estimator.prob.mitm_babai_probability

estimator.prob.mitm_babai_probability(r, stddev, q, fast=False)

Compute the “e-admissibility” probability associated to the mitm step, according to [EPRINT:SonChe19]

Params r:

the squared GSO lengths

Params stddev:

the std.dev of the error distribution

Params q:

the LWE modulus

Parameters:

fast – toggle for setting p = 1 (faster, but underestimates security)

Returns:

probability for the mitm process

# NOTE: the model sometimes outputs negative probabilities, we set p = 0 in this case