estimator.success_probability_drop(n, h, k, fail=0, rotations=False)[source]

Probability that k randomly sampled components have fail non-zero components amongst them.

  • n – LWE dimension n > 0
  • h – number of non-zero components
  • k – number of components to ignore
  • fail – we tolerate fail number of non-zero components amongst the k ignored components
  • rotations – consider rotations of the basis to exploit ring structure (NTRU only)