chore: uses sha256compression opcode in Noir and implements acvm solver for it

[guipublic]

This PR should be merged after PR #4503 , because it uses the opcode implemented by the latter.

In this PR, I add the implementation of the ACVM solver for sha256compression opcode, and use it in Noir implementation of sha256.

This gives us 3 ways of doing sha256. You can see below the resulting circuit size for hashing 1 byte with each of them:

• The full Noir implementation : 17161 ACIR Opcodes, Circuit size is 65065
• The full BB implementation: 75 ACIR Opcodes, Circuit size is 38799
• Mixed Noir+sha256compression opcode: 351 ACIR Occodes, Circuit size is 15495

The sha256compression opcode is a clear winner, and this is because it uses UltraPlonk lookup-gates.
As a result, I have removed the 2 other methods in the stdlib. The stdlib sha256 is now calling the Noir implementation which is using the sha256compression opcodes.
The old opcode should be removed in a future PR.

[AztecBot]

Benchmark results

Metrics with a significant change:

• note_history_trial_decrypting_time_in_ms (5): 172 (+109%)

Detailed results

All benchmarks are run on txs on the Benchmarking contract on the repository. Each tx consists of a batch call to create_note and increment_balance, which guarantees that each tx has a private call, a nested private call, a public call, and a nested public call, as well as an emitted private note, an unencrypted log, and public storage read and write.

This benchmark source data is available in JSON format on S3 here.

Values are compared against data from master at commit 94f436ed and shown if the difference exceeds 1%.

L2 block published to L1

Each column represents the number of txs on an L2 block published to L1.

Metric	8 txs	32 txs	128 txs
l1_rollup_calldata_size_in_bytes	45,956	181,604	724,196
l1_rollup_calldata_gas	227,180	888,740	3,535,664
l1_rollup_execution_gas	320,371	1,007,188	3,756,042
l2_block_processing_time_in_ms	1,149	4,334	17,176
note_successful_decrypting_time_in_ms	311	964	3,579 (-1%)
note_trial_decrypting_time_in_ms	19.8 (-2%)	91.3 (-1%)	139 (-5%)
l2_block_building_time_in_ms	18,171	71,694	288,333
l2_block_rollup_simulation_time_in_ms	13,508	53,251	214,651
l2_block_public_tx_process_time_in_ms	4,633	18,365	73,430

L2 chain processing

Each column represents the number of blocks on the L2 chain where each block has 16 txs.

Metric	5 blocks	10 blocks
node_history_sync_time_in_ms	15,148 (-6%)	29,311 (-3%)
note_history_successful_decrypting_time_in_ms	2,317 (+1%)	4,517
note_history_trial_decrypting_time_in_ms	⚠️ 172 (+109%)	215 (-1%)
node_database_size_in_bytes	17,281,104	33,185,872
pxe_database_size_in_bytes	29,923	59,478

Circuits stats

Stats on running time and I/O sizes collected for every circuit run across all benchmarks.

Circuit	circuit_simulation_time_in_ms	circuit_input_size_in_bytes	circuit_output_size_in_bytes
private-kernel-init	326	44,528	25,313
private-kernel-ordering	196	43,633	16,193
base-rollup	1,457	129,774	933
root-rollup	82.5 (-1%)	4,192	729
private-kernel-inner	435	70,819	25,313
public-kernel-private-input	238	33,663	26,945
public-kernel-non-first-iteration	237	33,705	26,945
merge-rollup	7.81	2,712	933

Tree insertion stats

The duration to insert a fixed batch of leaves into each tree type.

Metric	1 leaves	2 leaves	8 leaves	16 leaves	32 leaves	128 leaves	64 leaves	512 leaves	1024 leaves	2048 leaves	8192 leaves
batch_insert_into_append_only_tree_16_depth_ms	10.2	10.6	12.6	16.7 (-2%)	22.7 (-2%)	63.7	N/A	N/A	N/A	N/A	N/A
batch_insert_into_append_only_tree_16_depth_hash_count	16.9	17.5	23.0	31.6	47.0	143	N/A	N/A	N/A	N/A	N/A
batch_insert_into_append_only_tree_16_depth_hash_ms	0.591	0.592	0.538	0.518 (-2%)	0.476 (-1%)	0.440	N/A	N/A	N/A	N/A	N/A
batch_insert_into_append_only_tree_32_depth_ms	N/A	N/A	N/A	N/A	N/A	74.2	47.5	239	459	901 (-1%)	3,546
batch_insert_into_append_only_tree_32_depth_hash_count	N/A	N/A	N/A	N/A	N/A	159	96.0	543	1,055	2,079	8,223
batch_insert_into_append_only_tree_32_depth_hash_ms	N/A	N/A	N/A	N/A	N/A	0.459	0.487	0.436	0.430	0.429 (-1%)	0.427
batch_insert_into_indexed_tree_20_depth_ms	N/A	N/A	N/A	N/A	N/A	103	56.5	350 (+1%)	684	1,359	5,406
batch_insert_into_indexed_tree_20_depth_hash_count	N/A	N/A	N/A	N/A	N/A	197	104	691	1,363	2,707	10,771
batch_insert_into_indexed_tree_20_depth_hash_ms	N/A	N/A	N/A	N/A	N/A	0.494	0.496	0.475	0.472	0.473	0.471
batch_insert_into_indexed_tree_40_depth_ms	N/A	N/A	N/A	56.3	N/A	N/A	N/A	N/A	N/A	N/A	N/A
batch_insert_into_indexed_tree_40_depth_hash_count	N/A	N/A	N/A	94.1	N/A	N/A	N/A	N/A	N/A	N/A	N/A
batch_insert_into_indexed_tree_40_depth_hash_ms	N/A	N/A	N/A	0.577	N/A	N/A	N/A	N/A	N/A	N/A	N/A

Miscellaneous

Transaction sizes based on how many contracts are deployed in the tx.

Metric	0 deployed contracts	1 deployed contracts
tx_size_in_bytes	16,859	39,794

Transaction processing duration by data writes.

Metric	0 new commitments	1 new commitments
tx_pxe_processing_time_ms	550 (-3%)	1,435

Metric	0 public data writes	1 public data writes
tx_sequencer_processing_time_ms	0.483 (+1%)	570