Going the other way with padding oracles: Encrypting arbitrary data

blog.skullsecurity.org