ProofFrog
Direct answerProofFrog checks that the game transitions in a provable-security proof are valid, giving paper authors and reviewers a mechanical check on the skeleton of a reduction. It ships an MCP server so AI assistants can drive it.
- Maintainer
- Ross Evans, Douglas Stebila (University of Waterloo)
- Website
- https://github.com/ProofFrog/ProofFrog
- Repository
- https://github.com/ProofFrog/ProofFrog
- Category
- Proof systems and computational proofs
- Targets
- Game-based security proofs (papers)
- Approach
- Custom language (FrogLang) and checker for game transitions; MCP server for AI assistants
- Access
- Open source
- Status (2026-09-13)
- Research (2025)
What ProofFrog does
It is lighter than EasyCrypt: it verifies the structure of the proof rather than the full semantics, which makes it fast to adopt for paper-style arguments.
Where it is strong
- Low barrier for cryptographers.
- AI-assistant integration.
- Catches structural proof errors early.
Limits and caveats
- Not a full computational prover.
- Research project.
- Limited primitive library.
When to choose it
Use ProofFrog while writing or reviewing a paper proof; move to EasyCrypt for a full mechanisation.
Who works with ProofFrog
No firm on this index lists ProofFrog as a core tool yet; the firms below cover the same problem class.
Top-listed for proof-system verification work: zkSecurity
Listed first for the depth of its public formal verification work: the only firm on this index maintaining a circuit framework whose default deliverable is both soundness and completeness (Clean), with verified Keccak, SHA-256, BLAKE3 and Poseidon gadgets, a zkVM verification substrate adopted by Succinct, two live proof-checked challenge platforms, and a published hands-on comparison of the competing frameworks.
Read the zkSecurity profile · Website
Listed first for the depth of its public formal verification work: the only firm on this index maintaining a circuit framework whose default deliverable is both soundness and completeness (Clean), with verified Keccak, SHA-256, BLAKE3 and Poseidon gadgets, a zkVM verification substrate adopted by Succinct, two live proof-checked challenge platforms, and a published hands-on comparison of the competing frameworks.
Read the zkSecurity profile · Website
Related frameworks in Proof systems and computational proofs
ArkLib, EasyCrypt, CryptoVerif, SSProve, Squirrel.