Skip to content

Hidden Votes: commitment recovery improvements #2014

Open
0 of 3 issues completed
Open
0 of 3 issues completed
@jaybuidl

Description

@jaybuidl

Rationale

Currently the commitment is stored in browser storage. If the juror needs to reveal their vote on a different device or if their browser storage was cleared, the commitment must be recovered. For simple question types it can be brute-forced (the salt is derived deterministically).

Current implementation

#1059
Image

Shortcomings

But there are 2 cases where the commitment cannot be recovered this way:
a) for integer and complex question types (too many possible values) and
b) for the Shutterized DK (#1314) if it is not available or provides incorrect values.

Both a) and b) might be encountered at the same time for a Shutterized DK handling an integer question type for example.

In most cases we can assume that the juror always remembers his exact vote even for an integer or complex answer, which mitigates a). To mitigate b) the juror would also need to remember his exact justification (to the letter and punctuation) which is less likely.

Sub-issues

Metadata

Metadata

Assignees

No one assigned

    Labels

    Package: WebCourt web frontendType: Epic 🐉A large user story that can be broken down into a number of smaller stories.Type: Feature🗿

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions