cluster_2 Documentation Q2 2024 cluster_10 DAG Sync cluster_3 Release 5.9.0 cluster_6 Deprecate zcashd cluster_5 NU7 cluster_4 NU6 cluster_14 0.3.1 cluster_0 Post 5.9.0 cluster_13 First user-facing recursion API cluster_12 Zashi 1.1 cluster_11 Scan Performance cluster_8 Documentation Q4 2024 cluster_7 Zcashd wallet replacement cluster_1 Release 5.10.0 cluster_9 Zashi 1.2 zcash/zips#447 zcash/zips#447 [ZIP 315] Best Practices for Wallets zcash/zips#597 zcash/zips#597 Finish all remaining NU5/Orchard documentation zcash/zips#447->zcash/zips#597 zcash/zips#809 zcash/zips#809 Documentation Q2 2024 zcash/zips#597->zcash/zips#809 zcash/zcash#5912 zcash/zcash#5912 NU5 consensus labeled zcash/zcash#3957 zcash/zcash#3957 Link the Code and Protocol zcash/zcash#5912->zcash/zcash#3957 zcash/zips#750 zcash/zips#750 Protocol spec version 2024.5.0 zcash/zcash#3957->zcash/zips#750 zcash/zips#750->zcash/zips#597 zcash/zips#810 zcash/zips#810 Protocol spec version 2024.5.1 zcash/zips#750->zcash/zips#810 zcash/librustzcash#548 zcash/librustzcash#548 Label Consensus Rules zcash/librustzcash#548->zcash/zcash#3957 zcash/zips#772 zcash/zips#772 ZIP-316 should clearly call out that wallets may need to scan multiple T addresses zcash/zips#774 zcash/zips#774 ZIP clarifications zcash/zips#772->zcash/zips#774 zcash/zips#774->zcash/zips#809 zcash/zips#794 zcash/zips#794 ZIP-316 revision 1 effectively blocks 1 transparent receiver zcash/zips#794->zcash/zips#774 zcash/zips#787 zcash/zips#787 ZIP 316: clarify that lengths and typecodes are constrained to be <= MAX_SIZE (0x2000000) zcash/zips#787->zcash/zips#774 zcash/halo2#455 zcash/halo2#455 [Book] add description of Poseidon gadget and chip zcash/halo2#455->zcash/zips#597 zcash/zips#740 zcash/zips#740 [protocol spec] Rename §4.19.3 "Decryption using a Full Viewing Key (Sapling and Orchard)" in the protocol specification zcash/zips#740->zcash/zips#750 zcash/zips#724 zcash/zips#724 [protocol spec] Document infeasibility of an attack on Poseidon zcash/zips#724->zcash/zips#750 zcash/zips#721 zcash/zips#721 [protocol spec] Add links to audits in Acknowledgements zcash/zips#721->zcash/zips#750 zcash/zips#698 zcash/zips#698 [protocol spec] Minor nit in notes on Orchard Key Components section zcash/zips#698->zcash/zips#750 zcash/zips#679 zcash/zips#679 [protocol spec] Section 5.6 of the protocol spec should say that UIVKs and UFVKs are encoded using Bech32m zcash/zips#679->zcash/zips#750 zcash/zips#677 zcash/zips#677 [protocol spec] Descriptions of signature fields should reference the section that specifies their validation zcash/zips#677->zcash/zips#750 zcash/zips#671 zcash/zips#671 [protocol spec] [ZIP 216] Document that it is possible to apply ZIP 216 retroactively zcash/zips#671->zcash/zips#750 zcash/zips#671->zcash/zips#774 zcash/zips#664 zcash/zips#664 [protocol spec] [ZIP 216] Sapling pk_d should not allow the zero point zcash/zips#664->zcash/zips#750 zcash/zips#664->zcash/zips#774 zcash/zips#663 zcash/zips#663 [protocol spec] Make a note in 4.2.2 that the use of DerivePublic is correctly typed zcash/zips#663->zcash/zips#750 zcash/zips#659 zcash/zips#659 [protocol spec] 5.6.3.1 Sapling Payment Addresses does not require that DiversifyHash^Sapling(d) ≠ ⊥ zcash/zips#659->zcash/zips#750 zcash/zips#644 zcash/zips#644 [protocol spec] Change all the PRF^expand domain separator bytes to be expressed in hex zcash/zips#644->zcash/zips#750 zcash/zips#617 zcash/zips#617 [protocol spec] Document how decoding of PHGRProofs in pre-Sapling transactions should be handled for impls that do not verify them zcash/zips#617->zcash/zips#750 zcash/zips#568 zcash/zips#568 [protocol spec] Document block transparent sigops limit consensus rule zcash/zips#568->zcash/zips#750 zcash/zips#539 zcash/zips#539 [protocol spec] [ZIP 203] Clarify how transaction lock times are handled zcash/zips#539->zcash/zips#750 zcash/zips#539->zcash/zips#774 zcash/zips#630 zcash/zips#630 [protocol spec] [ZIP 212] zcashd enforces the 0x02 lead byte for coinbase outputs only after end of the original grace period zcash/zips#630->zcash/zips#750 zcash/zips#630->zcash/zips#774 zcash/zips#488 zcash/zips#488 [protocol spec] Clarify the return type of NoteCommitment^Orchard and usage of it vs NoteCommit^Orchard zcash/zips#488->zcash/zips#750 zcash/zips#430 zcash/zips#430 [protocol spec] In 4.1.11, GroupHash^G(r) should be GroupHash^G(r)* (for Sapling but not Orchard) zcash/zips#430->zcash/zips#750 zcash/zips#415 zcash/zips#415 [protocol spec] 4.17.2 (Spend statement): cm^old is not an auxiliary input zcash/zips#415->zcash/zips#750 zcash/zips#388 zcash/zips#388 [protocol spec] Spec is ambiguous about how to generate Sapling dummy output notes after Canopy zcash/zips#388->zcash/zips#750 zcash/zips#303 zcash/zips#303 [protocol spec] 4.15.1 refers to BCTV14 for encoding zcash/zips#303->zcash/zips#750 zcash/zips#265 zcash/zips#265 [protocol spec] [ZIP 205] Testnet difficulty adjustment: implementation does not match spec zcash/zips#265->zcash/zips#750 zcash/zips#194 zcash/zips#194 [protocol spec] Issues with section 4.21 (Block Chain Scanning for Sapling and Orchard) zcash/zips#194->zcash/zips#750 zcash/zips#186 zcash/zips#186 [protocol spec] Choice of ovk in section 4.19.1 should reflect implementation zcash/zips#186->zcash/zips#750 zcash/zips#195 zcash/zips#195 [protocol spec] Consensus rules about canonical encodings are misstated in the spec zcash/zips#195->zcash/zips#750 zcash/zips#167 zcash/zips#167 [protocol spec] Spec is ambiguous on key validation for KA^Sprout and JoinSplitSig public keys zcash/zips#167->zcash/zips#750 zcash/zips#753 zcash/zips#753 [ZIP 321] Add examples that include Unified Addresses zcash/zips#753->zcash/zips#774 zcash/zips#763 zcash/zips#763 [protocol spec] Spec uses inconsistent terms for ask and ak zcash/zips#763->zcash/zips#750 zcash/zips#696 zcash/zips#696 ZIP 317: explicitly take into account dependent transactions in the block template construction algorithm zcash/zips#696->zcash/zips#774 zcash/zips#683 zcash/zips#683 ZIP 317: clarify that tx_{in,out}_total_size do not include the sizes of tx_{in,out}_count zcash/zips#683->zcash/zips#774 zcash/zips#801 zcash/zips#801 [ZIP 315] Decide on a recommended wallet confirmations policy zcash/zips#801->zcash/zips#447 zcash/zips#785 zcash/zips#785 [ZIP-315] Condense all specified requirements into a table to track wallet compliance. zcash/zips#785->zcash/zips#447 zcash/zips#786 zcash/zips#786 [ZIP-315] TODO's documented on DRAFT zcash/zips#786->zcash/zips#447 zcash/zips#773 zcash/zips#773 Draft a ZIP to provide best practices for Wallet App EOS/EOL zcash/zips#773->zcash/zips#447 zcash/zips#781 zcash/zips#781 Generate transactions to self if needed in order to respect the transparent address gap limit zcash/zips#781->zcash/zips#447 zcash/zips#622 zcash/zips#622 [protocol spec] Add note that there were no signatures before Canopy that depended on the libsodium weirdness zcash/zips#622->zcash/zips#750 zcash/librustzcash#443 zcash/librustzcash#443 Ensure that GitHub's "View license" link points to complete license info for all our repos zcash/librustzcash#443->zcash/zips#809 zcash/librustzcash#722 zcash/librustzcash#722 Create a `tower::Service` for nullifier lookup zcash/librustzcash#720 zcash/librustzcash#720 Implement DAGSync zcash/librustzcash#722->zcash/librustzcash#720 zcash/librustzcash#723 zcash/librustzcash#723 Create a `tower::Service` for fetching a transaction given a `(block, tx_index)` zcash/librustzcash#723->zcash/librustzcash#720 zcash/librustzcash#712 zcash/librustzcash#712 Refactor the Data Access API to support non-block updates zcash/librustzcash#712->zcash/librustzcash#720 zcash/librustzcash#718 zcash/librustzcash#718 Create `tower::Service` wrapping an `FsBlockDb` zcash/librustzcash#718->zcash/librustzcash#720 zcash/librustzcash#776 zcash/librustzcash#776 DAG Sync: Optimize nullifier download zcash/librustzcash#776->zcash/librustzcash#720 zcash/zcash#6805 zcash/zcash#6805 Release 5.9.0 zcash/zcash#6856 zcash/zcash#6856 Release 5.10.0 zcash/zcash#6805->zcash/zcash#6856 zcash/zcash#6855 zcash/zcash#6855 [zcashd book] Document that Debian Bookworm is a tier 1 platform zcash/zcash#6855->zcash/zcash#6805 zcash/zcash#6869 zcash/zcash#6869 Ensure that last release of zcashd EoS-halts before the first incompatible NU activates zcash/zcash#6868 zcash/zcash#6868 Deprecate zcashd zcash/zcash#6869->zcash/zcash#6868 zcash/zips#814 zcash/zips#814 Deploy NU7 zcash/zcash#6868->zcash/zips#814 zcash/zips#811 zcash/zips#811 NU7 zcash/zips#811->zcash/zips#814 zcash/zips#819 zcash/zips#819 After NU7 has activated, document it as a settled network upgrade zcash/zips#814->zcash/zips#819 zcash/zips#813 zcash/zips#813 Protocol spec version 2024.7.0 zcash/zips#813->zcash/zips#811 zcash/zips#818 zcash/zips#818 Protocol spec version 2024.7.1 zcash/zips#813->zcash/zips#818 zcash/zcash#6859 zcash/zcash#6859 Deploy NU6 zcash/zcash#6859->zcash/zips#811 zcash/zips#815 zcash/zips#815 After NU6 has activated, document it as a settled network upgrade zcash/zcash#6859->zcash/zips#815 zcash/zcash#6870 zcash/zcash#6870 Zcashd consensus implementation for NU6 zcash/zcash#6860 zcash/zcash#6860 Zcashd Audit for NU6 Release zcash/zcash#6870->zcash/zcash#6860 zcash/zcash#6860->zcash/zcash#6859 zcash/librustzcash#1356 zcash/librustzcash#1356 librustzcash consensus support for NU6 zcash/librustzcash#1356->zcash/zcash#6859 zcash/zips#802 zcash/zips#802 NU6 zcash/zips#802->zcash/zips#809 zcash/zips#802->zcash/zcash#6859 zcash/zips#812 zcash/zips#812 Protocol spec version 2024.6.0 zcash/zips#810->zcash/zips#812 zcash/zips#812->zcash/zips#802 zcash/zips#816 zcash/zips#816 Protocol spec version 2024.6.1 zcash/zips#812->zcash/zips#816 zcash/zips#803 zcash/zips#803 Specify the consensus rule change for explicit fees zcash/zips#803->zcash/zips#812 zcash/zips#804 zcash/zips#804 [NU6] Funding Stream Changes zcash/zips#804->zcash/zips#812 zcash/zips#686 zcash/zips#686 [ZIP 230] Transaction V6 zcash/zips#686->zcash/zips#812 zcash/zips#686->zcash/zips#803 zcash/zips#524 zcash/zips#524 Allow Orchard funding stream addresses zcash/zips#524->zcash/zips#802 zcash/zips#805 zcash/zips#805 Include the fee explicitly in V6 transactions zcash/zips#805->zcash/zips#686 zcash/zips#497 zcash/zips#497 Consider removing version_group_id from V6 and future transactions. zcash/zips#497->zcash/zips#686 zcash/zips#627 zcash/zips#627 [ZIP 231] Decouple memos from transaction outputs zcash/zips#627->zcash/zips#686 zcash/zips#806 zcash/zips#806 ZIP 253: Deployment of the NU6 Network Upgrade zcash/zips#806->zcash/zips#802 zcash/halo2#756 zcash/halo2#756 Release halo2 0.3.1 zcash/halo2#742 zcash/halo2#742 chore: Speed up random poly generation zcash/halo2#742->zcash/halo2#756 zcash/zcash#4819 zcash/zcash#4819 Backport upstream PRs that remove Boost usage zcash/zcash#4818 zcash/zcash#4818 Remove dependency on Boost zcash/zcash#4819->zcash/zcash#4818 zcash/zcash#5034 zcash/zcash#5034 Bitcoin 0.17 locking PRs zcash/zcash#5050 zcash/zcash#5050 