WIP: The AUTHDECODE protocol

[rozbb]

Added a WIP draft of the AUTHDECODE protocol to discuss here. Rendered

This document describes a protocol that runs after a garbled-circuit two-party computation, that allows the receiver to obtain a signed commitment to their output (with the sender being the signing party). This protocol is generic over choice of polynomial commitment scheme and garbled-circuit implementation.