Carback III, Richard T.Popoveniuc, StefanSherman, Alan T.Chaum, David2019-02-212019-02-212007-06-15http://hdl.handle.net/11603/12839We propose and implement a modification to the Punchscan protocol that simplifies ballot printing and distribution. In this improved version, each voter creates a ballot at the polling location by combining independently selected ballot halves, rather than using two pre-selected halves with the same serial number. The only time a ballot used for voting is human-readable is when it is in the voter’s hands, reducing possible opportunities to violate voter privacy. This small but nontrivial change lets election officials print and distribute ballots using multiple printers more easily, without giving any one printer the ability to compromise voter privacy with certainty.8 pagesen-USThis item is likely protected under Title 17 of the U.S. Copyright Law. Unless on a Creative Commons license, for uses protected by Copyright Law, contact the copyright holder or the author.ballot printing and distributionballot privacyelection integrityend-to-end voting (E2E)open-auditpagescanpunchscan with independent ballot sheets (IBS)receipt-based votingvoting technologyText