The 4 Pillars of Ballot Sealing & Integrity
Engineered with rigorous technical controls so unauthorized modifications are mathematically detectable.
1. SHA-256 Ballot Hashing & Secrecy Preservation
Ballots are hashed with SHA-256 for cryptographic tamper evidence, protected in transit via TLS 1.3, and isolated in storage through PostgreSQL Row-Level Security so individual voter selections remain confidential until official unblocking.
2. SHA-256 Merkle Proof Audit Ledger
Every cast vote produces a unique cryptographic hash linked into an auditable Merkle Tree, creating mathematical verification that no votes were inserted, deleted, or altered.
3. Secure OTP Shareholder Authentication
Credential verification combined with time-sensitive keyed OTP delivery ensures only verified shareholders matching the official record date voter roster can access ballots.
4. Scrutinizer Multi-Witness Unblocking
Only the designated independent Scrutinizer can unblock the vote tallies post-meeting in the presence of at least 2 independent witnesses, satisfying Rule 20(4)(xii).
Cryptographic Security FAQs
Technical specifications regarding encryption, Merkle trees, and access controls.