36
Bundeskanzlei BK Sektion Politische Rechte Trust in E-Voting Oliver Spycher at Swiss Cyber Storm Bern, 30 th October 2018

Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

  • Upload
    others

  • View
    3

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Trust in E-Voting

Oliver Spycher at Swiss Cyber Storm

Bern, 30th October 2018

Page 2: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

2Trust in E-Voting

Political Rights Section

E-Voting introduced by Cantons

Page 3: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

3Trust in E-Voting

Political Rights Section

• Trials since 15 years

• Open to 3.8% of the overall electorate (September 2018)

• Security first

Moving ahead step by step

www.bk.admin.ch

Page 4: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

4Trust in E-Voting

Political Rights Section

People need to trust that…

• Result reflects the voters’ intentions

• Secrecy of the vote is respected

…even if they’re not an observer

Page 5: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

5Trust in E-Voting

Political Rights Section

Trust in Will and Ability

Page 6: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

6Trust in E-Voting

Political Rights Section

Trust One Trustee

…out of many

Page 7: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

7Trust in E-Voting

Political Rights Section

Trust in Will and Ability

Page 8: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

8Trust in E-Voting

Political Rights Section

E-Voting cannot be trusted…

• Transparency…

• …inherently impossible

• …only towards experts

• …eats secrecy

• No meaningful recounts

• And anyhow, administrations will fail

Page 9: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

9Trust in E-Voting

Political Rights Section

Sure about that?

Page 10: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

10Trust in E-Voting

Political Rights Section

Trust through verification

Page 11: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

11Trust in E-Voting

Political Rights Section

Trust through re-verification

Page 12: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

12Trust in E-Voting

Political Rights Section

Trust through verification

e-mail

Page 13: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

13Trust in E-Voting

Political Rights Section

Trust through re-verification

Page 14: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

14Trust in E-Voting

Political Rights Section

Summing up votes is verifiable…

Ja : 2

Nein: 1

…by checking equations

Page 15: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

15Trust in E-Voting

Political Rights Section

Full Verifiability

Voters or observers verify that votes have been

cast as intended

recorded as cast

tallied as recorded

Page 16: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

16Trust in E-Voting

Political Rights Section

Cast as intended

Taken from the online demo-system by Swiss Post at e-voting.ch

Page 17: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

17Trust in E-Voting

Political Rights Section

Cast as intended

Return-code element

Return-code element

Return-code element

Retu

rn c

ode

Return-code element

Ballot-BoxVoter

Page 18: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Ballot-Box

Recorded as cast

Page 19: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Ballot-Box

Tallying

Page 20: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Ballot-Box

Tallying

Page 21: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Ballot-Box

Secrecy

Page 22: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Ballot-Box

Secrecy

Page 23: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Ballot-Box

Secrecy

Page 24: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Ballot-Box

Secrecy

Page 25: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Secrecy

Page 26: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Tallied as recorded

Page 27: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Tallied as recorded

=?

Page 28: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Tallied as recorded

Can be verified and re-verified

By checking equations

=

Page 29: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Tallied as recorded

Full chain can be verified and re-verified

By checking equations

= = = =

Page 30: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Ja : 2

Nein: 1

Tallied as recorded

Full chain can be verified and re-verified

By checking equations

= = = =

=

=

=

=

=

Page 31: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

Bundeskanzlei BK

Sektion Politische Rechte

Ja : 2

Nein: 1

Tallied as recorded

Full chain can be verified and re-verified

By checking equations

= = = =

=

=

=

=

=

Page 32: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

32Trust in E-Voting

Political Rights Section

Ordinance of the FCh on E-Voting

Voters or obervers need to be able to detect

fraud, assuming that

• 1 out 4 trustees is behaving correctly

• Printing office does not leak codes

Page 33: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

33Trust in E-Voting

Political Rights Section

Ordinance of the FCh on E-Voting

• Crypto-Protocol

• Proof of compliance

• Audit of proof

• Certification

• Accredited by Swiss Accreditation Service

• Software EAL2 / EAL4

• ISO27001

• Source Code Publication

Page 34: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

34Trust in E-Voting

Political Rights Section

Public Intrusion Test

• Decision by Confederation and Cantons

• 1.Q 2019 enabled by Swiss Post

• Pre-Register: https://pit.post.ch/

Tell your friends!

Page 35: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

35Trust in E-Voting

Political Rights Section

Conclusion

• Verifiability as a foundation of trust

• Required by the FCh ordinance

• Assessed through certification

• Documented towards the public

Page 36: Trust in E-Voting - Federal Council€¦ · Trust in E-Voting 33 Political RightsSection Ordinance of the FCh on E-Voting • Crypto-Protocol • Proof of compliance • Audit of

36Trust in E-Voting

Political Rights Section

Contact:

Oliver Spycher

Dep. Project Leader Vote électronique

[email protected]

www.bk.admin.ch