1. Notice that rotating short int values will quickly make the XOR keystream zeros2. Notice that +- and &^ can be easily tackled by Z33. Bruteforce rest of the flag via sha1
Full writeup: https://github.com/p4-team/ctf/tree/master/2019-11-07-defcamp-finals/crypto