Rating:
TL;DR:1. Recover the LFSR state from public key and first four bits of the ciphertext2. Decrypt the ciphertext with the LFSR state for the flag
I don't remember