biggroup.fuzzer.hpp

Go to the documentation of this file.

// === AUDIT STATUS ===
// internal:    { status: not started, auditors: [], date: YYYY-MM-DD }
// external_1:  { status: not started, auditors: [], date: YYYY-MM-DD }
// external_2:  { status: not started, auditors: [], date: YYYY-MM-DD }
// =====================
 
#pragma once
#include "barretenberg/circuit_checker/circuit_checker.hpp"
#include "barretenberg/numeric/random/engine.hpp"
#include "barretenberg/numeric/uint256/uint256.hpp"
#include "barretenberg/stdlib/primitives/biggroup/biggroup.hpp"
#include "barretenberg/stdlib/primitives/curves/bn254.hpp"
#include "barretenberg/stdlib/primitives/curves/secp256k1.hpp"
#include "barretenberg/stdlib/primitives/curves/secp256r1.hpp"
 
#pragma clang diagnostic push
 
// -Wc99-designator prevents us from using designators and nested designators
// in struct intializations
// such as {.in.first = a, .out = b}, since it's not a part of c++17 standard
// However the use of them in this particular file heavily increases
// the readability and conciseness of the biggroup::Instruction initializations
#pragma clang diagnostic ignored "-Wc99-designator"
 
#ifdef FUZZING_SHOW_INFORMATION
struct FormattedArgs {
    std::string lhs;
    std::string rhs;
    std::string out;
};
 
template <typename Stack> inline FormattedArgs format_self_arg(const Stack& stack, size_t first_index)
{
    std::string out = stack[first_index].biggroup.is_constant() ? "c" : "w";
    out += std::to_string(first_index);
    return FormattedArgs{ .lhs = "", .rhs = "", .out = out };
}
 
template <typename Stack>
inline FormattedArgs format_single_arg(const Stack& stack, size_t first_index, size_t output_index)
{
    std::string rhs = stack[first_index].biggroup.is_constant() ? "c" : "w";
    std::string out = rhs;
    rhs += std::to_string(first_index);
    out += std::to_string(output_index >= stack.size() ? stack.size() : output_index);
    out = (output_index >= stack.size() ? "auto " : "") + out;
    return FormattedArgs{ .lhs = "", .rhs = rhs, .out = out };
}
 
template <typename Stack>
inline FormattedArgs format_two_arg(const Stack& stack, size_t first_index, size_t second_index, size_t output_index)
{
    std::string lhs = stack[first_index].biggroup.is_constant() ? "c" : "w";
    std::string rhs = stack[second_index].biggroup.is_constant() ? "c" : "w";
    std::string out =
        (stack[first_index].biggroup.is_constant() && stack[second_index].biggroup.is_constant()) ? "c" : "w";
    lhs += std::to_string(first_index);
    rhs += std::to_string(second_index);
    out += std::to_string(output_index >= stack.size() ? stack.size() : output_index);
    out = (output_index >= stack.size() ? "auto " : "") + out;
    return FormattedArgs{ .lhs = lhs, .rhs = rhs, .out = out };
}
#endif
 
#define HAVOC_TESTING
 
// This is a global variable, so that the execution handling class could alter it and signal to the input tester
// that the input should fail
bool circuit_should_fail = false;
 
#include "barretenberg/common/fuzzer.hpp"
 
// #define FUZZING_SHOW_INFORMATION
 
// #define DISABLE_MULTIPLICATION
// #define DISABLE_BATCH_MUL
 
FastRandom VarianceRNG(0);
 
constexpr size_t MINIMUM_MUL_ELEMENTS = 0;
constexpr size_t MAXIMUM_MUL_ELEMENTS = 8;
 
// This is an external function in Libfuzzer used internally by custom mutators
extern "C" size_t LLVMFuzzerMutate(uint8_t* Data, size_t Size, size_t MaxSize);
 
enum class SpecialScalarValue : uint8_t {
    One = 0,
    MinusOne,
    SquareRootOfOne,
    InverseSquareRootOfOne,
    RootOfUnity13, // 13th root of unity (arbitrary small root)
    Two,           // Small even number
    HalfModulus,   // (p-1)/2
    Zero,
    COUNT // Sentinel value for total count
};
 
// Number of special values excluding Zero
constexpr uint8_t SPECIAL_VALUE_COUNT_NO_ZERO = static_cast<uint8_t>(SpecialScalarValue::Zero);
 
// Number of special values including Zero
constexpr uint8_t SPECIAL_VALUE_COUNT = static_cast<uint8_t>(SpecialScalarValue::COUNT);
 
template <typename FF> inline FF get_special_scalar_value(SpecialScalarValue type)
{
    switch (type) {
    case SpecialScalarValue::One:
        return FF::one();
    case SpecialScalarValue::MinusOne:
        return -FF::one();
    case SpecialScalarValue::SquareRootOfOne:
        return FF::one().sqrt().second;
    case SpecialScalarValue::InverseSquareRootOfOne:
        return FF::one().sqrt().second.invert();
    case SpecialScalarValue::RootOfUnity13:
        return FF::get_root_of_unity(13);
    case SpecialScalarValue::Two:
        return FF(2);
    case SpecialScalarValue::HalfModulus:
        return FF((FF::modulus - 1) / 2);
    case SpecialScalarValue::Zero:
        return FF::zero();
    case SpecialScalarValue::COUNT:
        // Fallthrough to abort - COUNT should never be used as a value
    default:
        abort(); // Invalid enum value
    }
}
 
// When _use_bigfield=true, BigfieldScalar is used as the scalar field type.
// It defaults to Curve::ScalarField (which for secp256k1/secp256r1 is already a bigfield).
// For BN254_BF, pass bigfield<Builder, Bn254FrParams> explicitly.
template <typename Builder,
          typename BigGroupType,
          bool _use_bigfield = false,
          typename BigfieldScalar = typename BigGroupType::ScalarField>
class BigGroupBase {
  private:
    using bool_t = typename bb::stdlib::bool_t<Builder>;
    using field_t = typename bb::stdlib::field_t<Builder>;
    using witness_t = typename bb::stdlib::witness_t<Builder>;
 
    using Curve = BigGroupType;
 
    using GroupElement = typename Curve::ElementNative;
    using AffineElement = typename Curve::AffineElementNative;
    using ScalarField = typename Curve::ScalarFieldNative;
    using BaseField = typename Curve::BaseFieldNative;
 
    using big_scalar_t = std::conditional_t<_use_bigfield, BigfieldScalar, typename Curve::ScalarField>;
    using biggroup_t = std::conditional_t<
        _use_bigfield,
        bb::stdlib::element<Builder, typename Curve::BaseField, BigfieldScalar, typename Curve::GroupNative>,
        typename Curve::Group>;
 
    static biggroup_t make_constant_biggroup(const AffineElement& native_elem)
    {
        using CircuitFq = typename biggroup_t::BaseField;
        // Normalize infinity to (0, 0): the native affine representation of infinity may carry
        // non-zero coordinates (e.g. from Jacobian conversion), but the new 2-arg circuit
        // constructor auto-detects infinity only via limb_sum == 0.
        const bool is_inf = native_elem.is_point_at_infinity();
        CircuitFq x(nullptr, is_inf ? uint256_t(0) : uint256_t(native_elem.x));
        CircuitFq y(nullptr, is_inf ? uint256_t(0) : uint256_t(native_elem.y));
        return biggroup_t(x, y, /*assert_on_curve=*/false);
    }
 
  public:
    class Instruction {
      public:
        enum OPCODE {
            CONSTANT,
            WITNESS,
            CONSTANT_WITNESS,
            ASSERT_EQUAL,
            COND_ASSIGN,
            SET,
            ADD,
            SUBTRACT,
            NEG,
            DBL,
#ifndef DISABLE_MULTIPLICATION
            MULTIPLY,
#endif
#ifndef DISABLE_BATCH_MUL
            BATCH_MUL,
#endif
            VALIDATE_ON_CURVE,
            RANDOMSEED,
            _LAST
        };
 
        struct Element {
            Element(ScalarField s = ScalarField::one(), GroupElement g = GroupElement::one())
                : scalar(s)
                , value(g) {};
            ScalarField scalar;
            GroupElement value;
        };
 
        struct OneArg {
            uint8_t in;
        };
 
        struct TwoArgs {
            uint8_t in;
            uint8_t out;
        };
 
        struct MulArgs {
            uint8_t in;
            uint8_t out;
            ScalarField scalar;
        };
 
        struct ThreeArgs {
            uint8_t in1;
            uint8_t in2;
            uint8_t out;
        };
 
        struct FourArgs {
            uint8_t in1;
            uint8_t in2;
            uint8_t in3;
            uint8_t out;
        };
 
        struct BatchMulArgs {
            uint8_t inputs[MAXIMUM_MUL_ELEMENTS];
            ScalarField scalars[MAXIMUM_MUL_ELEMENTS];
            uint8_t add_elements_count = 0;
            uint8_t output_index;
        };
 
        struct ArgumentContents {
            ArgumentContents()
                : randomseed(0) {};
            uint32_t randomseed;
            Element element;
            OneArg oneArg;
            TwoArgs twoArgs;
            MulArgs mulArgs;
            ThreeArgs threeArgs;
            BatchMulArgs batchMulArgs;
            FourArgs fourArgs;
        };
 
