Transcript Distribution of Perturbed NTRUSign

Now, the distribution is over a Zonotope

The distribution is not uniform (but natural over Zonotopes)

The secret key is a subset of vectors spanning the Zonotope