Boardroom Voting Verifier

• Voting Verifier is a protocol ensuring votes are cast as intended using physical methods like invisible-ink stamps and transparent ballot boxes.
• It implements physical analogues to cryptographic primitives such as commitment, randomization, and secret sharing to safeguard vote integrity.
• Designed for boardroom settings, the system employs public verification and margin-triggered annulments to mitigate tampering and uphold receipt-freeness.

A Voting Verifier is a protocol, process, or mechanism—algorithmic, procedural, or physical—designed to provide voters and independent auditors with assurance that votes were cast as intended, collected as cast, and counted as collected, all while concurrently upholding privacy and receipt-freeness within a verifiable election system. In boardroom voting contexts, as described by Blanchard, Selker, and Sherman, the Voting Verifier is implemented via low-tech cryptography: paper, invisible-ink stamps, randomization, and public procedures that collectively enable end-to-end individual and universal verifiability without reliance on digital systems (Blanchard et al., 2020).

1. End-to-End Verifiability Principles in Boardroom Contexts

Boardroom voting protocols instantiate formal end-to-end verifiability concepts using wholly physical means. The three canonical verifiability properties—cast-as-intended, collected-as-cast, and counted-as-collected—map directly onto human-observable operations:

• Cast-as-intended: Each voter marks the ballot in secret, using a foldable ballot and a privately drawn invisible-ink stamp ("visual secret"), ensuring the possibility of personal confirmation that the intended mark was made and placed as desired.
• Collected-as-cast: All ballots are deposited into a transparent ballot box placed on a visible scale. Public observation of ballot insertion and scale increments ensure that no ballot is added or removed surreptitiously.
• Counted-as-collected: Post-voting, the election authority unfolds and develops all ballots in public view. Each voter can visually confirm the presence of their unique, invisible-ink stamp on the revealed ballots, enabling verification that their ballot has been included in the tally (Blanchard et al., 2020).

This approach replaces cryptographic proofs with physical procedures, providing observable and testable assurance at each step.

2. Step-by-Step Protocol Structure

The standard protocol (labeled BVP1) proceeds as follows:

• Setup:

1. The election authority prepares at least as many foldable ballots and identical, invisible-ink stamps as voters.
2. Stamps are placed in a bag; each voter draws one at random to ensure unpredictable, unique visual secrets.
3. The transparent ballot box is placed on a scale to facilitate real-time detection of ballot additions.

• Ballot Marking and Casting:

a. Voters privately unfold their ballot to see k labeled candidate edges, then fold to obscure label orientation under a cloth. b. The unique stamp is applied to the voting zone corresponding to the chosen candidate. c. Ballots are cast in public view, with all observers noting the increase in both ballot count and box weight.

• Counting and Verification:

i. After voting, all ballots are displayed, unfolded, and chemically developed to reveal visual secrets. ii. The EA publicly counts votes per candidate. iii. Each voter scans for their unique secret on the ballots—confirmation of presence equals confirmation of inclusion. iv. Objections are managed through a collective mechanism: if the number of objecting voters reaches at least half the margin of victory, the election is annulled.

These steps are designed to be observable, auditable, and robust against undetected tampering or exclusion.

3. Physical Analogues to Cryptographic Primitives

The protocol implements physical counterparts to core cryptographic constructs:

• Commitment: The folding or taping of ballot edges constitutes a binding, hiding commitment of candidate labels.
• Randomization: Assigning stamps via random draws from an indistinguishable set ensures non-repeatability and uniqueness, analogous to generation of cryptographic randomness.
• Shuffle Proof: The physical mixture of ballots in the transparent box, visible to all, publicly certifies the shuffling process.
• Secret Sharing: The unique visual secret (stamp pattern) is known only to the owner and the physical developer, similar in function to a one-time pad.

These analogues provide functional security properties without digital computation or reliance on cryptographic hardware.

4. Threat Model and Security Assumptions

The security model encompasses a physically controlled boardroom environment:

• Adversary: Any voter or authority member may attempt to breach privacy or election integrity via observation, manipulation, or collusion.
• Assumptions: No cameras or electronics are allowed in the voting area; the visual secret (invisible ink) is unobservable without developer; no meaningful data can be transmitted covertly post-marking; public counting and physical observability are enforced (Blanchard et al., 2020).

The model addresses both insider and outsider threats, trading on physical constraints rather than advanced cryptographic hardness assumptions.

5. Privacy, Integrity, and Receipt-Freeness Properties

Privacy is secured through: (a) private marking of ballots under a cloth; (b) unpredictability and inexpressibility of visual secrets; (c) indistinguishable ballots until development, precluding linkage of voter to vote by any observer.

Integrity is enforced by: (a) public observation of ballot casting; (b) transparent box and real-time scale feedback; (c) public counting of ballots and independent verification by voters through their visual secrets.

Receipt-freeness is achieved since no observer, including the voter herself post-development, can provide a proof linking her secret to her choice. After ballots are developed, the voter can claim any ballot with her secret as hers, preventing coercive proof-of-vote.

6. Usability, Performance, and Human Factors

The system is designed for small to moderate n (up to 40):

• Usability: Familiar materials (folded paper, stamps) and direct, observable procedures mitigate need for training and support accessibility for most users.
• Performance: Ballot marking, casting, and counting require only a few minutes per step; entire boardroom elections can be conducted efficiently without technological infrastructure.
• Low-Tech Substitutes: Each cryptographic element finds a direct, often simpler, physical substitute, enabling easy adaptation and audit by participants with no technical expertise (Blanchard et al., 2020).

7. Protocol Soundness and Limitations

Intuitive soundness draws from two features. First, privacy arises from the inability of any observer to link a visual secret to a specific candidate choice. Second, integrity is enforced through public observability at all protocol stages. The margin-triggered annulment rule ensures that any credible complaint threshold can force a rerun in the event of detected anomalies.

Limitations include potential for covert communication between conspirators within the physical environment, the possibility of forced memorization of visual secrets under duress (not specifically countered), and reduced applicability for large-n settings or when higher-level physical protection or error correction is required.

Overall, the Voting Verifier in the boardroom context leverages constrained physical processes to instantiate strong verifiability and privacy properties, offering a practical, auditable, and transparent mechanism under low-tech constraints for small-group decision-making scenarios (Blanchard et al., 2020).