Fig. 1From: Shorter ZK-SNARKs from square span programs over ideal latticesThe construction of simulator \(\textsf{Sim}(u)\)Back to article page