Classical Substitution
The arms race between letter-mappers and frequency counters
Fixed substitutions preserve recognizable structure. Al-Kindi’s surviving treatise explains frequency analysis; later homophonic, digraph and algebraic constructions change what patterns remain. Their attacks require different evidence and methods.
Frequency analysis compares observed counts with language models. It is useful against fixed substitutions but does not by itself solve every system in this hall. The exhibits distinguish statistical guesses, known plaintext and exhaustive key search.
Monoalphabetic substitution maps each letter to a fixed substitute. Al-Kindi described frequency analysis in the ninth century; useful attacks depend on the text and available evidence.
Cipher: QWERTYUIOPASDFGHJKLZXCVBNM
Homophonic substitution assigns multiple symbols to a plaintext letter to reduce frequency peaks. Historical nomenclators combined this idea with codewords and other conventions.
A → 05, 63 Z → 99
Playfair cipher (1854) — Charles Wheatstone's keyed 5x5 digram cipher promoted by Lord Playfair. Used by the British in WWI; broken by digram analysis.
Four-Square appears in Delastelle’s 1902 treatise. Two keyed and two standard 5×5 squares substitute letter pairs; digraph structure can support cryptanalysis.
Two-square uses two keyed 5×5 squares to encipher letter pairs. This demo follows the ACA horizontal rectangle rule and discloses its extra filler-escape convention.
Nomenclator (1400s) — The 400-year diplomatic compromise: a small substitution alphabet plus a large code dictionary. Hall II of The Cipher Museum.
Hill’s 1929 cipher mixes groups of letters using an invertible matrix modulo 26. Suitable matched plaintext blocks can expose the key by linear algebra.
German Double Playfair: reconstruct the December 1941 Doppelkastenschlüssel manual, including 17-column pairing, two substitution stages and its published example.
The Rossignols’ syllabic nomenclator was deciphered by Bazeries in the 1890s. His proposed Man in the Iron Mask identification remains disputed.
DELETE PREV → 891
The 1586 Babington Plot: intercepted nomenclator letters, a forged postscript, and the difference between compromised keys and an insecure transport channel.
QUEEN → ⟨w28⟩ DOUBLETH → ⟨x2⟩
The Substitution Arms Race
Al-Kindi's 850 AD technique. Monoalphabetic substitution preserves language-frequency patterns. With enough suitable ciphertext, frequency counts and word patterns can reveal the substitution; short messages need not have a unique solution. The Caesar cipher is a trivial special case.
Assign multiple ciphertexts to common letters to flatten frequency peaks. A sophisticated attacker can still detect the homophonic system through structural patterns and solve it with enough ciphertext.
Playfair encrypts letter pairs; AES encrypts 128-bit blocks. Both operate on blocks, but this alone does not establish security. AES combines nonlinear and linear operations under a modern security model.
Hill’s cipher and AES MixColumns both mix multiple input symbols using linear algebra, but they use different fields and play different roles. A linear layer alone does not provide the nonlinear security of a complete modern block cipher.