Skip to content

CHANGELOG.md

Latest commit

 

History

History
974 lines (754 loc) · 74.4 KB

CHANGELOG.md

File metadata and controls

974 lines (754 loc) · 74.4 KB

Changelog

v0.23.0 (TBD)

0.22.0 (2025-03-18)

Enhancements

  • Define and implement Miden project file format (#2510).
  • Added math::u128 comparison (lt, lte, gt, gte), bitwise (and, or, xor, not), and shift (shl, shr, rotl, rotr) operations (#2624).
  • [BREAKING] build_trace() no longer assumes valid user input (#2747).
  • Added math::u128 division operations (#2776).
  • [BREAKING] Migrated to lifted-STARK backend and miden-crypto to v0.23 (#2783).

Changes

  • Consolidated error variants: simplified AceError and FRI errors to string-based types, merged DynamicNodeNotFound/NoMastForestWithProcedure into ProcedureNotFound, introduced HostError for handler-related variants (#2675).
  • Added optional tagging instrumentation for AIR constraints (test-only; enables stable ID tracking and OOD parity checks) (#2713).
  • [BREAKING] Processor and FastProcessor decorator execution is now immutable (#2718).
  • [BREAKING] Tracer API significantly refactored (#2720).
  • Added general stack transition constraints (shift/no‑shift) (#2725).
  • Added stack overflow table constraints (#2735).
  • Added stack shuffling ops constraints (#2736).
  • [BREAKING] Renamed miden::core::crypto::dsa::falcon512poseidon2 module to falcon512_poseidon2 to align with snake_case naming convention (#2740).
  • Added miden-ace-codegen crate for lowering AIR constraints to ACE circuit format (#2757).
  • [BREAKING] Operation enum now only encodes basic block operations (#2771).
  • Added AIR constraints for system, range checker, stack, decoder, and chiplets components (#2772).
  • Added recursion guards for assembly inputs and tests (#2792).
  • Introduced build_trace_with_max_len() which stops building the trace after a given max, and build_trace() no longer allocates more than 2^29 rows (#2809).
  • DebugHandler's default method implementations are now no-ops (instead of prints) (#2837).
  • Added ExecutionTrace::check_constraints() for fast debug constraint checking without STARK proving, and migrated tests from prove_and_verify (#2846).
  • [BREAKING] Updated the dependency on midenc-hir-type to 0.5.0, which changes the set of available calling conventions, and adds support for enum types and named struct types. (#2848)
  • [BREAKING] StructType::new now expects an optional name to be specified (#2848)
  • [BREAKING] Variant::new now expects an optional payload type to be specified (#2848)
  • [BREAKING] Enum types are now exported from libraries as a midenc_hir_type::EnumType, rather than the type of the discriminant. (#2848)
  • In ExecutionTracer, we no longer record node flags in CoreTraceFragmentContext when entering a node (they are redundant) (#2866)

Fixes

  • Fixed C-like enum validation and constant materialization in define_enum (#2887).

  • Fixed Constant::PartialEq to include visibility field in equality comparison, making it consistent with other exportable items (Procedure, TypeAlias, EnumType).

  • Cryptostream operation now correctly sends chiplets bus memory requests (#2686).

  • Fixed a possible panic in decorator serialization (#2742).

  • Hardened untrusted deserialization by enforcing budgets and depth limits, plus expanded fuzzing coverage (#2777).

  • Validated push immediate group commitments and slot placement to reject invalid immediates (#2779).

  • Added documentation for math::u64 module operations (#2781).

  • Prevented a trace-generation panic by validating op batch groups in basic blocks (#2782).

  • Preserved dynexec/dyncall distinction (and digests) when remapping or merging MAST forests (#2784).

  • Hardened AEAD decrypt size calculations (#2789).

  • Introduced FastProcessor safe stack method accesses for event handlers (#2797).

  • Fixed a possible u64 overflow issue in op_eval_circuit() #2799.

  • SystemEvent::HpermToMap handler now computes the correct permutation (#2801).

  • Hardened MASM parsing and constants handling (lexer invalid-token spans, repeat count bounds, constant range checks, field division folding, and push.WORD[...] index validation) (#2803).

  • Hardened syscall target validation to avoid panic paths and reject invalid digests at assembly time (#2804).

  • Added bounds to attacker-controlled allocation sizes in advice map and keccak256/sha512 precompiles (#2805).

  • Hardened boundary and overflow checks for u64::shr, ilog2, u32clz, and Falcon mod_12289 (#2808).

  • build_trace() no longer panics when no core trace contexts are provided (#2809).

  • Set a bound on ContinuationStack size, checked during execution (#2824).

  • Hardened basic-block batch validation and decode-time padding checks to reject inconsistent padded groups and prevent raw-helper underflow/panic paths on malformed forests (#2839).

  • Fixed undefined behavior in parallel trace generation by limiting H0 batch inversion to initialized rows (#2842).

  • Visit and VisitMut traits now properly visit enum type discriminant values, as well as the new payload TypeExpr when present (#2848).

  • Enforced canonical kernel procedure-hash validation on binary and serde deserialization paths, and expanded serde deserialization fuzz coverage for related artifact types (#2849).

  • Fixed constant evaluation across semantic analysis and linking so exported constants no longer retain private local dependencies and cross-module constant chains resolve in the defining module (#2873).

0.21.2 (2026-03-04)

  • Removes features = serde from miden-core in miden-air to avoid unconditionally enabling the serde dependency (#2767).

0.21.1 (2026-02-24)

  • Added debug variable tracking for source-level variables via dedicated DebugVarStorage (CSR format) in DebugInfo, with DebugVarInfo describing variable name, type, location, and value location (stack, memory, local, constant, or expression). Also added debug_types, debug_sources, and debug_functions sections in MASP packages for storing type definitions, source file paths, and function metadata respectively, each with its own string table, to support source-level debugging (#2471).
  • Updated miden-crypto to v0.22.3 (with unified Felt type) (#2649)
  • Re-exported Continuation from miden-processor to support the external debugger (#2683).
  • Fixed mtree_merge advice-store root ordering to match hmerge operand stack semantics (#2729).
  • Updated sorted_array::find_half_key_value to use little-endian ordering (#2734).
  • Fixed Assembler::warnings_as_errors not being propagated in some methods (#2737).

0.21.0 (2026-02-14)

Major breaking changes

  • [BREAKING] Changed backend from winterfell to Plonky3 (#2472).
  • [BREAKING] Removed Process, VmStateIterator and miden_processor::execute_iter() (#2483).
  • [BREAKING] Removed miden debug, miden analyze and miden repl (#2483).
  • [BREAKING] Standardized operand-stack ordering around a unified little-endian (LE) convention (low limb/coeff closest to the top). This includes multi-limb integer ops, extension field elements, and streaming memory operations. Also remapped the sponge state and adjusts hperm/digest extraction plus advice hash-insert instructions for consistent LE semantics. (#2547).
  • [BREAKING] Renamed u32overflowing_mul to u32widening_mul, u32overflowing_madd to u32widening_madd, and math::u64::overflowing_mul to math::u64::widening_mul (#2584).
  • [BREAKING] Changed the VM’s native hash function from RPO to Poseidon2 (#2599).

