TEE token-transfer privacy, now with DWB and BTBE to hide storage patterns instead of just trusting the enclave and hoping nobody notices.

Can an append-only Merkle index get balanced-tree proof sizes? This compares MMRs, MMBs, and bagging schemes for QMDB.

Can you sample the binary-tree Gaussian mechanism in O(1) and keep the same law? This paper says yes.