Abstract:
Voting systems have strict security and privacy requirements, which are different from those in many other domains. They must not expose information that connects voters and their votes; moreover, to prevent voter coercion, individual voters must not themselves be able to expose information that proves how they voted. These requirements are fundamentally in tension with exposing enough information to determine that the counted votes match the cast votes, and are difficult to fulfill even in purely physical voting systems.
