Groth16 vs PLONK vs STARK: Proof Size, Gas Cost, and Trust Assumptions in Practice
This analysis compares three leading zero‑knowledge proof frameworks used in production blockchains. Groth16 delivers ~20KB proofs with ~350k gas verification cost on Ethereum, while PLONK shrinks proofs to ~15KB (≈25% smaller) and cuts gas to ~300k (≈15% saving).
Practical Comparison Overview
When evaluating proof systems for deployment, developers must balance three critical dimensions: proof size, verification cost, and trust model. Groth16 offers the smallest gas footprint among traditional SNARKs but requires a complex trusted ceremony that can be compromised if toxic waste is leaked. PLONK simplifies the ceremony and enables reusable proving keys, achieving modest gains in proof size and gas efficiency while retaining the same setup dependency. STARK removes the ceremony entirely, providing quantum‑resistant security at the cost of larger proofs and higher gas, making it suitable for applications that prioritize long‑term trust assumptions over immediate cost savings.