[b]Serge Vaudenay [/b](born 5 April 1968) is a French cryptographer. Serge Vaudenay entered the École Normale Supérieure in Paris as a normalien student in 1989. In 1992, he passed the agrégation in mathematics. He completed his Ph.D. studies at the computer science laboratory of École Normale Supérieure, and defended it in 1995 at the Paris Diderot University; his advisor was Jacques Stern. From 1995 to 1999, he was a senior research fellow at French National Centre for Scientific Research (CNRS). In 1999, he moved to a professorship at the École Polytechnique Fédérale de Lausanne where he leads the Laboratory of Security and Cryptography (LASEC). LASEC is host to two popular security programs developed by its members: [i]iChair,[/i] developed by Thomas Baignères and Matthieu Finiasz, a popular on-line submission and review server used by many cryptography conferences; and, [i]Ophcrack[/i], a Microsoft Windows password cracker based on rainbow tables by Philippe Oechslin. Vaudenay has published several papers related to cryptanalysis and design of block ciphers and protocols. He is one of the authors of the IDEA NXT (FOX) algorithm (together with Pascal Junod). He was the inventor of the padding oracle attack on CBC mode of encryption. Vaudenay also discovered a severe vulnerability in the SSL/TLS protocol; the attack he forged could lead to the interception of the password. He also published a paper about biased statistical properties in the Blowfish cipher and is one of the authors of the best attack on the Bluetooth cipher E0. In 1997 he introduced decorrelation theory, a system for designing block ciphers to be provably secure against many cryptanalytic attacks. Vaudenay was appointed program chair of Eurocrypt 2006, PKC 2005, FSE 1998; and in 2006 elected as board member of the International Association for Cryptologic Researc