estimator.prob.mitm_babai_probability(r, stddev, q, fast=False)[source]#

Compute the “e-admissibility” probability associated to the mitm step, according to [EPRINT:SonChe19]

Params r

the squared GSO lengths

Params stddev

the of the error distribution

Params q

the LWE modulus


fast – toggle for setting p = 1 (faster, but underestimates security)


probability for the mitm process

# NOTE: the model sometimes outputs negative probabilities, we set p = 0 in this case