Voting.Protocol.Election

Type Encryption

data Encryption c

ElGamal-like encryption. Its security relies on the Discrete Logarithm problem.

Because (groupGen ^encNonce ^secKey == groupGen ^secKey ^encNonce), knowing secKey, one can divide encryption_vault by (encryption_nonce ^secKey) to decipher (groupGen ^clear), then the clear text must be small to be decryptable, because it is encrypted as a power of groupGen (hence the "-like" in "ElGamal-like") to enable the additive homomorphism.

NOTE: Since (encryption_vault * encryption_nonce == encryption_nonce ^ (secKey + clear)), then: (logBase encryption_nonce (encryption_vault * encryption_nonce) == secKey + clear).

Constructors

Encryption

Fields

• encryption_nonce :: !(G c)

  Public part of the randomness encNonce used to encrypt the clear text, equal to (groupGen ^encNonce)

• encryption_vault :: !(G c)

  Encrypted clear text, equal to (pubKey ^encNone * groupGen ^clear)

Instances

Eq (Encryption c)

Defined in Voting.Protocol.Election

Methods

(==) :: Encryption c -> Encryption c -> Bool

(/=) :: Encryption c -> Encryption c -> Bool

Show (Encryption c)

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> Encryption c -> ShowS

show :: Encryption c -> String

showList :: [Encryption c] -> ShowS

Generic (Encryption c)

Defined in Voting.Protocol.Election

Associated Types

type Rep (Encryption c) :: Type -> Type

Methods

from :: Encryption c -> Rep (Encryption c) x

to :: Rep (Encryption c) x -> Encryption c

Reifies c FFC => ToJSON (Encryption c)

Defined in Voting.Protocol.Election

Methods

toJSON :: Encryption c -> Value

toEncoding :: Encryption c -> Encoding

toJSONList :: [Encryption c] -> Value

toEncodingList :: [Encryption c] -> Encoding

Reifies c FFC => FromJSON (Encryption c)

Defined in Voting.Protocol.Election

Methods

parseJSON :: Value -> Parser (Encryption c)

parseJSONList :: Value -> Parser [Encryption c]

NFData (Encryption c)

Defined in Voting.Protocol.Election

Methods

rnf :: Encryption c -> ()

Reifies c FFC => Additive (Encryption c)

Additive homomorphism. Using the fact that: groupGen ^x * groupGen ^y == groupGen ^(x+y).

Defined in Voting.Protocol.Election

Methods

zero :: Encryption c

(+) :: Encryption c -> Encryption c -> Encryption c

sum :: Foldable f => f (Encryption c) -> Encryption c

type Rep (Encryption c)

Defined in Voting.Protocol.Election

type Rep (Encryption c) = D1 (MetaData "Encryption" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" False) (C1 (MetaCons "Encryption" PrefixI True) (S1 (MetaSel (Just "encryption_nonce") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (G c)) :*: S1 (MetaSel (Just "encryption_vault") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (G c))))

Type EncryptionNonce

type EncryptionNonce = E

encrypt :: Reifies c FFC => Monad m => RandomGen r => PublicKey c -> E c -> StateT r m (EncryptionNonce c, Encryption c)

(encrypt pubKey clear) returns an ElGamal-like Encryption.

WARNING: the secret encryption nonce (encNonce) is returned alongside the Encryption in order to prove the validity of the encrypted clear text in proveEncryption, but this secret encNonce MUST be forgotten after that, as it may be used to decipher the Encryption without the SecretKey associated with pubKey.

Type Proof

data Proof c

Non-Interactive Zero-Knowledge Proof of knowledge of a discrete logarithm: (secret == logBase base (base^secret)).

Constructors

Proof

Fields

• proof_challenge :: Challenge c

  Challenge sent by the verifier to the prover to ensure that the prover really has knowledge of the secret and is not replaying. Actually, proof_challenge is not sent to the prover, but derived from the prover's Commitments and statements with a collision resistant hash. Hence the prover cannot chose the proof_challenge to his/her liking.

• proof_response :: E c

  A discrete logarithm sent by the prover to the verifier, as a response to proof_challenge.

