Proof-Carrying Data from Accumulation Schemes
https://iacr.org/cryptodb/data/paper.php?pubkey=30579