Solved by Gophers in the Shell.

Original writeup (https://gophers-in-the-shell.herokuapp.com/hitcon-2016-lets-decrypt-crypto-100pts/).