feat: mod-builder + algebra + ecc CUDA tracegen

.github/workflows/benchmarks-execute.yml

@@ -2,8 +2,9 @@ name: "Execution benchmarks"
 
 on:
   workflow_call:
-  push:
-    branches: ["main"]
+  # TODO: re-enable after benchmarks are ported to v2 (native extensions removed)
+  # push:
+  #   branches: ["main"]
   # pull_request:
   #   types: [opened, synchronize, reopened, labeled]
   #   branches: ["**"]
@@ -29,97 +30,97 @@ env:
   JEMALLOC_SYS_WITH_MALLOC_CONF: "retain:true,background_thread:true,metadata_thp:always,thp:always,dirty_decay_ms:10000,muzzy_decay_ms:10000,abort_conf:true"
   TOOLCHAIN: "+nightly-2025-08-19"
 
-jobs: {}
-  # codspeed-walltime-benchmarks:
-  #   name: Run codspeed walltime benchmarks
-  #   runs-on:
-  #     - runs-on=${{ github.run_id }}
-  #     - family=m5a.16xlarge # 2.5Ghz clock speed
-  #     - image=ubuntu24-full-x64
-  #     - extras=s3-cache
-  #
-  #   env:
-  #     CODSPEED_RUNNER_MODE: walltime
-  #     CODSPEED_PROFILING: "false"
-  #
-  #   steps:
-  #     - uses: runs-on/action@v2
-  #     - uses: actions/checkout@v5
-  #     - uses: dtolnay/rust-toolchain@stable
-  #     - uses: Swatinem/rust-cache@v2
-  #       with:
-  #         cache-on-failure: true
-  #
-  #     - name: Install architecture specific tools
-  #       run: |
-  #         source ci/scripts/utils.sh
-  #         install_s5cmd
-  #
-  #     - name: Pull fixtures from S3
-  #       run: |
-  #         mkdir -p benchmarks/fixtures
-  #         s5cmd cp "${{ env.S3_FIXTURES_PATH }}/*" benchmarks/fixtures/ || echo "No fixtures found in S3"
-  #
-  #     - name: Install cargo-binstall
-  #       uses: cargo-bins/cargo-binstall@main
-  #     - name: Install codspeed
-  #       run: cargo binstall --no-confirm --force cargo-codspeed
-  #
-  #     - name: Build benchmarks
-  #       working-directory: benchmarks/execute
-  #       run: cargo $TOOLCHAIN codspeed build --profile maxperf --features aot --bench execute
-  #     - name: Run benchmarks
-  #       uses: CodSpeedHQ/action@v3
-  #       with:
-  #         working-directory: benchmarks/execute
-  #         run: cargo $TOOLCHAIN codspeed run
-  #         token: ${{ secrets.CODSPEED_TOKEN }}
-  #
-  # codspeed-instrumentation-benchmarks:
-  #   name: Run codspeed instrumentation benchmarks
-  #   runs-on:
-  #     - runs-on=${{ github.run_id }}/family=m5a.xlarge/image=ubuntu24-full-x64/extras=s3-cache
-  #   if: github.event_name != 'pull_request'
-  #
-  #   env:
-  #     CODSPEED_RUNNER_MODE: instrumentation
-  #
-  #   steps:
-  #     - uses: runs-on/action@v2
-  #     - uses: actions/checkout@v5
-  #     - uses: dtolnay/rust-toolchain@stable
-  #     - uses: Swatinem/rust-cache@v2
-  #       with:
-  #         cache-on-failure: true
-  #
-  #     - name: Install architecture specific tools
-  #       run: |
-  #         source ci/scripts/utils.sh
-  #         install_s5cmd
-  #
-  #     - name: Pull fixtures from S3
-  #       run: |
-  #         mkdir -p benchmarks/fixtures
-  #         s5cmd cp "${{ env.S3_FIXTURES_PATH }}/*" benchmarks/fixtures/ || echo "No fixtures found in S3"
-  #
-  #     - name: Install cargo-binstall
-  #       uses: cargo-bins/cargo-binstall@main
-  #     - name: Install codspeed
-  #       run: cargo binstall --no-confirm --force cargo-codspeed
-  #
-  #     - name: Create codspeed-post-bench symlink
-  #       run: |
-  #         # codspeed-post-bench is just a sym-link
-  #         which codspeed-post-bench || echo "codspeed-post-bench not found"
-  #         sudo ln -sf ~/.cargo/bin/cargo-codspeed /usr/local/bin/codspeed-post-bench
