Rating:

TL;DR: Generate MD5 collisions with fastcoll, then solve x^2 + ky^2 = m (mod n)

Original writeup (https://mystiz.hk/posts/2024/2024-06-24-google-ctf-2/).