Abstract: Verifying a secret element’s (non-)membership status to a private set is challenging yet valuable for access control and verifiable computing applications. On the other hand, blockchain ...