfBQ0²KSTUrX�R�alUrXV\bWBo�acdY0UVQ�h7`BQ�WK_)Q*aOd1dkac`BSw� ��acijQ*Q)��XVQ�SVWKYcv�Yc`]XVfKacST\�X¡q�_+fBa7UrQwU}Y0STYcWKZ]aci fKYcv�d{aOdªXTfBQ*ZB`BalU\bW;XTfBQj²KS+U¡X R�alUrXV\bWBo@� BBacS�Q�Yc_+fn_+fBa7UrQ�W�Z]`Kap° � � � ±}XTfBQ�STQ�UVR@alWKUr\b�BvbQ*XVST`KU¡XTQ�Q�i�`KU¡XSTQ�mcQwYOv�«ª°¡§>±5XTfBQ � � Q��7XTSTYl_�XTQ�ZydkSTaci XTfBQ � scYcWKZ0°7�c±5XVfBQ�XTYcSVolQ)X�Z]`Bae\xW�XVfKQ�UV`B�KUVQ�h7`BQ�WlXR�alUrXV\bWBo�°k\�� Ql�!XVfBQ � #9&���±)�� W*XVfBQ�UVQ�_�acWKZ�R�alUrXV\bWBo YOvbv]XVfKQ�Z]`BalU!WKaOXªR�ac\bWlXTQ�Z*XTae��q�XVfBa7UrQ�alR@Q�WBQ�Z*\bW�XTfBQt²KS+U¡X

�KYOXT_+fjYOSTQ�alR@Q�WBQ�Z5�t° ¯ W�Q��]YcijRBvxQ�²KS+UrX1YOWKZjUVQ�_)alWKZ�acR�Q�WB\bWBoy\^UªUrfKa8��W�\bW B�\boc`KSVQy§w¨B� ±z{SV`@_)\^YOvbvxqls�\bWnXVfKQDXVfK\xS+Z[R�alUrXV\bWBoKs!Q)�BYl_�XVvbq��8.2� *yaOdtXVfKQ�Z]`Ba7U R�ac\bW7XVQ�Z[XVa���q�XVfBQ

UVQ�_)alWKZ*UrQ�X1aOd�vx\bWB�]UªYcSVQtacR�Q�WKQ�Z�s7YOWKZ�8.�� *!aOd�XVfKQ�Z]`Ba7U�WBaOXªR�ac\bW7XVQwZ�XTay��q XVfKQ�UrQw_)alWKZUVQ)X�aOd!vx\bWB�]U�YOSTQ�acR�Q�WBQwZ��� WgXTfBQ*dkac`BSVXVf�R�alUrXV\bWBoKs .��9��XVfBQ�Z]`Ba7UeWBaOXyR�ac\bWlXTQ�ZgXVaJ��q�XVfBQ*XTfB\xS+Z�UrQ�Xeacd{vb\xWB�]U

YOSTQeacR�Q�WBQwZ��0�a�dk`Bvbv�vb\bWB�jdkSVali Y�UV\xWBolvxQ�²KWKYcv�mlaOXTQ�XVa*Y�UV\bWBocvbQ�alSV\boc\bWKYOv@mcacXVQ}_�YOW�XTfBQ�STQ)dkalSVQ}�@Q

Z]S+Y>��W5�� WgXTfB\^U���Y>qXTfBQ�_+fBac\^_)Q*aOd1��fK\b_+f�vx\bWB�]UyYOSTQ XTa�@QjSTQ�mcQwYOvbQ�Z�\^U�\bWKZ]Q�R�Q�W@Z]Q�W7XydkacS

Q�Yl_+f0XTSV`@U¡XTQ�QcsBYcWKZJYjSTYcRB\bZ�ij\��]\bWBojaOd�Z]`Ba7Ut\bUtQ�WKUr`KSVQwZ��

���� ���%������� �(# � �%� ��� �'� ���-�!$ �^+�# � �

��d5XTfBQyZ]`Ba*fKYcU{�@Q�Q�W�XVS+YOWKUrdkacSTijQ�ZD_�acSTSVQw_�XTvxq�XVfBQ�W�QwYc_+fDvb\bWB�DUrfKac`Bv^ZD��Q�aOd5XTfBQ�dkalSVi«

