🐸Smart🐸Contract🐸Programmer🐸

You might find these resources helpful youtube.com/watch?v=Hz_XHfxu… blog.zksecurity.xyz/posts/gr…

Groth16 - My trail of thoughts for why the witness consistency check works My reasonings might be flawed Notes github.com/t4sk/notes

Groth16 - part 3 - witness consistency check A random linear combination of polynomials u, v and w forces the prover to construct them correct (somehow). How? next post Notes github.com/t4sk/notes

Groth16 - part 2 - Separating factor Multiplying or dividing by a secret value forces the prover to use elements in the CRS only for the intended purpose Notes github.com/t4sk/notes

Groth16 - part 1 - first attempt Notes github.com/t4sk/notes

clz - opcode to return number of leading 0s in a bit Before clz Binary search to find most and least significant bits With clz msb = 255 - clz(x) lsb = 255 - clz(x & -x) What's x & -x? See code comment Code github.com/t4sk/notes/blob/m… Binary examples github.com/Uniswap/v3-core/b…

Groth16 I will explain the complex equations in the future Notes github.com/t4sk/notes

Elliptic curve add, scalar mul and pair Solidity examples Operations are executed by calling precompiles Reverts if point are invalid (0, 0) is point at infinity Code github.com/t4sk/notes/blob/m…

EC pairing Notes github.com/t4sk/notes

Most digestable explanation of Groth16 soundness building-babylon.net/2026/08… Compares the coefficients for A, B and C and deduces that the ending equation is the Groth16 equation.