breaking repeating-key xor; messy but working