Embed Size (px)
Citation preview
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 1
State of Helios 2010: features and deployments
Ben Adida, Olivier Pereira
EVT/WOTE 2010 – August 9, 2010
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 2
Helios. . .
online electionslow-coercion
more than 25000 votes cast
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 2
Helios. . .
online electionslow-coercion
more than 25000 votes cast
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 3
Helios. . .
1. New developments
2. New deployments
3. New release
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 4
Monitoring Helios elections
Helios offers a bulletin board, but . . .
I What if the Helios server is getting hacked?Audit will see it, but are we stuck?
I Audit is technical. . .Can I share my audit results?
Observation:
The Helios server only stores public data!
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 4
Monitoring Helios elections
Helios offers a bulletin board, but . . .
I What if the Helios server is getting hacked?Audit will see it, but are we stuck?
I Audit is technical. . .Can I share my audit results?
Observation:
The Helios server only stores public data!
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 4
Monitoring Helios elections
Helios offers a bulletin board, but . . .
I What if the Helios server is getting hacked?Audit will see it, but are we stuck?
I Audit is technical. . .Can I share my audit results?
Observation:
The Helios server only stores public data!
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 5
Monitoring Helios elections
Helios Election Monitor (by Olivier de Marneffe)https://www.uclouvain.be/crypto/electionmonitor/
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 6
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 7
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 8
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 9
Audit of the tally
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 10
After the UCL president election. . .
AGL (the UCL student association), Sep. 2009:
“Could we also have verifiable elections on the Internet?”
- “Well, how do your elections work?”
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 10
After the UCL president election. . .
AGL (the UCL student association), Sep. 2009:
“Could we also have verifiable elections on the Internet?”
- “Well, how do your elections work?”
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 11
UCL student elections
“Our ballots are a bit more complicated, here is a typical list:
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 12
UCL student elections
“and:
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 13
UCL student elections
“and:
“and we typically have 3 such lists + a few smaller ones”
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 13
UCL student elections
“and:
“and we typically have 3 such lists + a few smaller ones”
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 14
Helios ballot encoding
Helios ballot encoding [CGS97]: 6 modexp/candidate
≈ 250 candidates: minutes on an old browser
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 14
Helios ballot encoding
Helios ballot encoding [CGS97]: 6 modexp/candidate
≈ 250 candidates: minutes on an old browser
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 15
We need something else. . .
Move to completely different crypto!
I Mixnet-based tallying
I one ciphertext per ballot
I use augmented cryptosystems [Wik08] to ensure ballotindependence
≤ 5 modexp/ballot
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 15
We need something else. . .
Move to completely different crypto!
I Mixnet-based tallying
I one ciphertext per ballot
I use augmented cryptosystems [Wik08] to ensure ballotindependence
≤ 5 modexp/ballot
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 16
Deployment. . .
I New participation record!77% of students want to keep paper and electonic polling,
22% want Internet onlyI Much more burden than homomorphic tallying:
I checking ballot independence,I mixing,I decryption and counting + proof verifications
I Still much more comfortable than paper tallying. . .
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 16
Deployment. . .
I New participation record!77% of students want to keep paper and electonic polling,
22% want Internet only
I Much more burden than homomorphic tallying:
I checking ballot independence,I mixing,I decryption and counting + proof verifications
I Still much more comfortable than paper tallying. . .
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 16
Deployment. . .
I New participation record!77% of students want to keep paper and electonic polling,
22% want Internet onlyI Much more burden than homomorphic tallying:
I checking ballot independence,I mixing,I decryption and counting + proof verifications
I Still much more comfortable than paper tallying. . .
UCL Crypto GroupMicroelectronics Laboratory State of Helios 2010 - Aug. 2010 16
Deployment. . .
I New participation record!77% of students want to keep paper and electonic polling,
22% want Internet onlyI Much more burden than homomorphic tallying:
I checking ballot independence,I mixing,I decryption and counting + proof verifications
I Still much more comfortable than paper tallying. . .
