EAC - Voluntary Voting System Guidelines

Name : | N/A
Organization : | N/A
Post Date : | 9/30/2005
Section Comments
Section : | ...
Page no. : |
Line no.: |
Comment : | Part three of three Section 6.9 6.9.3 The list of record unique identifiers to hand-count shall be=20 determined in a manner that is extremely difficult to predict prior to the audit, yet which generates a repeatable and publicly verifiable list of record unique identifiers. Discussion: This can be done by cryptographically hashing several subseeds, provided by election judges, lottery results, party observers, election officials, and other sources[2], and using the resulting number to seed a PRNG. 6.9.4 Any algorithms used to generate the list of record unique identifiers shall be FIPS-approved. 6.9.5 Any algorithms, input data, and output data used to generate the list of record unique identifiers shall be published openly. Discussion: This includes the pseudocode of the algorithms,=20 source code of the algorithms, the individual subseeds, the hashed seed, the PRNG output, and the derived list of record unique identifiers to count. 6.9.6 The number of paper records to hand-interpret and any necessary process details shall be determined by a peer-reviewed statistical quality control method. Discussion: One such procedure is the Lot-Sensitive Sampling Plan (LSP) [1]. 6.9.7 The confidence intervals of the plan should be set such that it can accurately audit very close elections where the margin of victory is 1% or less. =20 Discussion: If LSP is used, p*, the maximum percent of ballots allowed to be inaccurately interpreted, should be 1% or less. pa, the probability that the audit would miss an inaccurately interpreted ballot, should be 1% or less. =20 6.9.8 The hand-count teams shall interpret the paper records and create a set of cast vote records by hand to compare with the subset of machine-generated cast vote records. =20