Aggregatable subvector commitments

Stateless Cryptocurrencies

• each block only stores the digest of the latest state

• $v_i=(H(PK_i))

  bal_i$

Vector commitment

• $\lambda$ denotes the security parameter of our schemes