Online voting not ready for prime time
Horizon: So hacking could have a bigger impact by swinging an election. But can’t we make sure everyone’s vote corresponds to what they intended?
Kremer: Potentially, yes, but here we run into the final major problem. On the one hand you want to preserve voting integrity – that votes correspond to voter intentions – while on the other hand you want to preserve privacy. But these are actually opposite properties: the first suggests you need transparency to ensure that the vote is correct, while the second says you need to hide how everyone voted. Combining both properties is very complicated.
Horizon: How far along are we to solve these issues?
Kremer: We know relatively well now how to verify elections conducted online, in the sense that a voter can check his or her vote has been correctly registered, and the system can provide proof that the votes have been correctly deciphered. We know how to enforce this through cryptography; the techniques are ready.
‘Where these techniques fall short is their reliance on people’s computers encrypting votes correctly. It has been demonstrated that if there is dedicated malware living on your computer, it can switch your vote, so that if you click on candidate A, the computer encrypts a vote for candidate B instead, without your knowledge. There are ways around this problem – for example, adding a second device such as a smartphone to double-check security – but these complicate the voting process, and potentially add other vulnerabilities.
‘The current techniques are also unable to protect against coercion – the possibility that voters are influenced to vote in a certain way. If an election needs to take place (somewhere) where vote buying is a real problem, I believe the problems are currently too difficult to bring online voting to market, and any potential solutions will be too complex to explain to people.
Horizon: But hasn’t Estonia already implemented online voting for national elections?
Kremer: Estonia has, and it is a very tech-oriented country – it’s often jokingly referred to as e-stonia for this reason. Its citizens have identity cards with electronic chips, which go some way to reducing the risk of voter coercion, as people are unlikely to hand over (something so personal) as their identify card. Of course, there’s nothing to stop someone coming round to your house and forcing you to vote a certain way, but that type of coercion is hard to scale up.
Horizon: Do you think it’s worth the risk at the moment?
Kremer: Currently, I believe that online voting is not ready for any high-stakes elections (such as national elections). On the other hand, there are many elections that are not high stakes. Last December in France, for example, we had all our professional elections, where we voted for union representatives and so on. The stakes for that sort of election are not especially high, in the sense that there is not a high risk of coercion, so e-voting could be a viable alternative.
This interview is published courtesy of Horizon, the EU research and innovation magazine