4 ms·

"Only a few bits of each nonce are known for around 100 signatures", This is the challenge that we can't.