ezkl

ezkl: Zero-Knowledge Proofs for Deep Learning (open-source toolkit)

Venue
Open-source project (no canonical paper)
Proof system
Halo2 (Plonkish arithmetization of ONNX graphs)
Hardware
Intel Xeon E5-2665 (16 threads @ 3.10 GHz), 350 GB RAM -- Bionetta's machine, not ezkl's
Numbers from
primary
Paper
https://github.com/zkonduit/ezkl

Reported benchmarks

modelparamsproving time sproof size mbverification time speak ram gbproving key gbverification key mb
MNIST MLP2M13100.1275.421.158.34.1
LeNet55350.12725.452.11.1
VGG11-mini26500.4789.741.85178.1
ResNet1868400.1825.3103.53417
MobileNetV2143200.17540.6203.957637

proving_time_note: Four hours to prove one MobileNetV2 forward pass, in 204 GB of RAM, for a proof that takes 40 seconds to verify. Bionetta proves the same network in 24.5 seconds on the same machine and 23 seconds on an iPhone. That is the widest single gap in this corpus, and it is not a protocol result -- most of it is that Bionetta's model is public, so its weights are circuit constants and its linear layers cost nothing.

Notes

Not a paper, but the de facto baseline that Jolt Atlas, NANOZK, Bionetta and others benchmark against. On nanoGPT (per Jolt Atlas): 237s proving, >400s key generation, 0.34s verify. WHAT THE BIONETTA NUMBERS DO TO THE STANDARD STORY ABOUT HALO2. The received account -- ours included, on the proof-systems page -- is that PLONKish is the slow-prover/fast-verifier option, and that you tolerate its prover because kilobyte proofs and millisecond verification are what make on-chain settlement possible at all. As configured by ezkl and measured by Bionetta, that second half is simply not true: the proofs run to hundreds of kilobytes, the verification key reaches tens of megabytes, and VERIFICATION TAKES SECONDS TO TENS OF SECONDS. None of that goes on a chain. Halo2 can of course be configured for small proofs; the point is that the toolchain people actually deploy is not, and nobody had published the numbers. Groth16 (Bionetta, ZEN, vCNN) is the line that actually delivers the constant-size proof and the cheap verifier -- at the price of a per-circuit trusted setup.

Our reading

Citation neighbourhood

Edges are a proxy: paper A's text mentions B anywhere (body or bibliography). See the full graph.

Discussed in

Other recorded fields
numbers_note: EVERY NUMBER BELOW WAS MEASURED BY BIONETTA (arXiv:2510.06784v2, Table
  4), not by ezkl. Bionetta picked the models, picked the hardware, and is the system
  being flattered by the comparison. They are recorded here because they are the ONLY
  primary-source ezkl benchmarks in this corpus -- ezkl has no paper -- and because
  a baseline that everyone cites and nobody measures is exactly how a field ends up
  with a folk ranking. Cite them as "Bionetta measured ezkl at ...", never as "ezkl
  reports ...".