Goals of the system¶

Bold items are critical, italicized items are recommended but not absolutely necessary.

Correctness¶

• Each voter may only vote once.

Privacy / Anonymity¶

• A third party must not be able to determine how a given person voted.
• Voting machines and poll workers cannot have access to cleartext votes.

Verifiability¶

• Each voter must be able to verify that his/her vote was not tampered with at the polling place.
• Each voter must be able to verify that his/her vote was counted correctly.
• Each voter must be able to perform a recount of all votes in a given election.