        // The type of the instruction
        OPCODE id;
 
        // Instruction arguments
        ArgumentContents arguments;
 
        template <typename T>
        inline static Instruction generateRandom(T& rng)
            requires SimpleRng<T>
        {
            OPCODE instruction_opcode = static_cast<OPCODE>(rng.next() % (OPCODE::_LAST));
            uint8_t in, in1, in2, in3, out;
            Instruction instr;
 
            switch (instruction_opcode) {
            case OPCODE::CONSTANT:
            case OPCODE::WITNESS:
            case OPCODE::CONSTANT_WITNESS: {
                auto scalar = ScalarField(static_cast<uint64_t>(fast_log_distributed_uint256(rng)));
                auto el = GroupElement::one() * scalar;
                return { .id = instruction_opcode, .arguments.element = Element(scalar, el) };
            }
            case OPCODE::VALIDATE_ON_CURVE:
                in = static_cast<uint8_t>(rng.next() & 0xff);
                return { .id = instruction_opcode, .arguments.oneArg = { .in = in } };
            case OPCODE::DBL:
            case OPCODE::NEG:
            case OPCODE::ASSERT_EQUAL:
            case OPCODE::SET:
                in = static_cast<uint8_t>(rng.next() & 0xff);
                out = static_cast<uint8_t>(rng.next() & 0xff);
                return { .id = instruction_opcode, .arguments.twoArgs = { .in = in, .out = out } };
            case OPCODE::ADD:
            case OPCODE::SUBTRACT:
                in1 = static_cast<uint8_t>(rng.next() & 0xff);
                in2 = static_cast<uint8_t>(rng.next() & 0xff);
                out = static_cast<uint8_t>(rng.next() & 0xff);
                return { .id = instruction_opcode,
                         .arguments.threeArgs.in1 = in1,
                         .arguments.threeArgs.in2 = in2,
                         .arguments.threeArgs.out = out };
            case OPCODE::COND_ASSIGN:
                in1 = static_cast<uint8_t>(rng.next() & 0xff);
                in2 = static_cast<uint8_t>(rng.next() & 0xff);
                in3 = static_cast<uint8_t>(rng.next() & 0xff);
                out = static_cast<uint8_t>(rng.next() & 0xff);
                return { .id = instruction_opcode,
                         .arguments.fourArgs.in1 = in1,
                         .arguments.fourArgs.in2 = in2,
                         .arguments.fourArgs.in3 = in3,
                         .arguments.fourArgs.out = out };
#ifndef DISABLE_MULTIPLICATION
            case OPCODE::MULTIPLY:
                in = static_cast<uint8_t>(rng.next() & 0xff);
                out = static_cast<uint8_t>(rng.next() & 0xff);
                return { .id = instruction_opcode,
                         .arguments.mulArgs.scalar = ScalarField(fast_log_distributed_uint256(rng)),
                         .arguments.mulArgs.in = in,
                         .arguments.mulArgs.out = out };
#endif
#ifndef DISABLE_BATCH_MUL
            case OPCODE::BATCH_MUL: {
                uint8_t mult_size0 =
                    MINIMUM_MUL_ELEMENTS +
                    static_cast<uint8_t>(rng.next() % ((MAXIMUM_MUL_ELEMENTS - MINIMUM_MUL_ELEMENTS) / 2));
                uint8_t mult_size1 =
                    MINIMUM_MUL_ELEMENTS +
                    static_cast<uint8_t>(rng.next() % ((MAXIMUM_MUL_ELEMENTS - MINIMUM_MUL_ELEMENTS) / 2));
                uint8_t mult_size =
                    mult_size0 +
                    mult_size1; // Sample the amount of batch mul participants from the binomial distribution
                instr.id = instruction_opcode;
                instr.arguments.batchMulArgs.add_elements_count = mult_size;
                for (size_t i = 0; i < mult_size; i++) {
                    instr.arguments.batchMulArgs.inputs[i] = static_cast<uint8_t>(rng.next() & 0xff);
                }
                for (size_t i = 0; i < mult_size; i++) {
                    instr.arguments.batchMulArgs.scalars[i] = ScalarField(fast_log_distributed_uint256(rng));
                }
                instr.arguments.batchMulArgs.output_index = static_cast<uint8_t>(rng.next() & 0xff);
                return instr;
            }
#endif
            case OPCODE::RANDOMSEED:
                return { .id = instruction_opcode, .arguments.randomseed = rng.next() * rng.next() };
 
            default:
                abort(); // We missed some instructions in switch
            }
        }
 
        template <typename FF> inline static uint256_t to_uint256_montgomery(const FF& value, bool as_montgomery)
        {
            if (as_montgomery) {
                return uint256_t(value.to_montgomery_form());
            }
            return uint256_t(value);
        }
 
        template <typename FF> inline static FF from_uint256_montgomery(const uint256_t& data, bool from_montgomery)
        {
            if (from_montgomery) {
                return FF(data).from_montgomery_form();
            }
            return FF(data);
        }
 
        template <typename T>
        inline static Element mutateGroupElement(Element e, T& rng, HavocSettings& havoc_config)
            requires SimpleRng<T>
        {
            // We can't just randomely modify a point on a curve
            // But we can modify it's scalar
            // With a certain probability, we apply changes to the Montgomery form, rather than the plain form. This
            // has merit, since the computation is performed in montgomery form and comparisons are often performed
            // in it, too.
            // By the same logic we can switch between Jacobian and Affine coordinates.
            // Libfuzzer comparison tracing logic can then be enabled in Montgomery form
            bool convert_to_montgomery = (rng.next() % (havoc_config.VAL_MUT_MONTGOMERY_PROBABILITY +
                                                        havoc_config.VAL_MUT_NON_MONTGOMERY_PROBABILITY)) <
                                         havoc_config.VAL_MUT_MONTGOMERY_PROBABILITY;
            bool normalize = (rng.next() % (havoc_config.VAL_MUT_MONTGOMERY_PROBABILITY +
                                            havoc_config.VAL_MUT_NON_MONTGOMERY_PROBABILITY)) <
                             havoc_config.VAL_MUT_MONTGOMERY_PROBABILITY;
            uint256_t value_data;
 
            // Pick the last value from the mutation distribution vector
            const size_t mutation_type_count = havoc_config.value_mutation_distribution.size();
            // Choose mutation
            const size_t choice = rng.next() % havoc_config.value_mutation_distribution[mutation_type_count - 1];
            if (choice < havoc_config.value_mutation_distribution[0]) {
                // Delegate mutation to libfuzzer (bit/byte mutations, autodictionary, etc)
                value_data = to_uint256_montgomery(e.scalar, convert_to_montgomery);
                LLVMFuzzerMutate((uint8_t*)&value_data, sizeof(uint256_t), sizeof(uint256_t));
                e.scalar = from_uint256_montgomery<ScalarField>(value_data, convert_to_montgomery);
                e.value = GroupElement::one() * e.scalar;
            } else if (choice < havoc_config.value_mutation_distribution[1]) {
                // Small addition/subtraction
                if (convert_to_montgomery) {
                    e.scalar = e.scalar.to_montgomery_form();
                }
                auto extra = ScalarField(rng.next() & 0xff);
 
                // With 50% probability we add/sub a small value
                if (rng.next() & 1) {
                    auto switch_sign = static_cast<bool>(rng.next() & 1);
                    if (!switch_sign) {
                        e.scalar += extra;
                        e.value += GroupElement::one() * extra;
                    } else {
                        e.scalar -= extra;
                        e.value -= GroupElement::one() * extra;
                    }
                } else {
                    // otherwise we multiply by a small value
                    e.scalar *= extra;
                    e.value *= extra;
                }
                if (normalize) {
                    e.value = e.value.normalize();
                }
                if (convert_to_montgomery) {
                    e.scalar = e.scalar.from_montgomery_form();
                }
            } else if (choice < havoc_config.value_mutation_distribution[2]) {
                if (convert_to_montgomery) {
                    e.scalar = e.scalar.to_montgomery_form();
                }
                // Substitute scalar element with a special value
                auto special_value = static_cast<SpecialScalarValue>(rng.next() % SPECIAL_VALUE_COUNT);
                e.scalar = get_special_scalar_value<ScalarField>(special_value);
                if (convert_to_montgomery) {
                    e.scalar = e.scalar.to_montgomery_form();
                }
                e.value = GroupElement::one() * e.scalar;
            }
            // Return value
            return e;
        }
        template <typename T>
        inline static ScalarField mutateScalarElement(ScalarField e, T& rng, HavocSettings& havoc_config)
            requires SimpleRng<T>
        {
            // With a certain probability, we apply changes to the Montgomery form, rather than the plain form. This
            // has merit, since the computation is performed in montgomery form and comparisons are often performed
            // in it, too.
            // Libfuzzer comparison tracing logic can then be enabled in Montgomery form
            bool convert_to_montgomery = (rng.next() % (havoc_config.VAL_MUT_MONTGOMERY_PROBABILITY +
                                                        havoc_config.VAL_MUT_NON_MONTGOMERY_PROBABILITY)) <
                                         havoc_config.VAL_MUT_MONTGOMERY_PROBABILITY;
            uint256_t value_data;
 
