3 ms·

I don’t know if I would call that a subset, my understanding is that not all zero-knowledge proofs can necessarily be transformed into non-interactive proofs