How is it different than Lattice Reduction method. Where for 200 bit Nonce we can solve using 7 or 8 Signatures.
Leakage: 5 bit. Sigs Needed:71
Leakage:10 bit. Sigs Needed:36
Leakage:15 bit. Sigs Needed:24
Leakage:20 bit. Sigs Needed:18
Leakage:25 bit. Sigs Needed:15
Leakage:30 bit. Sigs Needed:12
Leakage:56 bit. Sigs Needed:7
I can do 240 bits using 10 signatures. Can lattice do that?