Guessing Bits: Improved Lattice Attacks on (EC)DSA with Nonce Leakage. TCHES. 2021;2022(1):391-413. doi:10.46586/tches.v2022.i1.391-413