O-0122

University of Waterloo

A university in Waterloo, Ontario, Canada, whose researchers developed zkLLM, a zero-knowledge proof system for large language model inference.

Source reviewed 2026-10-08

01 / The mechanism and its boundary

What is being described

Researchers at the University of Waterloo developed zkLLM, a zero-knowledge proof system for large language model inference S-0023. Their verification work includes:

  • Their CCS 2024 paper combines lookup arguments for non-arithmetic operations with a dedicated proof for attention S-0023. Its zkLLM benchmark proves one forward pass of LLaMa-2-13B over a 2,048-token input in 803 seconds on an NVIDIA A100, with a 188 kB proof and 3.95-second verification S-0023. See Zero-knowledge proofs of inference.
  • The authors released the zkLLM code as an artifact after the conference's artifact evaluation, archived on Zenodo S-1108. The GitHub repository was made read-only in July 2025, and its author states that the project is no longer actively maintained S-1108.
  • The authors wrote that zero-knowledge proofs of LLM training "may pose insurmountable challenges" S-0023; see Zero-knowledge proofs of training constraints.

Organization website ↗

Connections in the research map

Related research

Sources and provenance

  1. S-0023 / Tier A

    zkLLM: Zero Knowledge Proofs for Large Language Models ↗

    H. Sun, J. Li, H. Zhang · 2024 · 2024 ACM SIGSAC Conference on Computer and Communications Security (CCS 2024)

    Supports: zkLLM paper; Waterloo affiliation; 13B forward-pass benchmark; view on proofs of training

    Locator: author affiliations; §8 Table 1; §9

    Version and catalogue details
  2. S-1108 / Tier B

    zkllm-ccs2024: code for zkLLM: Zero Knowledge Proofs for Large Language Models ↗

    H. Sun · 2024 · GitHub; archived on Zenodo

    Supports: zkLLM code and artifact; repository archived and no longer maintained

    Version and catalogue details
Source review date
2026-10-08
Drafted by (source map)
ai
Review handles (source map)
codex-review