Bitcoin 0.18 locking PRs zcash/zcash#5034->zcash/zcash#5050 zcash/zcash#5163 zcash/zcash#5163 Bitcoin 0.19 locking PRs zcash/zcash#5050->zcash/zcash#5163 zcash/zcash#5660 zcash/zcash#5660 Remove default change address logic from TransactionBuilder zcash/zcash#5686 zcash/zcash#5686 Consider supporting Orchard spending key import & export. zcash/zcash#4825 zcash/zcash#4825 Replace boost::filesystem with std::filesystem zcash/zcash#4825->zcash/zcash#4818 zcash/zcash#5568 zcash/zcash#5568 Add ability to mark notes as locked to the Orchard wallet. zcash/zcash#5655 zcash/zcash#5655 Ensure that `z_sendmany` supports concurrent execution zcash/zcash#5568->zcash/zcash#5655 zcash/zcash#6321 zcash/zcash#6321 Remove `getrawchangeaddress` usage from RPC tests zcash/zcash#6322 zcash/zcash#6322 Replace `getrawchangeaddress` RPC method with a stub zcash/zcash#6321->zcash/zcash#6322 zcash/zcash#6323 zcash/zcash#6323 Remove `z_getnewaddress` usage from RPC tests zcash/zcash#6324 zcash/zcash#6324 Remove `z_getnewaddress` RPC method zcash/zcash#6323->zcash/zcash#6324 zcash/zcash#5988 zcash/zcash#5988 Question about getnewaddress zcash/zcash#6320 zcash/zcash#6320 Replace `getnewaddress` RPC method with a stub zcash/zcash#5988->zcash/zcash#6320 zcash/zcash#6319 zcash/zcash#6319 Remove `getnewaddress` usage from RPC tests zcash/zcash#6319->zcash/zcash#6320 zcash/zcash#6327 zcash/zcash#6327 Remove `z_gettotalbalance` usage from RPC tests zcash/zcash#6328 zcash/zcash#6328 Remove `z_gettotalbalance` RPC method zcash/zcash#6327->zcash/zcash#6328 zcash/zcash#6325 zcash/zcash#6325 Remove `z_getbalance` usage from RPC tests zcash/zcash#6326 zcash/zcash#6326 Remove `z_getbalance` RPC method zcash/zcash#6325->zcash/zcash#6326 zcash/zcash#5925 zcash/zcash#5925 z_getbalance deprecation (question) zcash/zcash#5925->zcash/zcash#6326 zcash/zcash#5716 zcash/zcash#5716 Use an automated tool for generating correct FFI headers. zcash/zcash#6286 zcash/zcash#6286 Backport "Switch chainstate db and cache to per-txout model" (bitcoin/bitcoin#10195) zcash/zcash#6289 zcash/zcash#6289 Consider using non-atomic flushing for `pcoinsTip` zcash/zcash#6286->zcash/zcash#6289 zcash/zcash#6288 zcash/zcash#6288 Backport `-dbcache` change from upstream zcash/zcash#6287 zcash/zcash#6287 Backport `pcoinsTip` memory usage calculation cleanups zcash/zcash#6288->zcash/zcash#6287 zcash/zcash#6287->zcash/zcash#6286 zcash/zcash#6291 zcash/zcash#6291 Include the chain index in flushing decisions zcash/zcash#6287->zcash/zcash#6291 zcash/zcash#6292 zcash/zcash#6292 Restore headers-first behaviour zcash/zcash#6291->zcash/zcash#6292 zcash/zcash#6290 zcash/zcash#6290 Create a standalone LevelDB batch size estimator zcash/zcash#6290->zcash/zcash#6286 zcash/zcash#6290->zcash/zcash#6291 zcash/zcash#5674 zcash/zcash#5674 zcashd-wallet-tool should relax the warning about backing up the wallet file if all keys are derived from the recovery phrase zcash/zcash#5687 zcash/zcash#5687 Support unified full and incoming viewing key import & export. zcash/zcash#5796 zcash/zcash#5796 Add ability to restore the zcashd wallet from the emergency recovery phrase (mnemonic seed). zcash/zcash#5850 zcash/zcash#5850 Add a `finalState` integer parameter to `z_gettreestate` zcash/zcash#2004 zcash/zcash#2004 Determine the `getchaintips` typical distribution from many nodes, investigate outliers, and update our `minconf` recommendations. zcash/zcash#1614 zcash/zcash#1614 choose less recent JoinSplit, Spend, and Action anchors zcash/zcash#2004->zcash/zcash#1614 zcash/zcash#6334 zcash/zcash#6334 Migrate Sapling `IncrementalMerkleTree` from C++ to Rust zcash/zcash#1325 zcash/zcash#1325 Prevent IncrementalWitness malleability zcash/zcash#6334->zcash/zcash#1325 zcash/zcash#6197 zcash/zcash#6197 Use `shardtree` for Sapling wallet batch scanning zcash/zcash#6052 zcash/zcash#6052 Rescanning wallets on mainnet is slower after height 1,700,000 zcash/zcash#6197->zcash/zcash#6052 zcash/zcash#6196 zcash/zcash#6196 Add batched scanning for Orchard outputs. zcash/zcash#6196->zcash/zcash#6052 zcash/zcash#6550 zcash/zcash#6550 Make RPC tests that use `-minrelaytxfee=0` after #6542 use a more realistic fee instead zcash/zcash#5341 zcash/zcash#5341 Add estimated NU activation, halving, and EoS times (local and/or UTC) to `getblockchaininfo` and the metrics screen. zcash/zcash#6453 zcash/zcash#6453 Provide a wallet upgrade path that moves funds held by legacy keys into a unified account. zcash/zcash#6226 zcash/zcash#6226 Mark Orchard notes as locked zcash/zcash#6475 zcash/zcash#6475 Remove redundant RPC argument checks zcash/zcash#6123 zcash/zcash#6123 Add `z_sendfromaccount` method to supersede `z_sendmany` zcash/zcash#6495 zcash/zcash#6495 Deprecate the ability to choose either a UA or a legacy account t-addr as a source of funds in `z_sendmany` zcash/zcash#6123->zcash/zcash#6495 zcash/zcash#6496 zcash/zcash#6496 Add a `z_shieldtransparent` RPC method. zcash/zcash#6496->zcash/zcash#6495 zcash/zcash#6386 zcash/zcash#6386 Check all of the signatures of extern "C" functions zcash/zcash#6386->zcash/zcash#5716 zcash/halo2#247 zcash/halo2#247 Implement underlying scaffolding for creating the IVC proof cycle zcash/halo2#251 zcash/halo2#251 Implement user-facing API for recursive proving of IVC zcash/halo2#247->zcash/halo2#251 zcash/halo2#250 zcash/halo2#250 Implement the logic for the IVC verifier circuit zcash/halo2#247->zcash/halo2#250 zcash/halo2#75 zcash/halo2#75 Implement support for recursion zcash/halo2#251->zcash/halo2#75 