{"id":"https://openalex.org/W4415006871","doi":"https://doi.org/10.1145/3763110","title":"Tabby: A Synthesis-Aided Compiler for High-Performance Zero-Knowledge Proof Circuits","display_name":"Tabby: A Synthesis-Aided Compiler for High-Performance Zero-Knowledge Proof Circuits","publication_year":2025,"publication_date":"2025-10-09","ids":{"openalex":"https://openalex.org/W4415006871","doi":"https://doi.org/10.1145/3763110"},"language":"en","primary_location":{"id":"doi:10.1145/3763110","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3763110","pdf_url":null,"source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1145/3763110","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054887627","display_name":"Junrui Liu","orcid":"https://orcid.org/0000-0002-9656-7073"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Junrui Liu","raw_affiliation_strings":["University of California at Santa Barbara, Santa Barbara, USA"],"affiliations":[{"raw_affiliation_string":"University of California at Santa Barbara, Santa Barbara, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038461244","display_name":"Jiaxin Song","orcid":"https://orcid.org/0000-0002-4847-9183"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiaxin Song","raw_affiliation_strings":["University of Illinois at Urbana-Champaign, Santa Barbara, USA"],"affiliations":[{"raw_affiliation_string":"University of Illinois at Urbana-Champaign, Santa Barbara, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029897505","display_name":"Yanning Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]},{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Yanning Chen","raw_affiliation_strings":["University of California at Santa Barbara, Santa Barbara, USA","University of Toronto, Toronto, Canada"],"affiliations":[{"raw_affiliation_string":"University of California at Santa Barbara, Santa Barbara, USA","institution_ids":["https://openalex.org/I154570441"]},{"raw_affiliation_string":"University of Toronto, Toronto, Canada","institution_ids":["https://openalex.org/I185261750"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003243458","display_name":"Hanzhi Liu","orcid":"https://orcid.org/0000-0002-7027-8302"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hanzhi Liu","raw_affiliation_strings":["University of California at Santa Barbara, Santa Barbara, USA"],"affiliations":[{"raw_affiliation_string":"University of California at Santa Barbara, Santa Barbara, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115060711","display_name":"Hongbo Wen","orcid":"https://orcid.org/0000-0003-3517-445X"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hongbo Wen","raw_affiliation_strings":["University of California at Santa Barbara, Santa Barbara, USA"],"affiliations":[{"raw_affiliation_string":"University of California at Santa Barbara, Santa Barbara, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024394553","display_name":"Luke Pearson","orcid":null},"institutions":[{"id":"https://openalex.org/I86908984","display_name":"University of French Polynesia","ror":"https://ror.org/03ay59x86","country_code":"PF","type":"education","lineage":["https://openalex.org/I86908984"]}],"countries":["PF"],"is_corresponding":false,"raw_author_name":"Luke Pearson","raw_affiliation_strings":["Polychain Capital, San Francisco, USA"],"affiliations":[{"raw_affiliation_string":"Polychain Capital, San Francisco, USA","institution_ids":["https://openalex.org/I86908984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101573237","display_name":"Yanju Chen","orcid":"https://orcid.org/0000-0002-6494-3126"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]},{"id":"https://openalex.org/I185261750","display_name":"University of Toronto","ror":"https://ror.org/03dbr7087","country_code":"CA","type":"education","lineage":["https://openalex.org/I185261750"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Yanju Chen","raw_affiliation_strings":["University of California at Santa Barbara, Santa Barbara, USA","University of Toronto, Toronto, Canada"],"affiliations":[{"raw_affiliation_string":"University of California at Santa Barbara, Santa Barbara, USA","institution_ids":["https://openalex.org/I154570441"]},{"raw_affiliation_string":"University of Toronto, Toronto, Canada","institution_ids":["https://openalex.org/I185261750"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101567136","display_name":"Yu Feng","orcid":"https://orcid.org/0000-0003-1000-1229"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yu