P

Initializing...

Lemma 5.1 (Correctness), p. 34:35 — if Pr_{χ^⋆k}[|e| < ⌊p/2⌋/2] > 1 − δ for all k ≤ m, decryption is correct with probability ≥ 1 − δ · Prove2Me