mirror of
https://github.com/saymrwulf/swisspost-evoting-go-poc.git
synced 2026-09-04 20:23:55 +00:00
saymrwulf
313db92321
pkg/party models each endpoint of the system as a separate object holding only its own private state, wired together through the transport bus. - ceremony.go: NewCeremony bootstraps the Ed25519 root CA, enrolls all parties (setup, 4 CCs, electoral board, voting server, verifier, N voters) with CA-signed identity certs, registers each in the directory, and wires its handler into the bus. - parties.go: the six party types and a shared hello/ack handshake; Handshake() proves the full sign -> route -> verify -> reply -> verify path for every party before any election logic runs. - state.go: per-party private state structs (nothing shared across parties). - transcript.go: PublicTranscript, the append-only bulletin board a remote verifier will consume (no secrets). - phases.go: phase handlers reject unknown message types cleanly (the transport boundary never panics on unexpected input) — filled in over the next commits. Transport CA API simplified to own its serial counter (NewCA/Issue). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
77 lines
2.2 KiB
Go
77 lines
2.2 KiB
Go
package party
|
|
|
|
import (
|
|
"math/big"
|
|
|
|
"github.com/user/evote/pkg/elgamal"
|
|
emath "github.com/user/evote/pkg/math"
|
|
"github.com/user/evote/pkg/mixnet"
|
|
"github.com/user/evote/pkg/returncodes"
|
|
"github.com/user/evote/pkg/zkp"
|
|
)
|
|
|
|
// The state structs below hold each party's PRIVATE state. Nothing here may be
|
|
// read by another party except through an explicit signed message.
|
|
|
|
// setupState is the setup component's working store while assembling cards.
|
|
type setupState struct {
|
|
primes []*big.Int
|
|
votingCards []*votingCard
|
|
mappingTable *returncodes.MappingTable
|
|
electionPK elgamal.PublicKey
|
|
returnCodePK elgamal.PublicKey
|
|
}
|
|
|
|
// ccState is a control component's private key material and mix state.
|
|
type ccState struct {
|
|
keyPair elgamal.KeyPair
|
|
returnCodeSecret emath.ZqElement
|
|
schnorrProofs []zkp.SchnorrProof
|
|
|
|
// Tally working state.
|
|
shuffle mixnet.VerifiableShuffle
|
|
decProofs []zkp.DecryptionProof
|
|
shuffleIn *elgamal.CiphertextVector
|
|
shuffleOut *elgamal.CiphertextVector
|
|
}
|
|
|
|
// ebState is the electoral board's private key material.
|
|
type ebState struct {
|
|
passwords []string
|
|
keyPair elgamal.KeyPair
|
|
}
|
|
|
|
// serverState is the voting server / ballot box.
|
|
type serverState struct {
|
|
mappingTable *returncodes.MappingTable
|
|
ballotBox []encryptedBallot
|
|
electionPK elgamal.PublicKey
|
|
returnCodePK elgamal.PublicKey
|
|
primes []*big.Int
|
|
}
|
|
|
|
// voterState is a voter client's private card and ballot secrets.
|
|
type voterState struct {
|
|
card *votingCard
|
|
vcSK emath.ZqElement
|
|
selected []int
|
|
}
|
|
|
|
// votingCard is a voter's credential bundle (private to the voter, produced by
|
|
// the setup component and delivered over a confidential channel).
|
|
type votingCard struct {
|
|
VoterID string `json:"voter_id"`
|
|
VerificationCardID string `json:"vc_id"`
|
|
StartVotingKey string `json:"svk"`
|
|
ChoiceReturnCodes []string `json:"choice_return_codes"`
|
|
VoteConfirmCode string `json:"vote_confirm_code"`
|
|
BallotCastingKey string `json:"bck"`
|
|
}
|
|
|
|
// encryptedBallot is a ballot as stored in the ballot box.
|
|
type encryptedBallot struct {
|
|
VoterID string
|
|
VerificationCardID string
|
|
Ciphertext elgamal.Ciphertext
|
|
VcPK emath.GqElement
|
|
}
|