~edwargix

Trackers

~edwargix/test

Last active a month ago

~edwargix/tallyard

Last active 3 months ago

#13 Use Matrix's encryption system instead of nacl 2 months ago

v0.4.0 added by ~edwargix on ~edwargix/tallyard

#13 Use Matrix's encryption system instead of nacl 3 months ago

Ticket created by ~edwargix on ~edwargix/tallyard

We're currently using https://pkg.go.dev/golang.org/x/crypto/nacl/box for p2p encryption (since it's easy), but Matrix already provides a strong encryption system that also includes key verification, a double-ratchet, etc.

Using Matrix's E2EE will also hide metadata about the election itself because all events will be of the type m.event.encrypted, thus looking no different than normal matrix messages. Note that this isn't perfect opsec since the pattern of messages provides clues for eavesdroppers, but it helps.

#12 Redact all events expect last when election is over 3 months ago

v0.4.0 added by ~edwargix on ~edwargix/tallyard

#12 Redact all events expect last when election is over 3 months ago

Ticket created by ~edwargix on ~edwargix/tallyard

In case I've screwed up the cryptography somewhere (or one or more of our dependencies has a bug), let's delete as many events as possible when an election concludes.

#1 Refuse to continue when voter input is 0 4 months ago

v0.4.0 added by ~edwargix on ~edwargix/tallyard

#3 Warn user about voting in elections with just 2 voters 4 months ago

v0.4.0 added by ~edwargix on ~edwargix/tallyard

#6 Implement Zero Knowledge proofs for ballots 4 months ago

v0.4.0 added by ~edwargix on ~edwargix/tallyard

#6 Implement Zero Knowledge proofs for ballots 4 months ago

Comment by ~edwargix on ~edwargix/tallyard

This will be among the features introduced in v0.4.0.

#6 Implement Zero Knowledge proofs for ballots 4 months ago

~edwargix assigned ~edwargix to #6 on ~edwargix/tallyard

#11 Handle redactions properly 4 months ago

Comment by ~edwargix on ~edwargix/tallyard

Unfortunately, it doesn't seem like it's possible to filter redaction events that only redact events that are not filtered: https://matrix.to/#/!NasysSDfxKxZBzJJoE:matrix.org/$l4ot1PPe1F86uB1sWkOpYOhVcMMURnFFjpq66obypCc?via=matrix.org&via=privacytools.io&via=amorgan.xyz

Hopefully v3 of the sync endpoint of the client-server API will fix this: https://matrix.org/blog/2021/05/14/this-week-in-matrix-2021-05-14#dept-of-spec-