4.15 Practical Sublinear Proofs for R1CS from Lattices

TODO: stuff from [NS22].