Groth16
ZK Compression · Bottom
A zk-SNARK proving system producing constant-size proofs (3 group elements, ~128 bytes) with the fastest known verification time, making it the standard for on-chain proof verification where compute is expensive. Solana exposes native alt_bn128 pairing syscalls specifically to enable efficient Groth16 verification within transaction compute limits. The trade-off is a per-circuit trusted setup ceremony — if the ceremony's toxic waste is not properly destroyed, a party could forge proofs.