zcash/pasta_curves#35 zcash/pasta_curves#35 Enable `ec-gpu` to generate MSM and FFT code for `pasta_curves` zcash/halo2#379 zcash/halo2#379 Add `ec-gpu` support zcash/pasta_curves#35->zcash/halo2#379 zcash/halo2#426 zcash/halo2#426 Publish `halo2_proofs 0.1.0` zcash/halo2#460 zcash/halo2#460 Publish `halo2_gadgets v0.1.0` zcash/halo2#426->zcash/halo2#460 zcash/halo2#75 zcash/halo2#75 Implement support for recursion zcash/halo2#494 zcash/halo2#494 Consider adding an API that enables application circuits to be built across both fields zcash/halo2#75->zcash/halo2#494 zcash/halo2#79 zcash/halo2#79 Migrate Rescue and Poseidon gadgets to algebraic hash abstraction zcash/halo2#78 zcash/halo2#78 Implement algebraic hash / random oracle abstraction gadget zcash/halo2#78->zcash/halo2#79 zcash/halo2#250 zcash/halo2#250 Implement the logic for the IVC verifier circuit zcash/halo2#78->zcash/halo2#250 zcash/halo2#250->zcash/halo2#75 zcash/halo2#57 zcash/halo2#57 Remove unused fixed_values from ProvingKey zcash/halo2#443 zcash/halo2#443 implement `read` & `write` for `halo2::plonk ::ProvingKey` zcash/halo2#57->zcash/halo2#443 zcash/halo2#449 zcash/halo2#449 Define a stable serialization format for `VerifyingKey` zcash/halo2#420 zcash/halo2#420 CI: Measure memory-usage benchmarks zcash/halo2#418 zcash/halo2#418 [memory optimization] lookup prover memory analysis zcash/halo2#420->zcash/halo2#418 zcash/halo2#427 zcash/halo2#427 Use smaller extended domains where possible during proving zcash/halo2#456 zcash/halo2#456 Benchmark `sha256` gadget. zcash/halo2#455 zcash/halo2#455 [Book] add description of Poseidon gadget and chip zcash/halo2#251 zcash/halo2#251 Implement user-facing API for recursive proving of IVC zcash/halo2#251->zcash/halo2#75 zcash/halo2#437 zcash/halo2#437 Amend user-facing API to work for both IVC and PCD zcash/halo2#251->zcash/halo2#437 zcash/halo2#436 zcash/halo2#436 Implement mock verification circuit for PCD zcash/halo2#436->zcash/halo2#437 zcash/halo2#438 zcash/halo2#438 Implement the logic for the PCD verifier circuit zcash/halo2#436->zcash/halo2#438 zcash/halo2#435 zcash/halo2#435 Implement mock verification circuit for IVC zcash/halo2#247 zcash/halo2#247 Implement underlying scaffolding for creating the IVC proof cycle zcash/halo2#435->zcash/halo2#247 zcash/halo2#247->zcash/halo2#250 zcash/halo2#247->zcash/halo2#251 zcash/halo2#246 zcash/halo2#246 Create recursive proof structures zcash/halo2#246->zcash/halo2#436 zcash/halo2#246->zcash/halo2#435 zcash/halo2#439 zcash/halo2#439 Support split accumulation in Halo 2 zcash/halo2#439->zcash/halo2#246 zcash/halo2#359 zcash/halo2#359 Set up `BaseTranscript`, `ScalarTranscript` zcash/halo2#359->zcash/halo2#247 zcash/halo2#249 zcash/halo2#249 Implement recursion circuit logic for handling public inputs zcash/halo2#249->zcash/halo2#250 zcash/halo2#380 zcash/halo2#380 [book] Fix errors and typos zcash/halo2#380->zcash/halo2#426 zcash/halo2#542 zcash/halo2#542 Relicense Halo 2 crates as MIT OR Apache 2.0 zcash/halo2#542->zcash/halo2#426 zcash/halo2#248 zcash/halo2#248 Implement endoscaling in the circuit zcash/halo2#248->zcash/halo2#250 zcash/halo2#245 zcash/halo2#245 Remove the need to multiply by powers of x^n in verifier zcash/halo2#245->zcash/halo2#250 zcash/halo2#543 zcash/halo2#543 Optimize Fft zcash/halo2#543->zcash/halo2#426 zcash/halo2#548 zcash/halo2#548 Implement performance and memory optimizations for halo2_proofs zcash/halo2#543->zcash/halo2#548 zcash/halo2#483 zcash/halo2#483 Refactor variable-base scalar mul to distinguish the "base field element" case zcash/halo2#312 zcash/halo2#312 [Book] Document gadget API