Abstract: A voting system has a voter key pair including a voter private key and a voter public key. The voter public key is blinded. A plurality of candidate key pairs is generated. Each candidate key pair includes a candidate private key and a candidate public key. The blinded voter public key is signed with each of the plurality of candidate private keys or a subset of the plurality of candidate private keys to create a plurality of blinded signatures. The plurality of blinded signatures is unblinded to generate a plurality of unblinded signatures valid for the voter public key. A vote is cast using the voter public key and the plurality of unblinded signatures.