Tags: partial-recovery coppersmith msb 

Rating: 0

tl;dr: notice that high bits are preserved, recover upper half of MSB of q, use Coppersmith to recover q

Full writeup: https://github.com/p4-team/ctf/tree/master/2017-09-02-tokyo/crypto_rsa