Flag Format: TFCCTF{...}
TFCCTF{...}
Approximate GCD — LLL lattice reduction to recover the flag from noisy multiples
Mersenne Twister PRNG state recovery via symbolic Z3 constraints, then AES key rederivation
Subset-sum / LWE — orthogonal lattice + BKZ to pull a small-coefficient row from a large modular system