Zero-knowledge proof
A cryptographic protocol by which a prover convinces a verifier that a statement is true while revealing nothing beyond the fact that it is true.
A zero-knowledge proof (ZKP) is a cryptographic protocol by which a prover convinces a verifier that a statement is true without revealing any more information than that fact 1.
It has three properties:
- Completeness. If the statement is true and both parties follow the protocol, the verifier accepts 2.
- Soundness. If the statement is false, a verifier that follows the protocol is not convinced 2.
- Zero knowledge. If the statement is true and the prover follows the protocol, the verifier learns no confidential information beyond the fact that the statement is true 2.
The statement combines a public instance, known to both parties, with a private witness known only to the prover 2. Strictly, a proof must be sound even against a computationally unbounded prover; an argument, such as a SNARK (succinct non-interactive argument of knowledge), need only be sound against bounded ones 2. In zero-knowledge proofs of inference the witness is the model's weights: the prover publishes a commitment to them once, then proves for each query that the output equals the committed model applied to the input 3. zkLLM proved one 2,048-token forward pass of LLaMa-2-13B in 803 seconds on one A100 GPU, producing a 188 kB proof of a fixed-point approximation of the model 3. For zero-knowledge proofs of training constraints, a 2026 proposal notes that governance analyses judge such proofs currently impractical at frontier scale, and argues that this limit is not fundamental 4.
Related
Used in
- R2Confidential multi-party verification
- R2Zero-knowledge proofs of inference
- R2Zero-knowledge proofs of training constraints
- R1Attestable zero-knowledge inference prover
- R1Low-trust AI compute verification system overview
- R2zkLLM
- The declared model is the one being served
- A training run stayed within declared limits
Sources
- ANational Institute of Standards and Technology (2026). NIST Computer Security Resource Center (CSRC) Glossary. NIST Computer Security Resource Center. Source recordSupports: NIST definition of zero-knowledge proof · term: zero_knowledge_proof (NISTIR 8301)
- BD. Benarroch et al. (2022). ZKProof Community Reference. ZKProof. Source recordSupports: completeness, soundness and zero knowledge; instance and witness; proofs sound against unbounded provers vs arguments sound against bounded provers; SNARK as succinct non-interactive argument of knowledge · pp. 1–2; p. 21
- AH. Sun et al. (2024). zkLLM: Zero Knowledge Proofs for Large Language Models. 2024 ACM SIGSAC Conference on Computer and Communications Security (CCS 2024). Source recordSupports: one-time weight commitment and per-query proof; LLaMa-2-13B forward pass of 2,048 tokens proved in 803 s on one A100 GPU with a 188 kB proof; fixed-point approximation · abstract; §3; §8, Table 1
- BP. Peigné et al. (2026). Zero knowledge verification for frontier AI training is possible. arXiv. Source recordSupports: recent analyses judge ZK verification of frontier training currently impractical; authors argue this is not fundamental and propose an architecture · abstract