Oh yeah. It's an interesting problem for sure. But there are two requirements here: * That the voter not be able to prove to anyone else who they voted for (yo

Oh yeah. It's an interesting problem for sure. But there are two requirements here: * That the voter not be able to prove to anyone else who they voted for (your proposal addresses that). * That the voter be able to prove to their own satisfaction that their ballot was counted correctly (your proposal doesn't really address that - how do they know that their ballot was counted using the right label-to-choice mapping?). The secret sauce of punchscan is in the second requirement - with the choice of whether to keep the position-to-choice mapping or the actual position voted as a receipt, and making it so that the voter can verify their ballot was received and auditors can check for the correctness of the total count. I'd need more time to understand exactly how that part works, but it's a non-trivial algorithm, and super cool. [Side note - you can already prove that you voted - this is public information. When you vote your name is crossed off a list, and that list becomes part of the public record and is fed into e.g. political parties' voter files. The challenge is proving to your own satisfaction that your vote was counted as you intended.]