Renaissance · 1586 Statistical (Friedman, 1920s)

Autokey

Vigenère's self-extending key — the message becomes its own key.

OriginBlaise de Vigenère (1586), refining Belaso/Cardano
Year1586
Key TypeShort keyword, then plaintext itself extends the key
Broken ByFriedman's index of coincidence + autokey-aware crib dragging (1920s)
Modern LessonSelf-keyed schemes still leak: the key is no longer random once it carries plaintext statistics

Why This Matters

Vigenère's autokey is the under-appreciated half of his 1586 system. After the keyword is exhausted, the plaintext itself is appended to the key — so the key never repeats. That single change wiped out the Kasiski attack a century before Kasiski wrote it down. For nearly 350 years the autokey was effectively unbreakable in the field, until William F. Friedman's 1920s statistical machinery made it tractable.

📜Historical Context

Belaso (1553) and Cardano (1556) had both proposed self-extending keys; Vigenère's Traicté des chiffres (1586) gave the construction its definitive form and unfortunately also presented the much weaker repeating-key variant. History remembered the wrong one: the polyalphabetic that became known as ‘the Vigenère cipher’ for the next four centuries is the breakable repeating-key version, and Vigenère's actually-strong autokey was largely forgotten until Friedman's interwar work.

⚙️How It Works

Pick a short keyword K. Encrypt the first |K| plaintext letters with K under a Vigenère shift. Then take the plaintext itself, prepend K, and use that string as the running key for the rest of the message. Decryption recovers K-many letters first, then uses those recovered plaintext letters as the key for the next stretch — and so on. The key never repeats; its statistics are those of natural English (or French, etc.), not of a short cycled keyword.

💀How It Was Broken
Friedman's Autokey Attack
Complexity: Polynomial (1920s SIS hand methods)

The key isn't random — it is plaintext shifted by a few characters. Friedman observed that the ciphertext has detectable correlation with itself shifted by the keyword length, because shifted plaintext-vs-plaintext is just the original Vigenère table applied to English-vs-English. Crib dragging the most likely keyword length yields the keyword in dozens to a few hundred trial decryptions.

🔬What It Teaches Modern Cryptography
Concept from AutokeyModern Evolution
Self-extending keyModern stream ciphers feed plaintext-derived state back in too — but only via cryptographic mixing (e.g., AES-OFB key schedule)
Friedman's index of coincidence (κ)Still the canonical periodicity test taught in cryptanalysis courses
‘Don't reuse keys’ isn't enoughIf your ‘key' has natural-language structure you've leaked it
Break This Cipher

Ciphertext: QOXSXPWRYOSKP

Hint: the primer is a single Renaissance-style keyword, but the rest of the key comes from the plaintext itself.

Plaintext: AUTOKEY REVEAL
Primer: QUEENLY
Quick Facts
EraRenaissance · 1586
SecurityStatistical (Friedman, 1920s)
OriginBlaise de Vigenère (1586), refining Belaso/Cardano
Year1586
Key TypeShort keyword, then plaintext itself extends the key
Broken ByFriedman's index of coincidence + autokey-aware crib dragging (1920s)
Modern LessonSelf-keyed schemes still leak: the key is no longer random once it carries plaintext statistics
← Previous Running Key