 Since formula_101 and formula_8 are picked uniformly, the probability that formula_134 is at most formula_128.Similarly, the probability that formula_136 is at most formula_128.By the union bound, the probability that either formula_138 or formula_139 do not match the corresponding bits in formula_95 is at most formula_141.