Abstract: This disclosure relates to voting systems for collecting votes from multiple voters. The voters are associated with multiple identity public keys that each identify one voter. The system comprises nodes to collect the votes and to combine the votes into a vote container and store the vote container on a public data store. Each node communicates voting public keys between the nodes by using cryptography to remove an association between the voting public keys and the identity public keys to create a list of anonymised voting public keys. Each node, after the association between the voting public keys and the identity public keys is removed, communicates votes, authenticated by the anonymised voting public keys, by using cryptography to remove an association between the votes and the voting public keys to create anonymised votes and combine the anonymised votes into the vote container.