blog.citrea.xyz
π
What's a trusted setup ceremony and why does Clementine need one?

Citrea uses the RISC Zero zkVM to produce STARK-based proofs for execution proving, it wraps each STARK receipt into a Groth16 SNARK. This final Groth16 proof is very short and fast to verify, which is essential to make verification on Bitcoin's limited scripting language practical. These types of SNARKs, particularly Groth16, require a trusted setup ceremony to ensure the integrity of the proof system.