FHE Encryption Privacy & Security
Overview
This architecture addresses critical problems in blockchain voting systems, building upon Jovan's (@ArtChicken4/@JovanHPulitzer) work on blockchain voting. The solution uses Fully Homomorphic Encryption (FHE) to ensure voter privacy while maintaining accountability and preventing fraud.
The Problem
-
Illegitimate ballots: Currently, illegitimate ballots get cast and voted. For example, 30,000 ballots under the name of undocumented people can go to a single address.
-
Unmapped ballots: A pallet of ballots can leave the printer without being mapped to valid citizens, ending up in "mail in voting."
The Solution: FHE with Accountability Blocks
-
Fully Homomorphic Encryption (FHE): FHE is an advanced branch of encryption that is very powerful. It can often pair up with Zero Knowledge Proof (ZKP).
-
Architecture: The fix uses a three-part system:
- VOTING ROLLS (group of 1,000 voters)
- "Accountability Block" of 1,000 voters
- Ballots cast (on blockchain)
-
How it works: People on the Voting Rolls are grouped into groupings of 1,000 (or 5k or 10k). When they vote, their ballot comes back in. It is tied back to the "Accountability Block." But with FHE you can't tell which voter.
-
Trusted votes: The lawful part of voting office workers will send ballots to legitimate voters. Those "Accountability Block" show real voters. You trust those votes.
Fraud Prevention
-
Preventing unmapped ballots: A bad actor has access to the ballot printer. They get a pallet of 30,000 ballots. They send them off. They won't be accepted when received because they don't link to an "Accountability Block" of valid eligible voters.
-
Second bad actor scenario: If the bad actor links them to an accountability block of undocumented people, then they can be rejected. Or the voting office employee that does it, then that person can be held criminally accountable, because their name is tied to sending out the ballots and tying them to an "Accountability Block" of undocumented people. When ballots come back, they will be auto-rejected unless tied to an accountability block, that was created by a real voting office employee vouching for no-fraud (when they sent out ballots). And it will only be valid if the Voter Verification services made sure those mapped voters are really eligible.
-
Voter verification services: We can have several services that are paid to go over Voting rolls. Each service verifies that the voters are valid:
- No criminal record
- Have citizenship
- Age 18+
- Live in that district
Scrubbing the voter rolls each month going into an election.
Privacy with Accountability
- FHE enables anonymous voting: FHE makes the voter's vote anonymous. But allows policing this. The architecture maintains: VOTING ROLLS (group of 1,000 voters) ? "Accountability Block" of 1,000 voters ? Ballots cast (on blockchain)
Research & References
- Research papers: The following research papers by Microsoft Research and Princeton best match the FHE encryption math that would be used:
- Microsoft Research - Homomorphic Encryption
- Microsoft - What is Homomorphic Encryption and How Can It Help in Elections?
- Microsoft Research Podcast - Securing the Vote with Dr. Josh Benaloh
- IACR Paper 2024
- IACR Paper 2024 - Additional Research
- Microsoft Research - Manual on Homomorphic Encryption