Geheimschreiber T52 (Sturgeon) Siemens & Halske teleprinter cipher
A teleprinter cipher with ten wheels and ten thousand operators — broken in two weeks by one Swedish mathematician with pencil and paper.
Broken (Beurling, 1940)
Why This Matters
While Lorenz SZ40/42 (“Tunny”) carried Hitler’s strategic traffic, the Siemens & Halske T52 — codenamed “Sturgeon” at Bletchley Park — carried Luftwaffe and Wehrmacht command traffic over leased Swedish telephone lines from 1940. That choice of physical medium turned out to be a catastrophic mistake.
In 1940 Beurling worked with the Swedish Defence Staff’s cryptographic service, the predecessor of FRA as an independent agency. His approximately two-week breakthrough, assisted by Hans Rudberg and Bertil Nyman, was followed by continuing key-recovery and decryption work. The FRA account distinguishes these stages.
The T52 is a teleprinter cipher. Plaintext is encoded in 5-bit Baudot characters and combined with a keystream generated by ten wheels with pairwise-coprime lengths (47, 53, 59, 61, 64, 65, 67, 69, 71, 73). The wheels are split into two roles:
- Five wheels generate an additive keystream that shifts each character.
- Five wheels select, per character, one of several keyed substitution permutations applied after the additive shift.
In the original T52 the substitution is a bit-permutation on the 5-bit Baudot code. The educational demo above operates on the 26-letter alphabet using mod-26 addition and six keyed permutations of A–Z, which preserves the architectural lesson — additive keystream plus per-character permutation, ten coprime-length wheels — while keeping the round-trip clean for arbitrary text.
Beurling exploited two German operating errors. First, the ten wheel lengths are coprime, so the keystream period is enormous — but operators frequently sent two messages with the same wheel start position, producing a depth. Second, German operators padded with the figure-shift character, which had a distinctive bit pattern that survived the additive masking. With several deep messages and the bias from padding, Beurling derived the wheel motion algebraically.
Beurling and engineer Vigo Lindstein developed decryption equipment known as “appar.” It helped process messages once suitable keys had been recovered; it should not be described as automatically finding every daily setting. This exhibit does not establish that all resulting intelligence was shared with the Allies.
| Sturgeon lesson | Modern echo |
|---|---|
| Re-using a keystream produces a depth | Why nonces are mandatory and never reused (AES-GCM, ChaCha20) |
| Predictable padding leaks the keystream | Padding oracle attacks (Vaudenay, POODLE) |
| Coprime wheel lengths ≠ cryptographic security | Period ≠ unpredictability — modern PRGs require statistical tests |
| Ciphertext-only break of a complex machine | The defender must assume the attacker has only ciphertext, not vice versa |
| Origin | Siemens & Halske, Germany |
| Year | Deployed ~1932; in heavy WWII use 1940–1945 |
| Wheels | 10 (5 generate keystream, 5 select permutation) |
| Plaintext | 5-bit Baudot teleprinter code |
| Broken by | Arne Beurling, FRA Sweden, May–June 1940 |
"Fish" was Bletchley Park's umbrella codename for German teleprinter systems, named after fish species:
- Tunny = Lorenz SZ40/42 high-command traffic.
- Sturgeon = Siemens T52 Geheimschreiber family.
- Thrasher = the Siemens T43 one-time-tape machine, a separate system.
This matters because the British did not face one "German machine cipher" but a layered ecosystem: Enigma for tactical traffic, Lorenz for OKW strategic command, and T52-class Fish circuits for teleprinter channels.