zkSNARKs
Interactive proofs like Schnorr convince Victor through back-and-forth rounds. That works well for teaching, but many real systems need something different: a single, short proof that anyone can verify quickly — even when the underlying computation is huge. zkSNARKs (zero-knowledge succinct non-interactive arguments of knowledge) are the most widely deployed family of such proof systems.
What the Name Means
- Zero-knowledge — the verifier learns nothing beyond the truth of the statement, same as in the protocols elsewhere on this site.
- Succinct — proofs are tiny (often a few hundred bytes) and verification is fast, regardless of how large the original computation was.
- Non-interactive — the prover sends one message; no multi-round dialogue with the verifier.
- Argument of knowledge — the prover must actually know a secret witness; soundness holds against computationally bounded cheaters.
What Problem They Solve
Schnorr proves one fixed statement: knowledge of a discrete logarithm in $U(p)$. zkSNARKs target a much broader class: "I know private inputs such that this computation produces the claimed output." The computation is encoded as a circuit or a system of arithmetic constraints over a finite field; the prover shows the constraints are satisfied without revealing the witness inputs.
This is what powers private payments in Zcash, validity proofs in many Ethereum rollups, and countless other systems that need both privacy and scalability.
How They Relate to This Guide
The demos on this site — graph coloring, Sudoku, Schnorr — build intuition for commitments, challenges, soundness, and zero-knowledge. zkSNARKs reuse those ideas at industrial scale: the prover still hides a witness, the verifier still learns almost nothing useful, but the statement can be any computation that fits in a circuit.
Topics Coming Soon
- From programs to circuits
- R1CS and Quadratic Arithmetic Programs (QAPs)
- Trusted setup vs transparent proof systems
- Popular schemes (Groth16, PLONK, and others)
- Where zkSNARKs appear in blockchains today