Batching range proofs and other range proof-related optimizations

[seresistvanandras]

Currently, range proofs are not batched, and verifier does a linear number of pairings. This could be improved if using Construction 2. in this paper whereby the verifier does linear work but only in G1! Most likely, concretely, this will be quite an improvement.