Full writeup: https://github.com/p4-team/ctf/tree/master/2017-08-25-hackit/crypto150
tl;dr: recover list of `lsb` used for encryption of known plaintext part, use Z3 to generate constraints on the key parameters based on those `lsb`