BGEAttack: generating B set, characteristic polynomial