Tracking PR for v0.17.0

.config/nextest.toml

@@ -1,9 +1,14 @@
 [profile.default]
+default-filter = 'not (test(merkle::smt::full::concurrent) or test(merkle::smt::full::large) or binary(rocksdb_large_smt))'
+fail-fast      = false
 failure-output = "immediate-final"
-fail-fast = false
-default-filter = 'not test(merkle::smt::full::concurrent)'
 
 [profile.smt-concurrent]
-failure-output = "immediate-final"
-fail-fast = false
 default-filter = 'test(merkle::smt::full::concurrent)'
+fail-fast      = false
+failure-output = "immediate-final"
+
+[profile.large-smt]
+default-filter = '(test(merkle::smt::full::large) or binary(rocksdb_large_smt))'
+fail-fast      = false
+failure-output = "immediate-final"

.github/actions/install-llvm/action.yml

@@ -0,0 +1,43 @@
+name: "Install LLVM"
+description: "Install a specific LLVM/Clang version"
+inputs:
+  version:
+    description: "LLVM major version to install"
+    default: "17"
+
+runs:
+  using: "composite"
+  steps:
+    - shell: bash
+      run: |
+        set -eux
+        CODENAME="$(. /etc/os-release && echo "$UBUNTU_CODENAME")"
+
+        # Add apt.llvm.org repo
+        curl -fsSL https://apt.llvm.org/llvm-snapshot.gpg.key | \
+          sudo gpg --dearmor -o /usr/share/keyrings/llvm-archive-keyring.gpg
+        echo "deb [signed-by=/usr/share/keyrings/llvm-archive-keyring.gpg] \
+          http://apt.llvm.org/${CODENAME}/ llvm-toolchain-${CODENAME}-${{ inputs.version }} main" | \
+          sudo tee /etc/apt/sources.list.d/llvm.list
+
+        sudo apt-get update
+        sudo apt-get install -y \
+          clang-17 \
+          lld-17 \
+          llvm-17-dev \
+          libclang-17-dev
+
+        sudo ln -sf /usr/lib/llvm-${{ inputs.version }}/lib/libclang-${{ inputs.version }}.so \
+                    /usr/lib/llvm-${{ inputs.version }}/lib/libclang.so
+
+        echo "/usr/lib/llvm-${{ inputs.version }}/lib" | \
+          sudo tee /etc/ld.so.conf.d/llvm-${{ inputs.version }}.conf
+        sudo ldconfig
+
+        # Env for build scripts & tools
+        echo "LIBCLANG_PATH=/usr/lib/llvm-${{ inputs.version }}/lib" >> "$GITHUB_ENV"
+        echo "LIBRARY_PATH=/usr/lib/llvm-${{ inputs.version }}/lib:${LIBRARY_PATH:-}" >> "$GITHUB_ENV"
+        echo "LD_LIBRARY_PATH=/usr/lib/llvm-${{ inputs.version }}/lib:${LD_LIBRARY_PATH:-}" >> "$GITHUB_ENV"
+        echo "/usr/lib/llvm-${{ inputs.version }}/bin" >> "$GITHUB_PATH"
+        echo "CC=clang-${{ inputs.version }}"   >> "$GITHUB_ENV"
+        echo "CXX=clang++-${{ inputs.version }}" >> "$GITHUB_ENV"

.github/workflows/build.yml

@@ -2,12 +2,20 @@
 
 name: build
 
+# Limits workflow concurrency to only the latest commit in the PR.
+concurrency:
+  group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+  cancel-in-progress: true
+
 on:
   push:
     branches: [main, next]
   pull_request:
     types: [opened, reopened, synchronize]
 
+permissions:
+  contents: read
+
 jobs:
   no-std:
     name: Build for no-std

.github/workflows/changelog.yml

@@ -3,10 +3,18 @@
 
 name: changelog
 
+# Limits workflow concurrency to only the latest commit in the PR.
+concurrency:
+  group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+  cancel-in-progress: true
+
 on:
   pull_request:
     types: [opened, reopened, synchronize, labeled, unlabeled]
 
+permissions:
+  contents: read
+
 jobs:
   changelog:
     runs-on: ubuntu-latest

.github/workflows/lint.yml

@@ -1,43 +1,102 @@
-# Runs linting related jobs.
+# Runs linting related jobs (local copy with LLVM for clippy/doc).
 
 name: lint
 
 on:
   push:
-    branches: [main, next]
+    branches: [ main, next ]
   pull_request:
-    types: [opened, reopened, synchronize]
+    types: [ opened, reopened, synchronize ]
 
 jobs:
-  clippy:
-    name: clippy nightly on ubuntu-latest
+  typos:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
-      - uses: actions/checkout@main
-      - name: Clippy
-        run: |
-          rustup update --no-self-update nightly
-          rustup +nightly component add clippy
-          make clippy
+      - uses: actions/checkout@v4
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: typos
+      - run: make typos-check
 
   rustfmt:
-    name: rustfmt check nightly on ubuntu-latest
+    name: rustfmt
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@main
-      - name: Rustfmt
+      - uses: actions/checkout@v4
+      - name: Rustup
         run: |
           rustup update --no-self-update nightly
-          rustup default ${{ matrix.toolchain }}
           rustup +nightly component add rustfmt
-          make format-check
+      - uses: Swatinem/rust-cache@v2
+        with:
+          save-if: ${{ github.event_name == 'push' && github.ref == format('refs/heads/{0}', inputs.target_branch) }}
+      - name: Fmt
+        run: make format-check
 
