A specific type of zero-knowledge proof with efficiency benefits, used in some blockchain scaling solutions.