  If the verifier observes that (proof_challenge == hash statement [commitment]), where:

  • statement is a serialization of a tag, base and basePowSec,
  • commitment == commit proof base basePowSec == base ^ proof_response * basePowSec ^ proof_challenge,
  • and basePowSec == base^sec,

  then, with overwhelming probability (due to the hash function), the prover was not able to choose proof_challenge yet was able to compute a proof_response such that (commitment == base ^ proof_response * basePowSec ^ proof_challenge), that is to say: (proof_response == logBase base commitment - sec * proof_challenge), therefore the prover knows sec.

  The prover choses commitment to be a random power of base, to ensure that each prove does not reveal any information about its secret.

Instances

Eq (Proof c)

Defined in Voting.Protocol.Election

Methods

(==) :: Proof c -> Proof c -> Bool

(/=) :: Proof c -> Proof c -> Bool

Show (Proof c)

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> Proof c -> ShowS

show :: Proof c -> String

showList :: [Proof c] -> ShowS

Generic (Proof c)

Defined in Voting.Protocol.Election

Associated Types

type Rep (Proof c) :: Type -> Type

Methods

from :: Proof c -> Rep (Proof c) x

to :: Rep (Proof c) x -> Proof c

ToJSON (Proof c)

Defined in Voting.Protocol.Election

Methods

toJSON :: Proof c -> Value

toEncoding :: Proof c -> Encoding

toJSONList :: [Proof c] -> Value

toEncodingList :: [Proof c] -> Encoding

Reifies c FFC => FromJSON (Proof c)

Defined in Voting.Protocol.Election

Methods

parseJSON :: Value -> Parser (Proof c)

parseJSONList :: Value -> Parser [Proof c]

NFData (Proof c)

Defined in Voting.Protocol.Election

Methods

rnf :: Proof c -> ()

type Rep (Proof c)

Defined in Voting.Protocol.Election

type Rep (Proof c) = D1 (MetaData "Proof" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" False) (C1 (MetaCons "Proof" PrefixI True) (S1 (MetaSel (Just "proof_challenge") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 (Challenge c)) :*: S1 (MetaSel (Just "proof_response") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 (E c))))

Type ZKP

newtype ZKP

Zero-knowledge proof.

A protocol is zero-knowledge if the verifier learns nothing from the protocol except that the prover knows the secret.

DOC: Mihir Bellare and Phillip Rogaway. Random oracles are practical: A paradigm for designing efficient protocols. In ACM-CCS’93, 1993.

Constructors

ZKP ByteString

Type Challenge

type Challenge = E

Type Oracle

type Oracle list c = list (Commitment c) -> Challenge c

prove :: Reifies c FFC => Monad m => RandomGen r => Functor list => E c -> list (G c) -> Oracle list c -> StateT r m (Proof c)

(prove sec commitmentBases oracle) returns a Proof that sec is known (by proving the knowledge of its discrete logarithm).

The Oracle is given Commitments equal to the commitmentBases raised to the power of the secret nonce of the Proof, as those are the Commitments that the verifier will obtain when composing the proof_challenge and proof_response together (with commit).

WARNING: for prove to be a so-called strong Fiat-Shamir transformation (not a weak): the statement must be included in the hash (along with the commitments).

NOTE: a random nonce is used to ensure each prove does not reveal any information regarding the secret sec, because two Proofs using the same Commitment can be used to deduce sec (using the special-soundness).

fakeProof :: Reifies c FFC => Monad m => RandomGen r => StateT r m (Proof c)

(fakeProof) returns a Proof whose proof_challenge and proof_response are uniformly chosen at random, instead of (proof_challenge == hash statement commitments) and (proof_response == nonce + sec * proof_challenge) as a Proof returned by prove.

Used in proveEncryption to fill the returned DisjProof with fake Proofs for all Disjunctions but the encrypted one.

Type Commitment

type Commitment = G

A commitment from the prover to the verifier. It's a power of groupGen chosen randomly by the prover when making a Proof with prove.

commit :: Reifies c FFC => Proof c -> G c -> G c -> Commitment c

(commit proof base basePowSec) returns a Commitment from the given Proof with the knowledge of the verifier.

Type Disjunction

type Disjunction = G

A Disjunction is an inversed (groupGen ^opinion) it's used in proveEncryption to generate a Proof that an encryption_vault contains a given (groupGen ^opinion),

booleanDisjunctions :: Reifies c FFC => [Disjunction c]

intervalDisjunctions :: Reifies c FFC => Natural -> Natural -> [Disjunction c]

Type Opinion

type Opinion = E

Index of a Disjunction within a list of them. It is encrypted as an Exponent by encrypt.

