You might want to check out bellman-rs for a more battle-tested implementation of Groth16 - it handles edge cases like subgroup checks that are easy to miss when rolling your own pairing-based crypto, plus it's already being used in production by several ZK projects.