18th–20th c.

Book Cipher

If both correspondents have the same book, the book itself is the key.

Security depends on the book, edition and indexing rule; identifying the source or exploiting context can expose messages.

OriginPre-revolutionary French military couriers; American Revolutionary War
Year1700s onward
Key TypeAn agreed-upon book; ciphertext is a list of (page, line, word) or (page, word) coordinates
Broken ByIdentifying the book — the Beale Cipher 2 was solved when the anonymous pamphleteer (published by James Ward, 1885) tried the Declaration of Independence
Modern LessonKey distribution is the hard part; the underlying primitive can be trivial

Why This Matters

A book cipher uses an agreed reference text and indexing convention. For a page–line–word system, both parties need matching pagination. The unknown reference gives an attacker a search problem, but its size is not unbounded and a famous or predictable book may be easy to guess. Different historical “book ciphers” used different indexing rules.

Historical Context

The Arnold–André correspondence is one historical book-code example. The Beale pamphlet is different evidence: its anonymous narrator claims to have decoded the second sequence using the Declaration of Independence, and James B. Ward published the pamphlet in 1885. Publication does not establish Ward as the solver or verify the earlier narrative. The former claim that SOE knowingly used disposable “low-priority” agents is unsupported and has been removed.

How It Works

Pick a book and an edition. To encode the word RIVER, scan the book until you find that word; record its location as (page, line, word) — say (127, 14, 6). Send the triplet. Variants: letter-level book ciphers (every plaintext letter is encoded as the position of any matching letter in the book), word-only ciphers (faster but less flexible — rare words must be spelled out), and number-only ciphers (the running Beale-style format that is just lists of integers).

How It Was Broken
Identify the Book
Complexity: Unbounded search vs. bounded inference

If the reference text and indexing rules are recovered, the corresponding lookups are mechanical. Repeated coordinates and contextual knowledge may help identify them. The unsolved Beale sequences do not prove that a key book exists: a different construction or a hoax remains possible.

What It Teaches Modern Cryptography
Concept from Book CipherModern Evolution
The hard part is key distributionSame insight drives modern PKI
Out-of-band key sharingCouriered books prefigure Diffie-Hellman: get a shared secret without revealing it on the wire
Unguessable secretsIf the adversary knows your book is one of 50 popular novels, you have at most ~6 bits of key
Break This Cipher

Ciphertext: 48.1 5.1 42.1 15.1

Hint: each pair is a lookup into the shared text. The word is short, valuable, and famous in this cipher family.

Plaintext: GOLD
Quick Facts
Era18th–20th c.
TrustBroken
OriginPre-revolutionary French military couriers; American Revolutionary War
Year1700s onward
Key TypeAn agreed-upon book; ciphertext is a list of (page, line, word) or (page, word) coordinates
Broken ByIdentifying the book — the Beale Cipher 2 was solved when James Ward tried the Declaration of Independence
Modern LessonKey distribution is the hard part; the underlying primitive can be trivial
← Previous Argenti Family Cipher Vatican papal nomenclators · 1500s–1600s