BMM Australia Pty Ltd
23 August 2007

The content of this document is strictly confidential.  It has been prepared by BMM Australia Pty Ltd (BMM) exclusively for the perusal of Australian Electoral Commission and may not be disclosed to any other party without the prior written approval of Australian Electoral Commission.

Executive Summary

BMM Australia Pty Ltd has been engaged to perform an audit of the AEC electronic voting machine (EVM) for blind and vision impaired voters to be used in the Australian 2007 federal election.

BMM asserts its independence from the supplier of the system and from any political party.

BMM has been asked to ensure that the EVM meets the following criteria:

• Resistant to malicious tampering by users;
• Resistant to malicious tampering by external parties by electronic means;
• Free from malicious source code;
• Presents an accurate representation of votes cast in the printed record without variation; and
• Erases all record of voter’s preferences when so instructed by the polling official.

Our findings are as follows:

• BMM is satisfied that the system design includes features that provide the level of security required by the AEC;
• BMM is satisfied that the AEC conducted its testing of the EVM with due diligence;
• BMM found no evidence of malicious source code in the EVM;
• There were no errors detected in BMM tests for security, accuracy and compliance of the system; and
• BMM is satisfied that risks identified in this report have been avoided or minimised to a level that would allow the EVM to comply with AEC requirements regarding security, accuracy and voting functionality.

We certify that the AEC Electronic Voting Machine for blind and vision impaired voters complies with the specified criteria.

Peter Dilley
Senior Project Engineer
Data Network and Computer Security