Hello,
I have 2 questions;
first; can a wallet with at least 10 pairs of transactions with only 5 characters in common in the R value be cracked with a Lattice attack etc. method?
second; for a single pair, the probability is approximately 1 in a million, how can it be 10 times.
I cannot create R in such a pattern even if I want to by giving the k(nonce) value weak. How could this have happened?
(I apologize for my translation English.)
There is also lattice attack for that
https://jsur.in/posts/2021-07-25-ijctf-2021-ecsign-writeup