gistfile1.txt

Voter casts:

b = (g^r, m*h^r)

pc_1 = g^c1*h^r_c1

EA computes:

pc_2 = g^c2*h^r_c2

Voter, EA post

(b, E(pc_1), E(pc_2))

In person:

Voter reveals:

c_1, r_c1

EA reveals to voter:

c_2, r_c2

Voter submits

c_1 + c_2, r_c1 + r_c2

eg in paper.

Tally:

	pc = E(pc_1) * E(pc_2)

	Shuffle in parallel b, pc

	(b, pc)
	
	Discard b where Dec(pc) = g^(c_1 + c_2) * h^(r_c1 + r_c2)