Abstract
We introduce a technique for traversal of Merkle trees, and propose an efficient algorithm that generates a sequence of leaves along with their associated authentication paths. For one choice of parameters, and a total of N leaves, our technique requires a worst-case computational effort of 2 log N/loglog N hash function evaluations per output, and a total storage capacity of less than 1.5 log2 N/loglog N hash values. This is a simultaneous improvement both in space and time complexity over any previously published algorithm.

Keywords
amortization, authentication, fractal, Merkle tree