Requirements for integrity
[RT I, 24.05.2024, 1 – entry into force 03.06.2024]
(1) When transferring data between the components of the electronic voting system and entering them into the election information system, the authenticity of the data must be ensured and unauthorised modification of the data must be prevented by taking appropriate security measures, such as encryption of files or digital signing.
(2) The publication of voting results must ensure the correct, timely and complete disclosure of the voting results received from the electronic voting system.
(3) All electronic votes successfully recorded in the collector component are registered by the registration service provider.
(4) To check the integrity of the electronic ballot box, the electronic votes recorded in the collector component are compared with the registrations of the registration service.
(5) The collector component must be retained until the electronic voices are destroyed.
(6) All operations related to the processing of electronic votes are logged.
(7) The State Electoral Office organises the publication of the source code for the electronic voting system and the verification application before the elections. The source code for the voter application is not published.
(8) The electronic voting system must allow the integrity of the electronic voting result to be verified. The integrity of the voting results is verified on the basis of cryptographically mixed votes.
(9) To verify the integrity of electronic voting, the information systems auditor conducts a process and data audit.
(10) The process audit verifies, in particular, the creation of the vote-opening key for the electronic voting system, the test voting, the transfer of the electronic ballot box to the State Electoral Office, the counting and destruction of votes and compliance with the procedures for processing votes.
(11) The data audit verifies the mutual consistency, integrity and authenticity of the input and output of processes, including:
1) consistency between the encryption key and the vote-opening key;
2) timestamps of the registration service;
3) integrity of electronic votes;
4) electronic votes disregarded under § 4811of this Act;
5) Anonymisation of electronic votes;
6) evidence of cryptographic mixing of electronic votes;
7) counting of electronic votes;
8) evidence of the counting of electronic votes;
9) identical result of a second counting of the electronic votes;
10) results of the electronic voting.
[RT I, 24.05.2024, 1 – entry into force 03.06.2024]