            // Pick the last value from the mutation distrivution vector
            const size_t mutation_type_count = havoc_config.value_mutation_distribution.size();
            // Choose mutation
            const size_t choice = rng.next() % havoc_config.value_mutation_distribution[mutation_type_count - 1];
            if (choice < havoc_config.value_mutation_distribution[0]) {
                // Delegate mutation to libfuzzer (bit/byte mutations, autodictionary, etc)
                value_data = to_uint256_montgomery(e, convert_to_montgomery);
                LLVMFuzzerMutate((uint8_t*)&value_data, sizeof(uint256_t), sizeof(uint256_t));
                e = from_uint256_montgomery<ScalarField>(value_data, convert_to_montgomery);
            } else if (choice < havoc_config.value_mutation_distribution[1]) {
                // Small addition/subtraction
                if (convert_to_montgomery) {
                    e = e.to_montgomery_form();
                }
                auto extra = ScalarField(rng.next() & 0xff);
 
                // With 50% probability we add/sub a small value
                if (rng.next() & 1) {
                    auto switch_sign = static_cast<bool>(rng.next() & 1);
                    if (!switch_sign) {
                        e += extra;
                    } else {
                        e -= extra;
                    }
                } else {
                    // otherwise we multiply by a small value
                    e *= extra;
                }
                if (convert_to_montgomery) {
                    e = e.from_montgomery_form();
                }
            } else if (choice < havoc_config.value_mutation_distribution[2]) {
                if (convert_to_montgomery) {
                    e = e.to_montgomery_form();
                }
                // Substitute scalar element with a special value excluding zero
                // I think that zeros from mutateGroupElement are enough zeros produced
                auto special_value = static_cast<SpecialScalarValue>(rng.next() % SPECIAL_VALUE_COUNT_NO_ZERO);
                e = get_special_scalar_value<ScalarField>(special_value);
                if (convert_to_montgomery) {
                    e = e.to_montgomery_form();
                }
            }
            // Return value
            return e;
        }
        template <typename T>
        inline static Instruction mutateInstruction(Instruction instruction, T& rng, HavocSettings& havoc_config)
            requires SimpleRng<T>
        {
#define PUT_RANDOM_BYTE_IF_LUCKY(variable)                                                                             \
    if (rng.next() & 1) {                                                                                              \
        variable = rng.next() & 0xff;                                                                                  \
    }
            // Depending on instruction type...
            switch (instruction.id) {
            case OPCODE::CONSTANT:
            case OPCODE::WITNESS:
            case OPCODE::CONSTANT_WITNESS:
                // If it represents pushing a value on the stack with a 50% probability randomly sample a bit_range
                // Maybe mutate the value
                if (rng.next() & 1) {
                    instruction.arguments.element =
                        mutateGroupElement(instruction.arguments.element, rng, havoc_config);
                }
                break;
 
            case OPCODE::DBL:
            case OPCODE::NEG:
            case OPCODE::ASSERT_EQUAL:
            case OPCODE::SET:
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.twoArgs.in);
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.twoArgs.out);
                break;
#ifndef DISABLE_MULTIPLICATION
            case OPCODE::MULTIPLY:
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.mulArgs.in);
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.mulArgs.out);
                if (rng.next() & 1) {
                    instruction.arguments.mulArgs.scalar =
                        mutateScalarElement(instruction.arguments.mulArgs.scalar, rng, havoc_config);
                }
                break;
#endif
            case OPCODE::ADD:
            case OPCODE::SUBTRACT:
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.threeArgs.in1);
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.threeArgs.in2);
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.threeArgs.out);
                break;
            case OPCODE::COND_ASSIGN:
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.fourArgs.in1);
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.fourArgs.in2);
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.fourArgs.in3);
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.fourArgs.out);
                break;
#ifndef DISABLE_BATCH_MUL
            case OPCODE::BATCH_MUL:
                if (rng.next() & 1) {
                    uint8_t mult_size0 =
                        MINIMUM_MUL_ELEMENTS +
                        static_cast<uint8_t>(rng.next() % ((MAXIMUM_MUL_ELEMENTS - MINIMUM_MUL_ELEMENTS) / 2));
                    uint8_t mult_size1 =
                        MINIMUM_MUL_ELEMENTS +
                        static_cast<uint8_t>(rng.next() % ((MAXIMUM_MUL_ELEMENTS - MINIMUM_MUL_ELEMENTS) / 2));
                    uint8_t mult_size =
                        mult_size0 +
                        mult_size1; // Sample the amount of batch mul participants from the binomial distribution
                    instruction.arguments.batchMulArgs.add_elements_count = mult_size;
                }
                if (instruction.arguments.batchMulArgs.add_elements_count && (rng.next() & 1)) {
                    size_t mut_count =
                        static_cast<uint8_t>(rng.next() % (instruction.arguments.batchMulArgs.add_elements_count));
                    for (size_t i = 0; i < mut_count; i++) {
                        size_t ind =
                            rng.next() % static_cast<size_t>(instruction.arguments.batchMulArgs.add_elements_count);
                        PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.batchMulArgs.inputs[ind]);
                    }
                }
                if (instruction.arguments.batchMulArgs.add_elements_count && (rng.next() & 1)) {
                    size_t mut_count =
                        static_cast<uint8_t>(rng.next() % (instruction.arguments.batchMulArgs.add_elements_count));
                    for (size_t i = 0; i < mut_count; i++) {
                        size_t ind =
                            rng.next() % static_cast<size_t>(instruction.arguments.batchMulArgs.add_elements_count);
                        instruction.arguments.batchMulArgs.scalars[ind] =
                            mutateScalarElement(instruction.arguments.batchMulArgs.scalars[ind], rng, havoc_config);
                    }
                }
                PUT_RANDOM_BYTE_IF_LUCKY(instruction.arguments.batchMulArgs.output_index);
                break;
#endif
            case OPCODE::RANDOMSEED:
                instruction.arguments.randomseed = rng.next();
                break;
            default:
                abort(); // We missed some instructions in switch
                return instruction;
            }
            return instruction;
        }
    };
    // We use argsizes to both specify the size of data needed to parse the instruction and to signal that the
    // instruction is enabled (if it is -1,it's disabled )
    class ArgSizes {
      public:
        static constexpr size_t CONSTANT = sizeof(typename Instruction::Element);
        static constexpr size_t WITNESS = sizeof(typename Instruction::Element);
        static constexpr size_t CONSTANT_WITNESS = sizeof(typename Instruction::Element);
        static constexpr size_t VALIDATE_ON_CURVE = 1;
        static constexpr size_t DBL = 2;
        static constexpr size_t NEG = 2;
        static constexpr size_t ASSERT_EQUAL = 2;
        static constexpr size_t SET = 2;
        static constexpr size_t ADD = 3;
        static constexpr size_t SUBTRACT = 3;
        static constexpr size_t COND_ASSIGN = 4;
#ifndef DISABLE_MULTIPLICATION
        static constexpr size_t MULTIPLY = sizeof(typename Instruction::MulArgs);
#endif
#ifndef DISABLE_BATCH_MUL
        static constexpr size_t BATCH_MUL = sizeof(typename Instruction::BatchMulArgs);
#endif
        static constexpr size_t RANDOMSEED = sizeof(uint32_t);
    };
 
    class InstructionWeights {
      public:
        static constexpr size_t SET = 0;
        static constexpr size_t RANDOMSEED = 0;
 
        static constexpr size_t CONSTANT = 1;
        static constexpr size_t WITNESS = 1;
        static constexpr size_t CONSTANT_WITNESS = 1;
        static constexpr size_t ADD = 1;
        static constexpr size_t SUBTRACT = 1;
        static constexpr size_t DBL = 1;
        static constexpr size_t NEG = 1;
        static constexpr size_t COND_ASSIGN = 1;
 
        static constexpr size_t VALIDATE_ON_CURVE = 2;
 
