Polynomial RNG parameter selection to make RNG cyclic + Hastad's broadcast attack on RSA

Original writeup (https://imp.ress.me/blog/2022-11-13/seccon-ctf-2022/#bbb).