Artemis: Efficient Commit-and-Prove SNARKs for zkML
Not on the map. Why?
Abstract (arXiv)
Ensuring that AI models are both verifiable and privacy-preserving is important for trust, accountability, and compliance. To address these concerns, recent research has focused on developing zero-knowledge machine learning (zkML) techniques that enable the verification of various aspects of ML models without revealing sensitive information. However, while recent zkML advances have made significant improvements to the efficiency of proving ML computations, they have largely overlooked the costly consistency checks on committed model parameters and input data, which have become a dominant performance bottleneck. To address this gap, this paper introduces a new Commit-and-Prove SNARK (CP-SNARK) construction, Artemis, that effectively addresses the emerging challenge of commitment verification in zkML pipelines. In contrast to existing approaches, Artemis is compatible with any homomorphic polynomial commitment, including those without trusted setup. We present the first implementation of this CP-SNARK, evaluate its performance on a diverse set of ML models, and show substantial improvements over existing methods, achieving significant reductions in prover costs and maintaining efficiency even for large-scale models. For example, for the VGG model, we reduce the overhead associated with commitment checks from 11.5x to 1.1x. Our results indicate that Artemis provides a concrete step toward practical deployment of zkML, particularly in settings involving large-scale or complex models.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). First posted on arXiv 18 Sep 2024.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2025: 2; 2026: 5.
7 papers.
- 2025A Survey of Zero-Knowledge Proof Based Verifiable Machine Learningcited by 21
- 2025textttRange-Arithmetic: Verifiable Deep Learning Inference on an Untrusted Partycited by 2
- 2026Hawkeye: Reproducing GPU-Level Non-Determinismcited by 2
- 2026ZK-SR117: A Chunked Zero-Knowledge Attestation Design for Aggregated Fair-Lending Metrics, with a Control Mapping toward Full SR 11-7 Coveragecited by 0
- 2026Maverick: Private and Verifiable LLM Inference Made Practical via Matrix-Vector Multiplication Delegationcited by 0
- 2026Atlas: Efficient Verifiable Semantic Searchcited by 0
- 2026ServeGuard: Verifiable, Bounded-Residual Confinement of Operator-Invisible Channels Without Revealing the Certified Read Factorcited by 0
- 2026ServeGuard: Verifiable, Bounded-Residual Confinement of Operator-Invisible Channels Without Revealing the Certified Read Factor18 Sep 2026
- 2026Atlas: Efficient Verifiable Semantic Search10 Sep 2026
- 2026Maverick: Private and Verifiable LLM Inference Made Practical via Matrix-Vector Multiplication Delegation9 Sep 2026
- 2026ZK-SR117: A Chunked Zero-Knowledge Attestation Design for Aggregated Fair-Lending Metrics, with a Control Mapping toward Full SR 11-7 Coverage1 Aug 2026
- 2026Hawkeye: Reproducing GPU-Level Non-Determinism20 Mar 2026
- 2025textttRange-Arithmetic: Verifiable Deep Learning Inference on an Untrusted Party23 May 2025
- 2025A Survey of Zero-Knowledge Proof Based Verifiable Machine Learning25 Feb 2025