cover of episode #40 Secure Voting - Joe Kiniry

#40 Secure Voting - Joe Kiniry

2024/7/15
logo of podcast Type Theory Forall

Type Theory Forall

AI Deep Dive AI Insights AI Chapters Transcript
People
J
Joe Kiniry
Topics
@Joe Kiniry : 本访谈深入探讨了投票系统的正式方法,回顾了投票的历史,从最初的公开投票到澳大利亚秘密投票的演变,以及电子投票的兴起和挑战。他指出,即使是看似简单的多数票制,其计票过程也存在复杂性,容易出错。现有的投票系统存在各种问题,例如数据格式不规范、专有软件和硬件的缺乏透明度等。他强调了纸质选票在确保选举可靠性方面的关键作用,即使在使用先进投票方式的情况下,也需要保留纸质选票记录。他批评了现有投票系统供应商为了自身利益而阻挠技术进步的行为。他介绍了StarVote系统,这是一个端到端可验证的监督式投票系统,它使用简单的纸质选票,并具有软件独立性和风险限制审计功能。他还介绍了ElectionGuard项目,这是一个由微软开发的开源加密库,旨在为现有投票系统添加端到端可验证性。他认为,理想的选举系统应该确保选民参与和对结果的信任,但由于各种因素,这在美国很难实现。 他讨论了在安全投票中使用形式化方法的经验,包括使用Alloy、Coq、Cryptol等工具来规范系统组件并进行形式化验证。他强调了编写可读规范、简化推理过程和改进代码提取功能的重要性。他还谈到了如何使用形式化方法来发现和解决现有投票系统中的问题,例如爱尔兰使用的计票器。他指出,许多现有的投票系统缺乏严谨性,存在各种错误和安全漏洞。 最后,他展望了未来的发展方向,包括继续改进StarVote系统和开发安全的互联网投票系统。他提到,DARPA和Tusk慈善机构正在投资相关研究,并正在努力开发一个包含所有投票加密基础的文档,这将有助于构建更安全可靠的投票系统。 @Pedro Abreu : 作为主持人,Pedro Abreu引导了与Joe Kiniry的对话,并提出了关于投票系统历史、电子投票的利弊、理想投票系统的设计、以及形式化方法在确保投票安全中的作用等问题。他表达了对现有投票系统中存在问题的担忧,并强调了公民应该推动选举系统改进的重要性。 @Dan Plokin : 作为联合主持人,Dan Plokin参与了讨论,并对Joe Kiniry的观点和经验进行了补充。

Deep Dive

Key Insights

What is the historical significance of the Australian secret ballot in voting systems?

The Australian secret ballot introduced notions of privacy and decoupled the voter from their vote, which was a significant shift from earlier methods like public hand-raising. This change brought new opportunities and challenges, particularly in ensuring the security and integrity of elections.

Why is plurality voting considered problematic in the United States?

Plurality voting, where the candidate with 50% plus one vote wins, leads to troublesome outcomes in a split electorate. It often results in two dominant parties that deeply oppose each other, creating polarization and reducing the representation of minority views.

What are the challenges with tabulators in voting systems?

Tabulators often have flaws due to complex legal specifications that are not written by experts. For example, in Ireland, the legal text for vote counting was so convoluted that it required a PhD thesis to translate it into a mathematical specification, revealing numerous issues in the process.

What is the role of computers in electronic voting systems?

Computers are used in various ways in voting, including tabulation, auditing, and facilitating election operations. However, their use in voter-facing systems, such as voting booths, has raised concerns about transparency and security, especially when proprietary systems are involved.

Why do experts advocate for paper ballots in electronic voting systems?

Paper ballots are essential because they provide human-readable, verifiable records that voters can understand and trust. They ensure transparency and prevent leakage of sensitive information, which is critical for maintaining the integrity of elections.

What is the StarVote system, and why is it considered a model for secure voting?

StarVote is an end-to-end verifiable supervised voting system that uses plain paper ballots and cryptographic methods to ensure trustworthiness. It allows for software independence, meaning errors can be detected cryptographically, and facilitates statistically valid risk-limiting audits. Despite its potential, its development was halted due to resistance from existing vendors.

What are the main challenges in implementing secure internet voting systems?

Internet voting systems face significant challenges, including a larger attack surface and potential side channels like coercion from abusive spouses or employers. These systems are only recommended for low-value elections, such as primaries, and require advancements in high-assurance hardware and cryptographic protocols to mitigate risks.

How do formal methods contribute to the design of secure voting systems?

Formal methods help ensure that voting systems are built with rigorous specifications and correctness proofs. They address inconsistencies in legal requirements, provide traceability from requirements to implementation, and enable formal verification of software and hardware to meet high-assurance standards.

What was the outcome of analyzing a black box tabulator in Ireland?

The analysis revealed that the proprietary black box tabulator used in Ireland was incorrect in its tabulation. Despite being a closed system, counterexample generation based on a formal model exposed flaws, highlighting the lack of rigor in its design and implementation.

Chapters
This chapter explores the history of voting systems, from ancient Greece to modern electronic systems. It discusses the evolution of voting methods, including paper ballots, mechanical systems, and digital technologies, and the challenges of ensuring secure and accurate vote tabulation. The complexities of different electoral schemes and the inherent flaws in many existing tabulators are highlighted.
  • Evolution of voting methods from ancient times to modern digital systems
  • Challenges of secure and accurate vote tabulation
  • Complexities of different electoral schemes and flaws in existing tabulators

Shownotes Transcript

In this episode we go into a deep dive into the formal methods side of Voting systems, and for this nobody better than our guest: Joe Kiniry, A Principal Scientist at Galois, Principled CEO and Chief Scientist of Free & Fair, a Galois spin-out focused on high-assurance elections technologies and services.

For the past 20 years Joe has worked tirelessly in designing, developing, supporting and auditing all kinds of voting systems for different private parties and government parties.

If you enjoy the show please consider supporting us at our ko-fi: https://ko-fi.com/typetheoryforall

Links

Broken Ballots

Joe Website

Galois website

SAW