Enhancements

  • Added initial math::u128 functions for lib/core/math runtime. (#2438).
  • Added constants support as an immediate value of the repeat statement (#2548).
  • Added procedure_names to DebugInfo for storing procedure name mappings by MAST root digest, enabling debuggers to resolve human-readable procedure names during execution (#2474).
  • Added deserialization of the MastForest from untrusted sources. Add fuzzing for MastForest deserialization. (#2590).
  • Added StackInterface::get_double_word() method for reading 8 consecutive stack elements (#2607).
  • Added error messages to asserts in the standard library (#2650)
  • Optimized ExecutionTracer to avoid cloning Vec<OpBatch> on every basic block entry. (#2664)

Fixes

  • Fixed memory chiplet constraint documentation: corrected f_i variable definitions, first row flag, and f_mem_nl constraint expression (#2423).
  • Removed the intentional HALT-insertion bug from the parallel trace generation (#2484).
  • FastProcessor now correctly returns an error if the maximum number of cycles was exceeded during execution (#2537).
  • FastProcessor now correctly only executes trace decorators when tracing is enabled (with ExecutionOptions) (#2539).
  • Fixed a bug where trace generation would fail if a core trace fragment started on the END operation of a loop that was not entered (#2587).
  • Added missing as_canonical_u64() method to IntValue in miden-assembly-syntax, fixing compilation errors in the generated grammar code (#2589).
  • Fixed off-by-one error in cycle limit check that caused programs using exactly max_cycles cycles to fail (#2635).
  • Fixed prover log message reporting main_trace_len() instead of trace_len() for the pre-padding length (#2671).
  • System event errors now include the operation index, so diagnostics point to the exact emit instruction instead of the first operation in the basic block (#2672).
  • Added generation of AssemblyOp decorators for JoinNodes so that error diagnostics can point to the begin...end block (#2674).
  • Renamed snapshot test files to use __ instead of :: for Windows compatibility (#2580).

Changes

  • Added --kernel flag to CLI commands (run, prove, verify, debug) to allow loading custom kernels from .masm or .masp files (#2363).
  • Implemented running batch inversion concurrently per fragment in parallel trace generation (#2405).
  • Added MastForest validation (#2412).
  • Removed undocumented err_code field from ExecutionError::NotU32Values (#2419).
  • [BREAKING] Moved get_assembly_op to the MastForest, remove trait MastNodeErrorContext (#2430).
  • Added a cached commitment to the MastForest (#2447)
  • Moved bytes_to_packed_u32_elements to miden-core::utils and added packed_u32_elements_to_bytes inverse function (#2458).
  • [BREAKING] Changed serialization of BasicBlockNodes to use padded indices (#2466).
  • Changed padded serialization of BasicBlockNodes to use delta-encoded metadata (#2469).
  • Changed (de)serialization of MastForest to directly (de)serialize DebugInfo (#2470).
  • Added validation of core_trace_fragment_size in ExecutionOptions (#2528).
  • Removed ErrorContext trait and err_ctx! macro; error context is now computed lazily by passing raw parameters to error extension traits (#2544).
  • Added MastForest::write_stripped() to serialize without DebugInfo (#2549).
  • Added API to serialize the MastForest without DebugInfo (#2549).
  • [BREAKING] Rename MastForest::strip_decorators() to MastForest::clear_debug_info() (#2554).
  • Documented push.[a,b,c,d] word literal syntax (#2556).
  • Use IndexVec::try_from instead of pushing elements one by one in DebugInfo::empty_for_nodes (#2559).
  • Changed assert_u32 helper function to return u32 instead of Felt (#2575).
  • Made StackInputs and StackOutputs implement Copy trait (#2581).
  • Added malicious advice provider tests for MASM validation using advice stack initialization (#2583).
  • [BREAKING] Removed NodeExecutionState in favor of Continuation (#2587).
  • [BREAKING] Removed SyncHost and BaseHost, and renamed AsyncHost to Host (#2595).
  • [BREAKING] Moved ExecutionOptions to miden-processor, ProvingOptions to miden-prove, and ExecutionProof to miden-core (all out of miden-air) (#2597).
  • [BREAKING] Removed on_assert_failed method from Host trait (#2600).
  • [BREAKING] Added builder methods (with_advice(), with_debugging(), with_tracing(), with_options()) directly on FastProcessor for fluent configuration. Removed deprecated new_with_advice_inputs() and new_debug() constructors (#2602, #2625).
  • Consolidated testing hosts by merging TestConsistencyHost into TestHost and reusing the unified host in tests (#2603).
  • [BREAKING] Converted ProcessState to a struct wrapping FastProcessor, and rename it to ProcessorState (#2604).
  • [BREAKING] Cleaned up StackInputs and StackOutputs API, and use StackInputs in FastProcessor constructors (#2605).
  • [BREAKING] Separated AsmOp storage from Debug/Trace decorators. (#2606).
  • [BREAKING] Added widening u32 add variants and aligned math::u64/math::u256 APIs and docs with little‑endian stack conventions (#2614).
  • [BREAKING] Abstracted away program execution using the sans-IO pattern (#2615).
  • [BREAKING] Removed PushMany trait and new_array_vec() from miden-core (#2630).
  • [BREAKING] Removed unused meta field from ExecutionTrace and changed the constructor to take ProgramInfo (#2639).
  • [BREAKING] Host::on_debug() and Host::on_trace() now take immutable references to ProcessorState (#2639).
  • [BREAKING] Migrated parallel trace generation to use the common execute_impl() (#2642).
  • [BREAKING] Removed unused should_break field from AssemblyOp decorator (#2646).
  • [BREAKING] Updated processor module structure (#2651).
  • [BREAKING] Removed breakpoint instruction from assembly (#2655).
  • Removed FRI domain offset from fri_ext2fold4 operation for Plonky3 compatibility (#2670).
  • [BREAKING] Removed Tracer arguments from Processor methods (#2676).

0.20.6 (2026-02-04)

  • Fixed issue with link-time symbol resolution that prevented referencing an imported item as locally-defined, e.g. an import like use some::module::CONST used via something like emit.CONST would fail to resolve correctly. #2637

0.20.5 (2026-02-02)

  • Fixed issue with deserialization of Paths due to lifetime restrictions #2627
  • Implemented path canonicalization and modified Path/PathBuf APIs to canonicalize paths during construction. This also addressed some issues uncovered during testing where some APIs were not canonicalizing paths, or path-related functions were inconsistent in their behavior due to special-casing that was previously needed #2627

0.20.4 (2026-01-30)

  • Fixed issue with handling of quoted components in PathBuf #2618

0.20.3 (2026-01-27)

  • Fixed issue where exports of a Library did not have attributes serialized #2608

0.20.2 (2026-01-05)

  • Fixed issue where decorator access was not bypassed properly in release mode (#2529).

0.20.1 (2025-12-14)

  • Fixed issue where calling procedures from statically linked libraries did not import their decorators (#2459).

