Cryptographic Methods for Storing Ballots on a Voting Machine

A direct recording electronic (DRE) voting machine must satisfy several requirements to ensure voter privacy and th e integrity of the election. A recent proposal for a vote stor- age system due to Molnar et al. provides tamper-evidence properties while maintaining voter privacy by storing bal- lots on a programmable, read-only memory (PROM). We achieve the same properties and protect against additional threats of memory replacement through cryptographic tech- niques, without the use of special hardware. Our approach is based on a new cryptographic primitive called History- Hiding Append-Only Signatures.