Aurora: Transparent Succinct Arguments for R1CS