Type DisjProof

newtype DisjProof c

A list of Proofs to prove that the Opinion within an Encryption is indexing a Disjunction within a list of them, without revealing which Opinion it is.

Constructors

DisjProof [Proof c]

Instances

Eq (DisjProof c)

Defined in Voting.Protocol.Election

Methods

(==) :: DisjProof c -> DisjProof c -> Bool

(/=) :: DisjProof c -> DisjProof c -> Bool

Show (DisjProof c)

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> DisjProof c -> ShowS

show :: DisjProof c -> String

showList :: [DisjProof c] -> ShowS

Generic (DisjProof c)

Defined in Voting.Protocol.Election

Associated Types

type Rep (DisjProof c) :: Type -> Type

Methods

from :: DisjProof c -> Rep (DisjProof c) x

to :: Rep (DisjProof c) x -> DisjProof c

Reifies c FFC => ToJSON (DisjProof c)

Defined in Voting.Protocol.Election

Methods

toJSON :: DisjProof c -> Value

toEncoding :: DisjProof c -> Encoding

toJSONList :: [DisjProof c] -> Value

toEncodingList :: [DisjProof c] -> Encoding

Reifies c FFC => FromJSON (DisjProof c)

Defined in Voting.Protocol.Election

Methods

parseJSON :: Value -> Parser (DisjProof c)

parseJSONList :: Value -> Parser [DisjProof c]

NFData (DisjProof c)

Defined in Voting.Protocol.Election

Methods

rnf :: DisjProof c -> ()

type Rep (DisjProof c)

Defined in Voting.Protocol.Election

type Rep (DisjProof c) = D1 (MetaData "DisjProof" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" True) (C1 (MetaCons "DisjProof" PrefixI False) (S1 (MetaSel (Nothing :: Maybe Symbol) NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 [Proof c])))

proveEncryption :: Reifies c FFC => Monad m => RandomGen r => PublicKey c -> ZKP -> ([Disjunction c], [Disjunction c]) -> (EncryptionNonce c, Encryption c) -> StateT r m (DisjProof c)

(proveEncryption elecPubKey voterZKP (prevDisjs,nextDisjs) (encNonce,enc)) returns a DisjProof that enc encrypts the Disjunction d between prevDisjs and nextDisjs.

The prover proves that it knows an encNonce, such that: (enc == Encryption{encryption_nonce=groupGen ^encNonce, encryption_vault=elecPubKey^encNonce * groupGen^d})

A NIZK Disjunctive Chaum Pedersen Logarithm Equality is used.

DOC: Pierrick Gaudry. Some ZK security proofs for Belenios, 2017.

verifyEncryption :: Reifies c FFC => Monad m => PublicKey c -> ZKP -> [Disjunction c] -> (Encryption c, DisjProof c) -> ExceptT ErrorVerifyEncryption m Bool

Hashing

encryptionStatement :: Reifies c FFC => ZKP -> Encryption c -> ByteString

encryptionCommitments :: Reifies c FFC => PublicKey c -> Encryption c -> Disjunction c -> Proof c -> [G c]

(encryptionCommitments elecPubKey enc disj proof) returns the Commitments with only the knowledge of the verifier.

For the prover the Proof comes from fakeProof, and for the verifier the Proof comes from the prover.

Type ErrorVerifyEncryption

data ErrorVerifyEncryption

Error raised by verifyEncryption.

Constructors

ErrorVerifyEncryption_InvalidProofLength Natural Natural

When the number of proofs is different than the number of Disjunctions.

Instances

Eq ErrorVerifyEncryption

Defined in Voting.Protocol.Election

Methods

(==) :: ErrorVerifyEncryption -> ErrorVerifyEncryption -> Bool

(/=) :: ErrorVerifyEncryption -> ErrorVerifyEncryption -> Bool

Show ErrorVerifyEncryption

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> ErrorVerifyEncryption -> ShowS

show :: ErrorVerifyEncryption -> String

showList :: [ErrorVerifyEncryption] -> ShowS

Type Question

data Question

Constructors

Question

Fields

• question_text :: !Text
• question_choices :: ![Text]
• question_mini :: !Natural
• question_maxi :: !Natural

