> Codes can be simply be computed as HMAC(secret key, SIN + candidate) or something similar, the user and any attacker without the secret key just has a random

> Codes can be simply be computed as HMAC(secret key, SIN + candidate) or something similar, the user and any attacker without the secret key just has a random string of bits. In other words: The codes do identify who voted for what, which is contrary to your original claim. The attacker not having the secret key is an inacceptable requirement for voting systems, as the election is run by those in power, but has to be able to remove them from power. > You do realize votes are tallied by computer currently, right? No, where I live they don't. The consitutional court of Germany ruled that voting computers are illegal to use here for reasons of election transparency and integrity. > The sort of interface I'm talking about would actually lead to less exposure in many ways from a security standpoint. No, not as far as the relevant attack vectors are concerned. If you think of securing an election like securing a bank, you are completely off the track.