[lawn]

> how do you handle theft of keys?

I don't have a good solution for this one, but maybe it's not as big of a problem as it appears at first glance.

If we assume that a key can be made invalid, in a public way so we all know which keys are marked as invalid (= stolen), then each voter can know if their vote is correctly handled or not. If it's not they can have a chance to dispute or change their vote, possibly going through some extra identification procedure.

With this scheme disputes gets handled by invalidating previous votes, but in a transparent manner to both. Yes this relies on individual voters to keep the system honest, so their votes aren't used improperly, but isn't this an improvement over the system today? Isn't it a more democratic trust based process rather than having to trust election workers not to cheat?