Ecc

400Curves: turn the RSA leak into a lattice recovery, rebuild the secret values, and decrypt the flag.

secure source: reconstruct the PRNG state from the leak, replay it, and recover the flag.

Digital-Safety-Annex: use the curve leak or invalid-curve path to recover the secret and decrypt the flag.

Arranged: abuse the AES misuse, derive the missing key material, and decrypt the flag.

ElElGamal: use the curve leak or invalid-curve path to recover the secret and decrypt the flag.

Fast Carmichael: use the curve leak or invalid-curve path to recover the secret and decrypt the flag.

Iced Tea: abuse the AES misuse, derive the missing key material, and decrypt the flag.

Perfect Synchronization: recover the Vigenere key from the ciphertext, decrypt the message, and verify the flag.