Tags: sage crypto ecdsa lattice curves elliptic sagemath
Rating: 5.0
Lattice based attack on ECDSA signatures using known-prefix nonce: [https://blog.bordes.me/ledger-donjon-ctf-2020-smpc-signature.html](https://blog.bordes.me/ledger-donjon-ctf-2020-smpc-signature.html)