The Australian secret ballot introduced notions of privacy and decoupled the voter from their vote, which was a significant shift from earlier methods like public hand-raising. This change brought new opportunities and challenges, particularly in ensuring the security and integrity of elections.
Plurality voting, where the candidate with 50% plus one vote wins, leads to troublesome outcomes in a split electorate. It often results in two dominant parties that deeply oppose each other, creating polarization and reducing the representation of minority views.
Tabulators often have flaws due to complex legal specifications that are not written by experts. For example, in Ireland, the legal text for vote counting was so convoluted that it required a PhD thesis to translate it into a mathematical specification, revealing numerous issues in the process.
Computers are used in various ways in voting, including tabulation, auditing, and facilitating election operations. However, their use in voter-facing systems, such as voting booths, has raised concerns about transparency and security, especially when proprietary systems are involved.
Paper ballots are essential because they provide human-readable, verifiable records that voters can understand and trust. They ensure transparency and prevent leakage of sensitive information, which is critical for maintaining the integrity of elections.
StarVote is an end-to-end verifiable supervised voting system that uses plain paper ballots and cryptographic methods to ensure trustworthiness. It allows for software independence, meaning errors can be detected cryptographically, and facilitates statistically valid risk-limiting audits. Despite its potential, its development was halted due to resistance from existing vendors.
Internet voting systems face significant challenges, including a larger attack surface and potential side channels like coercion from abusive spouses or employers. These systems are only recommended for low-value elections, such as primaries, and require advancements in high-assurance hardware and cryptographic protocols to mitigate risks.
Formal methods help ensure that voting systems are built with rigorous specifications and correctness proofs. They address inconsistencies in legal requirements, provide traceability from requirements to implementation, and enable formal verification of software and hardware to meet high-assurance standards.
The analysis revealed that the proprietary black box tabulator used in Ireland was incorrect in its tabulation. Despite being a closed system, counterexample generation based on a formal model exposed flaws, highlighting the lack of rigor in its design and implementation.
In this episode we go into a deep dive into the formal methods side of Voting systems, and for this nobody better than our guest: Joe Kiniry, A Principal Scientist at Galois, Principled CEO and Chief Scientist of Free & Fair, a Galois spin-out focused on high-assurance elections technologies and services.
For the past 20 years Joe has worked tirelessly in designing, developing, supporting and auditing all kinds of voting systems for different private parties and government parties.
If you enjoy the show please consider supporting us at our ko-fi: https://ko-fi.com/typetheoryforall