[ZK Stack] - Password to download setup keys?

[moneta]

Team or Project

No response

Module Affected

• System contracts (era-system-contracts)
• Smart contracts (era-contracts)
• zkEVM (era-zk_evm)
• Server (zksync-era)
• Prover (era-boojum)
• Fee withdrawer (era-fee-withdrawer)
• Block Explorer (clock-explorer)
• Portal - Wallet + Bridge (dapp-portal)
• Other (please specify below)

Rust Version

1.85.0

Operating System

• Ubuntu
• MacOS
• Windows
• Other (Please specify below)

Issue Description

When I run the circuit-prover it throws error missing setup key files. Here is the log:

2025-06-23T21:21:30.409074Z  INFO zksync_circuit_prover: Loading setup data from disk...
Error: failed to load configs

Caused by:
    0: failed to load setup key mapping
    1: Failed reading setup-data from path: "data/keys/setup_basic_1_data.bin"
    2: No such file or directory (os error 2)
│
■  Command failed to run
│  
■    Status:
│      exit status: 1
│    Stdout:
│      
│  
│    Stderr:
│      
│  
■  Failed to run circuit prover
│  
▲    0: Command failed to run: cargo run --release --package zksync_circuit_prover -- --config-path=/home/revolution/dev_revo/chains/revolution/configs/general.yaml --secrets-path=/home/revolution/dev_revo/chains/revolution/configs/secrets.yaml --light-wvg-count=15 --heavy-wvg-count=1

Prior to this, I have already generate setup keys by running the command and selected generated option:

zkstack prover setup-keys

It successfully generated a lot of key files, but there are no *.data.bin files like setup_basic_1_data.bin

I tried again wth the download option and it throws error: Reauthentication required. I then try to download those key directly using gsutil, it it asks me for a password to access:

$ gsutil cp -r  gs://matterlabs-setup-data-us/d6095b8-gpu /home/revolution/zksync-revo/prover/data/keys 
Reauthentication required.
Please enter your password:

What is password or is any other way to download these key files?

Expected Behavior

Key files are fully downloaded

Current Behavior

No password to download

Repository Link (if applicable)

No response

Additional Details

No response

Prior Research

• Yes, I searched for similar issues and did not find any matching ones.

[kaymomin]

Hey @moneta, thanks for your report! We'll investigate the issue and get back to you.

[moneta]

Thanks @kaymomin for your reply. I just simple ran the ket setup command and here is the log message:

$ zkstack prover setup-keys

┌   ZK Stack CLI 
│
◇  Do you want to download the setup keys or generate them?
│  Download 
│
◇  From which region you want setup keys to be downloaded?
│  Us 
│
◐  Downloading keys from bucket: gs://matterlabs-setup-data-us/d6095b8-gpu to "/home/revolution/zksync-revo/prover/data/keys"                                                                                 │
■  Command failed to run
│  
■    Status:
│      exit status: 1
│    Stdout:
│      
│  
│    Stderr:
│      Reauthentication required.
│      Traceback (most recent call last):
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gsutil", line 21, in <module>
│      gsutil.RunMain()
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gsutil.py", line 158, in RunMain
│      sys.exit(gslib.__main__.main())
│      ^^^^^^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/__main__.py", line 436, in main
│      return _RunNamedCommandAndHandleExceptions(
│      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/__main__.py", line 786, in _RunNamedCommandAndHandleExceptions
│      _HandleUnknownFailure(e)
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/__main__.py", line 633, in _RunNamedCommandAndHandleExceptions
│      return command_runner.RunNamedCommand(command_name,
│      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/command_runner.py", line 421, in RunNamedCommand
│      return_code = command_inst.RunCommand()
│      ^^^^^^^^^^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/commands/rsync.py", line 1695, in RunCommand
│      src_url = self._InsistContainer(self.args[0], False)
│      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/commands/rsync.py", line 1668, in _InsistContainer
│      (url, have_existing_container) = copy_helper.ExpandUrlToSingleBlr(
│      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/utils/copy_helper.py", line 1457, in ExpandUrlToSingleBlr
│      for obj_or_prefix in list_iterator:
│      ^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/gcs_json_api.py", line 818, in ListObjects
│      object_list = self.api_client.objects.List(apitools_request,
│      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/third_party/storage_apitools/storage_v1_client.py", line 1207, in
│      List
│      return self._RunMethod(
│      ^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/base_api.py", line 744, in
│      _RunMethod
│      http_response = http_wrapper.MakeRequest(
│      ^^^^^^^^^^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/http_wrapper.py", line 359, in
│      MakeRequest
│      retry_func(ExceptionRetryArgs(http, http_request, e, retry,
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/utils/retry_util.py", line 65, in WarnAfterManyRetriesHandler
│      http_wrapper.HandleExceptionsAndRebuildHttpConnections(retry_args)
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/http_wrapper.py", line 304, in
│      HandleExceptionsAndRebuildHttpConnections
│      raise retry_args.exc
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/http_wrapper.py", line 348, in
│      MakeRequest
│      return _MakeRequestNoRetry(
│      ^^^^^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/http_wrapper.py", line 397, in
│      _MakeRequestNoRetry
│      info, content = http.request(
│      ^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/vendored/oauth2client/oauth2client/transport.py", line 159, in
│      new_request
│      credentials._refresh(orig_request_method)
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/vendored/oauth2client/oauth2client/client.py", line 761, in
│      _refresh
│      self._do_refresh_request(http)
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/google-reauth-python/google_reauth/reauth_creds.py", line
│      112, in _do_refresh_request
│      self._update(*reauth.refresh_access_token(
│      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/google-reauth-python/google_reauth/reauth.py", line 283, in
│      refresh_access_token
│      rapt = get_rapt_token(
│      ^^^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/google-reauth-python/google_reauth/reauth.py", line 194, in
│      get_rapt_token
│      rapt_token = _obtain_rapt(
│      ^^^^^^^^^^^^^
│      File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/google-reauth-python/google_reauth/reauth.py", line 142, in
│      _obtain_rapt
│      raise errors.ReauthUnattendedError()
│      google_reauth.errors.ReauthUnattendedError: Reauthentication challenge could not be answered because you are not in an
│      interactive session.
│      
│  
■  Command failed to run: gsutil -m rsync -r gs://matterlabs-setup-data-us/d6095b8-gpu /home/revolution/zksync-revo/prover/data/keys

Then I tried to download it directly from command line with gsutil, same error:

$ gsutil cp -r  gs://matterlabs-setup-data-us/d6095b8-gpu /home/revolution/zksync-revo/prover/data/keys 
Reauthentication required.
Please enter your password:

[moneta]

Beside that, I also wonder why the option generate keys in the commande zkstack prover setup-keys doesn't create these .bin files ?

[moneta]

Hi @kaymomin I confirmed this is the issue with local config. I reran the command gcloud init and it fixed the issue.

So the only remaining question is why selecting the generate option does not create the complete set of setup keys?

[kaymomin]

@moneta There was a recent change in our key generation process that ZK Stack hasn’t yet been updated to accommodate. We're planning to address this, but it's still under evaluation.

That said, in most cases, download opt should still work as expected and it’s typically faster and less resource intensive than generating the keys locally.

[moneta]

Thank you @kaymomin