Quote from: Bglhn on March 18, 2024, 11:09:26 AM

Hello friends. I've been trying to learn for a while. Where and how do you find the known bit value and Lbs/mbs? No matter what I did, I could not perform a successful lattice attack. I'm sorry for my English and my inexperience. I'm trying to learn.

https://github.com/bitlogik/lattice-attack lattice-attack

lattice-attack only can recovery 252 bit nonce , from 88 rsz

Code:

# python3 gen_data.py -f data252_88.json -m "HelloYou" -c SECP256K1 -b 4 -t MSB -n 88

# python3 lattice_attack.py -f data252_88.json

......
BKZ reduction : block size = 25
...
...

\o/ 000000000000000000000000F320D5823C07E40B8EA073FF9AF7017C2A9294EB

time: 4.3 second

only 4.3 seconds , I can recovery my private key

when I test 254, 255,256 bit , even use 2000 rsz , lattice-attack unable to recover private key