Instances

Eq Question

Defined in Voting.Protocol.Election

Methods

(==) :: Question -> Question -> Bool

(/=) :: Question -> Question -> Bool

Show Question

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> Question -> ShowS

show :: Question -> String

showList :: [Question] -> ShowS

Generic Question

Defined in Voting.Protocol.Election

Associated Types

type Rep Question :: Type -> Type

Methods

from :: Question -> Rep Question x

to :: Rep Question x -> Question

ToJSON Question

Defined in Voting.Protocol.Election

Methods

toJSON :: Question -> Value

toEncoding :: Question -> Encoding

toJSONList :: [Question] -> Value

toEncodingList :: [Question] -> Encoding

FromJSON Question

Defined in Voting.Protocol.Election

Methods

parseJSON :: Value -> Parser Question

parseJSONList :: Value -> Parser [Question]

NFData Question

Defined in Voting.Protocol.Election

Methods

rnf :: Question -> ()

type Rep Question

Defined in Voting.Protocol.Election

type Rep Question = D1 (MetaData "Question" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" False) (C1 (MetaCons "Question" PrefixI True) ((S1 (MetaSel (Just "question_text") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: S1 (MetaSel (Just "question_choices") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 [Text])) :*: (S1 (MetaSel (Just "question_mini") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Natural) :*: S1 (MetaSel (Just "question_maxi") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Natural))))

Type Answer

data Answer c

Constructors

Answer

Fields

• answer_opinions :: ![(Encryption c, DisjProof c)]

  Encrypted Opinion for each question_choices with a DisjProof that they belong to [0,1].

• answer_sumProof :: !(DisjProof c)

  Proofs that the sum of the Opinons encrypted in answer_opinions is an element of [mini..maxi]. , answer_blankProof ::

Instances

Eq (Answer c)

Defined in Voting.Protocol.Election

Methods

(==) :: Answer c -> Answer c -> Bool

(/=) :: Answer c -> Answer c -> Bool

Show (Answer c)

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> Answer c -> ShowS

show :: Answer c -> String

showList :: [Answer c] -> ShowS

Generic (Answer c)

Defined in Voting.Protocol.Election

Associated Types

type Rep (Answer c) :: Type -> Type

Methods

from :: Answer c -> Rep (Answer c) x

to :: Rep (Answer c) x -> Answer c

Reifies c FFC => ToJSON (Answer c)

Defined in Voting.Protocol.Election

Methods

toJSON :: Answer c -> Value

toEncoding :: Answer c -> Encoding

toJSONList :: [Answer c] -> Value

toEncodingList :: [Answer c] -> Encoding

Reifies c FFC => FromJSON (Answer c)

Defined in Voting.Protocol.Election

Methods

parseJSON :: Value -> Parser (Answer c)

parseJSONList :: Value -> Parser [Answer c]

NFData (Answer c)

Defined in Voting.Protocol.Election

Methods

rnf :: Answer c -> ()

type Rep (Answer c)

Defined in Voting.Protocol.Election

type Rep (Answer c) = D1 (MetaData "Answer" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" False) (C1 (MetaCons "Answer" PrefixI True) (S1 (MetaSel (Just "answer_opinions") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 [(Encryption c, DisjProof c)]) :*: S1 (MetaSel (Just "answer_sumProof") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (DisjProof c))))

encryptAnswer :: Reifies c FFC => Monad m => RandomGen r => PublicKey c -> ZKP -> Question -> [Bool] -> StateT r (ExceptT ErrorAnswer m) (Answer c)

(encryptAnswer elecPubKey zkp quest opinions) returns an Answer validable by verifyAnswer, unless an ErrorAnswer is returned.

verifyAnswer :: Reifies c FFC => PublicKey c -> ZKP -> Question -> Answer c -> Bool

Type ErrorAnswer

data ErrorAnswer

Error raised by encryptAnswer.

Constructors

ErrorAnswer_WrongNumberOfOpinions Natural Natural

When the number of opinions is different than the number of choices (question_choices).

ErrorAnswer_WrongSumOfOpinions Natural Natural Natural

When the sum of opinions is not within the bounds of question_mini and question_maxi.

