{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,20]],"date-time":"2026-02-20T18:44:14Z","timestamp":1771613054390,"version":"3.50.1"},"reference-count":39,"publisher":"Springer Science and Business Media LLC","issue":"11","license":[{"start":{"date-parts":[[2023,8,2]],"date-time":"2023-08-02T00:00:00Z","timestamp":1690934400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,8,2]],"date-time":"2023-08-02T00:00:00Z","timestamp":1690934400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872449"],"award-info":[{"award-number":["61872449"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Key Research and Development Plan of China","award":["2020YFB1005600"],"award-info":[{"award-number":["2020YFB1005600"]}]},{"name":"Major Program of Guangdong Basic and Applied Research Project","award":["2019B030302008"],"award-info":[{"award-number":["2019B030302008"]}]},{"name":"Major Program of Guangdong Basic and Applied Research Project","award":["61825203"],"award-info":[{"award-number":["61825203"]}]},{"name":"Guangdong Provincial Science and Technology Project","award":["2017B010111005"],"award-info":[{"award-number":["2017B010111005"]}]},{"name":"Guangdong Provincial Science and Technology Project","award":["2021A0505030033"],"award-info":[{"award-number":["2021A0505030033"]}]},{"name":"National Joint Engineering Research Center of Network Security Detection and Protection Technology"},{"name":"Guangdong Key Laboratory of Data Security and Privacy Preserving"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Des. Codes Cryptogr."],"published-print":{"date-parts":[[2023,11]]},"DOI":"10.1007\/s10623-023-01269-7","type":"journal-article","created":{"date-parts":[[2023,8,2]],"date-time":"2023-08-02T14:02:50Z","timestamp":1690984970000},"page":"3803-3823","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Generalized attack on ECDSA: known bits in arbitrary positions"],"prefix":"10.1007","volume":"91","author":[{"given":"Jinzheng","family":"Cao","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jian","family":"Weng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yanbin","family":"Pan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6149-4807","authenticated-orcid":false,"given":"Qingfeng","family":"Cheng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,8,2]]},"reference":[{"key":"1269_CR1","doi-asserted-by":"crossref","unstructured":"Albrecht, M.R., Ducas, L., Herold, G., Kirshanova, E., Postlethwaite, E.W., Stevens, M.: The general sieve kernel and new records in lattice reduction. In: Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques, pp. 717\u2013746. Springer (2019)","DOI":"10.1007\/978-3-030-17656-3_25"},{"key":"1269_CR2","doi-asserted-by":"crossref","unstructured":"Albrecht M.R., G\u00f6pfert F., Virdia F., Wunderer T.: Revisiting the expected cost of solving uSVP and applications to LWE. In: Takagi T., Peyrin T. (eds.) Advances in Cryptology-ASIACRYPT 2017, pp. 297\u2013322. Springer, Cham (2017)","DOI":"10.1007\/978-3-319-70694-8_11"},{"key":"1269_CR3","doi-asserted-by":"crossref","unstructured":"Albrecht, M.R., Heninger, N.: On bounded distance decoding with predicate: Breaking the \u201clattice barrier\u201d for the hidden number problem. In: Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques, pp. 528\u2013558. Springer (2021)","DOI":"10.1007\/978-3-030-77870-5_19"},{"key":"1269_CR4","unstructured":"Alkim, E., Ducas, L., P\u00f6ppelmann, T., Schwabe, P.: Post-quantum key exchange\u2014a new hope. In: Proceedings of the 25th USENIX Security Symposium (USENIX Security 16), pp. 327\u2013343. USENIX Association, Austin, TX. https:\/\/www.usenix.org\/conference\/usenixsecurity16\/technical-sessions\/presentation\/alkim (2016)"},{"key":"1269_CR5","doi-asserted-by":"crossref","unstructured":"Aono Y., Wang Y., Hayashi T., Takagi T.: Improved progressive BKZ algorithms and their precise cost estimation by sharp simulator. In: Fischlin M., Coron J.S. (eds.) Advances in Cryptology-EUROCRYPT 2016, pp. 789\u2013819. Springer, Berlin Heidelberg (2016)","DOI":"10.1007\/978-3-662-49890-3_30"},{"key":"1269_CR6","doi-asserted-by":"crossref","unstructured":"Boneh D., Venkatesan R.: Hardness of computing the most significant bits of secret keys in Diffie-Hellman and related schemes. In: Koblitz N. (ed.) Advances in Cryptology-CRYPTO \u201996, pp. 129\u2013142. Springer, Berlin Heidelberg (1996)","DOI":"10.1007\/3-540-68697-5_11"},{"key":"1269_CR7","doi-asserted-by":"crossref","unstructured":"Breitner, J., Heninger, N.: Biased nonce sense: lattice attacks against weak ECDSA signatures in cryptocurrencies. In: Proceedings of the International Conference on Financial Cryptography and Data Security, pp. 3\u201320. Springer (2019)","DOI":"10.1007\/978-3-030-32101-7_1"},{"key":"1269_CR8","unstructured":"Chen, Y.: Reduction de reseau et securite concrete du chiffrement compl\u00e9tement homomorphe. Ph.D. thesis, Higher Normal School - PSL (2013). These de doctorat dirigee par Nguyen, Phong-Quang Informatique Paris 7. http:\/\/www.theses.fr\/2013PA077242 (2013)"},{"key":"1269_CR9","doi-asserted-by":"crossref","unstructured":"Chen, Y., Nguyen, P.Q.: BKZ 2.0: Better lattice security estimates. In: Proceedings of the International Conference on the Theory and Application of Cryptology and Information Security, pp. 1\u201320. Springer (2011)","DOI":"10.1007\/978-3-642-25385-0_1"},{"key":"1269_CR10","doi-asserted-by":"crossref","unstructured":"Dachman-Soled, D., Ducas, L., Gong, H., Rossi, M.: LWE with side information: attacks and concrete security estimation. In: Proceedings of the Annual International Cryptology Conference, pp. 329\u2013358. Springer (2020)","DOI":"10.1007\/978-3-030-56880-1_12"},{"key":"1269_CR11","doi-asserted-by":"crossref","unstructured":"Dall, F., De\u00a0Micheli, G., Eisenbarth, T., Genkin, D., Heninger, N., Moghimi, A., Yarom, Y.: Cachequote: Efficiently recovering long-term secrets of SGX EPID via cache attacks (2018)","DOI":"10.46586\/tches.v2018.i2.171-191"},{"key":"1269_CR12","doi-asserted-by":"crossref","unstructured":"De\u00a0Micheli, G., Piau, R., Pierrot, C.: A tale of three signatures: practical attack of ECDSA with wNAF. In: Proceedings of the International Conference on Cryptology in Africa, pp. 361\u2013381. Springer (2020)","DOI":"10.1007\/978-3-030-51938-4_18"},{"key":"1269_CR13","doi-asserted-by":"crossref","unstructured":"Ducas, L.: Shortest vector from lattice sieving: a few dimensions for free. In: Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques, pp. 125\u2013145. Springer (2018)","DOI":"10.1007\/978-3-319-78381-9_5"},{"key":"1269_CR14","doi-asserted-by":"crossref","unstructured":"Ducas L., Stevens M., van Woerden W.: Advanced lattice sieving on GPUs, with tensor cores. In: Canteaut A., Standaert F.X. (eds.) Advances in Cryptology-EUROCRYPT 2021, pp. 249\u2013279. Springer, Cham (2021)","DOI":"10.1007\/978-3-030-77886-6_9"},{"key":"1269_CR15","doi-asserted-by":"crossref","unstructured":"Fan, S., Wang, W., Cheng, Q.: Attacking OpenSSL implementation of ECDSA with a few signatures. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, pp. 1505\u20131515 (2016)","DOI":"10.1145\/2976749.2978400"},{"key":"1269_CR16","doi-asserted-by":"crossref","unstructured":"Gama, N., Nguyen, P.Q.: Predicting lattice reduction. In: Advances in Cryptology-EUROCRYPT 2008, pp. 31\u201351. Springer, Berlin Heidelberg (2008)","DOI":"10.1007\/978-3-540-78967-3_3"},{"key":"1269_CR17","doi-asserted-by":"crossref","unstructured":"Haque M.M., Rahman M.O.: Analyzing progressive-BKZ lattice reduction algorithm. Int. J. Comput. Netw. Inf. Secur. 