Padding oracle
An observable difference in decryption handling that can expose information about encrypted data. Errors, timings, or other signals can act as the oracle.
Covered in
Reference
Padding oracle attacks
Use a byte-level CBC example to see how a tiny validity signal becomes plaintext information, then design verification that checks more than the error message.
Case study
DROWN: one RSA key across incompatible protocols
Map an RSA key across services to see how an SSLv2 oracle could compromise TLS traffic on a different endpoint.