- Pinocchio
- Groth16
- Hyrax
- Sonic
- Universal Trusted Setup
- Ligero
- Zokrates
- Plonk
- Mirage
- Marlin
- Spartan
- Redshift
- Fractal
- Lunar
- SuperSonic
- Halo
- Inner Product Argument
- Tweedle Curves
- Accumulation Scheme
- Sonic
- Halo2
- Inner Product Argument
- Tweedle Curves
- Accumulation Scheme
- PLONK
- Darlin
- Quarks
- Plonky
- Brakedown
- Snarkpack
- fflonk
- SHPLONK
- Hyper Plonk
- Kimchi
- Binius
- Jolt
- Polymath
- Plookup: Proofs that some witness values are part of a lookup table.
- Plonkpp: Integrate Plookup into Plonk.
- Caulk
- Flookup
- Baloo
- CQ
- CQlin
- Lasso
- Boojum
- Twist and Shout
| Proof System | Setup Complexity | Post-Quantum Resistance | Scalability | Parallel Execution | Features |
|---|---|---|---|---|---|
| Halo2 | Transparent | No (ECC based) | High | Moderate | Recursive SNARKs, Custom gates, Plonkish arithmetization |
| Circom (Groth16) | Trusted Setup | No (Pairing-based) | Moderate | High | Efficient SNARK generation for circuits, good for small proof |
| Risc Zero | Transparent | Yes | High | High | General-purpose zkVM, RISC-V architecture, supports arbitrary computations |
| Jolt | Both | Yes | Very High | Very High | Sumcheck and lookup arguments, optimized for high-performance proof generation, upcoming twist and shout |
| Nexus zkVM | Transparent | Partial | Moderate | High | Privacy-focused zkVM, Ethereum compatibility, supports smart contract verification |
| SP1 | Transparent | Yes | Very High | Very High | Optimized for rollups, efficient parallel proving, GPU-optimised, supports high-throughput applications, supports arbitrary computations, whitepaper |
| Powdr | Transparent | Yes | High | High | Developer-friendly, multiple proof systems, and zk-continuations for unbounded execution, minimal setup |
| Polygon Miden | Transparent | Yes | High | High | STARK-based (Winterfell) zkVM, designed for program execution proofs, high scalability |
| Aleo SnarkVM | Trusted Setup | No (Pairing-based) | Moderate | High | Privacy-preserving SNARK-based zkVM, supports private smart contracts |
| Zokrates | Trusted Setup | No (Pairing-based) | Moderate | High | High-level DSL for zk-SNARKs, extensive developer tooling, supports Groth16 and PLONK |
| Delphinus ZKWASM | Transparent | Yes | High | High | WebAssembly-based zkVM, supports proving WASM execution, ideal for cross-platform apps |
| Lita Valida | Transparent | Yes | Moderate | Moderate | Modular chip, ensures the correctness of zk circuits, supports custom proofs |
| Eigen ZKVM | Transparent | Yes | Very High | High | High-performance zkVM, designed for Ethereum scaling, supports recursive proofs |
| CairoVM | Transparent | Yes | Very High | High | STARK-based VM, designed for StarkNet, supports general-purpose computation |
| Noir | Transparent | Yes (STARK-based) | High | High | High-level zkDSL, supports general-purpose zk circuits, STARK-based backend |
| Ola VM | Transparent | Yes | High | High | STARK-based, Privacy-preserving zkVM, supports custom circuits, programmable scalable and private proof |
| Triton VM | Transparent | Yes | High | High | Efficient recursive verification, Algebraic Execution Tables (AET) and Arithmetic Intermediate Representations (AIR) with a STARK proof system. |
| Lurk | Transparent | Yes | Moderate | Moderate | zk-LISP interpreter, supports verifiable computations, ideal for symbolic execution |
| Ceno | Transparent | Yes | High | High | Non-uniform prover based on GKR Protocol, Segment and Parallel Zero-knowledge Virtual Machine |
| Expander | Transparent | Yes | Very High | Very High | GKR + Libra, Parallel computing |
| OpenVM | Transparent | Yes | High | High | Modular architecture, supports general-purpose zkVM, adaptable to various use cases |
| Brevis | Transparent | Yes | Very High | High | Focused on proof aggregation and recursion, glue-and-coprocessor architecture, multiple proving backends, Coprocessor Integration |
- Cairo
- Circom
- Leo
- Lurk
- Noir
- Noname
- o1js
- Polylang
- Powdr
- Zokrates