Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 17 submissions in the queue.
posted by martyb on Saturday March 16 2019, @02:56AM   Printer-friendly

For years security professionals and election integrity activists have been pushing voting machine vendors to build more secure and verifiable election systems, so voters and candidates can be assured election outcomes haven’t been manipulated.

Now they might finally get this thanks to a new $10 million contract the Defense Department’s Defense Advanced Research Projects Agency (DARPA) has launched to design and build a secure voting system that it hopes will be impervious to hacking.

The first-of-its-kind system will be designed by an Oregon-based firm called Galois, a longtime government contractor with experience in designing secure and verifiable systems. The system will use fully open source voting software, instead of the closed, proprietary software currently used in the vast majority of voting machines, which no one outside of voting machine testing labs can examine. More importantly, it will be built on secure open source hardware, made from special secure designs and techniques developed over the last year as part of a special program at DARPA. The voting system will also be designed to create fully verifiable and transparent results so that voters don’t have to blindly trust that the machines and election officials delivered correct results.

The systems Galois designs won’t be available for sale. But the prototypes it creates will be available for existing voting machine vendors or others to freely adopt and customize without costly licensing fees or the millions of dollars it would take to research and develop a secure system from scratch.

“We will not have a voting system that we can deploy. That’s not what we do,” said Salmon. “We will show a methodology that could be used by others to build a voting system that is completely secure.”

Kiniy said Galois will design two basic voting machine types. The first will be a ballot-marking device that uses a touch-screen for voters to make their selections. That system won’t tabulate votes. Instead it will print out a paper ballot marked with the voter’s choices, so voters can review them before depositing them into an optical-scan machine that tabulates the votes. Galois will bring this system to Def Con this year.

The optical-scan system will print a receipt with a cryptographic representation of the voter’s choices. After the election, the cryptographic values for all ballots will be published on a web site, where voters can verify that their ballot and votes are among them.

“That receipt does not permit you to prove anything about how you voted, but does permit you to prove that the system accurately captured your intent and your vote is in the final tally,” Kiniry said.

https://motherboard.vice.com/en_us/article/yw84q7/darpa-is-building-a-dollar10-million-open-source-secure-voting-system


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 3, Insightful) by jmorris on Saturday March 16 2019, @03:14PM

    by jmorris (4844) on Saturday March 16 2019, @03:14PM (#815474)

    I saw the headline and was ready to repeat my long stated objection to machines involved with voting. But this one looks like they have at least addressed the major issues. The only jobs the voter facing machine is doing is presenting the choices with a better UI and adding the cryptographic receipt. You can still clearly see your selections on the printed ballot and they could be hand recounted. The receipt acts to prevent discarding of votes, which is one big factor in vote fraud by corrupt officials. The other machine is just an optical counter built around open hardware and software to make it easier to audit for correctness. Still problematic in that no actual voter can perform an audit without risking compromise of the machine, a catch22.

    So a step forward, but I'd still feel safer with elections run like the ones the U.S. Army ran in Iraq. Even without the crypto.

    Settle voter registration well ahead of time, issue good solid photo ID. All voting in person on election day, no exceptions. Poll watchers from all parties permitted to witness from begin to end. Begin with a clear plastic tub on an unadorned table with a slit cut in the lid. Voters are checked against the registration lists, mark a paper ballot and dip their finger in the infamous purple ink as they drop the ballot into the box. When the polling station closes the box is opened on the spot and counted before the witnesses. The count is called in to the central authority and unalterable from that point. The election is done, everyone goes home.

    Starting Score:    1  point
    Moderation   +1  
       Insightful=1, Total=1
    Extra 'Insightful' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   3