Practical Homomorphic Message Authenticators for Arithmetic Circuits