#ifndef DISABLE_MULTIPLICATION
        static constexpr size_t MULTIPLY = 2;
#endif
        static constexpr size_t ASSERT_EQUAL = 2;
 
#ifndef DISABLE_BATCH_MUL
        static constexpr size_t BATCH_MUL = 4;
#endif
        static constexpr size_t _LIMIT = 64;
    };
 
    class Parser {
      public:
        template <typename Instruction::OPCODE opcode> inline static Instruction parseInstructionArgs(uint8_t* Data)
        {
            Instruction instr;
            instr.id = static_cast<typename Instruction::OPCODE>(opcode);
            switch (opcode) {
            case Instruction::OPCODE::CONSTANT:
            case Instruction::OPCODE::WITNESS:
            case Instruction::OPCODE::CONSTANT_WITNESS: {
                auto scalar = ScalarField::serialize_from_buffer(Data);
                auto el = GroupElement::one() * scalar;
                instr.arguments.element = typename Instruction::Element(scalar, el);
                break;
            }
            case Instruction::OPCODE::VALIDATE_ON_CURVE: {
                instr.arguments.oneArg = { .in = *Data };
                break;
            }
            case Instruction::OPCODE::DBL:
            case Instruction::OPCODE::NEG:
            case Instruction::OPCODE::ASSERT_EQUAL:
            case Instruction::OPCODE::SET:
                instr.arguments.twoArgs = { .in = *Data, .out = *(Data + 1) };
                break;
            case Instruction::OPCODE::ADD:
            case Instruction::OPCODE::SUBTRACT:
                instr.arguments.threeArgs = { .in1 = *Data, .in2 = *(Data + 1), .out = *(Data + 2) };
                break;
            case Instruction::OPCODE::COND_ASSIGN:
                instr.arguments.fourArgs = { .in1 = *Data, .in2 = *(Data + 1), .in3 = *(Data + 2), .out = *(Data + 3) };
                break;
 
#ifndef DISABLE_MULTIPLICATION
            case Instruction::OPCODE::MULTIPLY:
                instr.arguments.mulArgs.in = *Data;
                instr.arguments.mulArgs.out = *(Data + 1);
                instr.arguments.mulArgs.scalar = ScalarField::serialize_from_buffer(Data + 2);
                break;
#endif
#ifndef DISABLE_BATCH_MUL
            case Instruction::OPCODE::BATCH_MUL: {
                // In case of LLVM native instruction mutator
                instr.arguments.batchMulArgs.add_elements_count = *Data % MAXIMUM_MUL_ELEMENTS;
                if (instr.arguments.batchMulArgs.add_elements_count < MINIMUM_MUL_ELEMENTS) {
                    instr.arguments.batchMulArgs.add_elements_count = MINIMUM_MUL_ELEMENTS;
                }
                instr.arguments.batchMulArgs.output_index = *(Data + 1);
 
                size_t n = instr.arguments.batchMulArgs.add_elements_count;
                memcpy(instr.arguments.batchMulArgs.inputs, Data + 2, n);
 
                size_t offset = n + 2;
                for (size_t i = 0; i < n; i++) {
                    instr.arguments.batchMulArgs.scalars[i] = ScalarField::serialize_from_buffer(Data + offset);
                    offset += sizeof(ScalarField);
                }
                break;
            }
#endif
            case Instruction::OPCODE::RANDOMSEED:
                memcpy(&instr.arguments.randomseed, Data, sizeof(uint32_t));
                break;
            default:
                abort(); // We missed some instructions in switch
            }
            return instr;
        }
        template <typename Instruction::OPCODE instruction_opcode>
        inline static void writeInstruction(Instruction& instruction, uint8_t* Data)
        {
            *Data = instruction.id;
            switch (instruction_opcode) {
            case Instruction::OPCODE::CONSTANT:
            case Instruction::OPCODE::WITNESS:
            case Instruction::OPCODE::CONSTANT_WITNESS:
                ScalarField::serialize_to_buffer(instruction.arguments.element.scalar, Data + 1);
                break;
            case Instruction::OPCODE::VALIDATE_ON_CURVE:
                *(Data + 1) = instruction.arguments.oneArg.in;
                break;
            case Instruction::OPCODE::DBL:
            case Instruction::OPCODE::NEG:
            case Instruction::OPCODE::ASSERT_EQUAL:
            case Instruction::OPCODE::SET:
                *(Data + 1) = instruction.arguments.twoArgs.in;
                *(Data + 2) = instruction.arguments.twoArgs.out;
                break;
            case Instruction::OPCODE::ADD:
            case Instruction::OPCODE::SUBTRACT:
                *(Data + 1) = instruction.arguments.threeArgs.in1;
                *(Data + 2) = instruction.arguments.threeArgs.in2;
                *(Data + 3) = instruction.arguments.threeArgs.out;
                break;
            case Instruction::OPCODE::COND_ASSIGN:
                *(Data + 1) = instruction.arguments.fourArgs.in1;
                *(Data + 2) = instruction.arguments.fourArgs.in2;
                *(Data + 3) = instruction.arguments.fourArgs.in3;
                *(Data + 4) = instruction.arguments.fourArgs.out;
                break;
#ifndef DISABLE_MULTIPLICATION
            case Instruction::OPCODE::MULTIPLY:
                *(Data + 1) = instruction.arguments.mulArgs.in;
                *(Data + 2) = instruction.arguments.mulArgs.out;
                ScalarField::serialize_to_buffer(instruction.arguments.mulArgs.scalar, Data + 3);
                break;
#endif
#ifndef DISABLE_BATCH_MUL
            case Instruction::OPCODE::BATCH_MUL: {
                *(Data + 1) = instruction.arguments.batchMulArgs.add_elements_count;
                *(Data + 2) = instruction.arguments.batchMulArgs.output_index;
 
                size_t n = instruction.arguments.batchMulArgs.add_elements_count;
 
                memcpy(Data + 3, instruction.arguments.batchMulArgs.inputs, n);
                size_t offset = n + 3;
                for (size_t i = 0; i < n; i++) {
                    ScalarField::serialize_to_buffer(instruction.arguments.batchMulArgs.scalars[i], Data + offset);
                    offset += sizeof(ScalarField);
                }
                break;
            }
#endif
            case Instruction::OPCODE::RANDOMSEED:
                memcpy(Data + 1, &instruction.arguments.randomseed, sizeof(uint32_t));
                break;
            default:
                abort(); // We missed some instructions in switch
            }
            return;
        };
    };
 
    class ExecutionHandler {
      private:
        static bool_t construct_predicate(Builder* builder, const bool predicate)
        {
            /* The context field of a predicate can be nullptr;
             * in that case, the function that handles the predicate
             * will use the context of another input parameter
             */
            const bool predicate_is_const = static_cast<bool>(VarianceRNG.next() & 1);
            if (predicate_is_const) {
                const bool predicate_has_ctx = static_cast<bool>(VarianceRNG.next() % 2);
                debug_log("bool_t(", (predicate_has_ctx ? "&builder," : "nullptr,"), (predicate ? "true)" : "false)"));
                return bool_t(predicate_has_ctx ? builder : nullptr, predicate);
            }
            debug_log("bool_t(witness_t(&builder, ", (predicate ? "true));" : "false))"));
            return bool_t(witness_t(builder, predicate));
        }
 
        biggroup_t bg() const
        {
            const bool reconstruct = static_cast<bool>(VarianceRNG.next() & 1);
            return reconstruct ? biggroup_t(this->biggroup) : this->biggroup;
        }
 
      public:
        ScalarField base_scalar;
        GroupElement base;
        biggroup_t biggroup;
 
        ExecutionHandler() = default;
        ExecutionHandler(ScalarField s, GroupElement g, biggroup_t w_g)
            : base_scalar(s)
            , base(g)
            , biggroup(w_g)
        {}
 
      private:
        ExecutionHandler handle_add_doubling_case([[maybe_unused]] Builder* builder,
                                                  const ExecutionHandler& other,
                                                  const ScalarField& base_scalar_res,
                                                  const GroupElement& base_res)
        {
            uint8_t dbl_path = VarianceRNG.next() % 4;
            switch (dbl_path) {
            case 0:
                debug_log("left.dbl", "\n");
                return ExecutionHandler(base_scalar_res, base_res, this->bg().dbl());
            case 1:
                debug_log("right.dbl", "\n");
                return ExecutionHandler(base_scalar_res, base_res, other.bg().dbl());
            case 2:
                return ExecutionHandler(base_scalar_res, base_res, this->bg() + other.bg());
            case 3:
                return ExecutionHandler(base_scalar_res, base_res, other.bg() + this->bg());
            }
            return {};
        }
 
