From github.com
This repo host implementations and explanations of different RSA attacks using lattice reduction techniques (in particular LLL).
First, we’ll see how Coppersmith found out that you could use lattice reduction techniques to attack a relaxed model of RSA (we know parts of the message, or we know parts of one of the prime, …). And how Howgrave-Graham reformulated his attack.