Padding Oracle Attacks on CBC-Mode Encryption with Secret and Random IVs