Skip to content
Metlabs - Blockchain Development Company
Contact

Groth16

Groth16 is a succinct non-interactive argument-of-knowledge system based on elliptic-curve pairings. Its proofs contain three group elements and support efficient verification. It requires circuit-specific trusted parameters; byte size and cost depend on the curve and implementation.

Pablo Gómez

Written by Pablo Gómez

Founder & CEO at Metlabs · Reviewed on October 11, 2026

Groth16 represents computation through a circuit and uses parameters binding the proving system to it. A proof verifies existence of a witness satisfying constraints without replaying the entire computation.

Setup requires a trusted ceremony and removal of secrets whose retention could compromise soundness. Changing the circuit requires new circuit-specific parameters.

Proofs contain three group elements. Their size and verification depend on curve and representation. It is used in ZK systems without being universally fastest in every environment.

Sources

  1. Jens Groth: On the Size of Pairing-based Non-interactive Arguments

Also known as

  • Groth 16

Blog categories

Related terms

See the technologies in our stack

As featured in

CointelegraphInvesting.comEl EspañolEmprendedoresEl ObservadorCriptoNoticias