Valeh Farzaliyev

kMaxNbModuli was written instead of kMaxPolyDegree which was confusing

Updates to sha256 component: - input size changed from fixed 4 block elements to custom size

the verification circuit for placeholder proof system can be verified using placeholder proof system similar to Nova's recursive proof approach

Currently, sha256 component accepts 4 pallas curve points (blocks) as an input. It should accept any input size

SHA256 component lacks copy constraints. It has component table similar to SHA512.

Hash2Field algorithm requires either extended message digest or extensible output function (XOF) according to https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-hash-to-curve-11#section-5.4 h2f.hpp already implements `expand_message_xmd` but not `expand_msg_xof`, primarily due to no XOF implementation in crypto3...

- SHAKE128 and SHAKE256 implemented - several h2f suites added - corresponding test cases added - fiat-shamir transcript modified for fields with modulus bigger than hash digest size

### TODO - [ ] Prepare input data - [ ] Implement lpc proof batch generator - [ ] Serialize all necessary data in JSON format - [ ] Get...