lattice-crypto-attacks

You can recover an ECDSA private key from nonce leakage by modeling the biased or reused nonces as a Hidden Number Problem, constructing an appropriate attack matrix, and applying LLL or BKZ reduction to extract the secret. This Skill guides that exact lattice construction and reduction workflow.

The best way to perform a Coppersmith small-root attack on RSA is to construct a lattice embedding for the partial message knowledge and reduce it. This Skill helps identify the correct matrix dimensioning and scaling needed to extract valid solutions from the reduced basis.

You should use BKZ instead of LLL for subset sum cryptanalysis when LLL reduction fails to extract a valid solution from the reduced basis, as BKZ provides stronger reduction at the cost of more computation. This Skill explains when to escalate from LLL to BKZ.

Yes, you can use lattice attacks to recover NTRU keys in CTF challenges by constructing an NTRU-style key recovery matrix and reducing it. This Skill provides the lattice construction guidance and reduction strategy needed for NTRU scenarios.

You recover truncated PRNG outputs by embedding the known output bits into a lattice and reducing it to find the hidden internal states. This Skill outlines the matrix construction and reduction steps needed to solve truncated PRNG instances.

Yes, you need correct cryptographic parameters and problem dimensions to set up a lattice attack, as incorrect lattice dimensioning and scaling will fail to extract valid solutions. This Skill helps analyze your challenge to identify the correct attack parameters.