Instances

Eq ErrorAnswer

Defined in Voting.Protocol.Election

Methods

(==) :: ErrorAnswer -> ErrorAnswer -> Bool

(/=) :: ErrorAnswer -> ErrorAnswer -> Bool

Show ErrorAnswer

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> ErrorAnswer -> ShowS

show :: ErrorAnswer -> String

showList :: [ErrorAnswer] -> ShowS

Generic ErrorAnswer

Defined in Voting.Protocol.Election

Associated Types

type Rep ErrorAnswer :: Type -> Type

Methods

from :: ErrorAnswer -> Rep ErrorAnswer x

to :: Rep ErrorAnswer x -> ErrorAnswer

NFData ErrorAnswer

Defined in Voting.Protocol.Election

Methods

rnf :: ErrorAnswer -> ()

type Rep ErrorAnswer

Defined in Voting.Protocol.Election

type Rep ErrorAnswer = D1 (MetaData "ErrorAnswer" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" False) (C1 (MetaCons "ErrorAnswer_WrongNumberOfOpinions" PrefixI False) (S1 (MetaSel (Nothing :: Maybe Symbol) NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 Natural) :*: S1 (MetaSel (Nothing :: Maybe Symbol) NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 Natural)) :+: C1 (MetaCons "ErrorAnswer_WrongSumOfOpinions" PrefixI False) (S1 (MetaSel (Nothing :: Maybe Symbol) NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 Natural) :*: (S1 (MetaSel (Nothing :: Maybe Symbol) NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 Natural) :*: S1 (MetaSel (Nothing :: Maybe Symbol) NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 Natural))))

Type Election

data Election c

Constructors

Election

Fields

• election_name :: !Text
• election_description :: !Text
• election_crypto :: !(ElectionCrypto c)
• election_questions :: ![Question]
• election_uuid :: !UUID
• election_hash :: !Hash

Instances

Eq (Election c)

Defined in Voting.Protocol.Election

Methods

(==) :: Election c -> Election c -> Bool

(/=) :: Election c -> Election c -> Bool

Show (Election c)

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> Election c -> ShowS

show :: Election c -> String

showList :: [Election c] -> ShowS

Generic (Election c)

Defined in Voting.Protocol.Election

Associated Types

type Rep (Election c) :: Type -> Type

Methods

from :: Election c -> Rep (Election c) x

to :: Rep (Election c) x -> Election c

ToJSON (Election c)

Defined in Voting.Protocol.Election

Methods

toJSON :: Election c -> Value

toEncoding :: Election c -> Encoding

toJSONList :: [Election c] -> Value

toEncodingList :: [Election c] -> Encoding

FromJSON (Election c)

Defined in Voting.Protocol.Election

Methods

parseJSON :: Value -> Parser (Election c)

parseJSONList :: Value -> Parser [Election c]

NFData (Election c)

Defined in Voting.Protocol.Election

Methods

rnf :: Election c -> ()

type Rep (Election c)

Defined in Voting.Protocol.Election

type Rep (Election c) = D1 (MetaData "Election" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" False) (C1 (MetaCons "Election" PrefixI True) ((S1 (MetaSel (Just "election_name") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: (S1 (MetaSel (Just "election_description") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Text) :*: S1 (MetaSel (Just "election_crypto") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (ElectionCrypto c)))) :*: (S1 (MetaSel (Just "election_questions") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 [Question]) :*: (S1 (MetaSel (Just "election_uuid") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 UUID) :*: S1 (MetaSel (Just "election_hash") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Hash)))))

Type ElectionCrypto

data ElectionCrypto c

Constructors

ElectionCrypto_FFC

Fields

• electionCrypto_FFC_params :: !FFC
• electionCrypto_FFC_PublicKey :: !(PublicKey c)

Instances

Eq (ElectionCrypto c)

Defined in Voting.Protocol.Election

Methods

(==) :: ElectionCrypto c -> ElectionCrypto c -> Bool

(/=) :: ElectionCrypto c -> ElectionCrypto c -> Bool

Show (ElectionCrypto c)

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> ElectionCrypto c -> ShowS

show :: ElectionCrypto c -> String

showList :: [ElectionCrypto c] -> ShowS

Generic (ElectionCrypto c)

Defined in Voting.Protocol.Election

Associated Types

type Rep (ElectionCrypto c) :: Type -> Type

Methods

from :: ElectionCrypto c -> Rep (ElectionCrypto c) x

to :: Rep (ElectionCrypto c) x -> ElectionCrypto c

ToJSON (ElectionCrypto c)

Defined in Voting.Protocol.Election

Methods

toJSON :: ElectionCrypto c -> Value

toEncoding :: ElectionCrypto c -> Encoding

toJSONList :: [ElectionCrypto c] -> Value

toEncodingList :: [ElectionCrypto c] -> Encoding

FromJSON (ElectionCrypto c)

