Trustee Guide

A trustee contributes to the shared election key during setup and later submits a decryption share. One trustee cannot decrypt votes alone.

Complete trustee setup

1. Open your personal Trustee Setup link.
2. Select 1. Generate Trustee Key.
3. Select 2. Download Key Backup and store the JSON securely.
4. Select 3. Publish Setup Contribution.
5. Wait until the page confirms that setup is complete.

The backup contains a plaintext private key. Do not email it, upload it to a public drive, or give it to the administrator. Protect it with operating-system encryption and keep a safe backup. Key values, identifiers, and readiness details are collapsed because normal operation does not require them.

Return for decryption

You may close the page after setup. When tallying is ready:

1. Open the shared Trustee Decryption link from the new email.
2. Select Import Secret Key and choose the setup backup.
3. Wait while the page identifies the trustee and checks the key.
4. If no action is needed, return later.
5. When the tally is ready, select Submit My Decryption Share.
6. Wait until the page says your task is complete.

The browser creates the share and proof locally. The private key itself is not uploaded.

Troubleshooting

• Setup publication is disabled: generate a key and download its backup first.
• Existing Round 1 does not match: import the original setup key.
• No action is needed yet: the administrator has not prepared the tally.
• Share submission is disabled: import the correct key or wait for the tally.
• Lost key file: notify the administrator immediately.