Rating:

### TL;DR
1. Get the order of y in each subgroup.
2. Recover the order of y using CRT.
3. Calculate y.

Original writeup (https://sasdf.cf/ctf/writeup/2018/hxp/crypto/blind/).