Feng","raw_affiliation_strings":["University of California at Santa Barbara, Santa Barbara, USA"],"affiliations":[{"raw_affiliation_string":"University of California at Santa Barbara, Santa Barbara, USA","institution_ids":["https://openalex.org/I154570441"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5054887627"],"corresponding_institution_ids":["https://openalex.org/I154570441"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14820246,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"9","issue":"OOPSLA2","first_page":"1671","last_page":"1697"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.7782999873161316},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.73089998960495},{"id":"https://openalex.org/keywords/formal-equivalence-checking","display_name":"Formal equivalence checking","score":0.586899995803833},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.49869999289512634},{"id":"https://openalex.org/keywords/equivalence","display_name":"Equivalence (formal languages)","score":0.4945000112056732},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.4562999904155731},{"id":"https://openalex.org/keywords/proof-assistant","display_name":"Proof assistant","score":0.42800000309944153},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.40049999952316284},{"id":"https://openalex.org/keywords/high-level-synthesis","display_name":"High-level synthesis","score":0.37709999084472656},{"id":"https://openalex.org/keywords/compiler-construction","display_name":"Compiler construction","score":0.3700999915599823}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8111000061035156},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.7782999873161316},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.7319999933242798},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.73089998960495},{"id":"https://openalex.org/C96654402","wikidata":"https://www.wikidata.org/wiki/Q5469962","display_name":"Formal equivalence checking","level":3,"score":0.586899995803833},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.49869999289512634},{"id":"https://openalex.org/C2780069185","wikidata":"https://www.wikidata.org/wiki/Q7977945","display_name":"Equivalence (formal languages)","level":2,"score":0.4945000112056732},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.4562999904155731},{"id":"https://openalex.org/C203265346","wikidata":"https://www.wikidata.org/wiki/Q11387554","display_name":"Proof assistant","level":3,"score":0.42800000309944153},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4278999865055084},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.40049999952316284},{"id":"https://openalex.org/C58013763","wikidata":"https://www.wikidata.org/wiki/Q5754574","display_name":"High-level synthesis","level":3,"score":0.37709999084472656},{"id":"https://openalex.org/C9957790","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler construction","level":3,"score":0.3700999915599823},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.3504999876022339},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.3345000147819519},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.33149999380111694},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.325300008058548},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.32420000433921814},{"id":"https://openalex.org/C68366613","wikidata":"https://www.wikidata.org/wiki/Q5156378","display_name":"Compiler correctness","level":3,"score":0.3084999918937683},{"id":"https://openalex.org/C159718280","wikidata":"https://www.wikidata.org/wiki/Q5526353","display_name":"Gas meter prover","level":3,"score":0.2971000075340271},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.29429998993873596},{"id":"https://openalex.org/C190902152","wikidata":"https://www.wikidata.org/wiki/Q1325106","display_name":"Optimizing compiler","level":3,"score":0.2921999990940094},{"id":"https://openalex.org/C70846408","wikidata":"https://www.wikidata.org/wiki/Q220433","display_name":"Logical equivalence","level":3,"score":0.29019999504089355},{"id":"https://openalex.org/C134146338","wikidata":"https://www.wikidata.org/wiki/Q1815901","display_name":"Electronic circuit","level":2,"score":0.29010000824928284},{"id":"https://openalex.org/C190560348","wikidata":"https://www.wikidata.org/wiki/Q3245116","display_name":"Circuit design","level":2,"score":0.28780001401901245},{"id":"https://openalex.org/C77660490","wikidata":"https://www.wikidata.org/wiki/Q244916","display_name":"Intermediate