0.20.0 (2025-12-05)

Enhancements

  • Added SHA512 hash precompile in miden::core::crypto::hashes::sha512 (#2312).
  • Added EdDSA (Ed25519) signature verification precompile in miden::core::crypto::dsa::eddsa_ed25519 (#2312).
  • Added AEAD implementation in the VM using crypto_stream instruction (#2322).
  • Added new adv.push_mapval_count instruction (#2349).
  • Added new memcopy_elements procedure for the std::mem module (#2352).
  • Implemented link-time const evaluation; simplified linker implementation and improved consistency of symbol resolution and associated errors (#2370).
  • Added new peek procedure for the std::collections::smt module (#2387).
  • Added new pad_and_hash_elements procedure to the std::crypto::hashes::rpo module (#2395).
  • Added padding option for the adv.push_mapvaln instruction (#2398).
  • Added new FastProcessor::step() method that executes a single clock cycle (#2440)

Changes

  • [BREAKING] Added builder patterns for all MastNode types, made naked constructors module-private (#2259).
  • Extended builder patterns for all MastNode types (#2274).
  • Further extended builder patterns for all MastNode types, replace enum-dispatch by our own derivations (#2291).
  • Finished builder pattern conversion and delete old MastNode mutable APIs (#2301).
  • Hoist BasicBlock decorator storage to the MastForest after insertion in said MastForest (#2310).
  • [BREAKING] hoist before_enter and after_exit decorators to MastForest (#2323).
  • [BREAKING] Make argument order of Assembler::compile_and_statically_link_from_dir consistent with Assembler::assemble_library_from_dir.
  • [BREAKING] Renamed Library::get_procedure_root_by_name to Library::get_procedure_root_by_path.
  • Added missing implementations of proptest::Arbitrary for non-BasicBlockNode variants of MastNode (#2335).
  • Fixed locaddr alignment when procedure local count is not a multiple of 4 (#2350).
  • Streamline MastNode APIs and remove redundant parameters from execute_op_batch functions (#2360).
  • [BREAKING] Host debug and trace handlers return dynamic errors (#2367).
  • [BREAKING] Standardized hash function naming: renamed hash_2to1 → merge and hash_1to1 → hash across all hash modules (blake3, sha256, keccak256, rpo) (#2381).
  • Consolidate debug information into DebugInfo struct (#2366).
  • Wrapped hperm instruction in rpo::permute procedure (#2392).
  • hash_memory_with_state, hash_memory_words, and hash_memory_double_words procedures from the std::crypto::hashes::rpo module were renamed to the hash_elements_with_state, hash_words, and hash_double_words respectively (#2395).
  • [BREAKING] Upgraded miden-crypto to 0.19 (#2399).
  • Added missing modules to libcore documentation (#2416).
  • Pre-allocate main trace buffer in trace generation (#2345).
  • Renamed the MASM standard library to "miden::core", the crate to miden-core-lib, and various other MASM module refactors (#2260) (#2427).
  • Added a compaction function for achieving maximal sharing out of a MastForest with stripped decorators (#2408).
  • Refactored and remove tech debt from parallel trace generation (#2382)
  • [BREAKING] Added kind field to Package struct to indicate package type (Executable, AccountComponent, NoteScript, TxScript, AuthComponent) (#2403).
  • [BREAKING] Made the Assembler work in debug mode, remove optionality (#2396).
  • [BREAKING] Normalized naming of verify procedures of ECDSA precompile (#2413).
  • Refactored Blake3_256 fingerprints to allocate less (#2375).
  • [BREAKING] Normalized signature encoding methods in the dsa module of the core library.

0.19.1 (2025-11-6)

  • Add verify_ecdsa_k256_keccak procedure for verifying signatures using the miden-crypto format (#2344).

0.19.0 (2025-11-1)

Enhancements

  • Added std::mem::pipe_double_words_preimage_to_memory, a version of pipe_preimage_to_memory optimized for pairs of words (#2048).
  • Added support for leaves with multiple pairs in std::collections::smt::get (#2048).
  • Added support for leaves with multiple pairs in std::collections::smt::set (#2248).
  • Made miden-vm analyze output analysis even if execution ultimately errored. (#2204).
  • Allow CALL and DYNCALL from a syscall context (#2296)
  • Remove operations FmpUpdate and FmpAdd, as well as columns fmp and in_syscall (#2308)
  • Reduce the constraints degree of HORNERBASE (#2328)
  • [BREAKING] Implement ECDSA precompile (#2277).
  • Allowed CALL and DYNCALL from a syscall context (#2296).
  • Implemented AdviceProvider::has_merkle_path() method.

Changes

  • [BREAKING] Incremented MSRV to 1.90.
  • Added before_enter and after_exit decorator lists to BasicBlockNode.(#2167).
  • Fix ability to parse odd-length hex strings (#2196).
  • Added proptest's Arbitrary instances for BasicBlockNode and MastForest (#2200).
  • [BREAKING] Fix inconsistencies in debugging instructions (#2205).
  • Fixed mismatched Push expectations in decoder syscall_block test (#2207).
  • Added proptest's Arbitrary instances for Program, fixed Attribute serialization (#2224).
  • [BREAKING] Memory::read_element() now requires &self instead of &mut self (#2242).
  • Fixed hex word parsing to guard against missing 0x prefix (#2245).
  • Systematized u32-indexed vectors (#2254).
  • Introduced a new build_trace() which builds the trace in parallel from trace fragment contexts (#1839) (#2188).
  • Moved the FastProcessor stack to the heap instead of the (OS thread) stack (#2271).
  • [BREAKING] Implemented logging of deferred precompile calls in AdviceProvider (#2158).
  • [BREAKING] Added precompile requests to proof (#2187).
  • after_exit decorators execute in the correct sequence in External nodes in the Fast processor (#2247).
  • Removed O(n log m) iteration in parallel processor (#2273).
  • [BREAKING] Added log_precompile opcode (#2249).
  • [BREAKING] BaseHost now exposes resolve_event so hosts can provide event names for diagnostics. Unify SystemEvent ID derivation (#2150).
  • [BREAKING] Deprecated mem_loadw and mem_storew instructions in favor of explicit endianness variants (mem_loadw_be, mem_loadw_le, mem_storew_be, mem_storew_le) (#2186).
  • [BREAKING] Deprecated loc_loadw and loc_storew instructions in favor of explicit endianness variants (loc_loadw_be, loc_loadw_le, loc_storew_be, loc_storew_le).
  • [BREAKING] Added pre/post decorators to BasicBlockNode fingerprint (#2267).
  • [BREAKING] Added explicit endianness methods get_stack_word_be() and get_stack_word_le() to stack word accessors, deprecated ambiguous get_stack_word() (#2235).
  • Added missing endianness-aware memory instructions (mem_loadw_be, mem_loadw_le, mem_storew_be, mem_storew_le) to Instruction Reference documentation (#2286).
  • Fixed decorator offset bug in BasicBlockNode padding (#2305).
  • Removed FmpUpdate and FmpAdd operations, as well as columns fmp and in_syscall (#2308).
  • [BREAKING] Updated miden-crypto dependency to v0.18 (#2311).
  • [BREAKING] Refined precompile verification plumbing (#2325).

0.18.3 (2025-10-27)

  • Implement sorted_array::find_half_key_value (#2268).

0.18.2 (2025-10-10)

  • Place the FastProcessor stack on the heap instead of the (OS thread) stack (#2275).

0.18.1 (2025-10-02)

  • Gate stdlib doc generation in build.rs on MIDEN_BUILD_STDLIB_DOCS environment variable (#2239).

