1
$\begingroup$

We can say that, when compared to a Merkle tree, inclusion proofs are constant size by membership witness. Can we say that also for exclusion proofs by non-membership witness?

Is there any advantage of non-membership witness in an accumulator?

$\endgroup$

1 Answer 1

0
$\begingroup$

In accumulators based on groups of unknown order (such as RSA or class groups) or accumulators based on bilinear pairings, both membership and non-membership proofs are constant-sized (i.e. independent of the size of the set and the size of the subset you are proving membership/non-membership for).

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.