Fig. 3From: Shorter ZK-SNARKs from square span programs over ideal latticesCRS length varying from circuit sizeBack to article page