/evoting

A remote electronic voting protocol implementation on Ethereum using ECC blind signatures

Primary LanguageJavaScriptGNU General Public License v3.0GPL-3.0

A blind-signature-based e-voting platform on Ethereum

Note: this is a proof-of-concept implementation of this paper. You can find the accompanying Medium article here.

Motivation

Previously proposed voting protocols for Ethereum were neither efficient nor provided secret ballots. If you look at the official Ethereum website it suggests voting as one of the potential areas where (public) blockchains might successfully be applied. They also propose a toy example here. However it is not able to provide secret ballots, meaning that anyone is able to see how others voted. This is clearly unwanted in most applications.

A more elaborated protocol is the Open Vote Network protocol (OVN) created by Feng Hao et al. and implemented by Patrick McCorry here. It is able to provide secret ballots, however it is not gas-efficient, meaning that the cost of casting a ballot is linearly increases with the number of participants. Unfortunately this property limits the number of participants in a single election to cca. 20-30 voters.

To fix these issues, János Gulácsy and me decided to implement a blind-signature-based e-voting protocol for Ethereum. This provides secret-ballots, while casting a ballot remains at a constant gas cost (~200k gas (unoptimized)).

Reminder

This is only a Proof-of-concept work. Eventhough we did our best, most likely it contains critical bugs.

Moreover just like any other blockchain-based e-voting scheme, this scheme is also coercion-irresistance. An attacker could easily bribe voters to vote for a specific candidate. Even worse voters can trustlessly prove this to the attacker to collect their financial reward. For more details, please check this amazing blogpost out by Phil Daian.

Therefore only use this code to non-mission-critical elections.

Contributing and contact

PRs, issues are welcome. You can reach me out on Twitter or ethresear.ch.