Thank you for sharing this paper.
Compared with MimbleWimble, each output for Confidential Assets on MimbleWimble have three more fields, A, β, and σ, to be recorded on the blockchain.
Suppose in the elliptic curve, the size of a point is X, and the size of a scalar is
Y . Then 2X + (J + 1)Y more space is needed for storing an output.
Would it be possible to preserve anonymity between base token transactions and asset transactions, by also allocating this space for non-asset outputs?