Zero-knowledge proofs reduce verification costs