Private Key Extraction from Qualcomm Hardware-Backed Keystores
Possibly stupid question: If only a few bits of nonce are needed to recover the key, what's preventing iteration of all possible values of those "few bits"?