11, 40\u201346 (2019)","DOI":"10.5815\/ijcnis.2019.01.04"},{"key":"1269_CR18","doi-asserted-by":"crossref","unstructured":"Hlav\u00e1\u010d, M., Rosa, T.: Extended hidden number problem and its cryptanalytic applications. In: Proceedings of the International Workshop on Selected Areas in Cryptography, pp. 114\u2013133. Springer (2006)","DOI":"10.1007\/978-3-540-74462-7_9"},{"key":"1269_CR19","doi-asserted-by":"publisher","unstructured":"Jancar, J., Sedlacek, V., Svenda, P., Sys, M.: Minerva: The curse of ECDSA nonces systematic analysis of lattice attacks on noisy leakage of bit-length of ECDSA nonces. IACR Trans. Cryptogr. Hardw. Embed. Syst. 2020(4), 281\u2013308 (2020). https:\/\/doi.org\/10.13154\/tches.v2020.i4.281-308","DOI":"10.13154\/tches.v2020.i4.281-308"},{"key":"1269_CR20","doi-asserted-by":"publisher","unstructured":"Khadir O.: Factoring RSA moduli with primes sharing bits in the middle. Appl. Algebra Eng. Commun. Comput. 29, 245\u2013259 (2018). https:\/\/doi.org\/10.1007\/s00200-017-0340-0","DOI":"10.1007\/s00200-017-0340-0"},{"key":"1269_CR21","doi-asserted-by":"crossref","unstructured":"Kocher, P., Jaffe, J., Jun, B.: Differential power analysis. In: Proceedings of the Annual international cryptology conference, pp. 388\u2013397. Springer (1999)","DOI":"10.1007\/3-540-48405-1_25"},{"key":"1269_CR22","doi-asserted-by":"crossref","unstructured":"Lindner, R., Peikert, C.: Better key sizes (and attacks) for LWE-based encryption. In: Topics in Cryptology \u2013 CT-RSA 2011, pp. 319\u2013339. Springer, Berlin, Heidelberg (2011)","DOI":"10.1007\/978-3-642-19074-2_21"},{"key":"1269_CR23","doi-asserted-by":"crossref","unstructured":"Martinet J.: Perfect Lattices in Euclidean Spaces. Grundlehren der mathematischen Wissenschaften. Springer, Cham (2003)","DOI":"10.1007\/978-3-662-05167-2"},{"key":"1269_CR24","doi-asserted-by":"crossref","unstructured":"Micciancio, D., Regev, O.: Lattice-based cryptography. In: Post-quantum Cryptography, pp. 147\u2013191. Springer (2009)","DOI":"10.1007\/978-3-540-88702-7_5"},{"key":"1269_CR25","doi-asserted-by":"crossref","unstructured":"Micciancio, D., Walter, M.: Practical, predictable lattice basis reduction. In: Advances in Cryptology \u2013 EUROCRYPT 2016, pp. 820\u2013849. Springer, Berlin, Heidelberg (2016)","DOI":"10.1007\/978-3-662-49890-3_31"},{"key":"1269_CR26","unstructured":"Micheli, G.D.: Discrete logarithm cryptanalyses : Number field sieve and lattice tools for side-channel attacks. (cryptanalyses de logarithmes discrets : crible alg\u00e9brique et r\u00e9seaux pour canaux auxiliaires). Ph.D. thesis, University of Lorraine, Nancy, France. https:\/\/tel.archives-ouvertes.fr\/tel-03335360 (2021)"},{"key":"1269_CR27","unstructured":"Micheli, G.D., Heninger, N.: Recovering cryptographic keys from partial information, by example. Cryptology ePrint Archive, Report 2020\/1506. https:\/\/ia.cr\/2020\/1506 (2020)"},{"key":"1269_CR28","unstructured":"Moghimi, D., Sunar, B., Eisenbarth, T., Heninger, N.: TPM-FAIL: TPM meets timing and lattice attacks. In: Proceedings of the 29th USENIX Security Symposium (USENIX Security 20), pp. 2057\u20132073. USENIX Association. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/moghimi-tpm (2020)"},{"key":"1269_CR29","doi-asserted-by":"crossref","unstructured":"Nguyen P., Vall\u00e9e B.: The LLL Algorithm: Survey and Applications. Springer, Cham (2010)","DOI":"10.1007\/978-3-642-02295-1"},{"key":"1269_CR30","doi-asserted-by":"crossref","unstructured":"Nguyen P.Q., Shparlinski I.E.: The insecurity of the elliptic curve digital signature algorithm with partially known nonces. Des. Codes Crypt. 