Does the oracle have to have access to the encryption key to the padding oracle attack to work (CBC & PKCS#7)? I tried much to get a attach to work, but the oracle doesn't have access to the encryption key. So have i than throw away months for nothing to get a attach to work? I have not readed one place that the oracle actually have to have access to the encryption key. So i hope that isn't the case and there are still hope.
So if you look at this question. Help understanding how to decrypt cipher This cant be done than if the orcla need the key. Is thare a way to actually get the plain text? Is thare maby a methode to get the key from knowing the plain text?