Ceremony

Add your randomness to the key.

A Groth16 key needs a ceremony: many people, each mixing in secrets nobody else knows. If one of them was honest, the key is safe. Today the key has one contribution, ours. Make it two, or two hundred.

…

Your name or handleGoes on the public transcript next to your hash. Leave it empty to be listed as anonymous.Extra entropy (optional)Mixed with the browser’s randomness and your mouse movement on this page. Never sent anywhere.

One contributor at a time; the lock lasts 20 minutes. Downloading the key is 5 MB, contributing takes under a minute on a laptop, uploading is 5 MB again. If any single contributor was honest, the final key is safe.

Transcript

Loading…

Verify the whole chain yourself

curl -O …/withdraw.r1cs
curl -O …/pot14.ptau
curl -O …/zkey-000N.zkey
npx snarkjs zkey verify withdraw.r1cs pot14.ptau zkey-000N.zkey

Prints every contribution and its hash, and checks each one against the last. This site does not do that for you; anyone can.

What happens after: when the round closes, the final key is verified offline against the full transcript, a new verifier is deployed from it, and new pools that use that verifier go live. The current pools keep the current key; their verifier cannot be changed, on purpose.