Quadratic span programs and succinct nizks without pcps
Public-Key Cryptosystems Based on Composite Degree Residuosity Classes