Tags: crypto 

Rating:

We split the coefficients' matrix into two halves and perform a Meet In The Middle (MITM) attack.

Note:
- LLL can be used to solve this (souce: hellman)
- One can also setup equations on all monomials with degree <= 2 (source: rkm0959)

Original writeup (https://grhkm21.github.io/posts/tet-shares/#v2---solution-outline).