Imperfect Decryption and an Attack on the NTRU Encryption Scheme.
John Proos · 2003
A property of the NTRU public-key cryptosystem is that it does not provide perfect decryption. That is, given an instance of the cryptosystem, there exist ciphertexts which can be validly created using the public key but which can't be decrypted using the private key.