Aurora: Transparent Succinct Arguments for R1CS
https://eprint.iacr.org/2018/828