Since the hash value was small (only 6 bytes), we decided to bruteforce the input. However, we needed to optimize the computation.

Original write-up

Original writeup (https://github.com/epicleet/write-ups/blob/master/2019/hxp_36c3/bacon/README.md).