Non-interactive zero-knowledge proof
https://en.wikipedia.org/wiki/Non-interactive_zero-knowledge_proof