风险限制计数
Risk-Limiting Tallies
摘要：
已经提出了许多选民可验证的，抗干扰的方案，但即使是最精心设计的系统也必然会通过宣布的结果泄露信息。在极端情况下，这可能是有问题的。例如，如果所有的选票都投给了一个候选人，那么所有的投票隐私都消失了。仅仅是候选人可能得不到选票或很少的选票，就可能在实践中对安全产生影响：如果胁迫者要求选民投票给这样一个不受欢迎的候选人，那么选民可能会感到有义务服从，即使她相信投票系统满足标准的胁迫抵抗定义。对于复杂的选票，也可能存在“意大利式”（又名“签名”）攻击的危险：胁迫者要求选民用特定的识别模式投票。在这里，我们提出了一种方法来计算端到端的可验证方案，避免透露所有的选票，但仍然达到任何信心水平，在宣布的结果是理想的。现在，一个被胁迫的选民可以声称，所需的投票必须在那些仍然笼罩。我们的方法是建立在风险限制审计的基础上的，但这里应用于理货而不是审计。我们表明，这种方法可以对抗极端吻合和“意大利”攻击所产生的胁迫威胁。我们说明了我们的方法，将其应用到Selene方案，我们扩展的方法，风险限制验证，而不是所有的投票跟踪器显示，从而提高胁迫缓解性质的Selene。
英文摘要：
Many voter-verifiable, coercion-resistant schemes have been proposed, but even the most carefully designed systems necessarily leak information via the announced result. In corner cases, this may be problematic. For example, if all the votes go to one candidate then all vote privacy evaporates. The mere possibility of candidates getting no or few votes could have implications for security in practice: if a coercer demands that a voter cast a vote for such an unpopular candidate, then the voter may feel obliged to obey, even if she is confident that the voting system satisfies the standard coercion resistance definitions. With complex ballots, there may also be a danger of "Italian" style (aka "signature") attacks: the coercer demands the voter cast a ballot with a specific, identifying pattern. Here we propose an approach to tallying end-to-end verifiable schemes that avoids revealing all the votes but still achieves whatever confidence level in the announced result is desired. Now a coerced voter can claim that the required vote must be amongst those that remained shrouded. Our approach is based on the well-established notion of Risk-Limiting Audits, but here applied to the tally rather than to the audit. We show that this approach counters coercion threats arising in extreme tallies and "Italian" attacks. We illustrate our approach by applying it to the Selene scheme, and we extend the approach to Risk-Limiting Verification, where not all vote trackers are revealed, thereby enhancing the coercion mitigation properties of Selene.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