        ExecutionHandler handle_add_infinity_case(const ExecutionHandler& other,
                                                  const ScalarField& base_scalar_res,
                                                  const GroupElement& base_res)
        {
            uint8_t inf_path = VarianceRNG.next() % 2;
            biggroup_t res;
            switch (inf_path) {
            case 0:
                return ExecutionHandler(base_scalar_res, base_res, this->bg() + other.bg());
            case 1:
                return ExecutionHandler(base_scalar_res, base_res, other.bg() + this->bg());
            }
            return {};
        }
 
        ExecutionHandler handle_add_normal_case(const ExecutionHandler& other,
                                                const ScalarField& base_scalar_res,
                                                const GroupElement& base_res)
        {
            bool smth_inf =
                this->biggroup.is_point_at_infinity().get_value() || other.biggroup.is_point_at_infinity().get_value();
            uint8_t add_option = smth_inf ? 2 + (VarianceRNG.next() % 2) : VarianceRNG.next() % 4;
 
            switch (add_option) {
            case 0:
                debug_log("left.checked_unconditional_add(right);", "\n");
                return ExecutionHandler(base_scalar_res, base_res, this->bg().checked_unconditional_add(other.bg()));
            case 1:
                debug_log("right.checked_unconditional_add(left);", "\n");
                return ExecutionHandler(base_scalar_res, base_res, other.bg().checked_unconditional_add(this->bg()));
            case 2:
                return ExecutionHandler(base_scalar_res, base_res, this->bg() + other.bg());
            case 3:
                return ExecutionHandler(base_scalar_res, base_res, other.bg() + this->bg());
            }
            return {};
        }
 
      public:
        ExecutionHandler operator_add(Builder* builder, const ExecutionHandler& other)
        {
            ScalarField base_scalar_res = this->base_scalar + other.base_scalar;
            GroupElement base_res = this->base + other.base;
 
            // Test doubling path when points are equal
            if (other.bg().get_value() == this->bg().get_value()) {
                return handle_add_doubling_case(builder, other, base_scalar_res, base_res);
            }
 
            // Test infinity path when points are negations
            if (other.bg().get_value() == -this->bg().get_value()) {
                return handle_add_infinity_case(other, base_scalar_res, base_res);
            }
 
            // Test normal addition paths
            return handle_add_normal_case(other, base_scalar_res, base_res);
        }
 
      private:
        ExecutionHandler handle_sub_doubling_case([[maybe_unused]] Builder* builder,
                                                  const ExecutionHandler& other,
                                                  const ScalarField& base_scalar_res,
                                                  const GroupElement& base_res)
        {
            uint8_t dbl_path = VarianceRNG.next() % 3;
 
            switch (dbl_path) {
            case 0:
                debug_log("left.dbl();", "\n");
                return ExecutionHandler(base_scalar_res, base_res, this->bg().dbl());
            case 1:
                debug_log("-right.dbl();", "\n");
                return ExecutionHandler(base_scalar_res, base_res, -other.bg().dbl());
            case 2:
                return ExecutionHandler(base_scalar_res, base_res, this->bg() - other.bg());
            }
            return {};
        }
 
        ExecutionHandler handle_sub_infinity_case(const ExecutionHandler& other,
                                                  const ScalarField& base_scalar_res,
                                                  const GroupElement& base_res)
        {
            return ExecutionHandler(base_scalar_res, base_res, this->bg() - other.bg());
        }
 
        ExecutionHandler handle_sub_normal_case(const ExecutionHandler& other,
                                                const ScalarField& base_scalar_res,
                                                const GroupElement& base_res)
        {
            bool smth_inf =
                this->biggroup.is_point_at_infinity().get_value() || other.biggroup.is_point_at_infinity().get_value();
            uint8_t add_option = smth_inf ? 1 : VarianceRNG.next() % 2;
 
            switch (add_option) {
            case 0:
                debug_log("left.checked_unconditional_subtract(right);", "\n");
                return ExecutionHandler(
                    base_scalar_res, base_res, this->bg().checked_unconditional_subtract(other.bg()));
            case 1:
                return ExecutionHandler(base_scalar_res, base_res, this->bg() - other.bg());
            }
            return {};
        }
 
      public:
        ExecutionHandler operator_sub(Builder* builder, const ExecutionHandler& other)
        {
            ScalarField base_scalar_res = this->base_scalar - other.base_scalar;
            GroupElement base_res = this->base - other.base;
 
            if (other.bg().get_value() == -this->bg().get_value()) {
                return handle_sub_doubling_case(builder, other, base_scalar_res, base_res);
            }
            if (other.bg().get_value() == this->bg().get_value()) {
                return handle_sub_infinity_case(other, base_scalar_res, base_res);
            }
            return handle_sub_normal_case(other, base_scalar_res, base_res);
        }
 
        ExecutionHandler mul(Builder* builder, const ScalarField& multiplier)
        {
            bool is_witness = VarianceRNG.next() & 1;
            debug_log(" * big_scalar_t",
                      (is_witness ? "::from_witness(&builder, " : "("),
                      "ScalarField(\"",
                      multiplier,
                      "\"));");
            auto scalar = is_witness ? big_scalar_t::from_witness(builder, multiplier) : big_scalar_t(multiplier);
            return ExecutionHandler(this->base_scalar * multiplier, this->base * multiplier, this->bg() * scalar);
        }
 
        static ExecutionHandler batch_mul(Builder* builder,
                                          const std::vector<ExecutionHandler>& to_add,
                                          const std::vector<ScalarField>& to_mul)
        {
            std::vector<biggroup_t> to_add_bg;
            to_add_bg.reserve(to_add.size());
            std::vector<big_scalar_t> to_mul_bs;
            to_mul_bs.reserve(to_mul.size());
 
            GroupElement accumulator_bg = GroupElement::one();
            ScalarField accumulator_bs = ScalarField::zero();
 
            for (size_t i = 0; i < to_add.size(); i++) {
                to_add_bg.push_back(to_add[i].biggroup);
 
                bool is_witness = VarianceRNG.next() & 1;
                debug_log("biggroup_t",
                          (is_witness ? "::from_witness(&builder, " : "("),
                          "ScalarField(\"",
                          to_mul[i],
                          "\")), ");
                auto scalar = is_witness ? big_scalar_t::from_witness(builder, to_mul[i]) : big_scalar_t(to_mul[i]);
                to_mul_bs.push_back(scalar);
 
                accumulator_bg += to_add[i].base * to_mul[i];
                accumulator_bs += to_add[i].base_scalar * to_mul[i];
            }
            accumulator_bg -= GroupElement::one();
 
            // Handle the linearly dependant case that is
            // assumed to not happen in real life
            if (accumulator_bg.is_point_at_infinity()) {
                to_add_bg.push_back(make_constant_biggroup(AffineElement::one()));
                to_mul_bs.push_back(big_scalar_t(ScalarField::one()));
                accumulator_bg += GroupElement::one();
                accumulator_bs += ScalarField::one();
            }
 
            auto batch_mul_res = biggroup_t::batch_mul(to_add_bg, to_mul_bs);
            return ExecutionHandler(accumulator_bs, accumulator_bg, batch_mul_res);
        }
 
        void validate_on_curve() const { this->bg().validate_on_curve(); }
 
        ExecutionHandler operator-() { return ExecutionHandler(-this->base_scalar, -this->base, -this->bg()); }
 
        ExecutionHandler dbl()
        {
            return ExecutionHandler(this->base_scalar + this->base_scalar, this->base.dbl(), this->bg().dbl());
        }
 
        ExecutionHandler conditional_select(Builder* builder, ExecutionHandler& other, const bool predicate)
        {
            ScalarField new_base_scalar = predicate ? other.base_scalar : this->base_scalar;
            GroupElement new_base = predicate ? other.base : this->base;
            biggroup_t new_biggroup;
            if (VarianceRNG.next() & 1) {
                debug_log("lhs.conditional_select(rhs, ");
                new_biggroup = this->bg().conditional_select(other.bg(), construct_predicate(builder, predicate));
            } else {
                debug_log("rhs.conditional_select(lhs, ");
                new_biggroup = other.bg().conditional_select(this->bg(), construct_predicate(builder, !predicate));
            }
            debug_log(");", "\n");
            return ExecutionHandler(new_base_scalar, new_base, new_biggroup);
        }
 
        void incomplete_assert_equal(Builder* builder, ExecutionHandler& other)
        {
            if (other.bg().is_constant()) {
                if (this->bg().is_constant()) {
                    // Assert equal does nothing in this case
                    return;
                }
            }
            auto to_add = biggroup_t::from_witness(builder, AffineElement(this->base - other.base));
            auto to_ae = other.bg() + to_add;
            this->bg().incomplete_assert_equal(to_ae);
        }
 
