01 / The mechanism and its boundary
What is being described
Researchers at the University of Waterloo developed zkLLM, a zero-knowledge proof system for large language model inference S-0023. Their verification work includes:
- Their CCS 2024 paper combines lookup arguments for non-arithmetic operations with a dedicated proof for attention S-0023. Its zkLLM benchmark proves one forward pass of LLaMa-2-13B over a 2,048-token input in 803 seconds on an NVIDIA A100, with a 188 kB proof and 3.95-second verification S-0023. See Zero-knowledge proofs of inference.
- The authors released the zkLLM code as an artifact after the conference's artifact evaluation, archived on Zenodo S-1108. The GitHub repository was made read-only in July 2025, and its author states that the project is no longer actively maintained S-1108.
- The authors wrote that zero-knowledge proofs of LLM training "may pose insurmountable challenges" S-0023; see Zero-knowledge proofs of training constraints.
Connections in the research map
Related research
Sources and provenance
- S-0023 / Tier A
zkLLM: Zero Knowledge Proofs for Large Language Models ↗
H. Sun, J. Li, H. Zhang · 2024 · 2024 ACM SIGSAC Conference on Computer and Communications Security (CCS 2024)
Supports: zkLLM paper; Waterloo affiliation; 13B forward-pass benchmark; view on proofs of training
Locator: author affiliations; §8 Table 1; §9
Version and catalogue details - S-1108 / Tier B
zkllm-ccs2024: code for zkLLM: Zero Knowledge Proofs for Large Language Models ↗
H. Sun · 2024 · GitHub; archived on Zenodo
Supports: zkLLM code and artifact; repository archived and no longer maintained
Version and catalogue details
- Source review date
- 2026-10-08
- Drafted by (source map)
- ai
- Review handles (source map)
- codex-review