RISC Zero

RISC Zero allows to prove with ZK the computation of a RISC-V program. The architecture is composed of three parts:

• The RISC-V circuit;
• The aggregation circuit;
• The STARK to SNARK wrapper.

The repo containing the circuits code can be found here. The prover implementation can be found here.

The wrapper uses Groth16 as the proof system, and therefore requires a circuit specific trusted setup. The ceremony can be found here. A high level guide on how to verify the setup can be found here, while the full guide can be found here.

Info about the security model can be found here, the list of audits here and a blog post on overall security here.