language","level":3,"score":0.2840000092983246},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.28189998865127563},{"id":"https://openalex.org/C2776937632","wikidata":"https://www.wikidata.org/wiki/Q4117718","display_name":"Program synthesis","level":2,"score":0.2791999876499176},{"id":"https://openalex.org/C206880738","wikidata":"https://www.wikidata.org/wiki/Q431667","display_name":"Automated theorem proving","level":2,"score":0.2791000008583069},{"id":"https://openalex.org/C94461902","wikidata":"https://www.wikidata.org/wiki/Q2762418","display_name":"Formal proof","level":3,"score":0.27889999747276306},{"id":"https://openalex.org/C157922185","wikidata":"https://www.wikidata.org/wiki/Q173198","display_name":"Logic synthesis","level":3,"score":0.27459999918937683},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.2736000120639801},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.2703000009059906},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.26829999685287476},{"id":"https://openalex.org/C2777655017","wikidata":"https://www.wikidata.org/wiki/Q1501161","display_name":"Toolbox","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C164155591","wikidata":"https://www.wikidata.org/wiki/Q2067766","display_name":"Satisfiability modulo theories","level":2,"score":0.2619999945163727},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.26190000772476196},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.26109999418258667},{"id":"https://openalex.org/C159254197","wikidata":"https://www.wikidata.org/wiki/Q1144915","display_name":"Lexicographical order","level":2,"score":0.2581999897956848}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3763110","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3763110","pdf_url":null,"source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3763110","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3763110","pdf_url":null,"source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2043007983","https://openalex.org/W2057156093","https://openalex.org/W2134734244","https://openalex.org/W2144752539","https://openalex.org/W2150871888","https://openalex.org/W2330908417","https://openalex.org/W2496543269","https://openalex.org/W2550471858","https://openalex.org/W2561055248","https://openalex.org/W2626990892","https://openalex.org/W2948043589","https://openalex.org/W2964240296","https://openalex.org/W2982474429","https://openalex.org/W3033581399","https://openalex.org/W3169419954","https://openalex.org/W4225922019","https://openalex.org/W4288057723","https://openalex.org/W4290087461","https://openalex.org/W4313270705","https://openalex.org/W4365808257","https://openalex.org/W4384573318","https://openalex.org/W4402288699","https://openalex.org/W7077149723"],"related_works":[],"abstract_inverted_index":{"Zero-knowledge":[0],"proof":[1,110],"(ZKP)":[2],"applications":[3,104],"require":[4],"translating":[5],"high-level":[6,52],"programs":[7,76],"into":[8,77],"arithmetic":[9],"circuits\u2014a":[10],"process":[11],"that":[12,43],"demands":[13],"both":[14],"correctness":[15,89],"and":[16,28,35,64,80,105,113],"efficiency.":[17],"While":[18],"recent":[19],"DSLs":[20],"improve":[21],"usability,":[22],"they":[23],"often":[24],"yield":[25],"suboptimal":[26],"circuits,":[27],"hand-optimized":[29],"implementations":[30],"remain":[31],"difficult":[32],"to":[33,69],"construct":[34],"verify.":[36],"We":[37,95],"present":[38],"Tabby,":[39],"a":[40,56,99],"synthesis-aided":[41],"compiler":[42],"automates":[44],"the":[45],"generation":[46,111],"of":[47,101],"high-performance":[48],"ZK":[49,118],"circuits":[50],"from":[51],"code.":[53],"Tabby":[54,87,97],"introduces":[55],"domain-specific":[57],"intermediate":[58],"representation":[59],"designed":[60],"for":[61],"symbolic":[62],"reasoning":[63],"applies":[65],"sketch-based":[66],"program":[67],"synthesis":[68],"derive":[70],"optimized":[71],"low-level":[72],"implementations.":[73],"By":[74],"decomposing":[75],"reusable":[78],"components":[79],"verifying":[81],"semantic":[82],"equivalence":[83],"via":[84],"SMT-based":[85],"reasoning,":[86],"ensures":[88],"while":[90],"achieving":[91],"substantial":[92],"performance":[93],"improvements.":[94],"evaluate":[96],"on":[98],"suite":[100],"real-world":[102],"ZKP":[103],"demonstrate":[106],"significant":[107],"reductions":[108],"in":[109],"time":[112],"circuit":[114],"size":[115],"against":[116],"mainstream":[117],"compilers.":[119]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}