  Selene is an e-voting protocol that allows voters to directly check their
individual vote, in cleartext, in the final tally via a tracker system, while
providing good coercion mitigation. This is in contrast to conventional,
end-to-end verifiable schemes in which the voter verifies the presence of an
encryption of her vote on the bulletin board. The Selene mechanism can be
applied to many e-voting schemes, but here we present an application to the
polling station context, resulting in a voter-verifiable electronic tally with
a paper audit trail. The system uses a smartcard-based public key system to
provide the individual verification and universal eligibility verifiability.
The paper record contains an encrypted link to the voter's identity, requiring
stronger assumptions on ballot privacy than normal paper voting, but with the
benefit of providing good auditability and dispute resolution as well as
supporting (comparison) risk limiting audits.