zcash/halo2#437 zcash/halo2#437 Amend user-facing API to work for both IVC and PCD zcash/halo2#251->zcash/halo2#437 zcash/halo2#246 zcash/halo2#246 Create recursive proof structures zcash/halo2#435 zcash/halo2#435 Implement mock verification circuit for IVC zcash/halo2#246->zcash/halo2#435 zcash/halo2#436 zcash/halo2#436 Implement mock verification circuit for PCD zcash/halo2#246->zcash/halo2#436 zcash/halo2#435->zcash/halo2#247 zcash/halo2#439 zcash/halo2#439 Support split accumulation in Halo 2 zcash/halo2#439->zcash/halo2#246 zcash/halo2#569 zcash/halo2#569 Implement the recursive proof verifier zcash/halo2#439->zcash/halo2#569 zcash/halo2#643 zcash/halo2#643 Create separate `VerifyingKey` structures for pre- and post- optimisation circuits zcash/halo2#643->zcash/halo2#435 zcash/halo2#643->zcash/halo2#436 zcash/halo2#449 zcash/halo2#449 Define a stable serialization format for `VerifyingKey` zcash/halo2#643->zcash/halo2#449 zcash/librustzcash#1167 zcash/librustzcash#1167 zcash_client_backend: Implement ZIP 320 transaction generation zcash/librustzcash#1354 zcash/librustzcash#1354 zcash_client_backend: Recover funds sent back to or left in a ZIP 320 ephemeral t-addr zcash/librustzcash#1167->zcash/librustzcash#1354 zcash/librustzcash#1338 zcash/librustzcash#1338 zcash_client_backend 0.13.0 zcash/librustzcash#1167->zcash/librustzcash#1338 zcash/librustzcash#968 zcash/librustzcash#968 zcash_client_sqlite: Require sufficient chain tip scanning prior to spendability zcash/librustzcash#968->zcash/librustzcash#720 zcash/librustzcash#920 zcash/librustzcash#920 Create benchmark suites for note selection and/or proposal creation. zcash/zips#815->zcash/zips#816 zcash/zips#816->zcash/zips#813 zcash/zips#277 zcash/zips#277 [protocol spec] Reference scriptPubKey encodings of transparent addresses in 5.6.1 zcash/zips#277->zcash/zips#816 zcash/zips#310 zcash/zips#310 [protocol spec] Include a cost analysis of attacks against BLS12-381 (STNFS, Cheon), Jubjub, and Pallas/Vesta in the protocol spec zcash/zips#310->zcash/zips#816 zcash/zips#665 zcash/zips#665 [protocol spec] Document in 4.9 the security requirement that the note commitment tree must (at least for Sapling) be positionally binding zcash/zips#665->zcash/zips#816 zcash/zips#184 zcash/zips#184 [protocol spec] Clarify why zero-value notes cannot be used for roadblock attacks (section 8.4) zcash/zips#184->zcash/zips#816 zcash/zips#263 zcash/zips#263 [protocol spec] Say that note ciphertexts are indistinguishable from uniform-random zcash/zips#263->zcash/zips#816 zcash/librustzcash#1349 zcash/librustzcash#1349 zcash_client_backend: Required functionality for full `zcashd` wallet replacement. zcash/librustzcash#1349->zcash/zcash#6868 zcash/zips#675 zcash/zips#675 [ZIP 332] Wallet Recovery from zcashd HD Seeds zcash/zips#675->zcash/zcash#5796 zcash/zips#675->zcash/zcash#6453 zcash/librustzcash#1348 zcash/librustzcash#1348 zcash_client_backend: Add the ability to restore from `zcashd` seed phrases. zcash/zips#675->zcash/librustzcash#1348 zcash/librustzcash#1348->zcash/librustzcash#1349 zcash/librustzcash#1360 zcash/librustzcash#1360 Transaction builder support for spending (almost) arbitrary transparent inputs. zcash/librustzcash#1370 zcash/librustzcash#1370 Make it possible to construct proposals that spend stored transparent funds zcash/librustzcash#1360->zcash/librustzcash#1370 zcash/librustzcash#1362 zcash/librustzcash#1362 Create a generator and evaluator for arbitrary transparent Zcash script. zcash/librustzcash#1362->zcash/librustzcash#1360 zcash/librustzcash#1371 zcash/librustzcash#1371 Create structures for storing broader kinds of transparent spending key material zcash/librustzcash#1362->zcash/librustzcash#1371 zcash/librustzcash#1365 zcash/librustzcash#1365 Add the functionality to restore from `zcashd` wallet.dat or wallet dump files. zcash/librustzcash#1365->zcash/librustzcash#1349 zcash/librustzcash#578 zcash/librustzcash#578 Survey key storage and usage of `zcashd` and `zcash_client_sqlite` zcash/librustzcash#578->zcash/librustzcash#1348 zcash/librustzcash#579 zcash/librustzcash#579 Redesign Rust types for representing wallet key material zcash/librustzcash#578->zcash/librustzcash#579 zcash/librustzcash#578->zcash/librustzcash#1371 zcash/librustzcash#579->zcash/librustzcash#1349 zcash/librustzcash#1361 zcash/librustzcash#1361 `zcash_client_backend`: Add support for full transparent coin tracking. zcash/librustzcash#1361->zcash/librustzcash#1370 zcash/librustzcash#1353 zcash/librustzcash#1353 zcash_client_backend: If a seed is reused, transparent UTXO spends from one wallet may not be detected in the other. zcash/librustzcash#1361->zcash/librustzcash#1353 zcash/librustzcash#1363 zcash/librustzcash#1363 Enumerate the capabilities exposed by zcashd APIs for spending transparent coins. zcash/librustzcash#1363->zcash/librustzcash#1360 zcash/librustzcash#1363->zcash/librustzcash#1362 zcash/librustzcash#1364 zcash/librustzcash#1364 Consider whether we provide drop-in support for at least some `zcashd` RPC APIs. zcash/librustzcash#1363->zcash/librustzcash#1364 zcash/librustzcash#1350 zcash/librustzcash#1350 Determine what subset of zcashd wallet functionality will be required by users in a replacement wallet (independent of how it is accessed) zcash/librustzcash#1363->zcash/librustzcash#1350 zcash/librustzcash#1369 zcash/librustzcash#1369 Implement the subset of `zcashd` RPCs that expose the decided-upon wallet functionality zcash/librustzcash#1364->zcash/librustzcash#1369 