The forgery probability as a function of the amount of forged signature states. The three curves in lines correspond to n = 50, 100, and 200. It shows that ɛ_forgery has a maximum value for each n. But the optimal forgery probability is smaller when n is larger.