30(2), 201\u2013217 (2003)","DOI":"10.1007\/978-3-0348-8037-4_17"},{"key":"1269_CR31","doi-asserted-by":"crossref","unstructured":"Schnorr, C.P.: Lattice reduction by random sampling and birthday methods. In: STACS 2003, pp. 145\u2013156. Springer, Berlin, Heidelberg (2003)","DOI":"10.1007\/3-540-36494-3_14"},{"key":"1269_CR32","unstructured":"The FPLLL development team: The general sieve kernel (g6k). https:\/\/github.com\/fplll\/fpylll (2021)"},{"key":"1269_CR33","unstructured":"Thibault, J.P., O\u2019Flynn, C., Dewar, A.: Ark of the ECC: An open-source ECDSA power analysis attack on a FPGA based curve P-256 implementation. Cryptology ePrint Archive, Paper 2021\/1520. https:\/\/eprint.iacr.org\/2021\/1520 (2021)"},{"key":"1269_CR34","doi-asserted-by":"crossref","unstructured":"Vanstone S.: Responses to NIST\u2019s proposal. Commun. ACM 35(7), 50\u201352 (1992)","DOI":"10.1145\/129902.129904"},{"key":"1269_CR35","doi-asserted-by":"publisher","unstructured":"Wang, S., Qu, L., Li, C., Fu, S.: A new attack on RSA with known middle bits of the private key. IEICE Trans. Fundam. Electron. Commun. Comput. Sci. E98A(12), 2677\u20132685 (2015). https:\/\/doi.org\/10.1587\/transfun.E98.A.2677","DOI":"10.1587\/transfun.E98.A.2677"},{"key":"1269_CR36","unstructured":"Weiser, S., Schrammel, D., Bodner, L., Spreitzer, R.: Big numbers - big troubles: Systematically analyzing nonce leakage in (EC)DSA implementations. In: Proceedings of the 29th USENIX Security Symposium, Proceedings of the 29th USENIX Security Symposium, pp. 1767\u20131784. USENIX Association, United States (2020). 29th USENIX Security Symposium, 12\u201314 August 2020. https:\/\/www.usenix.org\/conference\/usenixsecurity20\/"},{"key":"1269_CR37","doi-asserted-by":"publisher","unstructured":"Yang X., Liu M., Au M.H., Luo X., Ye Q.: Efficient verifiably encrypted ECDSA-like signatures and their applications. IEEE Trans. Inf. Forensics Secur. 17, 1573\u20131582 (2022). https:\/\/doi.org\/10.1109\/TIFS.2022.3165978","DOI":"10.1109\/TIFS.2022.3165978"},{"key":"1269_CR38","unstructured":"Yarom Y., Benger N.: Recovering OpenSSL ECDSA nonces using the FLUSH+ RELOAD cache side-channel attack. IACR Cryptol. Arch. 2014, 140 (2014)"},{"key":"1269_CR39","unstructured":"Yarom, Y., Falkner, K.: FLUSH+RELOAD: A high resolution, low noise, L3 cache side-channel attack. In: Proceedings of the 23rd USENIX Security Symposium (USENIX Security 14), pp. 719\u2013732 (2014)"}],"container-title":["Designs, Codes and Cryptography"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-023-01269-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10623-023-01269-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-023-01269-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,10,24]],"date-time":"2023-10-24T19:16:58Z","timestamp":1698175018000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10623-023-01269-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,2]]},"references-count":39,"journal-issue":{"issue":"11","published-print":{"date-parts":[[2023,11]]}},"alternative-id":["1269"],"URL":"https:\/\/doi.org\/10.1007\/s10623-023-01269-7","relation":{},"ISSN":["0925-1022","1573-7586"],"issn-type":[{"value":"0925-1022","type":"print"},{"value":"1573-7586","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,8,2]]},"assertion":[{"value":"2 June 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 March 2023","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"28 June 2023","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 August 2023","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declared that they have no conflicts of interest to this work.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interest"}}]}}