-  #         ls -la /usr/local/bin/codspeed-post-bench
-  #
-  #     - name: Build benchmarks
-  #       working-directory: benchmarks/execute
-  #       run: cargo $TOOLCHAIN codspeed build --features aot --bench execute
-  #     - name: Run benchmarks
-  #       uses: CodSpeedHQ/action@v3
-  #       with:
-  #         working-directory: benchmarks/execute
-  #         run: cargo $TOOLCHAIN codspeed run
-  #         token: ${{ secrets.CODSPEED_TOKEN }}
+jobs:
+  codspeed-walltime-benchmarks:
+    name: Run codspeed walltime benchmarks
+    runs-on:
+      - runs-on=${{ github.run_id }}
+      - family=m5a.16xlarge # 2.5Ghz clock speed
+      - image=ubuntu24-full-x64
+      - extras=s3-cache
+
+    env:
+      CODSPEED_RUNNER_MODE: walltime
+      CODSPEED_PROFILING: "false"
+
+    steps:
+      - uses: runs-on/action@v2
+      - uses: actions/checkout@v5
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+        with:
+          cache-on-failure: true
+
+      - name: Install architecture specific tools
+        run: |
+          source ci/scripts/utils.sh
+          install_s5cmd
+
+      - name: Pull fixtures from S3
+        run: |
+          mkdir -p benchmarks/fixtures
+          s5cmd cp "${{ env.S3_FIXTURES_PATH }}/*" benchmarks/fixtures/ || echo "No fixtures found in S3"
+
+      - name: Install cargo-binstall
+        uses: cargo-bins/cargo-binstall@main
+      - name: Install codspeed
+        run: cargo binstall --no-confirm --force cargo-codspeed
+
+      - name: Build benchmarks
+        working-directory: benchmarks/execute
+        run: cargo $TOOLCHAIN codspeed build --profile maxperf --features aot --bench execute
+      - name: Run benchmarks
+        uses: CodSpeedHQ/action@v3
+        with:
+          working-directory: benchmarks/execute
+          run: cargo $TOOLCHAIN codspeed run
+          token: ${{ secrets.CODSPEED_TOKEN }}
+
+  codspeed-instrumentation-benchmarks:
+    name: Run codspeed instrumentation benchmarks
+    runs-on:
+      - runs-on=${{ github.run_id }}/family=m5a.xlarge/image=ubuntu24-full-x64/extras=s3-cache
+    if: github.event_name != 'pull_request'
+
+    env:
+      CODSPEED_RUNNER_MODE: instrumentation
+
+    steps:
+      - uses: runs-on/action@v2
+      - uses: actions/checkout@v5
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+        with:
+          cache-on-failure: true
+
+      - name: Install architecture specific tools
+        run: |
+          source ci/scripts/utils.sh
+          install_s5cmd
+
+      - name: Pull fixtures from S3
+        run: |
+          mkdir -p benchmarks/fixtures
+          s5cmd cp "${{ env.S3_FIXTURES_PATH }}/*" benchmarks/fixtures/ || echo "No fixtures found in S3"
+
+      - name: Install cargo-binstall
+        uses: cargo-bins/cargo-binstall@main
+      - name: Install codspeed
+        run: cargo binstall --no-confirm --force cargo-codspeed
+
+      - name: Create codspeed-post-bench symlink
+        run: |
+          # codspeed-post-bench is just a sym-link
+          which codspeed-post-bench || echo "codspeed-post-bench not found"
+          sudo ln -sf ~/.cargo/bin/cargo-codspeed /usr/local/bin/codspeed-post-bench
+          ls -la /usr/local/bin/codspeed-post-bench
+
+      - name: Build benchmarks
+        working-directory: benchmarks/execute
+        run: cargo $TOOLCHAIN codspeed build --features aot --bench execute
+      - name: Run benchmarks
+        uses: CodSpeedHQ/action@v3
+        with:
+          working-directory: benchmarks/execute
+          run: cargo $TOOLCHAIN codspeed run
+          token: ${{ secrets.CODSPEED_TOKEN }}

