A database management system stores an entry in a journal. After saving the entry, the journal includes a leaf node with a hash value that is at least partially based on the entry and a hierarchy of inner nodes that are at least partially based on the leaf node. In response to a request to delete the entry, the entry is deleted, but the hash value is retained. A cryptographic proof of a second entry stored in the journal is at least partially based on the stored hash value.
展开▼