Private Key Extraction from Qualcomm Hardware-Backed Keystores
Possibly stupid question: If only a few <i>bits</i> of nonce are needed to recover the key, what's preventing iteration of all possible values of those "few bits"?