.github/workflows/extension-tests.cuda.yml

@@ -34,7 +34,7 @@ jobs:
       matrix:
         extensions: # group extensions on the same runner based on test time
           - "rv32im"
-          - "keccak256 sha256 bigint algebra ecc pairing deferral"
+          - "keccak256 sha2 bigint algebra ecc pairing deferral"
     runs-on:
       - runs-on=${{ github.run_id }}-extension-tests-cuda-${{ github.run_attempt }}-${{ strategy.job-index }}/runner=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.machine_type || 'test-gpu-nvidia/family=g6.*+g6e' }}
 
@@ -54,8 +54,8 @@ jobs:
               - "extensions/rv32im/**"
             keccak256:
               - "extensions/keccak256/**"
-            sha256:
-              - "extensions/sha256/**"
+            sha2:
+              - "extensions/sha2/**"
             bigint:
               - "extensions/bigint/**"
             algebra:
@@ -77,7 +77,7 @@ jobs:
           # Check if any extension in the current matrix group changed
           ANY_EXT_CHANGED=false
           for ext in ${{ matrix.extensions }}; do
-            ext_changed=$(echo $FILTER_OUTPUTS | jq -r .$ext)
+            ext_changed=$(echo $FILTER_OUTPUTS | jq -r --arg ext "$ext" '.[$ext]')
             if [[ "$ext_changed" == "true" ]]; then
               ANY_EXT_CHANGED=true
               break
@@ -112,7 +112,7 @@ jobs:
           COMMON_CHANGED=$(echo $FILTER_OUTPUTS | jq -r .common)
 
           for ext in ${{ matrix.extensions }}; do
-            ext_changed=$(echo $FILTER_OUTPUTS | jq -r .$ext)
+            ext_changed=$(echo $FILTER_OUTPUTS | jq -r --arg ext "$ext" '.[$ext]')
             if [[ "$COMMON_CHANGED" == "true" || "$ext_changed" == "true" ]]; then
               echo "::group::Running tests for $ext"
 

.github/workflows/extension-tests.yml

@@ -29,15 +29,15 @@ jobs:
         extension:
           - { name: "rv32im", path: "rv32im", aot: false }
           - { name: "keccak256", path: "keccak256", aot: false }
-          - { name: "sha256", path: "sha256", aot: false }
+          - { name: "sha2", path: "sha2", aot: false }
           - { name: "bigint", path: "bigint", aot: false }
           - { name: "algebra", path: "algebra", aot: false }
           - { name: "ecc", path: "ecc", aot: false }
           - { name: "pairing", path: "pairing", aot: false }
           - { name: "deferral", path: "deferral", aot: false }
           - { name: "rv32im", path: "rv32im", aot: true }
           - { name: "keccak256", path: "keccak256", aot: true }
-          - { name: "sha256", path: "sha256", aot: true }
+          - { name: "sha2", path: "sha2", aot: true }
           - { name: "bigint", path: "bigint", aot: true }
           - { name: "algebra", path: "algebra", aot: true }
           - { name: "ecc", path: "ecc", aot: true }

