Recover weak keys and messages with lattice attacks.
Guides the construction of lattice attacks to recover cryptographic secrets and solve knapsack problems.
When to use it
Use for RSA small-root attacks, biased DSA/ECDSA nonce recovery, knapsack problems, or lattice reduction applied to cryptographic constructions.
Give it a cryptanalysis problem and its known values; it guides attack-lattice construction, reduction, and solution extraction.
The worked Coppersmith attacks use SageMath's polynomial rings and built-in small_roots method.
No additional actions listed.