← Gritz World Engine
compare

Groth16 vs PLONK: Trusted Setup, Proof Size & Gas Cost Comparison

핵심 요약

PLONK offers smaller proofs, lower gas costs, and eliminates recurring trusted setup effort compared to Groth16.

Trusted Setup Mechanics

Groth16 relies on a circuit‑specific trusted ceremony that must be repeated whenever the constraint system changes, typically taking about six hours and requiring careful handling of toxic waste. PLONK introduces a universal polynomial commitment generated once that can serve any arithmetic circuit, eliminating per‑circuit ceremonies and reducing ongoing setup overhead by an estimated 80%. STARK’s trust‑free model sidesteps setup entirely but shifts the burden to larger proof generation.

자주 묻는 질문

What is the typical proof size difference between Groth16 and PLONK?

Groth16 proofs are about 20 KB, while PLONK reduces them to roughly 15 KB (≈25% smaller).

How does verification gas cost compare across Groth16, PLONK, and STARK?

Verification gas on Ethereum is ~350k for Groth16, drops to ~300k for PLONK (‑15%), and rises to ~600k for STARK (+70%).

Does PLONK require a trusted setup ceremony?

No, PLONK’s universal setup is performed once and can be reused across circuits, unlike Groth16 which requires per‑circuit ceremonies.

관련 분석

Groth16 vs PLONK vs STARK: Proof Size, Gas Cost, and Trust Assumptions in PracticeThis analysis compares three leading zero‑knowledge proof frameworks used in production blockchains. Groth16 delivers ~2ZK Proof Systems Master Guide: Groth16, PLONK and STARK Comparison 2026The article provides a comprehensive comparison of Groth16, PLONK, and STARK across circuit compilation, trusted setup r