� � � � � � � � � � 1�� � � � 1��fBQ�SVQ

� � « � � �� � � � � 1 � �

� �

Page 27: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

�7�Y� � � � � #� �� �

� � � � � �>=

B BB B

B BB B

BBDC

� � � � � �>=

E E E E E E E E E E E E F

B BB B

B BB B

BBDC

? ? ? ? ? ?A@

G G G G G GAHI I I I I I I I IIDJ

.&��� �

'� ���$ �+���

'� "������ � �

'$2� �3) �

'����$%�����

'� "������ �

B�\boc`BSTQj§�¨K«!¸�Q�mcQwYOvbQ�Z0vx\bWB�]UtdkSTaci XTSV`KUrXVQ�Q"��¥ U�R�Q�STi�`BXTY8XT\xalWKU

� � � 1 « � � �� � 1 � � � � � � � � 1� � � 1 « � � � � �� � « � ° � �� ±

0�acXVQeXVf@Y8X�sK��fBQ�W�Y*vx\bWB��\bU�STQ�mlQ�YcvxQwZ�s7XVfBQ _�acSTSVQwUrR�acWKZB\xWBo � �� \^UtSVQ�mcQwYOvbQ�Z��¯ `KZB\�XTacS+U�_�YcW0XTfBQ�STQ)dkalSVQ�_)ali*RK`]XVQ

� ° � �� ±

YOW@Z�_+fBQw_+��XVf@Y8X�XVfK\bU�Qwh7`KYOv^U� � � � � � 1

�tfBQ��cQ�q ����\^U�RB`K�Bvx\^_yUVa�XTfBQ YO`@Z]\�XTacS�_�YcW�YOv^Uraj_�Ycvb_�`BvbYOXVQ

� � ° � �� � � � � 1 ±

YOW@Z�_+fBQw_+��XVf@Y8X�XVfK\bU�Qwh7`KYOv^U � � �

�O©

Page 28: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

���� ��� � � �'��� �����

¢�UV\bWBo0XTfBQ*RKUrQ�`KZ]alSTYcWKZ]aci�dk`BW@_�XV\bacW;RKYO\bS� �YOWKZ � \^UeUV\bocWB\x²@_�YcW7X}\bWgXTfKY8X�\�X�dkal\xv^U}YR�aOXVQ�W7XV\^YOv�Y8XVXTYc_+�nalWpXVfKQJUVQ�_�SVQw_)qc�[£�WBa8��vbQ�ZBocQ0acd�XVfKQ � �� m8YOvb`BQJ\bU*QwUVUVQ�W7XV\^YOv���fBQ�WXVfKQ�Yc`KZ]\xXValS{R�Q�SVdkacSTi�U1XTfBQ�_+fBQ�_+��al`]XVvb\xWKQ�ZJYO��a8mcQc� ¯ U{XTfB\bUt\^U{XVfBQ�RBSTQ���\bijYcocQ}aOd � \�XUVfBac`Bv^Z���Qj\xW7XVS+Yc_)XTYc�BvxQ�XVaJ_)acijRB`BXVQ�XVfB\^U}dkSVali �7WKa8��vxQwZ]ocQ�aOd�XVfKQ�²@WKYOv�ac`]XTRB`]Xws�XVfBQ� � m8YOvb`BQl���dtXVfBQJ_+fBQ�_+�]Uy_)al`Bv^Zn�@QDR�Q�SVdkacSTijQ�Z���WBa8��\bWBo�acWBvbq�XTfBQDRB`BXTY8XT\xmlQ�vbq;vb\bWB�cQwZ�ZB`BalU

XVfKQ�W�XVfBQ UT_+fBQ�ijQe�{al`Bv^Z0��Q�m7`KvxWBQ�STYc�BvbQ�XTajY*ol`BQ�UTUr\bWBo*Y8XrX+Yc_+�����tfB\^Ut�{al`BvbZ�RBSTa]_)Q�QwZYcU�dkacvbvba8��U�« �e\bmcQ�WgY0RK`]XTYOXV\bmcQ�vb\bWB��s5_)acijRB`BXVQ�XVfBQj_+fBQ�_+�]U��}��d1XVfBQj_+fBQ�_+�]U}�{alSV�Jqcal`fKY>mlQcs7��\�XTf�fB\bocfJRBSTac�KYc�B\bvx\xX¡qcs�\^Z]Q�W7XV\x²KQwZ�Y�m8YOvb\bZ0vx\bWB����� W0XTfB\^U1d�YlUrfK\xalW0qcal`�_�ac`Bv^Z�s]\bWRBST\xW@_)\bRBvxQls]SVQw_)alWKU¡XTSV`@_�X�YcUti�`K_+f�acd�XTfBQ UVQ�_)STQ)X�R�Q�STi�`]X+Y8XT\xalWJYlUtWBQ�QwZ]Q�Z��PG\�XTfBac`BX���WBa8��vxQwZ]ocQeaOd�XVfBQ � �� RBSTQ���\xi�YOolQ�U�s]Ur`K_+fYOWY8XVXTYl_+�D\bUt\bW7XVS+Yc_)XTYO�KvxQl�

