Modern & Applied Cryptography Breakers Intermediate
Breaking AES-CBC with a Padding Oracle
A server that only tells you whether decrypted padding was valid hands you the whole plaintext. This guide runs the real CBC padding-oracle attack against full AES-128, recovers a secret message one byte at a time, and explains why POODLE and Lucky 13 made authenticated encryption the rule.
16 min read