FROM TO 2010 2011 2012 2013
2009-12-14 17:00:002009-12-14 18:00:00 44 68 80 74
2009-12-14 18:00:002009-12-14 19:00:00 26 36 47 43
2009-12-14 19:00:002009-12-14 20:00:00 13 10 16 27
2009-12-14 20:00:002009-12-14 21:00:00 11 21 21 22
2009-12-14 21:00:002009-12-14 22:00:00 6 14 17 18
2009-12-14 22:00:002009-12-14 23:00:00 4 5 9 9
2009-12-14 23:00:002009-12-15 00:00:00 3 1 8 7
2009-12-15 00:00:002009-12-15 01:00:00 0 6 6 6
2009-12-15 01:00:002009-12-15 02:00:00 5 14 6 11
2009-12-15 02:00:002009-12-15 03:00:00 10 15 2 8
2009-12-15 03:00:002009-12-15 04:00:00 3 5 7 5
2009-12-15 04:00:002009-12-15 05:00:00 9 5 5 0
2009-12-15 05:00:002009-12-15 06:00:00 2 1 6 2
2009-12-15 06:00:002009-12-15 07:00:00 2 3 1 5
2009-12-15 07:00:002009-12-15 08:00:00 1 6 2 3
2009-12-15 08:00:002009-12-15 09:00:00 0 1 0 0
2009-12-15 09:00:002009-12-15 10:00:00 0 0 0 0
2009-12-15 10:00:002009-12-15 11:00:00 0 0 0 0
2009-12-15 11:00:002009-12-15 12:00:00 0 0 0 0
2009-12-15 12:00:002009-12-15 13:00:00 0 0 0 0
2009-12-15 13:00:002009-12-15 14:00:00 0 2 1 0
2009-12-15 14:00:002009-12-15 15:00:00 1 2 0 0
2009-12-15 15:00:002009-12-15 16:00:00 0 1 0 0
2009-12-15 16:00:002009-12-15 17:00:00 3 0 1 1
2009-12-15 17:00:002009-12-15 18:00:00 1 0 0 1
2009-12-15 18:00:002009-12-15 19:00:00 1 1 2 1
2009-12-15 19:00:002009-12-15 20:00:00 25 27 4 15
2009-12-15 20:00:002009-12-15 21:00:00 6 5 1 12
2009-12-15 21:00:002009-12-15 22:00:00 0 13 2 3
2009-12-15 22:00:002009-12-15 23:00:00 3 0 1 4
2009-12-15 23:00:002009-12-16 00:00:00 0 2 2 2
2009-12-16 00:00:002009-12-16 01:00:00 1 4 0 1
2009-12-16 01:00:002009-12-16 02:00:00 2 5 4 1
2009-12-16 02:00:002009-12-16 03:00:00 1 3 4 5
2009-12-16 03:00:002009-12-16 04:00:00 0 0 0 0
2009-12-16 04:00:002009-12-16 05:00:00 0 0 0 0
2009-12-16 05:00:002009-12-16 06:00:00 0 0 0 0
2009-12-16 06:00:002009-12-16 07:00:00 0 0 0 0
2009-12-16 07:00:002009-12-16 08:00:00 0 0 0 0
2009-12-16 08:00:002009-12-16 09:00:00 0 0 0 0
2009-12-16 09:00:002009-12-16 10:00:00 0 0 0 0
2009-12-16 10:00:002009-12-16 11:00:00 0 0 0 0
2009-12-16 11:00:002009-12-16 12:00:00 0 0 0 0
2009-12-16 12:00:002009-12-16 13:00:00 0 0 0 0
2009-12-16 13:00:002009-12-16 14:00:00 0 0 0 0
2009-12-16 14:00:002009-12-16 15:00:00 0 0 0 0
2009-12-16 15:00:002009-12-16 16:00:00 0 0 0 0
2009-12-16 16:00:002009-12-16 17:00:00 0 0 0 0
2009-12-16 17:00:002009-12-16 18:00:00 0 0 0 0 0
20
40
60
80
Princeton Winter 2009 Runoff Election, # votes cast per class per hour
2010 2011 2012 2013
DeploymentsInfocard Foundation(MS, Google, Oracle, Verizon, ...)
Université catholique de LouvainDean of the University
Top University hiringand promotion decisions
Princeton Student Gov Elections
IACR
New Release
online as of last nighthttp://heliosvoting.org
Java no longer necessary(but still good for increased privacy)
streamlined UI, more social
scalable to thousands of votersout of the box.
A Non-ProfitDirectors➡ Ben Adida➡ Lawrence Lessig➡ Jim Adler
Tech Advisory Board➡ Josh Benaloh, Microsoft Research➡ Olivier Pereira, UCL➡ Dan Wallach, Rice University
Code➡ Ben Adida, Olivier Pereira, Olivier de Marneffe
