There are several conflicting requirements. Generally we want only those eligible to cast one vote each and yet the votes must be secret, anonymous and repudia

There are several conflicting requirements. Generally we want only those eligible to cast one vote each and yet the votes must be secret, anonymous and repudiable. But we also want the counting to be auditable by the public and traceable by the individual voter.