zcash/librustzcash#1350->zcash/librustzcash#1349 zcash/librustzcash#1335 zcash/librustzcash#1335 Support for multiple accounts zcash/librustzcash#1350->zcash/librustzcash#1335 zcash/librustzcash#1350->zcash/librustzcash#1369 zcash/librustzcash#1335->zcash/librustzcash#1349 zcash/librustzcash#1074 zcash/librustzcash#1074 Transparent input details should be retrieved with transactions on account recovery zcash/librustzcash#1074->zcash/librustzcash#1349 zcash/librustzcash#1351 zcash/librustzcash#1351 Wrap the `zcash_client_backend` sync engine as a stateful wallet service application. zcash/librustzcash#1351->zcash/librustzcash#1349 zcash/librustzcash#1351->zcash/librustzcash#1364 zcash/zcash#6329 zcash/zcash#6329 Remove `z_listaddresses` usage from RPC tests zcash/zcash#6330 zcash/zcash#6330 Remove `z_listaddresses` RPC method zcash/zcash#6329->zcash/zcash#6330 zcash/zcash#6330->zcash/zcash#6856 zcash/zcash#5583 zcash/zcash#5583 Clean up null pointer handling in Rust FFI zcash/zcash#5583->zcash/zcash#5716 zcash/zcash#5583->zcash/zcash#6856 zcash/zcash#6657 zcash/zcash#6657 Availability of parameter and depends-sources downloads is dependent on availability of download.z.cash zcash/zcash#6657->zcash/zcash#6856 zcash/zcash#6781 zcash/zcash#6781 Disconnect on a malformed version message, and reject duplicate verack messages zcash/zcash#6781->zcash/zcash#6856 zcash/zcash#6867 zcash/zcash#6867 Drop Intel macOS to Tier 3 zcash/zcash#6867->zcash/zcash#6856 zcash/zcash#6861 zcash/zcash#6861 `cargo-deny` has MSRV 1.74, which is inconvenient since zcashd has 1.69.0 in `rust- toolchain.toml` zcash/zcash#6867->zcash/zcash#6861 zcash/zcash#6861->zcash/zcash#6856 zcash/zcash#6389 zcash/zcash#6389 Add `z_getbalances` RPC method zcash/zcash#6389->zcash/zcash#6327 zcash/zcash#6389->zcash/zcash#6325 zcash/zcash#6389->zcash/zcash#5925 zcash/zcash#6389->zcash/zcash#6856 zcash/zcash#5941 zcash/zcash#5941 Make `getbalance` only return balance information for the legacy account. zcash/zcash#5941->zcash/zcash#6856 zcash/zcash#4859 zcash/zcash#4859 control-C stops zcashd more quickly during startup zcash/zcash#4859->zcash/zcash#6856 zcash/zcash#6821 zcash/zcash#6821 `gettransaction` reports incorrect fee when `z_sendmany` has a mix of Sapling and Orchard outputs. zcash/zcash#6821->zcash/zcash#6856 zcash/librustzcash#1355 zcash/librustzcash#1355 Passive note management zcash/librustzcash#1370->zcash/librustzcash#1349 zcash/librustzcash#1371->zcash/librustzcash#1370 zcash/librustzcash#1353->zcash/librustzcash#1349 zcash/librustzcash#1353->zcash/librustzcash#1338 zcash/librustzcash#1369->zcash/librustzcash#1349 zcash/librustzcash#1231 zcash/librustzcash#1231 zcash_client_sqlite 0.11.0 zcash/librustzcash#1338->zcash/librustzcash#1231 zcash/halo2#250->zcash/halo2#75 zcash/halo2#494 zcash/halo2#494 Consider adding an API that enables application circuits to be built across both fields zcash/halo2#75->zcash/halo2#494 zcash/halo2#436->zcash/halo2#437 zcash/halo2#438 zcash/halo2#438 Implement the logic for the PCD verifier circuit zcash/halo2#436->zcash/halo2#438 zcash/halo2#569->zcash/halo2#247 zcash/zips#819->zcash/zips#818 zcash/zcash#2534 zcash/zcash#2534 Bitcoin 0.12 P2P/Net PRs 1 zcash/zcash#5003 zcash/zcash#5003 net: prerequisites for p2p encapsulation changes zcash/zcash#2534->zcash/zcash#5003 zcash/zcash#5005 zcash/zcash#5005 net: Split DNS resolving functionality out of net structures zcash/zcash#2534->zcash/zcash#5005 zcash/zcash#2074 zcash/zcash#2074 Bitcoin Core 0.12.0 zcash/zcash#2534->zcash/zcash#2074 zcash/zcash#5004 zcash/zcash#5004 Verify that expected services are available from peer nodes & disconnect otherwise. zcash/zcash#5003->zcash/zcash#5004 zcash/zcash#5006 zcash/zcash#5006 Rework AddNode behaviour zcash/zcash#5005->zcash/zcash#5006 zcash/zcash#5004->zcash/zcash#5006 zcash/zcash#5008 zcash/zcash#5008 net: Feeler connections to increase online addrs in the tried table. zcash/zcash#5006->zcash/zcash#5008 zcash/zcash#1317 zcash/zcash#1317 Adopt Eclipse attack mitigation zcash/zcash#5008->zcash/zcash#1317 zcash/zcash#4190 zcash/zcash#4190 TZE: implement zcashd 'host' logic. zcash/zcash#4189 zcash/zcash#4189 Deploy TZE protocol feature zcash/zcash#4190->zcash/zcash#4189 zcash/zcash#5198 zcash/zcash#5198 Switch to a `(txid, auth_digest)` identifier in places where the node needs to commit to a specific instance of a transaction zcash/zcash#4585 zcash/zcash#4585 Add lightwalletd configuration enabled information to getinfo output zcash/zcash#4173 zcash/zcash#4173 Lightwalletd mainnet/testnet compatibility zcash/zcash#2718 zcash/zcash#2718 Commit to an absolute minimum time before which any kind of address withdrawal zcash/zcash#3788 zcash/zcash#3788 Sprout Deprecation roadmap zcash/zcash#2718->zcash/zcash#3788 zcash/zcash#4203 zcash/zcash#4203 Retire Transparent Address Pool zcash/zcash#2718->zcash/zcash#4203 zcash/zcash#4202 zcash/zcash#4202 Sprout Pool Retirement zcash/zcash#3788->zcash/zcash#4202 zcash/zcash#4922 zcash/zcash#4922 Update leveldb and ctaes subtrees zcash/zcash#2116 zcash/zcash#2116 HTLC for Bitcoin zcash/zcash#2115 zcash/zcash#2115 HTLC zcash/zcash#2116->zcash/zcash#2115 zcash/zcash#2117 zcash/zcash#2117 HTLC for Zcash zcash/zcash#2117->zcash/zcash#2115 zcash/zcash#5277 zcash/zcash#5277 addrv2 support in zcashd zcash/zcash#3051 zcash/zcash#3051 Upgrade Tor support to v3 onion hidden service protocol zcash/zcash#5277->zcash/zcash#3051 zcash/zcash#1111 zcash/zcash#1111 I2P Integration