0.18.0 (2025-09-21)

Enhancements

  • Added slicing for the word constants (#2057).
  • Added ability to declare word-sized constants from strings (#2073).
  • Added new adv.insert_hqword instruction (#2097).
  • Added option to use Poseidon2 in proving (#2098).
  • Reinstate the build of the stdlib's documentation (#1432).
  • Added FastProcessor::execute_for_trace(), which outputs a series of checkpoints necessary to build the trace in parallel (#2023)
  • Introduced Tracer trait to allow different ways of tracing program execution, including no tracing (#2101)
  • FastProcessor::execute_*() methods now also return the state of the memory in a new ExecutionOutput struct (#2028)
  • Removed all stack underflow error cases from FastProcessor (#2173).
  • Added reversew and reversedw instructions for reversing the order of elements in a word and double word on the stack (#2125).
  • Added endianness-aware memory instructions: mem_loadw_be, mem_loadw_le, mem_storew_be, and mem_storew_le for explicit control over word element ordering in memory operations (#2125).
  • Added non-deterministic lookup for sorted arrays to stdlib (#2114).
  • Introduced syntax for expressing type information in MASM (#2120).
  • Added reversew and reversedw instructions for reversing the order of elements in a word and double word on the stack (#2125).
  • Added endianness-aware memory instructions: mem_loadw_be, mem_loadw_le, mem_storew_be, and mem_storew_le for explicit control over word element ordering in memory operations (#2125).
  • FastProcessor::execute_*() methods now also return the state of the memory in a new ExecutionOutput struct (#2028).
  • Better document the normalizing behavior of MastForestMerger::merge (#2174).
  • Propagate procedure annotations to Library and Package metadata (#2189).

Changes

  • Fixed fast loop node not running after-exit decorators when skipping the body (condition == 0) (#2169).
  • Removed unused PushU8List, PushU16List, PushU32List and PushFeltList instructions (#2057).
  • Removed dedicated PushU8, PushU16, PushU32, PushFelt, and PushWord assembly instructions. These have been replaced with the generic Push<Immediate> instruction which supports all the same functionality through the IntValue enum (U8, U16, U32, Felt, Word) (#2066).
  • [BREAKING] Update miden-crypto dependency to v0.16 (#2079)
  • Made get_mast_forest() async again for AsyncHost now that basic conditional async support is in place (#2060).
  • Improved error message of binary operations on U32 values to report both erroneous operands, if applicable. (#1327).
  • [BREAKING] emit no longer takes an immediate and instead gets the event ID from the stack (#2068).
  • [BREAKING] Operation::Emit no longer contains a u32 parameter, affecting pattern matching and serialization (#2068).
  • [BREAKING] Host on_event methods no longer receive event_id parameter; event ID must be read from stack position 0 (#2068).
  • [BREAKING] get_stack_word uses element-aligned indexing instead of word-aligned indexing (#2068).
  • [BREAKING] Implemented support for event("event_name") in MASM (#2068).
  • Improved representation of OPbatches to include padding Noop by default, simplifying fast iteration over program instructions in the processor (#1815).
  • Changed multiple broken links across the repository (#2110).
  • Rename program_execution benchmark to program_execution_for_trace, and benchmark FastProcessor::execute_for_trace() instead of Process::execute() (#2131)
  • [BREAKING] Initial support for Keccak precompile (#2103).
  • Refactored MastNode to eliminate boilerplate dispatch code (#2127).
  • [BREAKING] Introduce EventId type (#2137).
  • Added multicall support for the CLI (#1141).
  • Made miden-prover's metal prover async-compatible. (#2133).
  • Abstracted away the fast processor's operation execution into a new Processor trait (#2141).
  • [BREAKING] Implemented custom section support in package format, and removed account_component_metadata field (#2071).
  • Moved EMIT flag to degree 5 bucket (#2043).
  • [BREAKING] Renumber system event IDs (#2151).
  • [BREAKING] Update miden-crypto dependency to v0.17 (#2168).
  • [BREAKING] Moved u64_div, falcon_div and smtpeek system events to stdlib (#1582).
  • [BREAKING] MastNode quality of life improvements (#2166).
  • Allowed references between constants without requiring them to be declared in a specific order (#2120).
  • Introduced new pub proc syntax for procedure declarations to replace export syntax. This change is backwards-compatible. (#2120).
  • [BREAKING] Disallowed the use of word literals in conjunction with dot-delimited push syntax (#2120).
  • Fixed RawDecoratorIdIterator un-padding off-by-one (#2193).

0.17.2 (2025-09-17)

  • Hotfix: remove all stack underflow errors (#2182).

0.17.1 (2025-08-29)

  • added MastForest::strip_decorators() (#2108).

0.17.0 (2025-08-06)

Enhancements

  • [BREAKING] Implemented custom Event handlers (#1584).
  • Implemented copy_digest and hash_memory_double_words procedures in the std::crypto::hashes::rpo module (#1971).
  • Added extend_ methods on AdviceProvider #1982.
  • Added new stdlib module std::word, containing utilities for manipulating arrays of four fields (words) (#1996).
  • Added constraints evaluation check to recursive verifier (#1997).
  • Make recursive verifier in stdlib reusable through dynamic procedure execution (#2008).
  • Added AdviceProvider::into_parts() method (#2024).
  • Added type information to procedures in the AST, Library, and PackageExport types (#2028).
  • Added drop_stack_top procedure in std::sys (#2031).

Changes

  • [BREAKING] Incremented MSRV to 1.88.
  • [BREAKING] Implemented preliminary changes for lazy loading of external MastForest AdviceMaps (#1949).
  • Enhancement for all benchmarks (incl. program_execution_fast) are built and run in a new CI job with required feature flags (#https://github.com/0xMiden/miden-vm/issues/1964).
  • [BREAKING] Introduced SourceManagerSync trait, and remove Assembler::source_manager() method #1966.
  • Fixed ExecutionOptions::default() to set max_cycles correctly to 1 << 29 (#1969).
  • [BREAKING] Reverted get_mapped_value return signature (#1981).
  • Converted FastProcessor::execute() from recursive to iterative execution (#1989).
  • [BREAKING]: move std::utils::is_empty_word to std::word::eqz, as part of the new word module #1996.
  • [BREAKING] {AsyncHost,SyncHost}::on_event now returns a list of AdviceProvider mutations (#2003).
  • [BREAKING] made AdviceInputs field public and removed redundant accessors (#2009).
  • [BREAKING] Moved the SourceManager from the processor to the host #2019.
  • [BREAKING] FastProcessor::execute() now also returns the AdviceProvider (#2026).
  • Allowed for 234 "spurious drops" before the fast processor underflows, up from 34 (#2035) .
  • [BREAKING] Library::exports now returns (&QualifiedProcedureName, &LibraryExport) rather than just &QualifiedProcedureName, to allow callers to extract more useful information (#2028).
  • [BREAKING] The serialized representation for Package was changed to include procedure type information. Older packages will not work with the new serialization code, and vice versa. The version of the binary format was incremented accordingly (#2028).
  • [BREAKING] Procedure-related metadata types in the miden-assembly crate in some cases now require an optional type signature argument. If that information is not available, you can simply pass None to retain current behavior (#2028).
  • Remove basic block clock cycle optimization from FastProcessor (#2054).

0.16.4 (2025-07-24)

  • Made AdviceInputs field public.

0.16.3 (2025-07-18)

  • Add new_dummy method on ExecutionProof (#2007).

0.16.2 (2025-07-11)

  • Fix debug::print_vm_stack which was returning the advice stack instead of the system stack (#1984).

0.16.1 (2025-07-10)

  • Make Process::state() public and re-introduce From<&Process> for ProcessState.
  • Return AdviceProvider as part of the ExecutionTrace.

