Security · Board brief
Security summary for boards
A short, honest overview you can print or export to PDF (browser: Print → Save as PDF). Full detail: security model.
publicvoting.org · Security brief · publicvoting-modeb-v1
Institutional voting with inspectable integrity
PublicVoting is open-source software for timed deliberation and verifiable voting. Built by CPT Software; commissioned by publicgovernent.org. License: Apache-2.0 (software). Hosted service terms are separate.
What the board should know
- Votes are cast only from member devices — not from the officer portal.
- Officers cannot assign privileged roles to themselves.
- Choices are sealed (Mode B) until after the vote window; members hold a tracker to check inclusion without publishing how they voted.
- Public artefacts use an append-only hash chain (not a general-purpose public blockchain marketing claim).
- Eligible voters are committed at vote open (roll commitment) so the electorate cannot be silently expanded mid-window.
Controls (summary)
| Control | Intent |
|---|---|
| Device signatures (Ed25519) | Authenticate who cast |
| Ballot seal (X25519 + AES-GCM) | Protect what was chosen until open |
| Tallier threshold (default 2-of-3) | No single operator holds full decrypt power |
| Dual-control membership (packable) | Solo admin cannot quietly invent a voting army |
| System fingerprint | Members reject look-alike phishing systems |
| Officer TOTP (packable) | Hardens portal credentials |
What we do not claim
- Perfect coercion resistance (Mode C later)
- Immunity to malware on a member’s phone
- Prevention of colluding dual admins who both invent members (we make it visible and dual-controlled)
- Automatic legal certification for statutory national elections
Board responsibilities
- Appoint at least two trusted officers for production packs that require dual control
- Custodianship of tallier shares by distinct people
- Publish the system fingerprint to members
- Own the political and legal process; software provides technical integrity controls
Further reading
Full model: https://publicvoting.org/security/
Architecture: https://publicvoting.org/architecture/
Protocol & vectors: https://github.com/PublicVoting/publicvoting-protocol
Security contact: security@publicvoting.org
Document generated for board circulation. Product evolves; re-download before high-stakes use.