Zero‑knowledge proof where interaction between prover and verifier is removed using a common reference string.