Public parameter used by a verifier to check cryptographic proofs, usually generated alongside a proving key in trusted setups or universal schemes.