Groth serialization

[zkcrypto]

Groth serialization

[ebfull]

I've done some of these and not done others based on changes in my opinion.

The A/B queries for all variables should be arranged so that they are (A_g1, B_g1, B_g2) vectors to minimize multiexponentiation overhead.

This actually increases overhead using the new multiexp, and doesn't mesh well with the query density computations.

The gamma variable should be removed if it can be proven it's unneeded in Groth's construction.

I'm going to leave it. If you don't want it, use G1::one() instead.

The verification key probably should be encoded with compressed curve points.

Meh.