P(x)
The source, over all trials. Outline is the published table.
Each trial draws x from the source and r uniformly, then forms c = x ⊕ r. The top row uses every trial. The bottom row keeps only the trials matching a chosen message or a chosen ciphertext, so those panels fill in far more slowly.
The source, over all trials. Outline is the published table.
Ciphertexts, over all trials. Flat however lumpy the source is.
Only trials that sent x*. Uniform, and the same uniform for every choice of x*.
Only trials that produced c*. Converges to the source, not to uniform.
Total variation distance, trials on a log axis.