Rating:

Solve by bongtrop

Original writeup (http://crypto.rop.sh/post/UCYDL42CB9UN).