S6C3: DSA key recovery from nonce.