Quadratic span programs and succinct nizks without pcps
On the Existence of 3-Round Zero-Knowledge Protocols