Scheme that lets a prover commit to a polynomial and later open evaluations with small proofs.