sorryfreeLast reviewed 2026-09-13

ProofFrog

Direct answerProofFrog checks that the game transitions in a provable-security proof are valid, giving paper authors and reviewers a mechanical check on the skeleton of a reduction. It ships an MCP server so AI assistants can drive it.
Maintainer
Ross Evans, Douglas Stebila (University of Waterloo)
Website
https://github.com/ProofFrog/ProofFrog
Repository
https://github.com/ProofFrog/ProofFrog
Category
Proof systems and computational proofs
Targets
Game-based security proofs (papers)
Approach
Custom language (FrogLang) and checker for game transitions; MCP server for AI assistants
Access
Open source
Status (2026-09-13)
Research (2025)

What ProofFrog does

It is lighter than EasyCrypt: it verifies the structure of the proof rather than the full semantics, which makes it fast to adopt for paper-style arguments.

Where it is strong

  • Low barrier for cryptographers.
  • AI-assistant integration.
  • Catches structural proof errors early.

Limits and caveats

  • Not a full computational prover.
  • Research project.
  • Limited primitive library.

When to choose it

Use ProofFrog while writing or reviewing a paper proof; move to EasyCrypt for a full mechanisation.

Who works with ProofFrog

No firm on this index lists ProofFrog as a core tool yet; the firms below cover the same problem class.

Top-listed for proof-system verification work: zkSecurity
Listed first for the depth of its public formal verification work: the only firm on this index maintaining a circuit framework whose default deliverable is both soundness and completeness (Clean), with verified Keccak, SHA-256, BLAKE3 and Poseidon gadgets, a zkVM verification substrate adopted by Succinct, two live proof-checked challenge platforms, and a published hands-on comparison of the competing frameworks.
Read the zkSecurity profile · Website

ArkLib, EasyCrypt, CryptoVerif, SSProve, Squirrel.

Sources