►
Description
Visit the https://archive.devcon.org/ to gain access to the entire library of Devcon talks with the ease of filtering, playlists, personalized suggestions, decentralized access on Swarm, IPFS and more.
https://archive.devcon.org/archive/watch/6/shielded-voting-using-threshold-encryption/
Shutter Governance is a tool for governance platforms to introduce shielded voting for their users. It uses threshold encryption and is designed to fix issues with misbehavior, voter apathy, and voting incentive.
Simply put, with Shutter Governance, votes are encrypted during the voting period. The votes are decrypted and thereby only revealed after the poll closes.
The talk will include a live demo of Shielded Voting as developed in partnership with Snapshot.
Speaker(s): Luis Bezzenberger, Jannik Luhn
Track: Governance & Coordination
Keywords: privacy,encryption,snapshot
Follow us: https://twitter.com/efdevcon, https://twitter.com/ethereum
Learn more about devcon: https://www.devcon.org/
Learn more about ethereum: https://ethereum.org/
Devcon is the Ethereum conference for developers, researchers, thinkers, and makers.
Devcon 6 was held in Bogotá, Colombia on Oct 11 - 14, 2022.
Devcon is organized and presented by the Ethereum Foundation, with the support of our sponsors. To find out more, please visit https://ethereum.foundation/
A
A
Was
supposed
to
have
this
talk
because
he's
actually
done
all
the
work,
but
unfortunately,
what
he
got
covered
so
I
had
to
jump
in
I
hope
I
can
do
him.
Justice
I
want
to
start
very
abstract
to
make
it
a
little
bit
fun.
What
does
shutter
do?
It
basically
allows
users
to
safely
reveal
private
information
that
they
have
to
some
sort
of
system,
meaning
that
an
attacker
who
gets
hold
of
that
information
can't
abuse
it
or
can't
use
it
for
anything
malicious.
A
So,
basically,
we
want
to
go
from
a
world
like
this,
where
we
have
monsters
that
look
at
in
monsters
in
the
forest,
but
look
at
your
private
information
and
do
bad
stuff
with
it
to
something
like
this,
like
a
more
Heavenly
View,
everything
is
safe
and
nice.
How
do
we
do
that?
We
use
flashlight
encryption,
which
allows
basically
social
encryption.
A
We
have
a
set
of
notes
that
provides
an
encryption
key
and
then
a
user
can
now
encrypt
their
message
using
that
that
key
and
then
it's
protected
from
everyone
that
no
one
can
abuse
the
data
and
only
when
it's
safe
to
reveal
that
information.
Then
this
network
of
nodes
will
produce
the
decryption
key,
and
then
everyone
can
see
the
message.
A
What
is
safe,
of
course,
depends
highly
on
on
the
application,
and
here
we
want
to
talk
about
voting
and
governance
and
this
sort
of
stuff.
Basically,
what
we
want
to
do
here
is
we
want
to
encrypt
votes
until
the
voting
period
is
over,
so
that
voters
don't
see
how
others
how
other
people
voted
until
yeah
until
they
can't
vote
anymore.
It's
very
interesting
because
in
Dallas
this
is
at
the
moment
not
the
case
in
endow
voting.
A
Usually
you
see
all
the
other
votes
and
they
can
influence
your
decision,
whereas
in
traditional
votes
like
if
you
vote
for
a
parliament
or
in
an
election,
this
is
not
the
case,
and
there
you
only
start
counting
when
no
one
is
allowed
to
submit
votes
anymore.
This
is
very
good
reasons,
because
otherwise
you
get
some
sort
of
a
lot
of
undesirable
behaviors,
for
example,
just
three
here,
voter
apathy.
A
If
you
see
that
right
in
the
beginning,
a
big
voter
submitted
lots
of
votes
for
candidate
a
then
maybe
lots
of
people,
small
people
with
only
a
small
voting
power
that
would
want
to
vote
and
be
on
candidate
B
might
not
do
this
because,
basically,
it's
probably
already
over
we've
lost,
but
if
they
would
not
have
had
this
information,
everyone
would
have
voted.
Then
they
might
have
actually
won
against
this
one
big
player-
and
this
is
actually
a
big
problem
right
now
in
Dallas.
A
In
our
voting,
another
example
that
we
might
want
to
prevent
is
strategic
voting.
