Arthur-Merlin protocol