tldr;- partitioning oracle attack on AES-GCM- create ciphertexts+tags that decrypt and verify under multiple keys- use binary search to find the correct password
[writeup](https://jsur.in/posts/2021-07-19-google-ctf-2021-crypto-writeups#pythia)