ECB encryption oracle built on OFB padding oracle to break GCM encryption / decryption

Original writeup (https://imp.ress.me/blog/2022-11-13/seccon-ctf-2022/#witches-symmetric-exam).