Military & Spy Ciphers
When lives depend on secrecy — the peak of hand-cipher design
Military hand systems balance speed, key logistics, operator training and resistance to attack. The examples here had different operational roles and weaknesses; none should be used for present-day security.
The military cryptographer's dilemma: A cipher must be strong enough that the enemy cannot read it — but simple enough that a soldier can encrypt and decrypt in the field without a computer, under stress, with minimal training. Every cipher in this hall represents a different solution to that impossible trade-off.
Nihilist additive substitution combines plaintext and repeating-key Polybius coordinates by ordinary addition. Its association with nineteenth-century Russian revolutionaries does not establish a particular inventor or first break.
Germany’s ADFGX field cipher appeared in March 1918; Painvin obtained solutions in April. Its square-plus-transposition construction required continuing key recovery.
H → AF E → DA
ADFGVX combined a 6×6 substitution square with columnar transposition. Painvin’s June 1918 solutions exploited particular traffic and keys, not every later message automatically.
Bazeries is associated with both a cipher cylinder and hand-cipher procedures. This exhibit uses a labelled substitution-and-reversal model; it is not the cylinder.
The Hollow Nickel message became readable with information from Häyhänen’s 1957 defection. The exhibit distinguishes historical VIC from its simplified browser model.
Book ciphers use a shared text and agreed indexing rules. Arnold’s historical correspondence and the Beale pamphlet’s claimed treasure story have different evidential status.
A straddling checkerboard gives some letters one digit and others two. It is a component of VIC, not a secure cipher by itself; an exact first-use date is not established here.
Painvin’s work against ADFGX and ADFGVX contributed useful intelligence during the 1918 fighting. Repeated traffic and painstaking manual analysis mattered. Attributing the result of an entire offensive to one decipherment overstates what the evidence can establish.
ADFGVX combines coordinate substitution and transposition. AES likewise composes operations, but its mathematical structure and security analysis differ. AES has 10, 12 or 14 rounds depending on key size; the final round omits MixColumns.
The VIC cipher's straddling checkerboard assigns shorter codes to common letters (like Huffman coding) while also obscuring the alphabet mapping. This dual purpose — compression and encryption — is a sophisticated design insight that modern protocols use separately.
VIC’s full key procedure became known through a defection. That differs from recovering a key by cryptanalysis. Operational compromise can expose a system even when a particular mathematical attack has not been demonstrated.
| System | Primary Use | Field Speed | Attack considerations | Operational Failure Mode |
|---|---|---|---|---|
| Nihilist | Cell-based covert messaging | Medium | Moderate | Key reuse exposes additive structure |
| ADFGX / ADFGVX | WWI operational traffic | Fast once drilled | Traffic and key procedures matter | Message volume + reused structure enabled Painvin's break |
| Bazeries | Officer-level secure correspondence | Slow in field conditions | Depends on the particular procedure | Complex procedure encourages operator shortcuts |
| Book Cipher | Long-form clandestine dispatches | Slow | Variable | Known edition and indexing conventions can expose a book code |
| VIC | Cold War espionage bursts | Slow but disciplined | Historical case, not a quantified security level | Defector information enabled the documented message recovery |
Legend: this table compares practical trade-offs for operators in the field, not abstract mathematical strength alone.
Appendix: modern tactical authentication. Contemporary military systems separate confidentiality from authentication. Historical hand ciphers in this hall mostly protect secrecy, but modern tactical traffic also requires authentication mechanisms and freshness checks, such as message authentication codes, signatures and challenge-response protocols, with suitable key management. The enduring lesson is procedural: even strong ciphers fail without authenticated operator workflows.