RSA Hash accumulator for arbitrary values

Doesn’t this require quadratic overhead? If so, that’s a non-starter for most applications where prover time is already a bottleneck…

1 Like