Title: Composition of zero-knowledge proofs