estimator.prob.drop(n, h, k, fail=0, rotations=False)[source]#

Probability that k randomly sampled components have fail non-zero components amongst them.

  • n – LWE dimension n > 0

  • h – number of non-zero components

  • k – number of components to ignore

  • fail – we tolerate fail number of non-zero components amongst the k ignored components

  • rotations – consider rotations of the basis to exploit ring structure (NTRU only)