A common reference string (CRS) is a shared set of parameters and common values that a zero-knowledge proof system uses before proving begins. Its setup can determine who must be trusted and what risks participants accept. section 15.3
CRS setups differ in how much trust and reuse they provide:
- Trusted setups leave the creator with secret values that could forge proofs; multi-party computation can reduce the risk if one participant is honest and deletes their secret. section 15.3
- Universal setups support any circuit within a size limit, rather than serving only one circuit. section 15.3
- Transparent setups require no trusted third party and are universal by design. section 15.3

