DPA against each intermediate round (effectively applied as a second key mix in) to recover the correct key.

Brute force, best force.

Original writeup (https://advancedpersistentjest.com/2020/11/19/writeup-glitching-aes-donjon-ctf/).