0.16.0 (2025-07-08)

Enhancements

  • Optimized handling of variable length public inputs in the recursive verifier (#1842).
  • Simplify processing of OOD evaluations in the recursive verifier (#1848).
  • Allowed constants to be declared as words and to be arguments of the push instruction (#1855).
  • Allowed definition of Advice Map data in MASM programs. The data is loaded by the host before execution (#1862).
  • Improved the documentation for the Assembler and its APIs to better explain how each affects the final assembled artifact (#1881).
  • It is now possible to assemble kernels with multiple modules while allowing those modules to perform kernel-like actions, such as using the caller instruction. (#1893).
  • Made ErrorContext zero-cost (#1910).
  • Made FastProcessor output rich error diagnostics (#1914).
  • [BREAKING] Make FastProcessor::execute() async (#1933).
  • The SourceManager API was improved to be more precise about source file locations (URIs) and language type. This is intended to support the LSP server implementation. (#1937).
  • SourceManager::update was added to allow for the LSP server to update documents stored in the source manager based on edits made by the user. (#1937).
  • Implemented a new adv.has_mapkey decorator (#1941).
  • Added get_procedure_root_by_name method to the Library struct (#1961).

Changes

  • Updated lalrpop dependency to 0.22 (#1865)
  • Removed the obsolete RpoFalcon512 decorator and associated structs (#1872).
  • Fixed instructions with errors print without quotes (#1882).
  • [BREAKING] Renamed Assembler::add_module to Assembler::compile_and_statically_link (#1881).
  • [BREAKING] Renamed Assembler::add_modules to Assembler::compile_and_statically_link_all (#1881).
  • [BREAKING] Renamed Assembler::add_modules_from_dir to Assembler::compile_and_statically_link_from_dir (#1881).
  • [BREAKING] Removed Assembler::add_module_with_options (#1881).
  • [BREAKING] Removed Assembler::add_modules_with_options (#1881).
  • [BREAKING] Renamed Assembler::add_library to Assembler::link_dynamic_library (#1881).
  • [BREAKING] Renamed Assembler::add_vendored_library to Assembler::link_static_library (#1881).
  • [BREAKING] AssemblyError was removed, and all uses replaced with Report (#1881).
  • [BREAKING] Compile trait was renamed to Parse.
  • [BREAKING] CompileOptions was renamed to ParseOptions.
  • Licensed the project under the Apache 2.0 license (in addition to the MIT) (#1883).
  • Uniform chiplet bus message flag encoding (#1887).
  • [BREAKING] Updated dependencies Winterfell to v0.13 and Crypto to v0.15 (#1896).
  • [BREAKING] Converted AdviceProvider into a struct (#1904, #1905).
  • [BREAKING] Host::get_mast_forest takes &mut self (#1902).
  • [BREAKING] ProcessState returns MemoryError instead of ExecutionError (#1912).
  • [BREAKING] AdviceProvider returns its own error type (#1907.
  • Split out the syntax-related aspects of the miden-assembly crate into a new crate called miden-assembly-syntax (#1921).
  • Removed the dependency on miden-assembly from miden-mast-package (#1921).
  • [BREAKING] Removed Library::from_dir in favor of Assembler::assemble_library_from_dir (#1921).
  • [BREAKING] Removed KernelLibrary::from_dir in favor of Assembler::assemble_kernel_from_dir (#1921).
  • [BREAKING] Fixed incorrect namespace being set on modules parsed using the lib_dir parameter of KernelLibrary::from_dir. (#1921)..
  • [BREAKING] The signature of SourceManager::load has changed, and now requires a SourceLanguage and Uri parameter. (#1937).
  • [BREAKING] The signature of SourceManager::load_from_raw_parts has changed, and now requires a Uri parameter in place of &str. (#1937).
  • [BREAKING] The signature of SourceManager::find has changed, and now requires a Uri parameter in place of &str. (#1937).
  • [BREAKING] SourceManager::get_by_path was renamed to get_by_uri, and now requires a &Uri instead of a &str for the URI/path parameter (#1937).
  • [BREAKING] The path parameter of Location and FileLineCol debuginfo types was renamed to uri, and changed from Arc<str> to Uri type. (#1937).
  • [BREAKING] Move AdviceProvider from Host to ProcessState (#1923)).
  • Removed decorator for interpolating polynomials over degree 2 extension field (#1875).
  • Removed MASM code for probabilistic NTT (#1875).
  • Moved implementation of miden_assembly_syntax::diagnostics into a new miden-utils-diagnostics crate (#1945).
  • Moved implementation of miden_core::debuginfo into a new miden-debug-types crate (#1945).
  • Moved implementation of miden_core::sync into a new miden-utils-sync crate (#1945).
  • [BREAKING] Replaced miden_assembly_syntax::Version with semver::Version (#1946)

Fixes

  • Fixed SourceContent::update splice logic to prevent panics on single-line edits and respect exclusive end semantics for multi-line edits (#XXXX).
  • Truncated nprime.masm output stack to prevent overflow during benchmarks (#1879).
  • Modules can now be provided in any order to the Assembler, see #1669 (#1881).
  • Addressed bug which caused references to re-exported procedures whose definition internally referred to an aliased module import, to produce an "undefined module" error, see #1451 (#1892).
  • The special identifiers for kernel, executable, and anonymous namespaces were not valid MASM syntax (#1893).
  • AdviceProvider: replace SimpleAdviceMap with AdviceMap struct from miden-core & add merge_advice_map to AdviceProvider (#1924 & #1922).
  • [BREAKING] Disallow usage of the field modulus as an immediate value (#1938).

0.15.0 (2025-06-06)

Enhancements

  • Add debug.stack_adv and debug.stack_adv.<n> to help debug the advice stack (#1828).
  • Add a complete description of the constraints for horner_eval_base and horner_eval_ext (#1817).
  • Add documentation for ACE chiplet (#1766)
  • Add support for setting debugger breakpoints via breakpoint instruction (#1860)
  • Improve error messages for some procedure locals-related errors (#1863)
  • Add range checks to the push_falcon_mod_result advice injector to make sure that the inputs are u32 (#1819).

Changes

  • [BREAKING] Rename miden executable to miden-vm
  • Improve error messages for some assembler instruction (#1785)
  • Remove idx column from Kernel ROM chiplet and use chiplet bus for initialization. (#1818)
  • [BREAKING] Make Assembler::source_manager() be Send + Sync (#1822)
  • Refactored ProcedureName validation logic to improve readability (#1663)
  • Simplify and optimize the recursive verifier (#1801).
  • Simplify auxiliary randomness generation (#1810).
  • Add handling of variable length public inputs to the recursive verifier (#1813).

Fixes

  • miden debug rewind command no longer panics at clock 0 (#1751)
  • Prevent overflow in ACE circuit evaluation (#1820)
  • debug.local decorators no longer panic or print incorrect values (#1859)

0.14.0 (2025-05-07)

Enhancements

  • Add kernel procedures digests as public inputs to the recursive verifier (#1724).
  • add optional Package::account_component_metadata_bytes to store serialized AccountComponentMetadata (#1731).
  • Add executable feature to the make test and make test-build Make commands (#1762).
  • Allow asserts instruction to take error messages as strings instead of error codes as Felts (#1771).
  • Add arithmetic evaluation chiplet (#1759).
  • Update the recursive verifier to use arithmetic evaluation chiplet (#1760).

