>>11500735 (pb)
As I understand it, the watermark would be generated by using a secret known only to the government together with the unique number identifying the ballot. These two numbers would be fed into a cryptographic algorithm that would produce another number which is the digital signature.
Nobody else can produce that signature unless they know both the ballot number and the secret. The signature would be encoded as a watermark on the ballot.
That would mean that genuine ballots can be distinguished from fake ones because the fake ones won't have a watermark or will have a watermark that isn't a valid signature, because the forger won't know the secret.
All that can achieve is to prove that a ballot wasn't forged. It won't let anybody track the ballots except in the sense that the valid ballots will be recognized when they're fed into the machines that check the signature.