zcash/zcash#5277->zcash/zcash#1111 zcash/zips#542 zcash/zips#542 [ZIP 155] addrv2 message zcash/zips#542->zcash/zcash#5277 zcash/zcash#3882 zcash/zcash#3882 Write a Seeder Web Service zcash/zcash#3883 zcash/zcash#3883 Modify Zcashd to use the new Seeder Web Service zcash/zcash#3882->zcash/zcash#3883 zcash/zcash#3884 zcash/zcash#3884 Turn off the DNS Seeder Service zcash/zcash#3883->zcash/zcash#3884 zcash/zcash#3881 zcash/zcash#3881 Replace the Seeder zcash/zcash#3884->zcash/zcash#3881 zcash/zcash#3787 zcash/zcash#3787 Deprecate the Sprout value pool by moving remaining funds to a permissioned faucet zcash/zcash#3787->zcash/zcash#4202 zcash/librustzcash#210 zcash/librustzcash#210 ZIP 304: Message signing and verification for Sapling addresses zcash/zcash#1770 zcash/zcash#1770 signmessage and verifymessage RPC calls do not support z addresses zcash/librustzcash#210->zcash/zcash#1770 zcash/zcash#2118 zcash/zcash#2118 HTLC for Ethereum zcash/zcash#2118->zcash/zcash#2115 zcash/zcash#1277 zcash/zcash#1277 Add lockunspent RPC command for notes zcash/zcash#6412 zcash/zcash#6412 Make TransactionBuilderResult less stringy zcash/zcash#5679 zcash/zcash#5679 Add an `optimisticallyShield` strategy to `z_sendmany` zcash/zcash#5747 zcash/zcash#5747 Add RPC test for "`-reindex` clears banlist" zcash/zcash#1761 zcash/zcash#1761 Refactor `CreateNewBlock` to facilitate mock-based unit-testing. zcash/zcash#6305 zcash/zcash#6305 Backport upstream miner PRs prior to `src/miner.* -> src/node/miner.*` rename zcash/zcash#2225 zcash/zcash#2225 Bitcoin 0.12 wallet PRs zcash/zcash#2225->zcash/zcash#2074 zcash/zcash#5456 zcash/zcash#5456 Refactor `UnifiedAddress` class to not assume preference order internally zcash/zcash#6072 zcash/zcash#6072 Backport more recent changes to `CuckooCache` zcash/zcash#5822 zcash/zcash#5822 Add a regression test to guard against recurrence of #5819 zcash/zcash#6081 zcash/zcash#6081 Replace SHA-256 C++ implementation with `sha2` Rust crate zcash/zcash#6080 zcash/zcash#6080 Backport more recent SHA-256 assembly optimisations zcash/zcash#4405 zcash/zcash#4405 Enable cross-compilation to `arm64-apple-darwin` (macOS M1 ARM binaries) zcash/zcash#5502 zcash/zcash#5502 Add native build support for macOS M1 ARM zcash/zcash#4405->zcash/zcash#5502 zcash/zcash#5884 zcash/zcash#5884 Backport upstream macOS build changes from 2021 zcash/zcash#5884->zcash/zcash#4405 zcash/librustzcash#226 zcash/librustzcash#226 Bring in Bolt TZE zcash/librustzcash#225 zcash/librustzcash#225 Add Bolt TZE support to the transaction builder zcash/librustzcash#226->zcash/librustzcash#225 zcash/zips#286 zcash/zips#286 Research spike: Check whether the scripting system can reason about / require properties of transparent outputs within an input script in the same transaction. zcash/zips#286->zcash/zcash#4203 zcash/zcash#3431 zcash/zcash#3431 Mandatory conversion of transparent value into shielded notes zcash/zcash#3431->zcash/zcash#4203 zcash/zcash#1133 zcash/zcash#1133 Restrict block size for transparent transactions / preserve space for Sapling/Orchard-only shielded transactions. zcash/zcash#1133->zcash/zcash#4203 zcash/zcash#3800 zcash/zcash#3800 Warn Upon Use of Transparent Addresses zcash/zcash#3800->zcash/zcash#4203 zcash/zcash#5980 zcash/zcash#5980 Deadlock in `zc-opencon` thread on node shutdown zcash/zcash#2425 zcash/zcash#2425 Pay-to-verification-key payments zcash/zcash#2425->zcash/zcash#4203 zcash/zcash#2036 zcash/zcash#2036 payment disclosure zcash/zcash#2036->zcash/zcash#4203 zcash/zcash#2631 zcash/zcash#2631 Per-field selective disclosure zcash/zcash#2631->zcash/zcash#4203 zcash/zcash#3828 zcash/zcash#3828 Payment Source Disclosure zcash/zcash#3828->zcash/zcash#4203 zcash/zips#361 zcash/zips#361 ZIP: Selective disclosure zcash/zips#361->zcash/zcash#4203 zcash/zips#799 zcash/zips#799 [Orchard] Extend ZIP 304 to support signatures with Orchard spending keys zcash/zips#799->zcash/zcash#1770 zcash/zips#387 zcash/zips#387 [ZIP 311] Sapling and Orchard Payment Disclosures zcash/zips#387->zcash/zcash#4203 zcash/zips#346 zcash/zips#346 [ZIP 305] Best practices for hardware wallets supporting Sapling zcash/zips#346->zcash/zcash#4203 zcash/zips#452 zcash/zips#452 Develop one or more Pool Lifecycle proposals to become ZIPs. zcash/zips#452->zcash/zcash#4203 zcash/zips#452->zcash/zcash#4202 zcash/zcash#406 zcash/zcash#406 Implement selective disclosure zcash/zcash#406->zcash/zcash#4203 zcash/zcash#2558 zcash/zcash#2558 Public transactions using the shielded protocol zcash/zcash#2558->zcash/zcash#4203 zcash/zcash#4099 zcash/zcash#4099 Investigate the distribution of P2SH scripts zcash/zcash#4099->zcash/librustzcash#1360 zcash/zcash#4099->zcash/librustzcash#1362 zcash/zcash#4099->zcash/zcash#4203 zcash/zcash#6583 zcash/zcash#6583 Update `libsecp256k1` to 0.3.0 (`bdf39000b9c`) zcash/zcash#6584 zcash/zcash#6584 Update `libsecp256k1` to 0.3.1 (`4258c54f4e`) zcash/zcash#6583->zcash/zcash#6584 zcash/zcash#6497 zcash/zcash#6497 Replace `GetFilteredNotes` with an evolved version of `FindSpendableInputs` zcash/zcash#6625 zcash/zcash#6625 Fix autoreconf warnings and error in future zcash/zcash#6636 zcash/zcash#6636 Reduce re-enabled diagnostics zcash/zcash#6641 zcash/zcash#6641 Fix a number of low- effort warnings zcash/zcash#6636->zcash/zcash#6641 zcash/zcash#6829 zcash/zcash#6829 Replace `BatchRunner` with `zcash_client_backend` implementation zcash/zcash#6837 zcash/zcash#6837 Add support for Debian in GitHub Actions zcash/zcash#6873 zcash/zcash#6873 Enumerate