-  doc:
-    name: doc stable on ubuntu-latest
+  clippy:
+    name: clippy
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@main
-      - name: Build docs
+      - uses: actions/checkout@v4
+      # Added: LLVM/Clang for RocksDB/bindgen
+      - name: Install LLVM/Clang
+        uses: KyleMayes/install-llvm-action@v2
+        with:
+          version: "17"
+      - name: Rustup
         run: |
           rustup update --no-self-update
-          make doc
+          rustup component add clippy
+      - uses: Swatinem/rust-cache@v2
+        with:
+          save-if: ${{ github.event_name == 'push' && github.ref == format('refs/heads/{0}', inputs.target_branch) }}
+      - name: Clippy
+        run: make clippy
+
+  toml:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: taplo-cli
+      - run: make toml-check
+
+  workspace-lints:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-workspace-lints
+      - run: |
+          make workspace-check
+
+  doc:
+    name: doc
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      # Added: LLVM/Clang for RocksDB/bindgen
+      - name: Install LLVM/Clang
+        uses: ./.github/actions/install-llvm
+        with:
+          version: "17"
+      - name: Rustup
+        run: rustup update --no-self-update
+      - uses: Swatinem/rust-cache@v2
+        with:
+          save-if: ${{ github.event_name == 'push' && github.ref == format('refs/heads/{0}', inputs.target_branch) }}
+      - name: Build docs
+        run: make doc
+
+  unused_deps:
+    name: check for unused dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: machete
+        uses: bnjbvr/cargo-machete@main

.github/workflows/test.yml

@@ -2,12 +2,20 @@
 
 name: test
 
+# Limits workflow concurrency to only the latest commit in the PR.
+concurrency:
+  group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+  cancel-in-progress: true
+
 on:
   push:
     branches: [main, next]
   pull_request:
     types: [opened, reopened, synchronize]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: test ${{matrix.toolchain}} on ${{matrix.os}} with ${{matrix.args}}
@@ -17,11 +25,16 @@ jobs:
       matrix:
         toolchain: [stable, nightly]
         os: [ubuntu]
-        args: [default, hashmaps, no-std]
+        args: [default, hashmaps, no-std, large-smt]
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@main
       - uses: taiki-e/install-action@nextest
+      - name: Install LLVM/Clang
+        if: ${{ matrix.args == 'large-smt' }}
+        uses: ./.github/actions/install-llvm
+        with:
+          version: "17"
       - name: Perform tests
         run: |
           rustup update --no-self-update ${{matrix.toolchain}}
@@ -55,6 +68,10 @@ jobs:
     steps:
       - uses: actions/checkout@main
       - uses: Swatinem/rust-cache@v2
+      - name: Install LLVM/Clang
+        uses: ./.github/actions/install-llvm
+        with:
+          version: "17"
       - name: Run doc-tests
         run: |
           rustup update --no-self-update

.taplo.toml

@@ -0,0 +1,6 @@
+[formatting]
+align_entries         = true
+column_width          = 120
+reorder_arrays        = true
+reorder_inline_tables = true
+reorder_keys          = true

CHANGELOG.md

@@ -1,7 +1,15 @@
+## 0.17.0 (TBD)
+
+- Added `LargeSmt`, SMT backed by RocksDB ([#438](https://github.com/0xMiden/miden-crypto/pull/438)).
+- added arithmetization oriented authenticated encryption with associated data (AEAD) scheme ([#480](https://github.com/0xMiden/crypto/pull/480)).
+- Added XChaCha20-Poly1305 AEAD scheme ([#484](https://github.com/0xMiden/crypto/pull/484)).
+- [BREAKING] `SmtLeaf::entries()` now returns a slice ([#521](https://github.com/0xMiden/crypto/pull/521)).
+
 ## 0.16.1 (2025-08-21)
 
 - Fix broken imports in CPU-specific `rescue` implementations (AVX2, SVE) ([#492](https://github.com/0xMiden/crypto/pull/492/)).
 - Added `{Smt,PartialSmt}::inner_node_indices` to make inner nodes accessible ([#494](https://github.com/0xMiden/crypto/pull/494)).
+- Added various benchmarks & related bench utilities ([#503](https://github.com/0xMiden/crypto/pull/503))
 
 ## 0.16.0 (2025-08-15)
 
@@ -14,6 +22,7 @@
 - `Smt.insert_inner_nodes` does not store empty subtrees ([#452](https://github.com/0xMiden/crypto/pull/452)).
 - Optimized `Smt::num_entries()` ([#455](https://github.com/0xMiden/crypto/pull/455)).
 - [BREAKING] Disallow leaves with more than 2^16 entries ([#455](https://github.com/0xMiden/crypto/pull/455), [#462](https://github.com/0xMiden/crypto/pull/462)).
+-  Add ECDSA over secp256k1 curve ([#475](https://github.com/0xMiden/crypto/pull/475)).
 - [BREAKING] Modified the public key in Falcon DSA to be the polynomial instead of the commitment ([#460](https://github.com/0xMiden/crypto/pull/460)).
 - [BREAKING] Use `SparseMerklePath` in SMT proofs for better memory efficiency ([#477](https://github.com/0xMiden/crypto/pull/477)).
 - [BREAKING] Rename `SparseValuePath` to `SimpleSmtProof` ([#477](https://github.com/0xMiden/crypto/pull/477)).