Privacy Pools v20xbow

Trusted setupGeneration of a piece of data that must then be used for some cryptographic protocol to run. Generating this data requires some secret information. The "trust" comes from the fact the secret must be destroyed after the ceremony, otherwise cryptographic properties of the protocol could be broken. Once the data is generated, and the secrets are forgotten, no further participation from the creators of the ceremony is required. There are two types of trusted setups for SNARKs: (i) trusted setup per circuit where it is generated from scratch for each circuit, (ii) trusted universal setup per proving system where it can be used for several circuits. for the 27 Groth16A zk-SNARK proving system introduced by Groth in 2016 that proves arithmetic circuits and requires a separate trusted setup for each circuit. It allows extremely efficient proof verification. Privacy Pools v2 circuits: deposit, ragequit and 25 transact circuits, one per combination of 1 to 5 spent notes and 1 to 5 created notes.

Phase 1For Groth16 trusted setup, phase 1 represents circuit-independent part of the trusted setup (e.g. Perpetual Powers of Tau), which could be reused across different circuits. It generates a part of the secret cryptographic data required for Groth16 ZK protocol to work. If the outcome of phase 1 trusted setup ceremony is known, arbitrary proofs could be forged. is the 80th contribution to the Perpetual Powers of Tau ceremony, prepared for 2^18 constraints.

Phase 2For Groth16 trusted setup, phase 2 represents circuit-dependent part of the trusted setup. It generates a part of the secret cryptographic data required for Groth16 ZK protocol to work. If the outcome of phase 2 trusted setup ceremony is known, arbitrary proofs could be forged., named ppv2-ceremony, ran publicly from 2026-07-08 to 2026-07-14 with 500 contributions per circuitA program written for the purpose of being proven within a proving system. A circuit is a mathematical representation of the computation to be executed, arithmetic circuits and zkVM execution trace are examples of circuits. Circuits can be written in different languages, ranging from low-level to high-level. from 597 distinct participants, followed by one beacon contribution from the RANDAO reveal of beacon-chain slot 14767039. Participants are pseudonymous in the published transcript. The final proving keys, their verification keys and the transcript are published with release v1.0.0 of the monorepo, and the ceremony code is open source.

• Phase 1 ceremony: https://github.com/privacy-ethereum/perpetualpowersoftau.
• Ceremony code and UI: https://github.com/0xbow-io/v2-ceremony.
• Ceremony description and key hashes: https://github.com/0xbow-io/privacy-pools-v2-monorepo/[blob](/glossary#blobs?description=The data that a rollup publishes to its L1%2Fdata availability (DA) layer. They consist of the L2 transactions that are rolled up%2C along with some metadata. Blobs are introduced as a new transaction type within Ethereum with EIP-4844%2C and has rollup scaling specifically in mind. Blobs persist on Ethereum’s Beacon Chain ephemerally.)/61fac03acd1fc306164ddc234f7fac4147d04493/packages/circuits/CEREMONY.mdThe data that a rollup publishes to its L1/data availability (DA) layer. They consist of the L2 transactions that are rolled up, along with some metadata. Blobs are introduced as a new transaction type within Ethereum with EIP-4844, and has rollup scaling specifically in mind. Blobs persist on Ethereum’s Beacon Chain ephemerally.)/61fac03acd1fc306164ddc234f7fac4147d04493/packages/circuits/CEREMONY.md.
• Final keys and transcript: https://github.com/0xbow-io/privacy-pools-v2-monorepo/releases/tag/v1.0.0.