        /* Explicit re-instantiation using the various biggroup_t constructors */
        ExecutionHandler set(Builder* builder)
        {
            uint32_t switch_case = VarianceRNG.next() % 4;
            switch (switch_case) {
            case 0:
                debug_log("biggroup_t(", "\n");
                /* construct via biggroup_t */
                return ExecutionHandler(this->base_scalar, this->base, biggroup_t(this->biggroup));
            case 1: {
                debug_log("biggroup_t::from",
                          (this->biggroup.is_constant() ? "" : "_constant"),
                          "_witness(&builder, e.get_value());");
                /* construct via AffineElement */
                AffineElement e = this->biggroup.get_value();
                return ExecutionHandler(this->base_scalar, this->base, biggroup_t::from_witness(builder, e));
            }
            case 2: {
                debug_log("tmp = el;", "\n");
                debug_log("res = biggroup_t(tmp);", "\n");
                /* Invoke assigment operator */
                biggroup_t bg_new = make_constant_biggroup(this->bg().get_value());
                bg_new = this->bg();
                return ExecutionHandler(this->base_scalar, this->base, biggroup_t(bg_new));
            }
            case 3: {
                debug_log("tmp = el;", "\n");
                debug_log("res = biggroup_t(std::move(tmp));", "\n");
                /* Invoke move constructor */
                biggroup_t bg_copy = this->bg();
                return ExecutionHandler(this->base_scalar, this->base, biggroup_t(std::move(bg_copy)));
            }
            default:
                abort();
            }
        }
 
        static inline size_t execute_CONSTANT(Builder* builder,
                                              std::vector<ExecutionHandler>& stack,
                                              Instruction& instruction)
        {
            (void)builder;
            stack.push_back(ExecutionHandler(
                instruction.arguments.element.scalar,
                instruction.arguments.element.value,
                make_constant_biggroup(static_cast<AffineElement>(instruction.arguments.element.value))));
            debug_log("// scalar = ", instruction.arguments.element.scalar);
            debug_log(
                "auto c", stack.size() - 1, " = biggroup_t(ae(\"", instruction.arguments.element.scalar, "\"));\n");
            return 0;
        };
 
        static inline size_t execute_WITNESS(Builder* builder,
                                             std::vector<ExecutionHandler>& stack,
                                             Instruction& instruction)
        {
            stack.push_back(ExecutionHandler(
                instruction.arguments.element.scalar,
                instruction.arguments.element.value,
                biggroup_t::from_witness(builder, static_cast<AffineElement>(instruction.arguments.element.value))));
            debug_log("// scalar = ", instruction.arguments.element.scalar);
            debug_log("auto w",
                      stack.size() - 1,
                      " = biggroup_t::from_witness(&builder, ae(\"",
                      instruction.arguments.element.scalar,
                      "\"));\n");
            return 0;
        }
 
        static inline size_t execute_CONSTANT_WITNESS(Builder* builder,
                                                      std::vector<ExecutionHandler>& stack,
                                                      Instruction& instruction)
        {
 
            if (VarianceRNG.next() & 1) {
                biggroup_t biggroup =
                    biggroup_t::from_witness(builder, static_cast<AffineElement>(instruction.arguments.element.value));
                biggroup.fix_witness();
 
                stack.push_back(ExecutionHandler(
                    instruction.arguments.element.scalar, instruction.arguments.element.value, biggroup));
                debug_log("// scalar = ", instruction.arguments.element.scalar);
                debug_log("auto cw",
                          stack.size() - 1,
                          " = biggroup_t::from_witness(&builder, ae(\"",
                          instruction.arguments.element.scalar,
                          "\"));",
                          "\n");
                debug_log("cw", stack.size() - 1, ".fix_witness();", "\n");
            } else {
                biggroup_t biggroup =
                    make_constant_biggroup(static_cast<AffineElement>(instruction.arguments.element.value));
                biggroup.convert_constant_to_fixed_witness(builder);
 
                stack.push_back(ExecutionHandler(
                    instruction.arguments.element.scalar, instruction.arguments.element.value, biggroup));
                debug_log("// scalar = ", instruction.arguments.element.scalar);
                debug_log("auto cw",
                          stack.size() - 1,
                          " = biggroup_t(ae(\"",
                          instruction.arguments.element.scalar,
                          "\"));",
                          "\n");
                debug_log("cw", stack.size() - 1, ".convert_constant_to_fixed_witness(&builder);", "\n");
            }
            // TODO(alex): set_public
            return 0;
        }
 
        static inline size_t execute_VALIDATE_ON_CURVE(Builder* builder,
                                                       std::vector<ExecutionHandler>& stack,
                                                       Instruction& instruction)
        {
            (void)builder;
            if (stack.size() == 0) {
                return 1;
            }
            size_t first_index = instruction.arguments.oneArg.in % stack.size();
 
            if constexpr (SHOW_FUZZING_INFO) {
                auto args = format_self_arg(stack, first_index);
                debug_log(args.out, ".validate_on_curve();", "\n");
            }
            stack[first_index].validate_on_curve();
            return 0;
        };
 
        static inline size_t execute_DBL(Builder* builder,
                                         std::vector<ExecutionHandler>& stack,
                                         Instruction& instruction)
        {
            (void)builder;
            if (stack.size() == 0) {
                return 1;
            }
            size_t first_index = instruction.arguments.twoArgs.in % stack.size();
            size_t output_index = instruction.arguments.twoArgs.out;
 
            if constexpr (SHOW_FUZZING_INFO) {
                auto args = format_single_arg(stack, first_index, output_index);
                debug_log(args.out, " = ", args.rhs, ".dbl();", "\n");
            }
            ExecutionHandler result = stack[first_index].dbl();
            // If the output index is larger than the number of elements in stack, append
            if (output_index >= stack.size()) {
                stack.push_back(result);
            } else {
                stack[output_index] = result;
            }
            return 0;
        };
 
        static inline size_t execute_NEG(Builder* builder,
                                         std::vector<ExecutionHandler>& stack,
                                         Instruction& instruction)
        {
            (void)builder;
            if (stack.size() == 0) {
                return 1;
            }
            size_t first_index = instruction.arguments.twoArgs.in % stack.size();
            size_t output_index = instruction.arguments.twoArgs.out;
 
            if constexpr (SHOW_FUZZING_INFO) {
                auto args = format_single_arg(stack, first_index, output_index);
                debug_log(args.out, " = -", args.rhs, ";", "\n");
            }
            ExecutionHandler result = -stack[first_index];
            // If the output index is larger than the number of elements in stack, append
            if (output_index >= stack.size()) {
                stack.push_back(result);
            } else {
                stack[output_index] = result;
            }
            return 0;
        };
 
        static inline size_t execute_ASSERT_EQUAL(Builder* builder,
                                                  std::vector<ExecutionHandler>& stack,
                                                  Instruction& instruction)
        {
            if (stack.size() == 0) {
                return 1;
            }
            size_t first_index = instruction.arguments.twoArgs.in % stack.size();
            size_t second_index = instruction.arguments.twoArgs.out % stack.size();
 
            if constexpr (SHOW_FUZZING_INFO) {
                auto args = format_two_arg(stack, first_index, second_index, 0);
                debug_log("incomplete_assert_equal(", args.lhs, ", ", args.rhs, ", builder);", "\n");
            }
            stack[first_index].incomplete_assert_equal(builder, stack[second_index]);
            return 0;
        };
 
        static inline size_t execute_SET(Builder* builder,
                                         std::vector<ExecutionHandler>& stack,
                                         Instruction& instruction)
        {
            (void)builder;
            if (stack.size() == 0) {
                return 1;
            }
            size_t first_index = instruction.arguments.twoArgs.in % stack.size();
            size_t output_index = instruction.arguments.twoArgs.out;
 
