Proof that a committed polynomial evaluates to a claimed value at a point without revealing coefficients.