zk-rosetta
The same primitive, read across ecosystems. Every entry maps a zero-knowledge protocol to its canonical specification and to audited implementations where they exist.
| ID | Title | Ecosystem | Layer | Category | Status | Primitive | Enables |
|---|---|---|---|---|---|---|---|
| aleo-varuna | Varuna, Aleo's proof system | aleo | L1 | proof-system | final | Poseidon | Varuna, Aleo's universal-SRS SNARK over BLS12-377, with Poseidon for in-circuit and Fiat-Shamir hashing |
| aztec-honk | UltraHonk, Aztec's proof system | aztec | L2 | proof-system | final | BN254 | UltraHonk, Aztec's PLONKish proof system over BN254, proving private smart-contract execution |
| BIP-327 | MuSig2 for BIP340-compatible Multi-Signatures | bitcoin | L1 | multi-sig | final | secp256k1 | Schnorr-based aggregation |
| BIP-340 | Schnorr Signatures for secp256k1 | bitcoin | L1 | primitive | final | secp256k1 | ZK-composable signatures |
| BIP-341 | Taproot: SegWit version 1 spending rules | bitcoin | L1 | privacy | final | secp256k1 | Hidden spending conditions |
| BIP-342 | Validation of Taproot Scripts | bitcoin | L1 | primitive | final | secp256k1 | Batch verify, scripting |
| EIP-1108 | Reduce alt_bn128 precompile gas costs | ethereum | L1 | primitive | final | BN254 | Economical ZK on L1 |
| EIP-152 | Add BLAKE2 compression function `F` precompile | ethereum | L1 | primitive | final | Blake2 | Zcash bridge proofs |
| EIP-1829 | Precompile for Elliptic Curve Linear Combinations | ethereum | L1 | primitive | stagnant | — | Generic MSM |
| EIP-196 | Precompiled contracts for addition and scalar multiplication on the elliptic curve alt_bn128 | ethereum | L1 | primitive | final | BN254 | Groth16 partial verification |
| EIP-197 | Precompiled contracts for optimal ate pairing check on the elliptic curve alt_bn128 | ethereum | L1 | primitive | final | BN254 | Groth16 full verification |
| EIP-2537 | Precompile for BLS12-381 curve operations | ethereum | L1 | primitive | final | BLS12-381 | 128-bit-secure ZK systems |
| EIP-4844 | Shard Blob Transactions | ethereum | L1 | infrastructure | final | KZG | ZK rollup settlement |
| EIP-7951 | Precompile for secp256r1 Curve Support | ethereum | L1 | primitive | final | secp256r1 | HW-native account ZK |
| ERC-1922 | zk-SNARK Verifier Standard | ethereum | app | interface | stagnant | — | Standard verifier ABI |
| ERC-1923 | zk-SNARK Verifier Registry Standard | ethereum | app | interface | stagnant | — | Registry for vkeys |
| ERC-5564 | Stealth Addresses | ethereum | app | privacy | final | secp256k1 | ZK-adjacent private payments |
| ERC-6538 | Stealth Meta-Address Registry | ethereum | app | privacy | final | — | Companion to ERC-5564 |
| ERC-7524 | PLUME Signature in Wallets | ethereum | app | identity | draft | secp256k1 | Anon ZK identity |
| ERC-7812 | ZK Identity Registry | ethereum | app | identity | review | — | ZK provable statements |
| FIP-0079 | Add BLS Aggregate Signatures to FVM | filecoin | L1 | primitive | final | BLS12-381 | On-chain BLS aggregate signatures |
| FIP-0092 | Non-Interactive PoRep | filecoin | L1 | proof-system | final | Poseidon | Non-interactive replication proofs |
| linea-plonk | Linea's PLONK zkEVM proof system | linea | L2 | proof-system | final | BN254 | A recursive prover compressing zkEVM execution into a BN254 PLONK proof |
| midnight-halo2 | Halo2 with KZG, Midnight's proof system | midnight | L1 | proof-system | final | KZG | Halo2 PLONKish proofs with KZG polynomial commitments for Midnight's shielded smart contracts |
| MIP-0003 | Kimchi, a new proof system | mina | L1 | proof-system | final | Poseidon | Kimchi, Mina's upgraded Plonk proof system |
| namada-masp | MASP, Namada's Multi-Asset Shielded Pool | namada | L1 | privacy | final | BLS12-381 | Shielded transfers for arbitrary assets via a Sapling-derived Groth16 circuit over BLS12-381 |
| penumbra-groth16 | Groth16 over decaf377, Penumbra's shielded proofs | penumbra | L1 | privacy | final | Poseidon | Shielded transactions proved with Groth16 over BLS12-377, using the decaf377 group and poseidon377 hashing |
| polygon-zkevm | Polygon zkEVM proof system | polygon | L2 | proof-system | final | BN254 | A Plonky2 zkEVM prover wrapped in a BN254 SNARK for on-chain verification |
| RIP-7212 | Precompile for secp256r1 Curve Support | rollup | L2 | primitive | final | secp256r1 | secp256r1 signature verification on rollups |
| scroll-halo2 | Scroll's Halo2 zkEVM proof system | scroll | L2 | proof-system | final | BN254 | A bytecode-compatible zkEVM proved with Halo2 and KZG commitments over BN254 |
| SIMD-0048 | Native Program for verifying secp256r1 sig. | solana | L1 | primitive | withdrawn | secp256r1 | P256 signature verify |
| SIMD-0075 | Precompile for verifying secp256r1 sig. | solana | L1 | primitive | implemented | secp256r1 | Interop/DA bridge proofs |
| SIMD-0129 | Alt_BN128 Syscalls - Simplified Error Code | solana | L1 | primitive | final | BN254 | Groth16 verify + Poseidon |
| SIMD-0153 | ZK ElGamal Proof Program | solana | L1 | proof-system | final | curve25519 | Confidential transfers |
| SIMD-0284 | Alt-BN128 Little Endian compatibility | solana | L1 | primitive | idea | BN254 | Rust ZK lib compat |
| SIMD-0302 | BN254 G2 Arithmetic Syscalls | solana | L1 | primitive | review | BN254 | Advanced ZK verification |
| SIMD-0388 | BLS12-381 Elliptic Curve Syscalls | solana | L1 | primitive | review | BLS12-381 | 128-bit-secure ZK + Alpenglow |
| SNIP-12 | Off-chain signatures (a la EIP712) | starknet | L2 | interface | review | Poseidon | Typed-data hashing and signing |
| SNIP-6 | Standard Account Interface | starknet | L2 | interface | review | — | Native account abstraction |
| taiko-zkvm | Taiko's zkVM-based validity proofs | taiko | L2 | proof-system | final | BN254 | zkVM block proofs compressed into a BN254 Groth16 proof for on-chain verification |
| ZIP-0216 | Require Canonical Jubjub Point Encodings | zcash | L1 | primitive | final | Jubjub | Non-malleable Sapling encodings |
| ZIP-0224 | Orchard Shielded Protocol | zcash | L1 | privacy | final | Poseidon | Trustless-setup shielded payments |
| zksync-boojum | Boojum, ZKsync Era's proof system | zksync | L2 | proof-system | final | BN254 | A FRI-based zkEVM prover wrapped in a BN254 SNARK for on-chain verification |
43 of 43 entries