Biased Nonces

Challenge Question

Hundreds of signatures were produced by a single signing key, each using a random nonce that wasn't quite random. A tiny bias in each nonce seems harmless, but across enough signatures it leaks information about the private key. Turn that bias into the full private key and recover the flag.