Language
Name the moving parts
Separate plaintext, ciphertext, cipher, and key so you can describe exactly what changed.
PROOF: explain MEET → PHHW using one rule and one key.
Classical cryptography · beginner to intermediate
Learn the rules.
Break the message.
A visual field manual for substitution, frequency analysis, Vigenère, transposition, and the habits that turn a curious beginner into a capable codebreaker.
Live intercept
Plaintext
MEET AT DAWN
Ciphertext
PHHW DW GDZQ
01B · Recommended route
Your codebreaker curriculum
Follow six skill phases through fifteen guided checkpoints. Each checkpoint explains one idea, gives you an action, and requires visible evidence before the route continues.
Transformation
Control a fixed shift
Encrypt and decrypt Caesar text, then search the entire 25-key space instead of guessing.
PROOF: recover THE EAGLE HAS LANDED.
Leakage
Read statistical evidence
Count letters and repeated groups to see what fixed substitution fails to hide.
PROOF: justify one mapping without calling it certain.
Structure
Compare word shapes
Use repeated-letter signatures and short-word constraints to reject impossible guesses.
PROOF: distinguish MEET from NOON by pattern alone.
Periodicity
Trace a repeating key
See Vigenère as several interleaved Caesar ciphers and expose the weakness created by repetition.
PROOF: decrypt LXFOPV EF RNHR with LEMON.
Triage
Choose the right attack
Identify what survives—identity, position, frequency, or periodicity—before selecting a tool.
PROOF: rank a cipher family and defend the hypothesis.
Use the manual like a laboratory
Read the explanation, perform the requested action, then press Verify evidence. Fifteen checkpoints connect the six phases into one step-by-step investigation.
Guided course not started.
02 · Language of the craft
Vocabulary decoder
Seven terms unlock almost every explanation that follows. Click any card to expose a concrete example.
Plaintext
The original readable message.
MEET AT DAWN
Ciphertext
The transformed encoded message.
PHHW DW GDZQ
Cipher
The rule used to transform information.
Shift every letter +3
Key
The value or word controlling the transformation.
Key = 3 or LEMON
Encryption
Turning plaintext into ciphertext.
HELLO → KHOOR
Decryption
Recovering plaintext from ciphertext.
KHOOR → HELLO
Cryptanalysis
Recovering a message without being directly given the key.
Use patterns, frequencies, and contradictions.
03 · Orientation map
Cipher family map
First identify what the cipher changes. That choice determines which evidence survives and which attack is sensible.
CLASSICAL CIPHERS
04 · First instrument
Caesar laboratory
One fixed shift changes every letter. That simplicity makes Caesar perfect for learning—and easy to brute force.
RuleC = (P + k) mod 26
Represent A as 0 through Z as 25, add the key, then wrap around.
What survivesWord length + repeated-letter shape
Every letter moves by the same amount, so language structure remains visible.
Why it breaksOnly 25 meaningful keys
Test the complete keyspace and validate the whole sentence—not one lucky fragment.
Encrypt or decrypt
3
Aligned alphabets
ABCDEFGHIJKLMNOPQRSTUVWXYZ
DEFGHIJKLMNOPQRSTUVWXYZABC
Result
Brute-force every shift
Atbash translator
ABCDEFGHIJKLMNOPQRSTUVWXYZ
ZYXWVUTSRQPONMLKJIHGFEDCBA
Random substitution alphabet
Plain alphabet
ABCDEFGHIJKLMNOPQRSTUVWXYZ
Cipher alphabet
05 · Statistical evidence
Frequency analysis lab
Substitution changes symbols but preserves how often underlying letters appear. That statistical fingerprint is the attacker’s foothold.
SignalFixed substitution preserves relative use
A frequent plaintext letter still creates a frequent ciphertext symbol.
Evidence ladderLetters → pairs → triples → words
Combine several clues; a single frequency match is only a hypothesis.
Sample warningShort messages are noisy
English averages become more useful as the ciphertext grows longer.
Most common—
Repeated pairs—
Repeated triples—
Ciphertext letter distribution
Manual substitution guesses
Enter a plaintext guess beneath any cipher letter, then watch the tentative message update.
06 · Structural clues
Pattern analysis
Frequency narrows possibilities. Repeated-letter structure, word length, and short words turn possibilities into testable hypotheses.
Core invariantEqual symbols must remain equal
In a fixed substitution, repeated ciphertext letters imply repeated plaintext letters.
Use patterns forRejecting candidates quickly
A 0-1-1-0 word cannot be MEET because its first and last letters must match.
Best practicePattern + length + context
Structural matches narrow the search; they do not prove a word by themselves.
Word signature calculator
Each new letter receives a number. Repeated letters reuse the same number.
0-1-2-2-1-3
MEET → 0-1-1-2
NOON → 0-1-1-0
LETTER → 0-1-2-2-1-3
Fast linguistic clues
1
One-letter words
Usually A or I.
2
Common pairs
TH, HE, IN, ER, AN.