Defined in Voting.Protocol.Election

Methods

parseJSON :: Value -> Parser (ElectionCrypto c)

parseJSONList :: Value -> Parser [ElectionCrypto c]

NFData (ElectionCrypto c)

Defined in Voting.Protocol.Election

Methods

rnf :: ElectionCrypto c -> ()

type Rep (ElectionCrypto c)

Defined in Voting.Protocol.Election

type Rep (ElectionCrypto c) = D1 (MetaData "ElectionCrypto" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" False) (C1 (MetaCons "ElectionCrypto_FFC" PrefixI True) (S1 (MetaSel (Just "electionCrypto_FFC_params") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 FFC) :*: S1 (MetaSel (Just "electionCrypto_FFC_PublicKey") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (PublicKey c))))

reifyElection :: Election () -> (forall c. Reifies c FFC => Election c -> k) -> k

Type Hash

newtype Hash

Constructors

Hash Text

Instances

Eq Hash

Defined in Voting.Protocol.Election

Methods

(==) :: Hash -> Hash -> Bool

(/=) :: Hash -> Hash -> Bool

Ord Hash

Defined in Voting.Protocol.Election

Methods

compare :: Hash -> Hash -> Ordering

(<) :: Hash -> Hash -> Bool

(<=) :: Hash -> Hash -> Bool

(>) :: Hash -> Hash -> Bool

(>=) :: Hash -> Hash -> Bool

max :: Hash -> Hash -> Hash

min :: Hash -> Hash -> Hash

Show Hash

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> Hash -> ShowS

show :: Hash -> String

showList :: [Hash] -> ShowS

Generic Hash

Defined in Voting.Protocol.Election

Associated Types

type Rep Hash :: Type -> Type

Methods

from :: Hash -> Rep Hash x

to :: Rep Hash x -> Hash

ToJSON Hash

Defined in Voting.Protocol.Election

Methods

toJSON :: Hash -> Value

toEncoding :: Hash -> Encoding

toJSONList :: [Hash] -> Value

toEncodingList :: [Hash] -> Encoding

FromJSON Hash

Defined in Voting.Protocol.Election

Methods

parseJSON :: Value -> Parser Hash

parseJSONList :: Value -> Parser [Hash]

NFData Hash

Defined in Voting.Protocol.Election

Methods

rnf :: Hash -> ()

type Rep Hash

Defined in Voting.Protocol.Election

type Rep Hash = D1 (MetaData "Hash" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" True) (C1 (MetaCons "Hash" PrefixI False) (S1 (MetaSel (Nothing :: Maybe Symbol) NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 Text)))

hashJSON :: ToJSON a => a -> Hash

hashElection :: Election c -> Election c

Type Ballot

data Ballot c

Constructors

Ballot

Fields

• ballot_answers :: ![Answer c]
• ballot_signature :: !(Maybe (Signature c))
• ballot_election_uuid :: !UUID
• ballot_election_hash :: !Hash

Instances

Generic (Ballot c)

Defined in Voting.Protocol.Election

Associated Types

type Rep (Ballot c) :: Type -> Type

Methods

from :: Ballot c -> Rep (Ballot c) x

to :: Rep (Ballot c) x -> Ballot c

Reifies c FFC => ToJSON (Ballot c)

Defined in Voting.Protocol.Election

Methods

toJSON :: Ballot c -> Value

toEncoding :: Ballot c -> Encoding

toJSONList :: [Ballot c] -> Value

toEncodingList :: [Ballot c] -> Encoding

Reifies c FFC => FromJSON (Ballot c)

Defined in Voting.Protocol.Election

Methods

parseJSON :: Value -> Parser (Ballot c)

parseJSONList :: Value -> Parser [Ballot c]

NFData (Ballot c)

Defined in Voting.Protocol.Election

Methods

rnf :: Ballot c -> ()

type Rep (Ballot c)

Defined in Voting.Protocol.Election

type Rep (Ballot c) = D1 (MetaData "Ballot" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" False) (C1 (MetaCons "Ballot" PrefixI True) ((S1 (MetaSel (Just "ballot_answers") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 [Answer c]) :*: S1 (MetaSel (Just "ballot_signature") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe (Signature c)))) :*: (S1 (MetaSel (Just "ballot_election_uuid") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 UUID) :*: S1 (MetaSel (Just "ballot_election_hash") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Hash))))

encryptBallot :: Reifies c FFC => Monad m => RandomGen r => Election c -> Maybe (SecretKey c) -> [[Bool]] -> StateT r (ExceptT ErrorBallot m) (Ballot c)

(encryptBallot elec (Just ballotSecKey) opinionsByQuest) returns a Ballot signed by secKey (the voter's secret key) where opinionsByQuest is a list of Opinions on each question_choices of each election_questions.

verifyBallot :: Reifies c FFC => Election c -> Ballot c -> Bool

Type Signature

data Signature c

Schnorr-like signature.

