Exhibit 11 of 172 17th Century

Gronsfeld Cipher

A Vigenère-style cipher restricted to numeric shifts from 0 to 9

Kasiski · Only 10 possible shifts per position

InventorTraditionally attributed to Count Gronsfeld
Year17th-century tradition; exact invention date uncertain
Key TypeNumeric keyword (digits 0-9)
Broken ByKasiski · Only 10 possible shifts per position
Modern LessonKey alphabet size matters

Why This Matters

The Gronsfeld cipher illustrates a persistent tension in cryptography: usability versus security. For a fixed key length, restricting each shift to 0–9 gives fewer possible keys than permitting 0–25. Whether digits are easier to remember depends on the chosen key and user.

Historical Context

The cipher traditionally attributed to Count Gronsfeld adapts the Vigenère cipher to use numeric keys instead of letter keys. A numeric keyword may be convenient for some users, but greater memorability is not an established property of every numeric key. The tradeoff: digits only give 10 possible shift values (0-9) instead of 26, dramatically weakening the cipher.

The Gronsfeld cipher illustrates a persistent tension in cryptography: usability versus security. A cipher that field operators can't remember correctly is useless — but a cipher that trades security for memorability may be worse than none.

How It Works
Key:    3  1  4  1  5  3  1  4
Plain:  A  T  T  A  C  K  A  T
Cipher: D  U  X  B  H  N  B  X

Formula: C = (P + digit) mod 26
Only 10 possible shifts per position (0-9)
KEY DIGITS 3 1 4 1 5 PLAIN A T T A C CIPHER D U X B H Vigenère: 26 shifts/position Gronsfeld: 10 shifts/position → 62% less keyspace per column
Digit-only keys (0–9) reduce each position's keyspace from 26 to 10 — leaving ten candidate shifts per column once a period is proposed
How It Was Broken
Kasiski + Reduced Keyspace
Complexity: Easy

Gronsfeld shares Vigenère's periodicity weakness, but with only 10 possible shift values per position, each column's key digit can be found by testing just 10 possibilities instead of 26. Period tests supply candidate lengths, and language evidence helps choose among the ten shifts; success and running time depend on the sample.

What It Teaches Modern Cryptography
Concept from Gronsfeld CipherModern Evolution
Digit keys (0-9)Key entropy matters: AES-256 uses 256-bit keys for 2²⁵⁶ possible values
Usability-security tradeoffPassword KDFs raise guessing cost; they do not create entropy absent from the password
Small effective alphabetAES’s bijective 8-bit S-box maps 256 values; output frequencies still depend on its inputs
Quick Facts
Exhibit11 of 172
Era17th Century
TrustBroken
InventorTraditionally attributed to Count Gronsfeld
Year17th-century tradition; exact invention date uncertain
Key TypeNumeric keyword (digits 0-9)
Broken ByKasiski · Only 10 possible shifts per position

Sources and Reading

The Codebreakers: The Comprehensive History of Secret Communication from Ancient Times to the Internet, David Kahn (revised edition, 1996), “The Professor, the Soldier, and the Man on Devil’s Island”: the traditional Count Gronsfeld attribution and numeric shifts.

← Previous Wallis Ciphers John Wallis & the English Civil War · 1640s