On Privacy and Anonymity in Electronic and Non Electronic Voting: the Ballot-As-Signature Attack’. url: http://www.pps.jussieu.fr/~dicos mo/E-Vote

A wealth of protocols for electronic voting have been proposed in the literature over the past years. What makes these protocols diffi-cult to conceive and verify is one fundamental property, anonymity, which is of paramount importance in the real world, in particular when performing actual political elections. Historically, certain techniques have been used in actual elections to nullify anonymity and effectively coerce voters, by exploiting an evident weakness in many voting protocols; these techniques were used in traditional elections well before the notion of electronic vot-ing was even proposed, yet, they still seem to be little known: as a consequence, we find recent proposals of voting protocols that can easily be attacked this way, like [Riv06], or clever attempts at for-mal definitions of privacy and anonymity properties that would not rule out such flawed protocols, like [DKR06]. In this paper, we describe one old technique, effectively used in Italy over twenty years ago, and show how the flaws or incomplete-ness in current protocols and formalization can be clearly exposed just through that simple idea. We also show how this very same simple attack can be effectively used today on US-style elections, regardless of the presence of a VVPB or VVPT. We hope that a wide circulation of this simple ideas will help design better protocols and formalization in the near future