Recover a message from one bit of feedback.
A server that reveals only whether a message’s padding is valid leaks enough to rebuild the entire message. This runs that attack live, and never hands the screen the key or the plaintext.
This is an interactive demonstration and needs JavaScript. Nothing is sent anywhere: the app has no network code at all.