the data / state that needs to be migrated from `wallet.dat` to a future full node wallet zcash/zips#821 zcash/zips#821 Define a standard wallet export format. zcash/zcash#6873->zcash/zips#821 zcash/zips#823 zcash/zips#823 [Part of ZIP 315] Document things that cannot be recovered from either the chain or any new export wallet format zcash/zcash#6873->zcash/zips#823 zcash/zips#821->zcash/librustzcash#1365 zcash/zips#240 zcash/zips#240 Add ZIPs 68, 112, and 113 (OP_CHECKSEQUENCEVERIFY) zcash/zcash#2237 zcash/zcash#2237 Support OP_CHECKSEQUENCEVERIFY (and related changes to block timestamp semantics) zcash/zips#240->zcash/zcash#2237 zcash/zcash#559 zcash/zcash#559 features necessary for Lighting Network zcash/zcash#2237->zcash/zcash#559 zcash/librustzcash#1153 zcash/librustzcash#1153 zcash_address: Support Zip 316, Revision 1 (MUST-understand metadata) zcash/librustzcash#1152 zcash/librustzcash#1152 Support the creation of WASM-based Javascript libraries for handling Unified Address parsing. zcash/librustzcash#1153->zcash/librustzcash#1152 zcash/librustzcash#1230 zcash/librustzcash#1230 zcash_address release 0.4.0 zcash/librustzcash#1153->zcash/librustzcash#1230 zcash/librustzcash#1230->zcash/librustzcash#1338 zcash/sapling-crypto#115 zcash/sapling-crypto#115 zcash_proofs: Extract separate verifiers for proofs, spendAuthSigs, and bindingSig from Sapli ngVerificationContext zcash/librustzcash#503 zcash/librustzcash#503 `zcash_client_sqlite`: Add migration to link `utxo` table to `transactions` zcash/librustzcash#500 zcash/librustzcash#500 Remove zcash_client_sqlit e::wallet::delete_utxos_a bove zcash/librustzcash#500->zcash/librustzcash#1231 zcash/librustzcash#512 zcash/librustzcash#512 CI: Run tests with cargo- nextest zcash/librustzcash#617 zcash/librustzcash#617 Select the most-preferred shielded receiver in `shi eld_transparent_funds` zcash/librustzcash#1178 zcash/librustzcash#1178 zcash_client_backend 0.12.2 zcash/librustzcash#617->zcash/librustzcash#1178 zcash/librustzcash#1178->zcash/librustzcash#1338 zcash/librustzcash#704 zcash/librustzcash#704 introduce ability to cancel `scan_cached_blocks` zcash/librustzcash#981 zcash/librustzcash#981 zcash_client_backend: Implement & standardize a JSON encoding for data access API errors. zcash/librustzcash#936 zcash/librustzcash#936 sent_notes table is not fully populated after a recovery from seed zcash/librustzcash#936->zcash/librustzcash#1231 zcash/librustzcash#1027 zcash/librustzcash#1027 Document what the sent_notes table is intended to contain and why zcash/librustzcash#1027->zcash/librustzcash#936 zcash/librustzcash#899 zcash/librustzcash#899 `zcash_client_sqlite`: Double-entry accounting not working for recover- from-seed zcash/librustzcash#1027->zcash/librustzcash#899 zcash/librustzcash#899->zcash/librustzcash#1231 zcash/librustzcash#692 zcash/librustzcash#692 Use Orchard inputs in `bi nding_sig_absent_if_no_sh ielded_spend_or_output` test zcash/librustzcash#1317 zcash/librustzcash#1317 zcash_primitives 0.15.1 zcash/librustzcash#692->zcash/librustzcash#1317 zcash/librustzcash#1179 zcash/librustzcash#1179 zcash_primitives 0.16.0, zcash_proofs 0.16.0 zcash/librustzcash#1317->zcash/librustzcash#1179 zcash/librustzcash#1091 zcash/librustzcash#1091 Expose the stages of transaction proving and signing via the `zcash_client_backend` API zcash/librustzcash#1154 zcash/librustzcash#1154 Support the creation of WASM-based libraries for handling ZIP 321 generation. zcash/librustzcash#1161 zcash/librustzcash#1161 `zcash_client_backend`: Add a `sapling` feature flag that can be switched off to remove the dependency upon `sapling- crypto`. zcash/librustzcash#1161->zcash/librustzcash#1338 zcash/librustzcash#982 zcash/librustzcash#982 zcash_client_backend: Use knowledge of inserted treestates to reduce time to spendability zcash/librustzcash#982->zcash/librustzcash#1178 zcash/librustzcash#940 zcash/librustzcash#940 get_wallet_summary is inconsistent about including funds from mempool txns that can still be mined when min_confirmations == 0 zcash/librustzcash#940->zcash/librustzcash#1178 zcash/librustzcash#1162 zcash/librustzcash#1162 `zcash_primitives`: Add `orchard` and `sapling` feature flags. zcash/librustzcash#1162->zcash/librustzcash#1179 zcash/librustzcash#1125 zcash/librustzcash#1125 Ignore subtree roots in the unstable chain region on the Rust side zcash/librustzcash#1125->zcash/librustzcash#1178 zcash/librustzcash#1216 zcash/librustzcash#1216 Implement the policy for which pool change goes to when creating a transaction zcash/librustzcash#1216->zcash/librustzcash#1178 zcash/librustzcash#1075 zcash/librustzcash#1075 Design for importing FVKs, IVKs, and even Unified spending keys zcash/librustzcash#1222 zcash/librustzcash#1222 Consider changing the change policy to hide (some) pool-crossing amounts zcash/librustzcash#1046 zcash/librustzcash#1046 zcash_client_sqlite: Identify shielding transactions in the output of the v_transactions view. zcash/librustzcash#1046->zcash/librustzcash#1231 zcash/librustzcash#1367 zcash/librustzcash#1367 Create a "feathered" wrapper around `shardtree` to enable tracking witnesses for multiple candidate chains zcash/librustzcash#1366 zcash/librustzcash#1366 Enable wallets build with the `zcash_client_backend` APIs to track multiple candidate chain tips zcash/librustzcash#1367->zcash/librustzcash#1366 zcash/librustzcash#1366->zcash/librustzcash#1349 zcash/librustzcash#1368 zcash/librustzcash#1368 zcash_client_backend: Introduce (initially