Given RSA public key (e.g. 1024 bits) and decryption oracle that outputs 2 middle bits of decrypted ciphertext (pow(ciphertext,d,n) >> (1024/2)) & 3
, how can we decrypt whole message?
Question related to "Pinhole Attack" task from Tokyo Westerns/MMA ctf.