VERIFIABLE, SECRET SHUFFLES OF ENCRYPTED DATA, SUCH AS ELGAMAL ENCRYPTEDDATA FOR SECURE MULTI-AUTHORITY ELECTIONS

摘要

A cryptographic process permits one to verifiably shuffle a series of inputdata elements. One or more authorities orindividuals "shuffle", or "anonymize" the input data (e.g. public keys indiscrete log form or ElGamal encrypted ballot data). Theprocess includes a validity construction that prevents any one or more of theauthorities or individuals from making any changes tothe original data without being discovered by anyone auditing a resultingproof transcipt. The shuffling may be performed at varioustimes. In the election example, the shuffling may be performed, e.g., afterballots are collected or during the registration, or ballotrequest phase of the election, thereby anonymizing the identities of thevoters.