Cipher's Groth16 circuits require a one-time multi-party computation to generate the proving and verifying keys. The ceremony is secure as long as at least one participant discards their secret randomness.
cargo install cipher-ceremony.cipher-ceremony contribute on an air-gapped machine.Every contribution is appended to a public transcript with a hash chain. Anyone can re-verify the full transcript with cipher-ceremony verify.