Comment by wulczer

Once this TODO is completed and real PKCS#5 is used, CBC padding oracle attack?

https://github.com/mothran/bunny/blob/master/libbunny/AEScry...