            ExecutionHandler result;
            if constexpr (SHOW_FUZZING_INFO) {
                auto args = format_single_arg(stack, first_index, output_index);
                debug_log(args.out, " = ");
                // Need to split logs here, since `set` produces extra logs
                result = stack[first_index].set(builder);
                debug_log(args.rhs, ");", "\n");
            } else {
                result = stack[first_index].set(builder);
            }
            // If the output index is larger than the number of elements in stack, append
            if (output_index >= stack.size()) {
                stack.push_back(result);
            } else {
                stack[output_index] = result;
            }
            return 0;
        };
 
        static inline size_t execute_ADD(Builder* builder,
                                         std::vector<ExecutionHandler>& stack,
                                         Instruction& instruction)
        {
            (void)builder;
            if (stack.size() == 0) {
                return 1;
            }
            size_t first_index = instruction.arguments.threeArgs.in1 % stack.size();
            size_t second_index = instruction.arguments.threeArgs.in2 % stack.size();
            size_t output_index = instruction.arguments.threeArgs.out;
 
            if constexpr (SHOW_FUZZING_INFO) {
                auto args = format_two_arg(stack, first_index, second_index, output_index);
                debug_log(args.out, " = ", args.lhs, " + ", args.rhs, ";", "\n");
            }
            ExecutionHandler result = stack[first_index].operator_add(builder, stack[second_index]);
            // If the output index is larger than the number of elements in stack, append
            if (output_index >= stack.size()) {
                stack.push_back(result);
            } else {
                stack[output_index] = result;
            }
            return 0;
        };
 
        static inline size_t execute_SUBTRACT(Builder* builder,
                                              std::vector<ExecutionHandler>& stack,
                                              Instruction& instruction)
        {
            (void)builder;
            if (stack.size() == 0) {
                return 1;
            }
            size_t first_index = instruction.arguments.threeArgs.in1 % stack.size();
            size_t second_index = instruction.arguments.threeArgs.in2 % stack.size();
            size_t output_index = instruction.arguments.threeArgs.out;
 
            if constexpr (SHOW_FUZZING_INFO) {
                auto args = format_two_arg(stack, first_index, second_index, output_index);
                debug_log(args.out, " = ", args.lhs, " - ", args.rhs, ";", "\n");
            }
            ExecutionHandler result = stack[first_index].operator_sub(builder, stack[second_index]);
            // If the output index is larger than the number of elements in stack, append
            if (output_index >= stack.size()) {
                stack.push_back(result);
            } else {
                stack[output_index] = result;
            }
            return 0;
        };
 
        static inline size_t execute_COND_ASSIGN(Builder* builder,
                                                 std::vector<ExecutionHandler>& stack,
                                                 Instruction& instruction)
        {
            (void)builder;
            if (stack.size() == 0) {
                return 1;
            }
            size_t first_index = instruction.arguments.fourArgs.in1 % stack.size();
            size_t second_index = instruction.arguments.fourArgs.in2 % stack.size();
            size_t output_index = instruction.arguments.fourArgs.out % stack.size();
            bool predicate = instruction.arguments.fourArgs.in3 % 2;
 
            ExecutionHandler result;
            if constexpr (SHOW_FUZZING_INFO) {
                auto args = format_two_arg(stack, first_index, second_index, output_index);
                debug_log("// ", args.out, " = ::conditional_select::", args.lhs, ", ", args.rhs, ";", "\n");
                // Need to split logs here, since `conditional_select` produces extra logs
                result = stack[first_index].conditional_select(builder, stack[second_index], predicate);
            } else {
                result = stack[first_index].conditional_select(builder, stack[second_index], predicate);
            }
 
            // If the output index is larger than the number of elements in stack, append
            if (output_index >= stack.size()) {
                stack.push_back(result);
            } else {
                stack[output_index] = result;
            }
            return 0;
        };
 
        static inline size_t execute_MULTIPLY(Builder* builder,
                                              std::vector<ExecutionHandler>& stack,
                                              Instruction& instruction)
        {
 
            if (stack.size() == 0) {
                return 1;
            }
            size_t first_index = instruction.arguments.mulArgs.in % stack.size();
            size_t output_index = instruction.arguments.mulArgs.out;
            ScalarField scalar = instruction.arguments.mulArgs.scalar;
 
            if constexpr (SHOW_FUZZING_INFO) {
                auto args = format_single_arg(stack, first_index, output_index);
                debug_log(args.out, " = ", args.rhs);
            }
            ExecutionHandler result = stack[first_index].mul(builder, scalar);
            // If the output index is larger than the number of elements in stack, append
            if (output_index >= stack.size()) {
                stack.push_back(result);
            } else {
                stack[output_index] = result;
            }
            return 0;
        };
 
        static inline size_t execute_BATCH_MUL(Builder* builder,
                                               std::vector<ExecutionHandler>& stack,
                                               Instruction& instruction)
        {
            (void)builder;
            if (stack.size() == 0) {
                return 1;
            }
            std::vector<ExecutionHandler> to_add;
            std::vector<ScalarField> to_mul;
            for (size_t i = 0; i < instruction.arguments.batchMulArgs.add_elements_count; i++) {
                to_add.push_back(stack[(size_t)instruction.arguments.batchMulArgs.inputs[i] % stack.size()]);
                to_mul.push_back(instruction.arguments.batchMulArgs.scalars[i]);
            }
            size_t output_index = (size_t)instruction.arguments.batchMulArgs.output_index;
 
            ExecutionHandler result;
            if constexpr (SHOW_FUZZING_INFO) {
                std::string res = "";
                bool is_const = true;
                for (size_t i = 0; i < instruction.arguments.batchMulArgs.add_elements_count; i++) {
                    size_t idx = instruction.arguments.batchMulArgs.inputs[i] % stack.size();
                    std::string el = stack[idx].biggroup.is_constant() ? "c" : "w";
                    el += std::to_string(idx);
                    res += el + ", ";
                    is_const &= stack[idx].biggroup.is_constant();
                }
                std::string out = is_const ? "c" : "w";
                out = ((output_index >= stack.size()) ? "auto " : "") + out;
                out += std::to_string(output_index >= stack.size() ? stack.size() : output_index);
                debug_log(out, " = biggroup_t::batch_mul({", res, "}, {");
                // Need to split logs here, since `batch_mul` produces extra logs
                result = ExecutionHandler::batch_mul(builder, to_add, to_mul);
                debug_log("});", "\n");
            } else {
                result = ExecutionHandler::batch_mul(builder, to_add, to_mul);
            }
            // If the output index is larger than the number of elements in stack, append
            if (output_index >= stack.size()) {
                stack.push_back(result);
            } else {
                stack[output_index] = result;
            }
            return 0;
        };
 
        static inline size_t execute_RANDOMSEED(Builder* builder,
                                                std::vector<ExecutionHandler>& stack,
                                                Instruction& instruction)
        {
            (void)builder;
            (void)stack;
 
            VarianceRNG.reseed(instruction.arguments.randomseed);
            return 0;
        };
    };
 
    typedef std::vector<ExecutionHandler> ExecutionState;
 
    inline static bool postProcess(Builder* builder, std::vector<BigGroupBase::ExecutionHandler>& stack)
    {
        (void)builder;
        for (size_t i = 0; i < stack.size(); i++) {
            auto element = stack[i];
            if (element.biggroup.get_value() != AffineElement(element.base)) {
                std::cerr << "Failed at " << i << " with actual value " << AffineElement(element.base)
                          << " and value in BigGroup " << element.biggroup.get_value() << std::endl;
                return false;
            }
            if ((AffineElement::one() * element.base_scalar) != AffineElement(element.base)) {
                std::cerr << "Failed at " << i << " with actual mul value " << element.base
                          << " and value in scalar * BG " << element.biggroup.get_value() * element.base_scalar
                          << std::endl;
                return false;
            }
        }
        return true;
    }
};
 
template <typename Builder>
using BigGroupBN254Base = BigGroupBase<Builder, bb::stdlib::bn254<Builder>, /*_use_bigfield=*/false>;
 
// BN254_BF: scalar field represented as bigfield<Builder, Bn254FrParams> rather than native field_t
template <typename Builder>
using BigGroupBN254BFBase = BigGroupBase<Builder,
                                         bb::stdlib::bn254<Builder>,
                                         /*_use_bigfield=*/true,
                                         bb::stdlib::bigfield<Builder, bb::Bn254FrParams>>;
 
// secp256k1/secp256r1: ScalarField is already bigfield, so BigfieldScalar defaults correctly
template <typename Builder>
using BigGroupSecp256k1Base = BigGroupBase<Builder, bb::stdlib::secp256k1<Builder>, /*_use_bigfield=*/true>;
 
template <typename Builder>
using BigGroupSecp256r1Base = BigGroupBase<Builder, bb::stdlib::secp256r1<Builder>, /*_use_bigfield=*/true>;
 
