Fields

• trustee_PublicKey :: !(PublicKey crypto c)
   
• trustee_SecretKeyProof :: !(Proof crypto v c)

  NOTE: It is important to ensure that each trustee generates its key pair independently of the PublicKeys published by the other trustees. Otherwise, a dishonest trustee could publish as PublicKey its genuine PublicKey divided by the PublicKeys of the other trustees. This would then lead to the election_PublicKey being equal to this dishonest trustee's PublicKey, which means that knowing its SecretKey would be sufficient for decrypting messages encrypted to the election_PublicKey. To avoid this attack, each trustee publishing a PublicKey must prove knowledge of the corresponding SecretKey. Which is done in proveIndispensableTrusteePublicKey and verifyIndispensableTrusteePublicKey.