Erratum to: J. Cryptol. DOI 10.1007/s00145-012-9128-3

In the original publication, the typeset Table 1 differed from what was intended by the author in the original. The numbers 1–15 in the far left column should have been staggered between the rows of the remaining 5 columns, such that “1” was set between the rows “0” and “0.723166”, “2” was set between “0.734166” and “0.886651”, etc. The original table is reproduced below. The publisher regrets the error.

Table 1. Range of success probability requirements for which each table count ℓ is optimal.
Full size table