Cryptographic Security Architecture

E2E-V guarantees that: (1) Cast-as-Intended: Your ballot accurately reflects your chosen candidates; (2) Recorded-as-Cast: Your ballot is permanently captured without modification; and (3) Tallied-as-Recorded: All recorded ballots are accurately counted in the final certified outcome without exclusion or substitution.

The platform utilizes 2048-bit Paillier cryptosystems. The homomorphic property ensures that multiplying two ciphertexts produces an encryption of the sum of the plaintexts:

This allows all cast votes to be aggregated into a total tally while remaining 100% encrypted, entirely eliminating the risk of intermediate leaks.

To prevent ballot-stuffing or invalid selection injection, the voter's browser compiles a Groth16 Zero-Knowledge proof. The proof verifies that the ballot adheres to election quotas (e.g. exactly 3 candidates chosen from the authorized list) without revealing the selections themselves.

The private decryption key does not exist on any single server. It is partitioned across n = 5 designated institutional custodians with a threshold of k = 3. Only when 3 trustees inject their cryptographic shards can polynomial Lagrange interpolation reconstruct the key to unseal the final homomorphic sum.