Changes

  • Replace deprecated #[clap(...)] with #[command(...)] and #[arg(.…)] (#1794)
  • Add pull request template to guide contributors (#1795)
  • [BREAKING] ExecutionOptions::with_debugging() now takes a boolean parameter (#1761)
  • Use MemoryAddress(u32) for VmState memory addresses instead of plain u64 (#1758).
  • [BREAKING] Improve processor errors for memory and calls (#1717)
  • Implement a new fast processor that doesn't generate a trace (#1668)
  • ProcessState::get_stack_state() now only returns the state of the active context (#1753)
  • Change MastForestBuilder::set_after_exit() for append_after_exit() (#1775)
  • Improve processor error diagnostics (#1765)
  • Fix source spans associated with assert* and mtree_verify instructions (#1789)
  • [BREAKING] Improve the layout of the memory used by the recursive verifier (#1857)

0.13.2 (2025-04-02)

Changes

  • Relaxed rules for identifiers created via Ident::new, ProcedureName::new, LibraryNamespace::new, and Library::new_from_components (#1735)
  • [BREAKING] Renamed Ident::new_unchecked and ProcedureName::new_unchecked to from_raw_parts (#1735).

Fixes

  • Fixed various issues with pretty printing of Miden Assembly (#1740).

0.13.1 (2025-03-21) - stdlib crate only

Enhancements

  • Added prepare_hasher_state and hash_memory_with_state procedures to the stdlib::crypto::hashes::rpo module (#1718).

0.13.0 (2025-03-20)

Enhancements

  • Added to the Assembler the ability to vendor a compiled library.
  • [BREAKING] Update CLI to accept masm or masp files as input for all commands (#1683, #1692).
  • [BREAKING] Introduced HORNERBASE, HORNEREXT and removed RCOMBBASE instructions (#1656).

Changes

  • Update minimum supported Rust version to 1.85.
  • Change Chiplet Fields to Public (#1629).
  • [BREAKING] Updated Winterfell dependency to v0.12 (#1658).
  • Introduce BusDebugger to facilitate debugging buses (#1664).
  • Update Falcon verification procedure to use HORNERBASE (#1661).
  • Update recursive verifier to use HORNERBASE (#1665).
  • Fix the docs and implementation of EXPACC (#1676).
  • Running a call/syscall/dyncall while processing a syscall now results in an error (#1680).
  • Using a non-binary value as a loop condition now results in an error (#1685).
  • [BREAKING] Remove Assembler::assemble_common() from the public interface (#1689).
  • Fix Horner{Base, Ext} bus requests to memory chiplet (#1689).
  • Fix docs on the layout of the auxiliary segment trace (#1694).
  • Optimize FRI remainder polynomial check (#1670).
  • Remove FALCON_SIG_TO_STACK event (#1703).
  • Prevent U64Div event from crashing processor (#1710).

0.12.0 (2025-01-22)

Highlights

  • [BREAKING] Refactored memory to be element-addressable (#1598).

Changes

  • [BREAKING] Resolved flag collision in --verify command and added functionality for optional input/output files (#1513).
  • [BREAKING] Refactored MastForest serialization/deserialization to put decorator data at the end of the binary (#1531).
  • [BREAKING] Refactored Process struct to no longer take ownership of the Host (#1571).
  • [BREAKING] Converted ProcessState from a trait to a struct (#1571).
  • [BREAKING] Simplified Host and AdviceProvider traits (#1572).
  • [BREAKING] Updated Winterfell dependency to v0.11 (#1586).
  • [BREAKING] Cleaned up benchmarks and examples in the miden-vm crate (#1587)
  • [BREAKING] Switched to thiserror 2.0 derive errors and refactored errors (#1588).
  • Moved handling of FalconSigToStack event from system event handlers to the DefaultHost (#1630).

Enhancements

  • Added options --kernel, --debug and --output to miden bundle (#1447).
  • Added miden_core::mast::MastForest::advice_map to load it into the advice provider before the MastForest execution (#1574).
  • Optimized the computation of the DEEP queries in the recursive verifier (#1594).
  • Added validity checks for the inputs to the recursive verifier (#1596).
  • Allow multiple memory reads in the same clock cycle (#1626)
  • Improved Falcon signature verification (#1623).
  • Added miden-mast-package crate with Package type to represent a compiled Miden program/library (#1544).

0.11.0 (2024-11-04)

Enhancements

  • Added miden_core::utils::sync::racy_lock module (#1463).
  • Updated miden_core::utils to re-export std::sync::LazyLock and racy_lock::RacyLock as LazyLock for std and no_std environments, respectively (#1463).
  • Debug instructions can be enabled in the cli run command using --debug flag (#1502).
  • Added support for procedure annotation (attribute) syntax to Miden Assembly (#1510).
  • Make miden-prover::prove() method conditionally asynchronous (#1563).
  • Update and sync the recursive verifier (#1575).

Changes

  • [BREAKING] Wrapped MastForests in Program and Library structs in Arc (#1465).
  • MastForestBuilder: use MastNodeId instead of MAST root to uniquely identify procedures (#1473).
  • Made the undocumented behavior of the VM with regard to undefined behavior of u32 operations, stricter (#1480).
  • Introduced the Emit instruction (#1496).
  • [BREAKING] ExecutionOptions::new constructor requires a boolean to explicitly set debug mode (#1502).
  • [BREAKING] The run and the prove commands in the cli will accept --trace flag instead of --tracing (#1502).
  • Migrated to new padding rule for RPO (#1343).
  • Migrated to miden-crypto v0.11.0 (#1343).
  • Implemented MastForest merging (#1534).
  • Rename EqHash to MastNodeFingerprint and make it pub (#1539).
  • Updated Winterfell dependency to v0.10 (#1533).
  • [BREAKING] DYN operation now expects a memory address pointing to the procedure hash (#1535).
  • [BREAKING] DYNCALL operation fixed, and now expects a memory address pointing to the procedure hash (#1535).
  • Permit child MastNodeIds to exceed the MastNodeIds of their parents (#1542).
  • Don't validate export names on Library deserialization (#1554)
  • Compile advice injectors down to Emit operations (#1581)

Fixes

  • Fixed an issue with formatting of blocks in Miden Assembly syntax
  • Fixed the construction of the block hash table (#1506)
  • Fixed a bug in the block stack table (#1511) (#1512) (#1557)
  • Fixed the construction of the chiplets virtual table (#1514) (#1556)
  • Fixed the construction of the chiplets bus (#1516) (#1525)
  • Decorators are now allowed in empty basic blocks (#1466)
  • Return an error if an instruction performs 2 memory accesses at the same memory address in the same cycle (#1561)

0.10.6 (2024-09-12) - miden-processor crate only

Enhancements

  • Added PartialEq, Eq, Serialize and Deserialize to AdviceMap and AdviceInputs structs (#1494).

0.10.5 (2024-08-21)

Enhancements

  • Updated MastForest::read_from to deserialize without computing node hashes unnecessarily (#1453).
  • Assembler: Merge contiguous basic blocks (#1454).
  • Assembler: Add a threshold number of operations after which we stop merging more in the same block (#1461).

Changes

  • Added new_unsafe() constructors to MAST node types which do not compute node hashes (#1453).
  • Consolidated BasicBlockNode constructors and converted assert flow to MastForestError::EmptyBasicBlock (#1453).

