That is, the number of Y values needing to be obtained to ensure that the same variable component is included in the calculation, should be infeasibly large for an attacker.
It will be appreciated that the Y values are in fact a base set of 2 n values pseudo randomly distributed within the set bounded by 1 and N-1.