internal) "sync API" between the scanning and wallet parts of `scan_cached_blocks` zcash/librustzcash#1368->zcash/librustzcash#1349 zcash/librustzcash#1372 zcash/librustzcash#1372 `zcash_primitives::legacy `: Enhance transparent `Script` support as necessary zcash/librustzcash#1372->zcash/librustzcash#1362 zcash/librustzcash#1372->zcash/librustzcash#1371 zcash/librustzcash#1284 zcash/librustzcash#1284 `zcash_client_sqlite`: Enable migrations to be performed without any seed zcash/librustzcash#1284->zcash/librustzcash#1231 zcash/librustzcash#1260 zcash/librustzcash#1260 zcash_client_sqlite: Fix `select_spendable_notes` to not ignore the `sources` parameter zcash/librustzcash#1260->zcash/librustzcash#1231 zcash/librustzcash#1373 zcash/librustzcash#1373 Agree on a sketch of the overall wallet architecture zcash/librustzcash#1373->zcash/librustzcash#1361 zcash/librustzcash#1373->zcash/librustzcash#1351 zcash/librustzcash#1373->zcash/librustzcash#1367 zcash/librustzcash#1373->zcash/librustzcash#1368 zcash/librustzcash#1352 zcash/librustzcash#1352 Ensure that received notes below the restore height are not included in available or pending balance. zcash/librustzcash#1352->zcash/librustzcash#1231 zcash/librustzcash#1330 zcash/librustzcash#1330 zcash_client_sqlite: `v_tx_outputs` describes one of two tx outputs as not from the account zcash/librustzcash#1330->zcash/librustzcash#1231 zcash-hackworks/zcash-test-vectors#65 zcash-hackworks/zcash-test-vectors#65 Alter Rust output format to be standalone zcash-hackworks/zcash-test-vectors#66 zcash-hackworks/zcash-test-vectors#66 Add `rustfmt` to CI workflow zcash-hackworks/zcash-test-vectors#65->zcash-hackworks/zcash-test-vectors#66 zcash-hackworks/zcash-test-vectors#86 zcash-hackworks/zcash-test-vectors#86 Expand test vector renderer to allow nested structures zcash-hackworks/zcash-test-vectors#87 zcash-hackworks/zcash-test-vectors#87 Break out complex data in structural test vectors zcash-hackworks/zcash-test-vectors#86->zcash-hackworks/zcash-test-vectors#87 zcash-hackworks/zcash-test-vectors#84 zcash-hackworks/zcash-test-vectors#84 Add transaction parser test vectors zcash-hackworks/zcash-test-vectors#84->zcash-hackworks/zcash-test-vectors#87 zcash/halo2#79 zcash/halo2#79 Migrate Rescue and Poseidon gadgets to algebraic hash abstraction zcash/halo2#78 zcash/halo2#78 Implement algebraic hash / random oracle abstraction gadget zcash/halo2#78->zcash/halo2#250 zcash/halo2#78->zcash/halo2#79 zcash/halo2#57 zcash/halo2#57 Remove unused fixed_values from ProvingKey zcash/halo2#443 zcash/halo2#443 Define a stable serialization format for `halo2::plonk::ProvingKey ` zcash/halo2#57->zcash/halo2#443 zcash/halo2#249 zcash/halo2#249 Implement recursion circuit logic for handling public inputs zcash/halo2#249->zcash/halo2#250 zcash/halo2#245 zcash/halo2#245 Remove the need to multiply by powers of x^n in verifier zcash/halo2#245->zcash/halo2#250 zcash/pasta_curves#35 zcash/pasta_curves#35 Enable `ec-gpu` to generate MSM and FFT code for `pasta_curves` zcash/halo2#379 zcash/halo2#379 Add `ec-gpu` support zcash/pasta_curves#35->zcash/halo2#379 zcash/halo2#590 zcash/halo2#590 [halo2_gadgets] Extract `double_and_add` helper zcash/halo2#529 zcash/halo2#529 Endoscaling instructions and chip. zcash/halo2#590->zcash/halo2#529 zcash/halo2#248 zcash/halo2#248 Implement endoscaling in the circuit zcash/halo2#529->zcash/halo2#248 zcash/halo2#248->zcash/halo2#569 zcash/halo2#453 zcash/halo2#453 Introduce `double()` API to ECC gadget zcash/halo2#453->zcash/halo2#529 zcash/halo2#594 zcash/halo2#594 [halo2_gadgets] Minor refactors to `decompose_running_sum` helper zcash/halo2#594->zcash/halo2#529 zcash/halo2#312 zcash/halo2#312 [Book] Document gadget API zcash/halo2#420 zcash/halo2#420 CI: Measure memory-usage benchmarks zcash/halo2#418 zcash/halo2#418 [memory optimization] lookup prover memory analysis zcash/halo2#420->zcash/halo2#418 zcash/orchard#256 zcash/orchard#256 Measure memory-usage benchmarks zcash/halo2#420->zcash/orchard#256 zcash/halo2#427 zcash/halo2#427 Use smaller extended domains where possible during proving zcash/halo2#456 zcash/halo2#456 Benchmark `sha256` gadget. zcash/halo2#548 zcash/halo2#548 Implement performance and memory optimizations for halo2_proofs zcash/halo2#578 zcash/halo2#578 Extend `EccChip` to support Vesta zcash/halo2#578->zcash/halo2#250 zcash/halo2#579 zcash/halo2#579 Consider extending `EccChip` to arbitrary curves zcash/halo2#578->zcash/halo2#579 zcash/halo2#547 zcash/halo2#547 Design a way to "pin" the result of floor planning zcash/halo2#547->zcash/halo2#449 zcash/halo2#195 zcash/halo2#195 Enable floor planners to configure columns zcash/halo2#627 zcash/halo2#627 Move selector combining optimisation into floor planners zcash/halo2#195->zcash/halo2#627 zcash/halo2#454 zcash/halo2#454 [ECC gadget] Support full-width scalars for variable-base mul zcash/halo2#454->zcash/halo2#569 zcash/halo2#634 zcash/halo2#634 Poseidon duplex gadget zcash/halo2#635 zcash/halo2#635 Transcript gadget zcash/halo2#634->zcash/halo2#635 zcash/halo2#635->zcash/halo2#569 zcash/halo2#636 zcash/halo2#636 Add an improved instance column API zcash/halo2#534 zcash/halo2#534 [Lookup] Reintroduce support for advice (and possibly instance) columns in tables, aka dynamic tables zcash/halo2#636->zcash/halo2#534 zcash/halo2#591 zcash/halo2#591 Pluggable API for proof generation zcash/halo2#591->zcash/halo2#569 zcash/pasta_curves#41 zcash/pasta_curves#41 Kill `CurveExt` and `CurveAffine` traits