Lower bounds on SNARKs