Doubly-efficient zkSNARKs without trusted setup