Описание тега padding-oracle-attack

A Padding Oracle Attack exploits ciphertext decryptor to recover the plaintext by sending multiple manipulated ciphertexts. Use the [poodle-attack] if your question is explicitly about POODLE. If your question isn't directly related to programming/software dev, you should better ask it on security.stackexchange.com for general questions and on crypto.stackexchange.com for details about the cryptography behind it.

A Padding Oracle Attack exploits ciphertext decryptor which distinguishes between wrong padding and failed decryption (oracle). It can recover the plaintext from the ciphertext by sending multiple manipulated ciphertexts to the oracle.

One of the notable examples of this attack is the POODLE attack against SSLv3 and TLS 1.0-1.2. poodle-attack