“Guessing Bits: Improved Lattice Attacks on (EC)DSA with Nonce Leakage”, TCHES, vol. 2022, no. 1, pp. 391–413, Nov. 2021, doi: 10.46586/tches.v2022.i1.391-413.