More people should know about the Interfold. It's basically what I've been yelling at people to build with the MACI ideas ( ethresear.ch/t/minimal-anti-… ) for almost a decade, and now it exists, in a generalized form. The idea is: a privacy protocol optimized for things like voting (and other use cases eg. secret-ballot auctions). The mechanism generates a threshold encryption key, and people send in their votes onchain, using a ZKP to prove eligibility. An arbitrary computation on the votes gets run inside FHE, and then threshold-decrypted. From what I can tell (the docs are good docs.theinterfold.com/CRISP/… ), it gets pretty optimal security guarantees: * Voter anonymity can be made unconditional if eligibility is proven with ZK-SNARKs * Censorship resistance is guaranteed by ethereum (votes can be posted directly onchain, and there's a proof that all posted votes are taking into account) * The correctness of the outputted result can be ensured via ZK over FHE * Liveness and coercion resistance depend on M-of-N honesty; unavoidable given present-day technology The main limitation is that today "ZK over FHE" is only properly available for additive vote tallying, as it's too expensive for computations that involve multiplication or other more complicated manipulation at the moment. There's work in progress on slashing-based / optimistic computation for such situations. (And of course ideally in the long term we'd figure out obfuscation so you can get rid of the M-of-N committees😃)