Fixes

  • Fixed an issue with registering non-local procedures in MemMastForestStore (#1462).
  • Added a check for circular external node lookups in the processor (#1464).

0.10.4 (2024-08-15) - miden-processor crate only

Enhancements

  • Added support for executing Dyn nodes from external MAST forests (#1455).

0.10.3 (2024-08-12)

Enhancements

  • Added with-debug-info feature to miden-stdlib (#1445).
  • Added Assembler::add_modules_from_dir() method (#1445).
  • [BREAKING] Implemented building of multi-module kernels (#1445).

Changes

  • [BREAKING] Replaced SourceManager parameter with Assembler in Library::from_dir (#1445).
  • [BREAKING] Moved Library and KernelLibrary exports to the root of the miden-assembly crate. (#1445).
  • [BREAKING] Depth of the input and output stack was restricted to 16 (#1456).

0.10.2 (2024-08-10)

Enhancements

  • Removed linear search of trace rows from BlockHashTableRow::table_init() (#1439).
  • Exposed some pretty printing internals for MastNode (#1441).
  • Made KernelLibrary impl Clone and AsRef<Library> (#1441).
  • Added serialization to the Program struct (#1442).

Changes

  • [BREAKING] Removed serialization of AST structs (#1442).

0.10.0 (2024-08-06)

Features

  • Added source location tracking to assembled MAST (#1419).
  • Added error codes support for the mtree_verify instruction (#1328).
  • Added support for immediate values for lt, lte, gt, gte comparison instructions (#1346).
  • Added support for immediate values for u32lt, u32lte, u32gt, u32gte, u32min and u32max comparison instructions (#1358).
  • Added support for the nop instruction, which corresponds to the VM opcode of the same name, and has the same semantics.
  • Added support for the if.false instruction, which can be used in the same manner as if.true
  • Added support for immediate values for u32and, u32or, u32xor and u32not bitwise instructions (#1362).
  • [BREAKING] Assembler: add the ability to compile MAST libraries, and to assemble a program using compiled libraries (#1401)

Enhancements

  • Changed MAST to a table-based representation (#1349).
  • Introduced MastForestStore (#1359).
  • Adjusted prover's metal acceleration code to work with 0.9 versions of the crates (#1357).
  • Relaxed the parser to allow one branch of an if.(true|false) to be empty.
  • Optimized std::sys::truncate_stuck procedure (#1384).
  • Updated CI and Makefile to standardize it across Miden repositories (#1342).
  • Add serialization/deserialization for MastForest (#1370).
  • Updated CI to support CHANGELOG.md modification checking and no changelog label (#1406).
  • Introduced MastForestError to enforce MastForest node count invariant (#1394).
  • Added functions to MastForestBuilder to allow ensuring of nodes with fewer LOC (#1404).
  • [BREAKING] Made Assembler single-use (#1409).
  • Removed ProcedureCache from the assembler (#1411).
  • Added functions to MastForest and MastForestBuilder to add and ensure nodes with fewer LOC (#1404, #1412).
  • Added Assembler::assemble_library() and Assembler::assemble_kernel() (#1413, #1418).
  • Added miden_core::prettier::pretty_print_csv helper, for formatting of iterators over PrettyPrint values as comma-separated items.
  • Added source code management primitives in miden-core (#1419).
  • Added make test-fast and make test-skip-proptests Makefile targets for faster testing during local development.
  • Added ProgramFile::read_with constructor that takes a SourceManager impl to use for source management.
  • Added RowIndex(u32) (#1408).

Changed

  • When using if.(true|false) .. end, the parser used to emit an empty block for the branch that was elided. The parser now emits a block containing a single nop instruction instead.
  • [BREAKING] internals configuration feature was renamed to testing (#1399).
  • The AssemblyOp decorator now contains an optional Location (#1419)
  • The Assembler now requires passing in a Arc<dyn SourceManager>, for use in rendering diagnostics.
  • The Module::parse_file and Module::parse_str functions have been removed in favor of calling Module::parser and then using the ModuleParser methods.
  • The Compile trait now requires passing a SourceManager reference along with the item to be compiled.
  • Update minimum supported Rust version to 1.80 (#1425).
  • Made debug mode the default in the CLI. Added --release flag to disable debugging instead of having to enable it. (#1728)

0.9.2 (2024-05-22) - stdlib crate only

  • Skip writing MASM documentation to file when building on docs.rs (#1341).

0.9.2 (2024-05-09) - assembly crate only

  • Remove usage of group_vector_elements() from combine_blocks() (#1331).

0.9.2 (2024-04-25) - air and processor crates only

  • Allowed enabling debug mode via ExecutionOptions (#1316).

0.9.1 (2024-04-04)

  • Added additional trait implementations to error types (#1306).

0.9.0 (2024-04-03)

Packaging

  • [BREAKING] The package miden-vm crate was renamed from miden to miden-vm. Now the package and crate names match (#1271).

Stdlib

  • Added init_no_padding procedure to std::crypto::hashes::native (#1313).
  • [BREAKING] native module was renamed to the rpo, hash_memory procedure was renamed to the hash_memory_words (#1368).
  • Added hash_memory procedure to std::crypto::hashes::rpo (#1368).

VM Internals

  • Removed unused find_lone_leaf() function from the Advice Provider (#1262).
  • [BREAKING] Changed fields type of the StackOutputs struct from Vec<u64> to Vec<Felt> (#1268).
  • [BREAKING] Migrated to miden-crypto v0.9.0 (#1287).

0.8.0 (02-26-2024)

Assembly

  • Expanded capabilities of the debug decorator. Added debug.mem and debug.local variations (#1103).
  • Introduced the emit.<event_id> assembly instruction (#1119).
  • Introduced the procref.<proc_name> assembly instruction (#1113).
  • Added the ability to use constants as counters in repeat loops (#1124).
  • [BREAKING] Removed all checked versions of the u32 instructions. Renamed all unchecked versions (#1115).
  • Introduced the u32clz, u32ctz, u32clo, u32cto and ilog2 assembly instructions (#1176).
  • Added support for hexadecimal values in constants (#1199).
  • Added the RCombBase instruction (#1216).

Stdlib

  • Introduced std::utils module with is_empty_word procedure. Refactored std::collections::smt and std::collections::smt64 to use the procedure (#1107).
  • [BREAKING] Removed checked versions of the instructions in the std::math::u64 module (#1142).
  • Introduced clz, ctz, clo and cto instructions in the std::math::u64 module (#1179).
  • [BREAKING] Refactored std::collections::smt to use SimpleSmt-based implementation (#1215).
  • [BREAKING] Removed std::collections::smt64 (#1249)

VM Internals

  • Introduced the Event decorator and an associated on_event handler on the Host trait (#1119).
  • Added methods StackOutputs::get_stack_item() and StackOutputs::get_stack_word() (#1155).
  • Added Tracing logger to the VM (#1139).
  • Refactored auxiliary trace construction (#1140).
  • [BREAKING] Optimized u32lt instruction (#1193)
  • Added on_assert_failed() method to the Host trait (#1197).
  • Added support for handling trace instruction in the Host interface (#1198).
  • Updated Winterfell dependency to v0.8 (#1234).
  • Increased min version of rustc to 1.75.

CLI

  • Introduced the !use command for the Miden REPL (#1162).
  • Introduced a BLAKE3 hashing example (#1180).

