Sub-linear lattice-based zero-knowledge arguments for arithmetic circuits
scientific article; zbMATH DE number 6943921