A verifiable secret shuffle and its application to e-voting