soundcalc

KO | EN

gitlite — search

#javascript #hacktoberfest #typescript #llm #golang #go #deep-learning #linux #macos #cli #security #pytorch #openai #open-source

(★ 56)

A universal soundness calculator across hash-based zkEVMs and security regimes

soundcalc 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![](https://raw.githubusercontent.com/ethereum/soundcalc/main/assets/logo.png)
# soundcalc

> 🔎 **Reports: [summary](reports/summary.md)** · [individual zkVMs](reports/)

A universal soundness calculator across hash-based zkEVM proof systems and security regimes.

It aims to answer questions like:
- "What if OpenVM moves from Babybear⁴ to Goldilocks³?"
- "What if ZisK moves from the Johnson Bound Regime to the Unique Decoding Regime?"

You can run the calculator by doing `python3 -m soundcalc`.
As a result, the calculator generates / updates reports in [`reports/`](reports/).

## Tests

Tests can be run with `pytest`.

## Supported systems

We currently support the following zkEVMs:
- [ZisK](reports/zisk.md)
- [Pico](reports/pico.md)
- [OpenVM](reports/openvm.md)
- [OpenVM2](reports/openvm2.md)
- [Airbender](reports/airbender.md)
- [SP1](reports/sp1.md)

We support proof systems based on:
- DEEP-ALI
- [Jagged PCS](https://eprint.iacr.org/2025/917)
- [SWIRL](https://openvm.dev/swirl.pdf)

We support the following polynomial commitment schemes:
- FRI
- WHIR

We support the following security regimes (see below for explanation of regimes):
- Unique Decoding Regime (UDR)
- Johnson Bound Regime (JBR)

We support the following lookup protocols:
- [LogUp](https://eprint.iacr.org/2022/1530)
- [LogUp-GKR](https://eprint.iacr.org/2023/1284)

## Background

### Background on Security Regimes

Consider a fixed set of parameters describing the prover and verifier of a FRI-based zkEVM.
To evaluate the *concrete soundness level* of such a system, we introduce a parameter `θ` in the range `(0, 1)`.

The soundness level is then determined as a function of `θ` and the zkEVM parameters (e.g., field size, code rate).
Depending on the value of `θ`, the analysis falls into different regimes:

- **UDR (Unique Decoding Regime):** $\theta  \leq  (1 - \rho)/2$, where $\rho$ is the code rate.
- **JBR (Johnson Bound Regime):** $(1 - \rho)/2 < \theta < 1 - \sqrt{\rho}$.

Crucially, `θ` is not an input to the prover or verifier code—it is only used in the *soundness analysis*.
All regimes therefore apply to the *same zkEVM instance* without any change.

### Background on Proof Size Estimates

The soundcalc proof size estimate is based on counting Merkle proofs and their sizes. It is only an estimate and should be treated as such. To get the actual proof size you need to run the actual prover.

Reports show two estimates:

- **Expected:** Accounts for Merkle path sharing when random queries overlap in the tree (path pruning optimization)
- **Worst case:** Assumes no overlap: each query contributes a full independent path.

In practice, actual proof sizes tend to be closer to the expected estimate.

### Non-Interactive vs. Interactive Security
At the moment, soundcalc estimates the security level of the *interactive oracle proof (IOP)* underlying hash-based zkEVM proof systems, for the notion of *[round-by-round soundness](https://eprint.iacr.org/2019/1261.pdf)*.
That is, security levels are shown for each round, and the total security level is the minimum of all these levels.

For an explanation why the minimum of these levels also corresponds (roughly) to the security level of the non-interactive construction obtained via the [BCS transform](https://eprint.iacr.org/2016/116.pdf), we refer to the section on round-by-round soundness [here](https://eprint.iacr.org/2025/1993.pdf).

Note that this correspondence holds for classical adversaries, but is different for quantum adversaries in the quantum random oracle model, and we refer to [this work](https://eprint.iacr.org/2025/2166.pdf) for details.

We may integrate the compilation to the non-interactive setting (classically and/or quantumly) in the future.

### Incorporation of recent work

A flurry of new results on proximity gaps were published in November 2025 (see [Nico's summary](https://blog.zksecurity.xyz/posts/proximity-conjecture/)).

In soundcalc we have incorporated:
- The improved [UDR](https://github.com/ethereum/soundcalc/commit/89d4f0f72d215199013d1b61c795450ef9eb7060) and [JBR](https://github.com/asn-d6/soundcalc/commit/0f91fba90661af1a7c9fa6114e6eb41e79d18ebf) security bounds of [BCHKS25](https://eprint.iacr.org/2025/2055.pdf)
- The [removal of the CBR regime](https://github.com/asn-d6/soundcalc/commit/ffaeb81dbb450b7c905c90338af8304c2bbfeb60), following the results of [DG25](https://eprint.iacr.org/2025/2010.pdf) and [CS25](https://eprint.iacr.org/2025/2046.pdf)

## Project Layout

- `soundcalc/main.py`: Entry point
- `soundcalc/zkvms/`: One directory per supported zkVM
- `soundcalc/circuits/`: Proof-system-specific circuits for zkVMs
- `soundcalc/proxgaps/`: Proximity gaps related functionality
- `soundcalc/pcs/`: Polynomial commitment schemes functionality
- `soundcalc/common/`: Common utilities used by the entire codebase
- `soundcalc/report.py`: Markdown report generator (ugly!)

## Related work

Inspiration:
- [RISC0 Rust calculator](https://github.com/risc0/risc0/blob/release-2.0/risc0/zkp/src/prove/soundness.rs)
- [`stir-whir-scripts`](https://github.com/WizardOfMenlo/stir-whir-scripts/)
- [Winterfell calculator](https://github.com/facebook/winterfell/blob/main/air/src/proof/security.rs)
- [xkcd](https://xkcd.com/927/)

Based on papers (links point to specific versions where possible):
- [BCIKS20](https://eprint.iacr.org/archive/2020/654/20210703:203025)
- [ethSTARK](https://eprint.iacr.org/archive/2021/582/20250608:155119)
- [Ha22](https://eprint.iacr.org/archive/2022/1216/20241217:162441)
- [BCHKS25](https://eprint.iacr.org/2025/2055)
- [eSTARK](https://eprint.iacr.org/archive/2023/474/20230331:165019)
- [RISC0](https://dev.risczero.com/proof-system-in-detail.pdf)

soundcalc

soundcalc 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

soundcalc

soundcalc 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README