While many popular schemes described in standards and in the literature have been shown to be vulnerable to padding oracle attacks,[25][26] a solution which adds a one-bit and then extends the last block with zero-bits, standardized as "padding method 2" in ISO/IEC 9797-1,[27] has been proven secure against these attacks.