Used Gaussian elimination to reduce solutions to space of dimension 1, then LLL to find unique solution with less than 128 bits.

Full writeup

Original writeup (https://holocircuit.github.io/2019/01/08/unofficial.html).