0.7.0 (2023-10-11)

Assembly

  • Added ability to attach doc comments to re-exported procedures (#994).
  • Added support for nested modules (#992).
  • Added support for the arithmetic expressions in constant values (#1026).
  • Added support for module aliases (#1037).
  • Added adv.insert_hperm decorator (#1042).
  • Added adv.push_smtpeek decorator (#1056).
  • Added debug decorator (#1069).
  • Refactored push instruction so now it parses long hex string in little-endian (#1076).

CLI

  • Implemented ability to output compiled .masb files to disk (#1102).

VM Internals

  • Simplified range checker and removed 1 main and 1 auxiliary trace column (#949).
  • Migrated range checker lookups to use LogUp and reduced the number of trace columns to 2 main and 1 auxiliary (#1027).
  • Added get_mapped_values() and get_store_subset() methods to the AdviceProvider trait (#987).
  • [BREAKING] Added options to specify maximum number of cycles and expected number of cycles for a program (#998).
  • Improved handling of invalid/incomplete parameters in StackOutputs constructors (#1010).
  • Allowed the assembler to produce programs with "phantom" calls (#1019).
  • Added TraceLenSummary struct which holds information about traces lengths to the ExecutionTrace (#1029).
  • Imposed the 2^32 limit for the memory addresses used in the memory chiplet (#1049).
  • Supported PartialMerkleTree as a secret input in .input file (#1072).
  • [BREAKING] Refactored AdviceProvider interface into Host interface (#1082).

Stdlib

  • Completed std::collections::smt module by implementing insert and set procedures (#1036, #1038, #1046).
  • Added new module std::crypto::dsa::rpo_falcon512 to support Falcon signature verification (#1000, #1094)

0.6.1 (2023-06-29)

  • Fixed no-std compilation for miden-core, miden-assembly, and miden-processor crates.

0.6.0 (2023-06-28)

Assembly

  • Added new instructions: mtree_verify.
  • [BREAKING] Refactored adv.mem decorator to use parameters from operand stack instead of immediate values.
  • [BREAKING] Refactored mem_stream and adv_pipe instructions.
  • Added constant support for memory operations.
  • Enabled incremental compilation via compile_in_context() method.
  • Exposed ability to compile individual modules publicly via compile_module() method.
  • [BREAKING] Refactored advice injector instructions.
  • Implemented procedure re-exports from modules.

CLI

  • Implemented support for all types of nondeterministic inputs (advice stack, advice map, and Merkle store).
  • Implemented ability to generate proofs suitable for recursion.

Stdlib

  • Added new module: std::collections::smt (only smt::get available).
  • Added new module: std::collections::mmr.
  • Added new module: std::collections::smt64.
  • Added several convenience procedures to std::mem module.
  • [BREAKING] Added procedures to compute 1-to-1 hashes in std::crypto::hashes module and renamed existing procedures to remove ambiguity.
  • Greatly optimized recursive STARK verifier (reduced number of cycles by 6x - 8x).

VM Internals

  • Moved test framework from miden-vm crate to miden-test-utils crate.
  • Updated Winterfell dependency to v0.6.4.
  • Added support for GPU acceleration on Apple silicon (Metal).
  • Added source locations to all AST nodes.
  • Added 8 more instruction slots to the VM (not yet used).
  • Completed kernel ROM trace generation.
  • Implemented ability to record advice provider requests to the initial dataset via RecAdviceProvider.

0.5.0 (2023-03-29)

CLI

  • Renamed ProgramInfo to ExecutionDetails since there is another ProgramInfo struct in the source code.
  • [BREAKING] renamed stack_init and advice_tape to operand_stack and advice_stack in input files.
  • Enabled specifying additional advice provider inputs (i.e., advice map and Merkle store) via the input files.

Assembly

  • Added new instructions: is_odd, assert_eqw, mtree_merge.
  • [BREAKING] Removed mtree_cwm instruction.
  • Added breakpoint instruction to help with debugging.

VM Internals

  • [BREAKING] Renamed Read, ReadW operations into AdvPop, AdvPopW.
  • [BREAKING] Replaced AdviceSet with MerkleStore.
  • Updated Winterfell dependency to v0.6.0.
  • [BREAKING] Renamed Read/ReadW operations into AdvPop/AdvPopW.

0.4.0 (2023-02-27)

Advice provider

  • [BREAKING] Converted AdviceProvider into a trait which can be provided to the processor.
  • Added a decorator for interpolating polynomials over degree 2 extension field (ext2intt).
  • Added AdviceSource enum for greater future flexibility of advice injectors.

CLI

  • Added debug subcommand to enable stepping through program execution forward/backward.
  • Added cycle count to the output of program execution.

Assembly

  • Added support for constant declarations.
  • Added new instructions: clk, ext2*, fri_ext2fold4, hash, u32checked_popcnt, u32unchecked_popcnt.
  • [BREAKING] Renamed rpperm to hperm and rphash to hmerge.
  • Removed requirement that code blocks must be non-empty (i.e., allowed empty blocks).
  • [BREAKING] Refactored mtree_set and mtree_cwm instructions to leave the old value on the stack.
  • [BREAKING] Replaced ModuleProvider with Library to improve 3rd party library support.

Processor, Prover, and Verifier

  • [BREAKING] Refactored execute(), prove(), verify() functions to take StackInputs as one of the parameters.
  • [BREAKING] Refactored prove() function to return ExecutionProof (which is a wrapper for StarkProof).
  • [BREAKING] Refactored verify() function to take ProgramInfo, StackInputs, and ExecutionProof as parameters and return a u32 indicating security level of the verified proof.

Stdlib

  • Added std::mem::memcopy procedure for copying regions of memory.
  • Added std::crypto::fri::frie2f4::verify for verifying FRI proofs over degree 2 extension field.

VM Internals

  • [BREAKING] Migrated to Rescue Prime Optimized hash function.
  • Updated Winterfell backend to v0.5.1

0.3.0 (2022-11-23)

  • Implemented call operation for context-isolated function calls.
  • Added support for custom kernels.
  • Implemented syscall operation for kernel calls, and added a new caller instruction for accessing the hash of the calling function.
  • Implemented mem_stream operation for fast hashing of memory regions.
  • Implemented adv_pipe operation for fast "unhashing" of inputs into memory.
  • Added support for unlimited number of stack inputs/outputs.
  • [BREAKING] Redesigned Miden assembly input/output instructions for environment, random access memory, local memory, and non-deterministic "advice" inputs.
  • [BREAKING] Reordered the output stack for Miden assembly cryptographic operations mtree_set and mtree_get to improve efficiency.
  • Refactored the advice provider to add support for advice maps, and added the adv.mem decorator for copying memory regions into the advice map.
  • [BREAKING] Refactored the Assembler and added support for module providers. (Standard library is no longer available by default.)
  • Implemented AIR constraints for the stack component.
  • Added Miden REPL tool.
  • Improved performance with various internal refactorings and optimizations.

0.2.0 (2022-08-09)

  • Implemented new decoder which removes limitations on the depth of control flow logic.
  • Introduced chiplet architecture to offload complex computations to specialized modules.
  • Added read-write random access memory.
  • Added support for operations with 32-bit unsigned integers.
  • Redesigned advice provider to include Merkle path advice sets.
  • Changed base field of the VM to the prime field with modulus 2^64 - 2^32 + 1.

0.1.0 (2021-11-16)