Used Gaussian elimination to reduce solutions to space of dimension 1, then LLL to find unique solution with less than 128 bits.
[Full writeup](https://holocircuit.github.io/2019/01/08/unofficial.html)