1.0 Specification
Updates from previous version
- The large prime
p
and corresponding cofactorr
were changed to correctly match the result of the process for the derivation of the prime. - The equations for generating proofs of ballot correctness have been optimized.
- Auxiliary keys have been eliminated in favor of using the existing keys for both ordinary and exponential ElGamal encryption.
- A more flexible structure of ballot chaining has been introduced to allow for non-linear chaining or no chaining at all.
- Smaller parameters suitable for testing are included.
- The election record of this version should match that of the prior v0.95 and therefore require no verifier changes (with the exception of using the corrected prime).