� "$���/���%�!�)�*��

� W*XVfB\^UªZ]a]_�`BijQ�W7Xª�{Q�f@Y>mcQtvbYc\bZ�ac`BXª\xW�Z]Q�XTYO\bvBal`BSª`BWKZBQ�S+U¡X+YOWKZ]\bWBo�aOd�·eY>m7\^Z�z{fKYO`Bi�UZ]\boc\xXTYcv1mcacXV\bWBo�UT_+fBQ�ijQc��P�QDfKY>mlQ0Z]\^UV_�`KUTUrQwZgXTfBQ0`KWB\bh7`BQJ_)ali��B\bWKY8XT\xalWnaOd�SVQwh7`B\xSTQ��ijQ�W7XTU�XVf@Y8XeY�Z]\boc\xXTYOv�mcacXV\bWBo0UT_)Q�WKYOST\xa0WBQ�_�Q�UTUVYcSV\bvxq�R@a7UrQwU�s�YOW@Z��{Q��@Q�vx\bQ�mlQ XTfKY8XeXVfBQz{fKYc`Bi mlaOXV\bWBopUT_+fBQ�ijQ�_�acijQ�U�_�vxa7UrQ�S�XVfKYcWGYOW�q=acXVfBQ�S0UV_+fKQ�ijQ��{Q�YcSVQ�_�`BSVSTQ�W7XTvxqY>�tYOSTQ�aOd�XVajijQ�Q�XV\bWBoDYOvbv�aOd�XVfKQ�UVQeSTQ�h7`B\bSTQ�ijQ�W7XTU��P;Q���Q�vb\xQ�mcQcs8fKa8�{Q�mcQ�Sws)XTfKY8X!RBSTa8m�\bZ]\bWBo�Y�Urq]UrXVQ�i XTa}\bijRBvxQ�ijQ�W7X�°�Z]\xol\�X+YOv ±5mlaOXT\xWBo�\bU

WBacX�RB`KSVQ�vxq�Y�XVQw_+fBWB\^_�Ycv�h7`BQwU¡XT\xalW5�!�tfBQ{v^YOSTocQ�S�UVa]_)\ba���XVQw_+fBWB\^_�YOv�UVq�UrXVQ�i Q�W@_)acijRKYlUVUV\bWBoXVfKQ�XVQw_+fBWB\^_�YOv�Urq]UrXVQ�i i�`KU¡X�YOv^Uray��Q�_)alWKUV\bZ]Q�SVQwZ�slYcWKZ*XVfKQ}UVa�_�\bYcvKYOW@Z�Ura]_)\ba���XVQw_+fBWB\^_�Ycv\^UVUV`BQ�U�STYc\bUVQ�ZJi�`@U¡Xe�@Q�YlZBZ]STQ�UTUrQwZ��t�tfBQ STQ�UV`Bv�XT\xWKo0Urq]UrXVQ�i¶i�`KU¡X}WBaOX�alWBvbq���QyXVST`KUrX����acSVXVf�q��B`]X���Qy�@Q�vx\bQ�mlQ�Z�XVaj��Q�XVST`KUrX¡�{alSrXTf7q���q�XTfBQyQ�vbQ�_)XValSTYOXVQc�

��� � / ���� � �)����(���&|���j���

P�Q*YcSVQ olSTYOXVQ�dk`Bv®XTa�Ycvxv�ac`BS�·}�¡¸�z _�acvbvxQwYOol`BQ�U���fBaDXTa7al�JXV\bi*Q�XVa��{alSV�J��\xXVfg`@U�alWXVfK\bU�RKSVa/I¡Q�_�Xw�!P;Q YcSVQyYOv^UVa�\bW�Z]Q��]X�XTaD·}Y>m�\^Zz{f@YO`Bis]dkalS�fB\bU�RKY8XT\xQ�WlX�YcWKUr��Q�ST\bWBo�acdac`KS�ijYcW�q0h7`BQ�UrXV\bacWKU��

= ���O�������/����

~x§)�yf7XrXTR5« � �>�����y� mcQ�SV\x²KQ�ZBmcaOXT\xWKoK� acSToK�~ �>�yf7XrXTR5« � �>�����y� Z]\bQ���acv^Z�� _�aci�~ ¨8�yf7XrXTR5« � �8Y>m�\bSV`B�K\xW5� _)ali �>mcacXVQ����~ �O� ·eY>m7\^Z�z{fKYO`KiJ� ��Qw_)STQ)X)�H/tYOvbvbaOX�¸�Q�_�Q�\bR]XTU�YcWKZ�®S+YOW@UrRKYcSVQ�W7X�� W7XVQ�ocST\�X¡q�«�/�Q)XrXTQ�SYOW@Z�vbQ�UTU���_�alUrXVvbq�Q�vbQ�_�XTSValWB\^_}mlaOXT\xWBojY8X�R�acvbvb\xWBojRBv^Yc_�Q�U��f7XrXTR5« � �>�����y� m�SVQw_)Q�\bR]Xw� _�aci �8YcSrXT\b_�vxQl� R�Z�d¡�

���

Page 29: A Dependability Analysis of the Chaum Digital Voting Scheme · PGfKYOX RBSVQw_)\^UrQ vxq Q ijQ YOW q0Yl_ _)`KSTYl_)qj \xvbv®Z]Q R@Q WKZ Y8X fKYOX vxQ mcQ v QyYOSTQ {alSV \bWBo YOW@Z

~ � � ·eY>m7\^Z�z{fKYO`KiJ��¢�WlXTSTYl_)QwYO�BvbQ ­ vbQ�_�XTSValWB\^_} �Yc\xv�sK¸�Q�XV`BSTW ¯ ZBZBSVQwUVUVQ�U�s]YOWKZ·}\xol\�X+YOv-:1UVQ�`KZ]alW�q7i�U���� $ � � F& #% !.2"7#%$2& 4 $�*5" �8��������s �O�@°7�c±�« �O��� ���Bs�BBQ���§ ��B§l�

~ ©8� �tfBQ ­ vxQw_�XValSTYcv®z{acijij\bUTUr\bacW®�! �a�ZBQ�STWB\bUV\bWBo ­ vbQ�_�XT\xalWKU�« ¯ UrXVS+Y8XTQ�ol\b_}Q�m8YOvb`KYOXV\bacWaOd�XVfBQ � � ��� RB\bvxacX�UT_+fBQ�i*QwU���f7XrXTR5« � �>�����y� Q�vbQ�_)XVacS+YOv^_)aliji*\^UTUr\bacW5� oca8m�� `B� �8Yc�@al`]X��`KU �>ija]Z]Q�STWB\^Ur\bWBolQ�vbQ�_�XT\xalWKU�� _)dkiJ�

~ �w�  �YcST_�\xW �eaci�`Bvx��\bQ���\^_ �lsB �YOSTQ��0£�vbacWKa8��Ur��\�s�YcWKZJ �\xSTalUVv^Y>��£�`]X¡q�vxa8��UV��\��¸�YcRB\bZJij\x��\bWBo�YOW@ZJUVQ�_�`BST\�X¡qDacd�z{fKYc`Bi¥ U�m7\^UV`KYOv�Q�vxQw_�XVSTacWK\b_}mcacXV\bWBoK�!� W��� ������@s � � �c¨K����aDYORKR@QwYOSw�

~ �8�  [���7YO�lac�KUTUVacW5s� [���l`BQ�v^U�sBYOWKZ¸y�K¸�\xmlQ�UrX��� �YO��\bWBo� �\x� 0�Q�XTU�¸�ac�B`KUrXtdkacS­ vbQ�_)XVSTacWB\^_ ��aOXT\xWBoj��q�¸�YOWKZ]alij\bUVQ�Z :�YOSVXV\^YOv®z{fBQw_+�7\bWBo@��� W���� ������� ���cs�� � ���B�

~ 8� ��YcZBY>qlalUVfB\�£�acfBWBa@s ¯ ZBYci �7XT`B�B�BvbQ)²KQ�vbZ5s ¯ m�\bQ�v®¸�`B�B\bW5sKYOW@Z�·eYO�PnYOvbvbYl_+f5�¯ W@YOvbq�UV\^UtaOd�YOWJQ�vbQ�_�XTSValWB\^_}mlaOXT\xWBoji�Yc_+fK\xWBQl�!flXVXVR5« � �OY>m�\xST`B�B\bW5� _)aci �8mcaOXTQ �]�

~x§��8��f7XrXTR5« � �>�����y� WBQ��t_�YlU¡XTvxQl� STQ�UVQ�YcST_+f®� Qw_O� acSTo �>i�YOd XV\^YB�~x§c§)�y¸�Q��@Qw_�_�Y� �Q�S+_)`BST\����}`BQwU¡XT\xalWKU{dkacS�mlaOXT\xWBojUVq�UrXVQwUri¦mcQ�W@Z]acS+U��

f7XrXTR5« � �>�����y� WBaOX+YO�BvbQ�UVaOd X¡�tYOSTQc� _)ali �8_+fBQw_+�7vb\^U¡X+U�� f7XVijv��~x§ �>�y [��0�alYcS�YOWKZ ¯ ���]fKYOij\bS����}\bUV`KYOv�z{STq�R]XValocS+YORBf�q��®� W ¯ �K·�QC�BYOW7XV\^U�s]QwZ]\xXVacSws

� , 0 .2& !��4G#9& � ' %+6 "3$�!/').!6 � %#"��F')$ �' %+6-"$� %'&Bs@mcacvb`BijQG � ��acd)(��*��@sBR@YOocQwU§+��§ �Bs[/�Q�SVvb\xW®s�§ / � �8��RBST\bWBocQ�S���Q�STvbYcoK�

~x§�¨8�C@5DD_)Qyacd®XVfKQ ­ ��Q�W�mca8q��®f7XVXVR5« � �8�����y� QwZ]Q�ija]_)S+Yc_�qc� oca8m�� `K��s,�l`Bvxq � � � �]�~x§��O�G:!Q)XTQ�S�¸�q7YOW5�� �YOXVfBQ�i�Y8XV\^_�Ycv�ija�ZBQ�v^U�aOd!_)acijRB`BXVQ�S�UVQ�_�`BST\�X¡ql��� W�¸�\^_�_�YOS+Z]a

BBa]_�YOS+Z]\5YOWKZ¸�al�@Q�SrXTa��eacSTSV\bQ�ST\�s�QwZ]\�XTacS+U�s�- $ F&-,/.2"7#%$2& 4�$ *. �+ %F'�#9"&%�� & .2� % 4!# 4.2&-,�/ ��4!#0!/&KsKmcacvb`BijQG�]§ �]§}acd)(��*��@s]R@YOocQwU�§+�]©��]s8� � � �K�

~x§ � �GB����]_+fBWKQ�\^Z]Q�Sw� ­ W]dkalST_�Q�Yc�BvxQ�UVQ�_)`KSV\xX¡q�R@alvx\^_)\bQ�U��������21F').�&84�./ �"7#%$2&84C$�&��& *�$2' � .2"7#%$2&.2&-,3 % 4�"3� �4-�! %F'�#9" %8sB¨@°¡§>±�« ¨ �5� � �Ks BKQ��BST`KYOSTq � � � �K�

~x§�©8� �7XTQ�mcQC�B_+fBWBQ�\^Z]Q�S�YOWKZ ¯ �BS+YOf@YOi ��\^Z]\bSValR@al`BvbalU��ªz(�8:�YcWKZ ¯ WBalW�q7ij\xX¡q���� W��� ������@s]mlacvb`BijQ*§l§��7©�acd)(��*��@s�§ /c©K�

~x§ �w�C/�SV`@_)Q �]_+fBWBQ�\xQ�S���� 6/6-� #%�!,�� ' %+6 "3$6!�').!6 � %87�9 ')$�" $ !$2� 4;:<� � ! $2'�#9" � ��4C.2&-,* $ F') !�� $ ,��)���calfBWPG\xvbQ�q0YcWKZ ��acW@U�s 0�Q�� �ªacST��s�§ /l©B� ��Q�_�acWKZ�Q�Z]\xXV\bacW®�

~x§ �8� �eQ�acµ�STQ�q0PG\xvbvbYcWKU�YcWKZ�¸�acWKYcvbZ���Q�YcSVvbQc�=� $��56 � �+��">� $2����4+? $2'�" ��� :�Y>m�\bvx\bacW/�a�ac�]U�s�§ /�c�K�

���