.github/workflows/guest-lib-tests.cuda.yml

@@ -29,7 +29,8 @@ jobs:
     strategy:
       matrix:
         crates: # group crates on the same runner based on test time
-          - { names: "sha2 keccak256 verify-stark" }
+          - { names: "sha2 keccak256" }
+          - { names: "verify-stark" }
           - { names: "ruint k256 p256" }
           - { names: "ff_derive pairing" }
     runs-on:
@@ -51,7 +52,7 @@ jobs:
               - ".github/workflows/guest-lib-tests.cuda.yml"
               - "crates/sdk/guest/fib/**"
             sha2:
-              - "extensions/sha256/**"
+              - "extensions/sha2/**"
               - "guest-libs/sha2/**"
             keccak256:
               - "extensions/keccak256/**"
@@ -144,6 +145,9 @@ jobs:
                 elif [[ "$crate" == "ruint" ]]; then
                   # only run integration tests because other tests are not OpenVM related
                   SPECIAL_ARGS="test_matrix_power"
+                elif [[ "$crate" == "sha2" || "$crate" == "keccak256" ]]; then
+                  # also run proving tests
+                  SPECIAL_ARGS="--run-ignored=all"
                 fi
 
                 ${{ env.NEXTEST_ENV }} cargo nextest run --cargo-profile=fast ${{ env.FEATURE_ARGS }} $SPECIAL_ARGS --no-tests=pass --test-threads=1

.github/workflows/guest-lib-tests.yml

@@ -74,8 +74,10 @@ jobs:
         working-directory: guest-libs/${{ matrix.crate.path }}
         run: |
           rustup component add rust-src --toolchain nightly-2025-08-02
-          PAIRING_FEATURE_ARGS=""
-          if [[ "${{ matrix.crate.name }}" == "pairing" ]]; then
-            PAIRING_FEATURE_ARGS="--features=bn254,bls12_381,aot"
+          FEATURE_ARGS=""
+          if [[ "${{ matrix.crate.name }}" == "sha2" || "${{ matrix.crate.name }}" == "keccak256" ]]; then
+            FEATURE_ARGS="--features=aot"
+          elif [[ "${{ matrix.crate.name }}" == "pairing" ]]; then
+            FEATURE_ARGS="--features=bn254,bls12_381,aot"
           fi
-          cargo nextest run --cargo-profile=fast $PAIRING_FEATURE_ARGS --no-tests=pass --test-threads=1
+          cargo nextest run --cargo-profile=fast $FEATURE_ARGS --no-tests=pass --test-threads=1

.github/workflows/pr-title.yml

@@ -84,10 +84,11 @@ jobs:
         if: steps.lint_pr_title.outcome == 'failure'
         run: exit 1
 
-  execute-benchmarks:
-    name: Execute benchmarks
-    uses: ./.github/workflows/benchmarks-execute.yml
-    secrets: inherit
+  # TODO: re-enable after benchmarks are ported to v2 (native extensions removed)
+  # execute-benchmarks:
+  #   name: Execute benchmarks
+  #   uses: ./.github/workflows/benchmarks-execute.yml
+  #   secrets: inherit
 
   extension-tests:
     name: Extension tests

.github/workflows/primitives.yml

@@ -9,7 +9,7 @@ on:
     paths:
       - "crates/circuits/primitives/**"
       - "crates/circuits/poseidon2-air/**"
-      - "crates/circuits/sha256-air/**"
+      - "crates/circuits/sha2-air/**"
       - "crates/circuits/mod-builder/**"
       - "Cargo.toml"
       - ".github/workflows/primitives.yml"
@@ -64,12 +64,12 @@ jobs:
         run: |
           cargo nextest run ${{ env.NEXTEST_ARGS }}
 
-        # No gpu tests in these crates
-      - name: Run tests for sha256-air
-        if: ${{ !contains(matrix.platform.runner, 'gpu') }}
-        working-directory: crates/circuits/sha256-air
-        run: |
-          cargo nextest run ${{ env.NEXTEST_ARGS }}
+      # sha2-air has no tests; skipping to avoid upstream openvm-cpu-backend parallel compilation issue
+      # - name: Run tests for sha2-air
+      #   if: ${{ !contains(matrix.platform.runner, 'gpu') }}
+      #   working-directory: crates/circuits/sha2-air
+      #   run: |
+      #     cargo nextest run ${{ env.NEXTEST_ARGS }}
 
       - name: Run tests for mod-builder
         if: ${{ !contains(matrix.platform.runner, 'gpu') }}