This is because you have hardcoded your script to use 3 signatures. When the Leakage bits decreases below 128 you might need more and more signatures as you move up.
Check here
https://github.com/iceland2k14/rsz/blob/main/LLL_nonce_leakage.py for the generalized Matrix form reduction and also the function Minimum_Signature_Required for each Leakage bits.
Hi sir, I tried to construct my script with 3 signatures but each time I got wrong private keys so I tried to use your script it works perfectly but when I change this variable it don't work
this
nonces = [random.randrange(1, 2**kbits) + fixed_k_prefix for i in range(n)]
to this one
nonces = [random.randrange(1, N) for i in range(n)]
Ok sir I understand you now I solve up to 210 bits! Thank You.