1.0 Specification

[keithrfung]

Updates from previous version

• The large prime p and corresponding cofactor r were changed to correctly match the result of the process for the derivation of the prime.
• The equations for generating proofs of ballot correctness have been optimized.
• Auxiliary keys have been eliminated in favor of using the existing keys for both ordinary and exponential ElGamal encryption.
• A more flexible structure of ballot chaining has been introduced to allow for non-linear chaining or no chaining at all.
• Smaller parameters suitable for testing are included.
• The election record of this version should match that of the prior v0.95 and therefore require no verifier changes (with the exception of using the corrected prime).

---

This discussion was created from the release 1.0 Specification.