#ifdef HAVOC_TESTING
 
extern "C" int LLVMFuzzerInitialize(int* argc, char*** argv)
{
    (void)argc;
    (void)argv;
    // These are the settings, optimized for the biggroup class (under them, fuzzer reaches maximum expected
    // coverage in 40 seconds)
    fuzzer_havoc_settings = HavocSettings{ .GEN_LLVM_POST_MUTATION_PROB = 30,          // Out of 200
                                           .GEN_MUTATION_COUNT_LOG = 5,                // -Fully checked
                                           .GEN_STRUCTURAL_MUTATION_PROBABILITY = 300, // Fully  checked
                                           .GEN_VALUE_MUTATION_PROBABILITY = 700,      // Fully checked
                                           .ST_MUT_DELETION_PROBABILITY = 100,         // Fully checked
                                           .ST_MUT_DUPLICATION_PROBABILITY = 80,       // Fully checked
                                           .ST_MUT_INSERTION_PROBABILITY = 120,        // Fully checked
                                           .ST_MUT_MAXIMUM_DELETION_LOG = 6,           // 2 because of limit
                                           .ST_MUT_MAXIMUM_DUPLICATION_LOG = 2,        // -Fully checked
                                           .ST_MUT_SWAP_PROBABILITY = 50,              // Fully checked
                                           .VAL_MUT_LLVM_MUTATE_PROBABILITY = 250,     // Fully checked
                                           .VAL_MUT_MONTGOMERY_PROBABILITY = 130,      // Fully checked
                                           .VAL_MUT_NON_MONTGOMERY_PROBABILITY = 50,   // Fully checked
                                           .VAL_MUT_SMALL_ADDITION_PROBABILITY = 110,  // Fully checked
                                           .VAL_MUT_SPECIAL_VALUE_PROBABILITY = 130,   // Fully checked
                                           .structural_mutation_distribution = {},
                                           .value_mutation_distribution = {} };
    /*
    std::random_device rd;
    std::uniform_int_distribution<uint64_t> dist(0, ~(uint64_t)(0));
    srandom(static_cast<unsigned int>(dist(rd)));
 
    fuzzer_havoc_settings =
        HavocSettings{ .GEN_MUTATION_COUNT_LOG = static_cast<size_t>((random() % 8) + 1),
                       .GEN_STRUCTURAL_MUTATION_PROBABILITY = static_cast<size_t>(random() % 100),
                       .GEN_VALUE_MUTATION_PROBABILITY = static_cast<size_t>(random() % 100),
                       .ST_MUT_DELETION_PROBABILITY = static_cast<size_t>(random() % 100),
                       .ST_MUT_DUPLICATION_PROBABILITY = static_cast<size_t>(random() % 100),
                       .ST_MUT_INSERTION_PROBABILITY = static_cast<size_t>((random() % 99) + 1),
                       .ST_MUT_MAXIMUM_DELETION_LOG = static_cast<size_t>((random() % 8) + 1),
                       .ST_MUT_MAXIMUM_DUPLICATION_LOG = static_cast<size_t>((random() % 8) + 1),
                       .ST_MUT_SWAP_PROBABILITY = static_cast<size_t>(random() % 100),
                       .VAL_MUT_LLVM_MUTATE_PROBABILITY = static_cast<size_t>(random() % 100),
                       .VAL_MUT_MONTGOMERY_PROBABILITY = static_cast<size_t>(random() % 100),
                       .VAL_MUT_NON_MONTGOMERY_PROBABILITY = static_cast<size_t>(random() % 100),
                       .VAL_MUT_SMALL_ADDITION_PROBABILITY = static_cast<size_t>(random() % 100),
                       .VAL_MUT_SPECIAL_VALUE_PROBABILITY = static_cast<size_t>(random() % 100)
 
        };
    while (fuzzer_havoc_settings.GEN_STRUCTURAL_MUTATION_PROBABILITY == 0 &&
           fuzzer_havoc_settings.GEN_VALUE_MUTATION_PROBABILITY == 0) {
        fuzzer_havoc_settings.GEN_STRUCTURAL_MUTATION_PROBABILITY = static_cast<size_t>(random() % 8);
        fuzzer_havoc_settings.GEN_VALUE_MUTATION_PROBABILITY = static_cast<size_t>(random() % 8);
    }
    */
 
    // fuzzer_havoc_settings.GEN_LLVM_POST_MUTATION_PROB = static_cast<size_t>(((random() % (20 - 1)) + 1) * 10);
    /*
    std::cerr << "CUSTOM MUTATOR SETTINGS:" << std::endl
              << "################################################################" << std::endl
              << "GEN_LLVM_POST_MUTATION_PROB: " << fuzzer_havoc_settings.GEN_LLVM_POST_MUTATION_PROB << std::endl
              << "GEN_MUTATION_COUNT_LOG: " << fuzzer_havoc_settings.GEN_MUTATION_COUNT_LOG << std::endl
              << "GEN_STRUCTURAL_MUTATION_PROBABILITY: " <<
    fuzzer_havoc_settings.GEN_STRUCTURAL_MUTATION_PROBABILITY
              << std::endl
              << "GEN_VALUE_MUTATION_PROBABILITY: " << fuzzer_havoc_settings.GEN_VALUE_MUTATION_PROBABILITY <<
    std::endl
              << "ST_MUT_DELETION_PROBABILITY: " << fuzzer_havoc_settings.ST_MUT_DELETION_PROBABILITY << std::endl
              << "ST_MUT_DUPLICATION_PROBABILITY: " << fuzzer_havoc_settings.ST_MUT_DUPLICATION_PROBABILITY <<
    std::endl
              << "ST_MUT_INSERTION_PROBABILITY: " << fuzzer_havoc_settings.ST_MUT_INSERTION_PROBABILITY << std::endl
              << "ST_MUT_MAXIMUM_DELETION_LOG: " << fuzzer_havoc_settings.ST_MUT_MAXIMUM_DELETION_LOG << std::endl
              << "ST_MUT_MAXIMUM_DUPLICATION_LOG: " << fuzzer_havoc_settings.ST_MUT_MAXIMUM_DUPLICATION_LOG <<
    std::endl
              << "ST_MUT_SWAP_PROBABILITY: " << fuzzer_havoc_settings.ST_MUT_SWAP_PROBABILITY << std::endl
              << "VAL_MUT_LLVM_MUTATE_PROBABILITY: " << fuzzer_havoc_settings.VAL_MUT_LLVM_MUTATE_PROBABILITY
              << std::endl
              << "VAL_MUT_MONTGOMERY_PROBABILITY: " << fuzzer_havoc_settings.VAL_MUT_MONTGOMERY_PROBABILITY <<
    std::endl
              << "VAL_MUT_NON_MONTGOMERY_PROBABILITY: " << fuzzer_havoc_settings.VAL_MUT_NON_MONTGOMERY_PROBABILITY
              << std::endl
              << "VAL_MUT_SMALL_ADDITION_PROBABILITY: " << fuzzer_havoc_settings.VAL_MUT_SMALL_ADDITION_PROBABILITY
              << std::endl
              << "VAL_MUT_SMALL_MULTIPLICATION_PROBABILITY: "
              << fuzzer_havoc_settings.VAL_MUT_SMALL_MULTIPLICATION_PROBABILITY << std::endl
              << "VAL_MUT_SPECIAL_VALUE_PROBABILITY: " << fuzzer_havoc_settings.VAL_MUT_SPECIAL_VALUE_PROBABILITY
              << std::endl;
    */
    std::vector<size_t> structural_mutation_distribution;
    std::vector<size_t> value_mutation_distribution;
    size_t temp = 0;
    temp += fuzzer_havoc_settings.ST_MUT_DELETION_PROBABILITY;
    structural_mutation_distribution.push_back(temp);
    temp += fuzzer_havoc_settings.ST_MUT_DUPLICATION_PROBABILITY;
    structural_mutation_distribution.push_back(temp);
    temp += fuzzer_havoc_settings.ST_MUT_INSERTION_PROBABILITY;
    structural_mutation_distribution.push_back(temp);
    temp += fuzzer_havoc_settings.ST_MUT_SWAP_PROBABILITY;
    structural_mutation_distribution.push_back(temp);
    fuzzer_havoc_settings.structural_mutation_distribution = structural_mutation_distribution;
 
    temp = 0;
    temp += fuzzer_havoc_settings.VAL_MUT_LLVM_MUTATE_PROBABILITY;
    value_mutation_distribution.push_back(temp);
    temp += fuzzer_havoc_settings.VAL_MUT_SMALL_ADDITION_PROBABILITY;
    value_mutation_distribution.push_back(temp);
    temp += fuzzer_havoc_settings.VAL_MUT_SPECIAL_VALUE_PROBABILITY;
    value_mutation_distribution.push_back(temp);
 
    fuzzer_havoc_settings.value_mutation_distribution = value_mutation_distribution;
    return 0;
}
#endif
 
extern "C" size_t LLVMFuzzerTestOneInput(const uint8_t* Data, size_t Size)
{
    if constexpr (BigCurveTypes == BigCurveType::BN254) {
        RunWithBuilders<BigGroupBN254Base, FuzzerCircuitTypes>(Data, Size, VarianceRNG);
    } else if constexpr (BigCurveTypes == BigCurveType::BN254_BF) {
        RunWithBuilders<BigGroupBN254BFBase, FuzzerCircuitTypes>(Data, Size, VarianceRNG);
    } else if constexpr (BigCurveTypes == BigCurveType::Secp256k1) {
        RunWithBuilders<BigGroupSecp256k1Base, FuzzerCircuitTypes>(Data, Size, VarianceRNG);
    } else if constexpr (BigCurveTypes == BigCurveType::Secp256r1) {
        RunWithBuilders<BigGroupSecp256r1Base, FuzzerCircuitTypes>(Data, Size, VarianceRNG);
    } else {
        abort(); // Invalid BigGroup type
    }
    return 0;
}
 
#pragma clang diagnostic pop