Shorter passwords are padded with spaces. Use those spaces to find the last 11 bytes of the key. Figure out the first 7 bytes by using recognizable password fragments.
https://meashiri.github.io/ctf-writeups/posts/202309-buckeyectf/#real-smooth