Olaoluwa Osuntokun

I'm not saying it's impossible, but it's very hard in practice, and even harder to determine if things actually work, ofc it also depends on your threat model and adversary an old paper on the topic worth reading:

the updated spec (tho now slightly more involved) is def worth a read too, super dope how the designers have amended things to work w/ mixed y-parity keys and an arbitrary amount of tweaks:

have you seen this paper? [link] > On Bitcoin data before August 2019, we show that our design achieves a 4.6x reduction in proof size vis-a-vis UTREEXO [10], which is a different Merkle-tree based system designed to support stateless nodes. paywall tho