- You see the number of records aggregated, it should not exceed the amount of voters - You can somehow identify your own vote and thus verify it was properly

- You see the number of records aggregated, it should not exceed the amount of voters - You can somehow identify your own vote and thus verify it was properly counted - Everyone else can do the same, thus fraudsters would have to find a protocol weakness to add additional votes One attack vector might be whatever you use to identify your vote. Aka find a way to make two people think the same record is their own vote, then use the other yourself. This seems like a tricky problem, since everyone shouldn't just be able to see their own vote was included but also not not be able to show others how you voted. The article seems to indicate they solved this somehow, but I'm not familiar enough with the details / homomorphic encryption to understand that or even just trust that specific kind of encryption.