Hall VII · Machines Victorian London · 1867 Weak (1867 standards)

Wheatstone Cryptograph A clock-face polyalphabetic · 1867

Two geared clock dials, an outer plain alphabet, an inner mixed alphabet — the polyalphabetic cipher you can demonstrate without writing anything down.

OriginCharles Wheatstone, London
Year1867 Paris Universal Exposition
Key TypeMixed-alphabet keyword (inner dial)
MechanismTwo geared hands on concentric dials
Modern LessonMechanisation does not, by itself, add security

Why This Matters

Charles Wheatstone (1802–1875) is best known for the Wheatstone bridge, the concertina, and (with Cooke) the first commercial electric telegraph. He was also an enthusiastic cryptographer: the Playfair cipher we know by Lord Playfair's name was actually invented by Wheatstone, and his cryptograph — a brass clockwork enciphering machine the size of a pocket watch — was unveiled at the 1867 Paris Universal Exposition.

The cryptograph never saw operational use, but it is mechanically charming and conceptually ahead of its time. It anticipates by half a century the Hagelin lug-and-pin machines and, more loosely, the rotor architecture of the twentieth century: an external alphabet is mapped through a mechanically advancing internal alphabet.

⚙️How It Works

The cryptograph is two concentric dials. The outer dial carries the standard alphabet (plus a 27th mark for word-space on the original brass version). The inner dial carries a mixed alphabet derived from a keyword — Polybius-style: write the keyword, drop duplicates, then append the unused letters in order.

The two hands are geared together so that the inner hand advances one step for every step of the outer hand. To encrypt a letter you sweep the outer hand around to that plaintext letter; the inner hand simultaneously walks across the mixed alphabet, and you read off the ciphertext letter under the inner hand.

Because the inner hand never returns to a known position relative to the outer alphabet (each successive plaintext letter advances it by a different amount), the substitution changes letter-by-letter. The cipher is genuinely polyalphabetic, even though the operator only handles a single physical key (the keyword that built the inner dial).

💀How It Was Broken
Kasiski / index of coincidence
Complexity: Comparable to Vigenère

The keystream is fully determined by the plaintext (it is, in effect, a Cardano-style autokey running over a mixed alphabet). Once the mixed alphabet is recovered — and twenty or thirty plausible keywords cover most operator choices — the rest is a Vigenère-grade cryptanalytic problem.

Mechanical capture
Complexity: Steal the device

The cipher's only secret is the inner-dial keyword. A captured machine, with a known-keyword crib, becomes a Vigenère table.

🔬What It Teaches Modern Cryptography

The Wheatstone cryptograph is the cleanest Victorian illustration of a principle that took another sixty years to be stated as Kerckhoffs's principle: the security of a cipher must rest on its key, not on the secrecy of its mechanism. Wheatstone's machine had a beautiful mechanism and a small key. The mechanism on its own bought no security.

Quick Facts
OriginCharles Wheatstone, London
Year1867 Paris Universal Exposition
Key TypeMixed-alphabet keyword (inner dial)
MechanismTwo geared hands on concentric dials
Modern LessonMechanisation does not, by itself, add security
← Previous Jefferson Disk