python3 << 'EOF'
# LFSR: 64-bit initial state, taps at positions [63, 61, 60, 58]
# Left-shift operation: output MSB, XOR tap positions, append to LSB
def lfsr(state, taps, n_bits):
    bits = []
    for _ in range(n_bits):
        # Output the MSB
        bits.append((state >> 63) & 1)
        # Compute feedback from tap positions
        feedback = 0
        for t in taps:
            feedback ^= (state >> t) & 1
        # Shift left and insert feedback at bit 0
        state = ((state << 1) & ((1 << 64) - 1)) | feedback
    return bits

# Read seed from output.txt
seed = 0xYOUR_64BIT_SEED  # from output.txt
taps = [63, 61, 60, 58]   # confirmed taps
bits = lfsr(seed, taps, 128)

# Bit-packing convention: bits[0] is MSB of the first key byte.
# If the AES key looks wrong, flip to LSB-first by reversing each chunk:
#   key = bytes(int(''.join(map(str, bits[i:i+8][::-1])), 2) for i in range(0, 128, 8))
key = bytes(int(''.join(map(str, bits[i:i+8])), 2) for i in range(0, 128, 8))
print("AES key (hex):", key.hex())
EOF