http://zdnet.com.com/2100-1104-5227789.htmlHigh hopes for unscrambling the voteCNET News.com
PISCATAWAY, N.J.--Computer scientists gathered here recently and bobbed their heads into an odd-looking contraption for a glimpse of emerging technology that might just help make the digital world safer for democracy. Beneath the viridian green glow of a viewfinder flowed an inch-wide strip of paper that inventor David Chaum says will prove with mathematical rigor whether a vote cast on a computer in a ballot box has been tampered with after the fact ... The technology builds on the increasingly popular notion that computerized voting machines need to leave behind a paper trail to safeguard against fraud--something that's lacking in most current models and the subject of furious debate.
Chaum has raised the concept to an entirely new level, according to electronic-voting experts, by including breakthrough cryptographic techniques that will provide instant feedback on irregularities while ensuring voter anonymity. While still a clunky prototype, the system could represent the next evolutionary step in improving the security and reliability of the voting process, some believe.
"The math is fine," said Ron Rivest, a professor of computer science at the Massachusetts Institute of Technology and the co-creator of the popular RSA encryption algorithm. "I view this as the early days of the practical applications...The paradigm is a new and interesting one. I'm optimistic."
... The leading contenders so far, independently created by Chaum and mathematician Andrew Neff (NOTE: This guy is VoteHere) represent two variants of a voting technology that uses encrypted printed receipts to solve many of the problems that have bedeviled existing hardware. These prototypes work in the lab. But one obstacle may be whether notoriously conservative voting officials can be convinced to try something new.
...Chaum's insight was to invoke the logic of cryptography ... For cryptographers, the inherent beauty of such a system is that it safeguards privacy and security--and doesn't require voters to trust the government or untested software on a voting machine. "The next real issue is, 'When can I buy it?'" said Chaum, who created a company called Votegrity to develop and sell the hardware. "That's why we have to aggressively push forward with the company at this stage to make it an option." He is looking for investors and a CEO to bring his system to market.
"It's an important step forward," Moti Young, a professor of computer science at Columbia University, said of Chaum's design. "I don't see any bugs. It's technically very sound."
Poorvi Vora, an assistant professor of computer science at George Washington University, is also enthusiastic. Vora and her graduate students wrote their own software, based on Chaum's two-strip concept, and demonstrated it at the Rutgers conference. Instead of using a custom viewfinder, they printed on transparencies that can be laid on top of each other on an overhead projector.
But not everyone in the e-voting community is so enthusiastic about the Chaum and Neff systems. Rebecca Mercuri, who wrote her Ph.D. dissertation on electronic vote tabulation, said she remains skeptical.
"I can read the math," Mercuri said. "I am holding the bar very very high...I will continue to serve as a skeptic. I have not been convinced yet. It does not exist in the form where people can use it yet."
VoteHere's take on encryption
Chaum isn't the only contender seeking to bring encryption to the voting verification process. A similar cryptographic system was invented by Neff, who holds a doctorate in theoretical mathematics from Princeton University and is now the chief scientist at VoteHere in Bellevue, Wash. Neff's invention also draws from mathematics but does not require a viewfinder that combines two receipts into a human-readable ballot.
Instead, VoteHere's patented system prints personalized, encrypted receipts for each voter. A vote for president could be represented as "DGA1," and governor as "3QLK." After the election, voters can confirm that their vote was counted by checking the county Web site to make sure the encrypted sequence corresponds to what's posted. Or, if they choose, they can hand their receipt to a trusted organization like the League of Women Voters and ask them to do the verification.
"It's conceptually easy," Neff said during an interview at the conference sponsored by Rutgers University's theoretical computer science center. "But it has to be plugged into the process that (voting machine) vendors use."
Concocting arcane mathematical formulae is almost trivial, compared with the arduous process of convincing vendors and state election officials to adopt verifiable, encrypted systems. Neither group is known as an aggressive early adopter of new technologies.
... So far, Neff's VoteHere company has inked a deal with Sequoia Voting Systems to license its encrypted receipt technology, though it's nonexclusive. Unlike Chaum's system that requires a special viewfinder, any electronic voting machine equipped with a printer can produce the receipts. State election officials aren't exactly biting, but Neff says "it looks very realistic that we can do a pilot in California or Maryland for the November election."
..."We've addressed 80 percent of the threats and 100 percent of the really bad threats," Neff said. "We can't (seem to) get beyond that remaining 20 percent."
But skeptic Mercuri argued that even that number is optimistic. "I don't agree you've addressed 80 percent of the threats," she said. "It depends on your threat model."