The paper, Guessing Bits: Improved Lattice Attacks on(EC)DSA with Nonce Leakage , improves on the (Albrecht & Heninger, 2020) lattice-based HNP attack by:
Guessing some secret key bits to increase attack success probability.
Decomposing the secret key into batches to recover parts of the secret. ie. it’s no longer an ‘all-or-nothing’ approac
1 comment
[ 3.3 ms ] story [ 16.2 ms ] thread