Hashing
Prove you know the data behind a hash without revealing it: Keccak-f[1600] for SHA-3 and SHAKE, and SHA-256.
FIPS 202hekate-keccak
Keccak-f[1600]
Prove SHA-3, SHAKE128 and SHAKE256 hashes in zero knowledge with a Keccak-f[1600] circuit; your program chains the sponge over the permutation calls.
FIPS 180-4hekate-sha2
SHA-256
Prove SHA-256 hashes in zero knowledge: all 64 rounds of the FIPS 180-4 compression function per block, with padding and block chaining in your program.