“Improved Attacks on (EC)DSA with Nonce Leakage by Lattice Sieving with Predicate” (2023) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(2), pp. 568–586. doi:10.46586/tches.v2023.i2.568-586.