libsnark/batchverification.pdf