So
if
you,
for
example,
if
you
have
a
vote
where
two
candidate-
that's
convinced
and
your
primary
candidate,
that
you
want
to
win
already-
has
like
lots
of
vote,
then
you
votes,
then
you
might
want
to
vote
on
your
secondary
candidate,
which
is
not
what
the
voting
mechanism
is
intended
to
encourage.
So
that
would
we
also
prevent
if
you
can't
see
what
voters
do
and
last
example
buying
of
votes,
it
gets
much
harder.
A
If
you
don't
know
how
many
votes
you
have
to
buy
in
order
to
win
out
of
scope
is
privacy,
because
after
though
it's
over
everything
will
be
public
yeah
we're
very
proud
to
collaborate
on
this
with
snapshot.
If
you
don't
know
snapshot,
is
this
big
Dow
voting
platform?
Basically
all
dollars
use
it
and
they're
pretty
cool,
and
since
we
are
starting
today,
basically,
they
support
now
shutter
as
a
private
voting
system,
so
that
was
about
to
set
up
in
votes.
They
can
use
a
shutter
to
make
their
votes
more
secure,
their
elections
more
secure.
A
How
does
it
work
the
life
cycle
of
a
vote?
The
shutter
system
starts
by
generating
a
long-lived,
eon
key.
It
does
that
once
and
then,
if
a
user
wants
to
vote
on
a
proposal,
they
use
that
yonki
and
the
idea
of
the
proposal
and
derive
an
encryption
key
from
these
two
pieces
of
data.
For
this
no
communication
is
required.
It
can
be
done
purely
locally
once
the
proposal
is
finished.
A
Basically,
then
yeah
the
user
sent
encrypt
their
votes,
send
it
to
snapshot,
and
once
the
proposal
is
finished,
the
snapshot
will
send
a
decryption
request
to
the
shutter
system.
Shutter
will
then
generate
the
decryption
key,
because
then
it
is
safe
to
reveal
the
the
votes,
because
no
one
can
vote
anymore
and
using
that
decryption
key
shutter
snapshot
can
decrypt
and
count
everything
some
screenshots
here,
oh
how
it
would
look
like.
Basically,
if
you
set
up
a
vote,
you
can
select
shutter,
it's
purely
optional.
A
If
you
do
that
during
voting,
you
see
nothing.
Basically,
you
only
see
the
number
of
votes
who
who
already
a
number
of
people
who
submitted
votes
already.
You
don't
see
how
many
votes
Ellis
got.
You
don't
see
how
many
votes
Bob
got
and
only
in
the
end,
when
no
one
can
vote
anymore.
You
will
see
that
in
this
example,
Alice
has
won
and
Bob
didn't
get
any
votes.
Yeah
and,
as
I
said,
this
is
starting
starting
from
today
it's
live.
You
can
try
it
out.
A
We
do
have
some
other
things
at
at
Charter.
We
do
using
this
mechanism.
I
hinted
it,
but
it's
quite
General,
and
it's
mostly
about
muva
related
and
since
I
have
one
and
a
half
minutes
left
I
want
to
talk
briefly
about
this.
Basically,
we
use
this
threshold
encryption
mechanism
to
prevent
front
running
and
malicious
Mev.
A
Our
main
focus
here
is
is
rollaps,
so
we,
our
product,
is
called
rolling
shutter
that
can
integrate
into
roll
Labs
as
a
kind
of
a
plugin,
but
we're
also
looking
at
Beacon
chain
at
once
that
we
have,
for
example,
a
beacon
chain
proposal,
but
on
the
research
side,
yeah,
that's
basically
it
please
try
it
out.
It's
it's
still.
Of
course,
early
there
might
be
bugs,
but
it
should
work.
It's
live.
A
B
A
Who's,
the
guy
who
is
supposed
to
be
here-
and
my
name-
is
another
Yannick
yeah
and
of
course
this
is
all
part
of
brain
board.
So
the
company
that
does
a
shutter
is
called
rainbow
and
we
have
lots
of
other
projects,
including
Beamer
raid
and
Trust
lines.
How
damp
lots
of
people
are
people
here,
yeah
cool.
Thank
you.
C
B
A
In
this
mechanism,
to
be
honest,
I
don't
really
know
what
what
Snapchat
shows,
but
in
principle,
all
votes
will
be
public
afterwards,
because
the
encrypted
worlds
are
public
and
the
decryption
will
be
public,
so
you
can
find
out
who
voted
for
what
that's
part
of
what
why
I
said?
Privacy
is
not
in
in
scope
of
this.
For
this
you
would
need
other
mechanisms.
If
you
want
that.
One.