<p>i was emotionally obliterated when i thought that i'm insufficiently good at cryptanalyzing this scrambling function (with my approach being an SMT solver but it never terminating), i looked up how they broke MD4, and it was "hook it up to an SMT solver"</p><p>well, it turns out that works if you implement the ISA right</p>