Used by each voter to sign his/her encrypted Ballot using his/her Credential, in order to avoid ballot stuffing.

Constructors

Signature

Fields

• signature_publicKey :: !(PublicKey c)

  Verification key.

• signature_proof :: !(Proof c)

Instances

Generic (Signature c)

Defined in Voting.Protocol.Election

Associated Types

type Rep (Signature c) :: Type -> Type

Methods

from :: Signature c -> Rep (Signature c) x

to :: Rep (Signature c) x -> Signature c

Reifies c FFC => ToJSON (Signature c)

Defined in Voting.Protocol.Election

Methods

toJSON :: Signature c -> Value

toEncoding :: Signature c -> Encoding

toJSONList :: [Signature c] -> Value

toEncodingList :: [Signature c] -> Encoding

Reifies c FFC => FromJSON (Signature c)

Defined in Voting.Protocol.Election

Methods

parseJSON :: Value -> Parser (Signature c)

parseJSONList :: Value -> Parser [Signature c]

NFData (Signature c)

Defined in Voting.Protocol.Election

Methods

rnf :: Signature c -> ()

type Rep (Signature c)

Defined in Voting.Protocol.Election

type Rep (Signature c) = D1 (MetaData "Signature" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" False) (C1 (MetaCons "Signature" PrefixI True) (S1 (MetaSel (Just "signature_publicKey") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (PublicKey c)) :*: S1 (MetaSel (Just "signature_proof") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Proof c))))

Hashing

signatureStatement :: Reifies c FFC => Foldable f => f (Answer c) -> [G c]

(signatureStatement answers) returns the encrypted material to be signed: all the encryption_nonces and encryption_vaults of the given answers.

signatureCommitments :: ZKP -> Commitment c -> ByteString

(signatureCommitments voterZKP commitment)

Type ErrorBallot

data ErrorBallot

Error raised by encryptBallot.

Constructors

ErrorBallot_WrongNumberOfAnswers Natural Natural

When the number of answers is different than the number of questions.

ErrorBallot_Answer ErrorAnswer

When encryptAnswer raised an ErrorAnswer.

ErrorBallot_Wrong

TODO: to be more precise.

Instances

Eq ErrorBallot

Defined in Voting.Protocol.Election

Methods

(==) :: ErrorBallot -> ErrorBallot -> Bool

(/=) :: ErrorBallot -> ErrorBallot -> Bool

Show ErrorBallot

Defined in Voting.Protocol.Election

Methods

showsPrec :: Int -> ErrorBallot -> ShowS

show :: ErrorBallot -> String

showList :: [ErrorBallot] -> ShowS

Generic ErrorBallot

Defined in Voting.Protocol.Election

Associated Types

type Rep ErrorBallot :: Type -> Type

Methods

from :: ErrorBallot -> Rep ErrorBallot x

to :: Rep ErrorBallot x -> ErrorBallot

NFData ErrorBallot

Defined in Voting.Protocol.Election

Methods

rnf :: ErrorBallot -> ()

type Rep ErrorBallot

Defined in Voting.Protocol.Election

type Rep ErrorBallot = D1 (MetaData "ErrorBallot" "Voting.Protocol.Election" "hjugement-protocol-0.0.4.20190711-9XKUqaKqeIWGSUJTM0D5D" False) (C1 (MetaCons "ErrorBallot_WrongNumberOfAnswers" PrefixI False) (S1 (MetaSel (Nothing :: Maybe Symbol) NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 Natural) :*: S1 (MetaSel (Nothing :: Maybe Symbol) NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 Natural)) :+: (C1 (MetaCons "ErrorBallot_Answer" PrefixI False) (S1 (MetaSel (Nothing :: Maybe Symbol) NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 ErrorAnswer)) :+: C1 (MetaCons "ErrorBallot_Wrong" PrefixI False) (U1 :: Type -> Type)))