author | Christian Urban <christian dot urban at kcl dot ac dot uk> |
Tue, 30 Sep 2014 11:34:21 +0100 | |
changeset 188 | 2555552d2c05 |
parent 185 | f10d905e947f |
child 190 | 4ee6812ab436 |
permissions | -rw-r--r-- |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
1 |
\documentclass{article} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
2 |
\usepackage{../style} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
3 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
4 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
5 |
\begin{document} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
6 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
7 |
\section*{Handout 2 (E-Voting)} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
8 |
|
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
9 |
In security engineering, there are many counter-intuitive phenomena: |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
10 |
for example I am happy (more or less) to use online banking every day, |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
11 |
where if something goes wrong, I can potentially lose a lot of money, |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
12 |
but I am staunchly against using electronic voting (lets call it |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
13 |
e-voting for short). E-voting is an idea that is nowadays often |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
14 |
promoted in order to counter low turnouts in elections\footnote{In my |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
15 |
last local election where I was eligible to vote only 48\% of the |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
16 |
population have cast their ballot. I was, I shamefully admit, one of |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
17 |
the non-voters.} and generally sounds like a good idea. Right? |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
18 |
Voting from the comfort of your own home, or on your mobile on the go, |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
19 |
what could possibly go wrong? Even the UK's head of the Electoral |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
20 |
Commission, Jenny Watson, argued in 2014 in a Guardian article that |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
21 |
the UK should have e-voting. Her plausible argument is that 76\% of |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
22 |
pensioners in the UK vote (in a general election?), but only 44\% of |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
23 |
the under-25s. For which constituency politicians might therefore make |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
24 |
more favourable (short-term) decisions is clear. So being not yet |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
25 |
pensioner, I should be in favour of e-voting, no? |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
26 |
|
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
27 |
Well, it turns out there are many things that can go wrong with |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
28 |
e-voting, as I like to argue in this handout. E-voting in a ``secure |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
29 |
way'' seems to be one of the things in computer science that are still |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
30 |
very much unsolved. It is not on the scale of Turing's halting |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
31 |
problem, which is proved that it can never be solved in general, but |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
32 |
more in the category of being unsolvable with current technology. This |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
33 |
is not just my opinion, but also shared by many security researchers |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
34 |
amogst them Alex Halderman, who is the world-expert on this subject |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
35 |
and from whose course on Securing Digital Democracy I have most of my |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
36 |
information and inspiration. It is also a controversial topic in many |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
37 |
countries: |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
38 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
39 |
\begin{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
40 |
\item The Netherlands between 1997--2006 had electronic voting |
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
41 |
machines, but ``hacktivists'' had found they can be hacked to change |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
42 |
votes and also emitted radio signals revealing how you voted. |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
43 |
|
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
44 |
\item Germany conducted pilot studies with e-voting, but in 2007 a law |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
45 |
suit has reached the highest court and it rejected e-voting on the |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
46 |
grounds of not being understandable by the general public. |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
47 |
|
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
48 |
\item UK used optical scan voting systems in a few trail polls, but to |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
49 |
my knowledge does not use any e-voting in elections. |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
50 |
|
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
51 |
\item The US used mechanical machines since the 1930s, later punch |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
52 |
cards, now DREs and optical scan voting machines. |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
53 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
54 |
\item Estonia used since 2007 the Internet for national |
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
55 |
elections. There were earlier pilot studies for voting via Internet |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
56 |
in other countries. |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
57 |
|
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
58 |
\item India uses e-voting devices since at least 2003. They used |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
59 |
``keep-it-simple'' machines produced by a government owned company. |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
60 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
61 |
\item South Africa used software for its tallying in the 1993 |
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
62 |
elections (when Nelson Mandela was elected) and found that the |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
63 |
tallying software was rigged, but they were able to tally manually. |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
64 |
\end{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
65 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
66 |
|
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
67 |
The reason that e-voting is such a hard problem is that we have |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
68 |
requirements about the voting process that conflict with each |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
69 |
other. The five main requirements for voting in general are: |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
70 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
71 |
\begin{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
72 |
\item {\bf Integrity} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
73 |
\begin{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
74 |
\item The outcome of the vote matches with the voters' |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
75 |
intend. |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
76 |
\item There might be gigantic sums at stake and need to be defended against. |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
77 |
\end{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
78 |
\item {\bf Ballot Secrecy} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
79 |
\begin{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
80 |
\item Nobody can find out how you voted. |
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
81 |
\item (Stronger) Even if you try, you cannot prove how you |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
82 |
voted. The reason is that you want to avoid vote selling as has |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
83 |
been tried, for example, by a few jokers in the recent |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
84 |
Scottish referendum. |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
85 |
\end{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
86 |
\item {\bf Voter Authentication} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
87 |
\begin{itemize} |
185
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
88 |
\item Only authorised voters can vote up to the permitted number of votes |
f10d905e947f
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
157
diff
changeset
|
89 |
(in order to avoid the ``vote early, vote often''). |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
90 |
\end{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
91 |
\item {\bf Enfranchisement} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
92 |
\begin{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
93 |
\item Authorised voters should have the opportunity to vote. |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
94 |
\end{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
95 |
\item {\bf Availability} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
96 |
\begin{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
97 |
\item The voting system should accept all authorised votes and produce results in a timely manner. |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
98 |
\end{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
99 |
\end{itemize} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
100 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
101 |
To tackle the problem of e-voting, we must first have a look |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
102 |
into the history of voting and how paper-based ballots |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
103 |
evolved. We know for sure that elections were held in Athens |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
104 |
as early as 600 BC, but might even date to the time of |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
105 |
Mesopotamia and also in India some kind of ``republics'' might |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
106 |
have existed before the Alexander the Great invaded it. |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
107 |
Have a look at Wikipedia about the history of democracy for |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
108 |
more information. |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
109 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
110 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
111 |
|
188
2555552d2c05
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
185
diff
changeset
|
112 |
%\subsubsection*{Questions} |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
113 |
|
188
2555552d2c05
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
185
diff
changeset
|
114 |
%Coming back to the question of why I use online banking, but |
2555552d2c05
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
185
diff
changeset
|
115 |
%prefer not to e-vote. |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
116 |
|
188
2555552d2c05
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
185
diff
changeset
|
117 |
%Why do I use e-polling in lectures? |
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
118 |
|
188
2555552d2c05
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
185
diff
changeset
|
119 |
%Imagine you have a perfectly secure internet voting system, by |
2555552d2c05
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
185
diff
changeset
|
120 |
%which I mean nobody can tamper with or steal votes between |
2555552d2c05
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
185
diff
changeset
|
121 |
%your browser and the central server responsible for vote |
2555552d2c05
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
185
diff
changeset
|
122 |
%tallying. What can still go wrong with such a perfectly secure |
2555552d2c05
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
185
diff
changeset
|
123 |
%voting system, which is prevented in traditional elections |
2555552d2c05
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
185
diff
changeset
|
124 |
%with paper-based ballots? |
157
3a8fff66d62b
updated
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
156
diff
changeset
|
125 |
|
156
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
126 |
\end{document} |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
127 |
|
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
128 |
%%% Local Variables: |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
129 |
%%% mode: latex |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
130 |
%%% TeX-master: t |
3b831b9dc616
added some initial handouts
Christian Urban <christian dot urban at kcl dot ac dot uk>
parents:
diff
changeset
|
131 |
%%% End: |