Thai Duong
Vietnamese security researcher who helped break TLS three years running — BEAST, CRIME and POODLE all carry his name.
With Juliano Rizzo, Duong showed in 2010 that padding oracle attacks worked against real web frameworks, ASP.NET among them, prompting an out-of-band Microsoft patch. BEAST followed in 2011, exploiting predictable IVs in TLS 1.0's CBC mode, and CRIME in 2012, which recovered session cookies by watching how compression changed the length of the traffic.
At Google in 2014 he co-published POODLE with Bodo Möller and Krzysztof Kotowicz, which effectively finished off SSL 3.0. The pattern holds throughout: weaknesses cryptographers knew about in theory and dismissed as impractical, until someone wrote the code.