 Suppose the attacker has two ciphertext blocks formula_5 and they want to decrypt the second block to get plaintext formula_4.The attacker changes the last byte of formula_3 (creating formula_8) and sends formula_9 to the server.The server then returns whether or not the padding of the last decrypted block (formula_10) is correct (equal to 0x01).