KZG commitments can be opened in constant size with respect to the number of committed values (Pedersen commitments are linear). Requires #11