Efficient Padding Oracle Attacks on Cryptographic Hardware