Proving Schemes

That's a lovely choice of car. Would you like to drive it "manual", or "automatic"?

If you want to know about the mechanics, motivation, or theory of proving schemes, see the Theory > Proving Schemes section. This section solely addresses the critical steps and quirks of each proving scheme within the Circom DSL.

Groth16

Use of Groth16 incurs the cost of a trusted setup. However, it is also older and more battle-tested. There are certainly cases where Groth16 presents a superior alternative to Circom's Plonk. However, if you are coming from a place of inexperience, use of PlonK will skip the need for a trusted setup ceremony. BattleZips V1 was built in Groth16, and in retrospect PlonK would be the correct proving scheme given a lack of will to run a properly safe and secure Powers of Tau ceremony.

PlonK