3
Common triples
THE, AND, ING.
4
Contradictions
A monoalphabetic mapping must remain consistent everywhere.
06B · Integrated fieldwork
Case File 01: The Scrambled Alphabet
Use frequency, word shape, reversible hypotheses, and contradiction checks together against one genuine monoalphabetic substitution.
Case ruleOne cipher symbol → one plaintext letter
The mapping must remain consistent everywhere in the intercept.
Analyst disciplineObserve → hypothesize → test → reject
A plausible guess remains provisional until it survives the whole message.
Victory conditionRecover the message without contradictions
The final plaintext stays sealed until every used symbol has a consistent mapping.
Intercept CA-01 · preserved spacing
Top symbolsAnalyze to reveal
One-letter wordsAnalyze to reveal
Repeated wordsAnalyze to reveal
Select any ciphertext letter or word to inspect every occurrence and its structural signature.
Evidence chain
Eight gates to a defensible solution
No clue applied. Start by preserving the original intercept and recording its visible structure.
Contradiction-aware mapping workspace
Map ciphertext symbols to plaintext. Duplicate plaintext assignments are flagged immediately. Lock mappings only after the evidence is strong.
0 of 20 used symbols mapped · 0 structural conflicts
Progressive plaintext
Case closed · globally consistent plaintext
Evidence notebook
Hypothesis ledger
Independent evidence
What the intercept already tells you
InvariantSpaces, punctuation, word lengths, and repeated-letter shapes survive.
False leadQ is a one-letter word, so A and I are both initially plausible. Context must decide.
Repeated structureHQZZTKF contains a doubled symbol; any proposed plaintext must repeat letters in the same positions.
Global testA mapping is only accepted when it creates no duplicate assignments and improves every occurrence.
07 · Repeating shifts
Vigenère workbench
A keyword supplies a different Caesar shift for each letter. Repetition hides simple frequencies, but creates a new weakness: periodicity.
RuleCᵢ = (Pᵢ + Kᵢ) mod 26
The key letter supplies a new Caesar shift at each position.
What improvesOne plaintext letter can encrypt differently
Simple single-letter frequency is spread across several alphabets.
What leaksThe keyword repeats
Periodic reuse lets analysts estimate key length and separate the alphabets again.
Encrypt or decrypt
Repeated key alignment
Letter-by-letter trace
Result
How Vigenère is attacked
1
Find repeated ciphertext sequences.
2
Measure distances between repetitions.
3
Factor those distances to estimate key length.
4
Split letters by key position.
5
Treat each group as a Caesar cipher.
Distance: 24
Possible key lengths: 2, 3, 4, 6, 8, 12
08 · Rearranged evidence
Transposition ciphers
Substitution changes letter identities. Transposition keeps the letters and changes only their positions.
InvariantExact letter inventory survives
No symbols are replaced; only their positions change.
First testsRoute, width, depth, direction
Try plausible geometric layouts rather than letter substitutions.
Recognition clueFrequencies look naturally English
Counts remain identical to the plaintext even when word order disappears.
Rail fence visualizer
Substitution vs transposition
Substitution
Letters change. Positions remain.
HELLO → KHOOR
Transposition
Letters remain. Positions change.
HELLO → HLOEL
Useful test:
Compare letter counts. If the same letters survive exactly, suspect transposition.
09 · Triage protocol
Identify a cipher
Select the observations that fit your ciphertext. The field guide will rank the most likely classical family.
Step 1Inventory the evidence
Record spaces, symbol counts, repeats, word shapes, and suspected language.
Step 2Ask what survived
Identity suggests transposition; stable patterns suggest fixed substitution; periodicity suggests repeating keys.
Step 3Rank, test, revise
A family identification is a working model, not a verdict.
Awaiting evidence
No family selected
Choose one or more observations to generate a reasoned first hypothesis.
Codebreaker workflow
1
Preserve the original ciphertext.
2
Count letters, pairs, triples, and repeated words.
3
Identify what structure survives.
4
Record guesses as hypotheses.
5
Reject mappings that create contradictions.
6
Reconsider the cipher family when progress stalls.
10 · Defensive thinking
Failure modes
Most beginner mistakes are not calculation errors. They are reasoning errors: committing too early, ignoring structure, or failing to test globally.
Guessing too early
Symptom
A plausible word is treated as proven.
Correction
Track every guess as a reversible hypothesis.
Ignoring repeated patterns
Symptom
The same ciphertext pattern receives conflicting plaintext guesses.
Correction
Use structural signatures before guessing vocabulary.
Changing too much
Symptom
Several substitutions are altered at once, hiding which one failed.
Correction
Change one mapping, then inspect the whole text.
Assuming substitution
Symptom
Frequency work produces no stable progress.
Correction
Check whether letter counts suggest transposition instead.
11 · Practical examination
Codebreaker test
Three compact intercepts test fixed-shift search, genuine substitution transfer, and repeating-key control.
Score 0Hints 0Best 0
Intercept 01 · fixed shift
Intercept 02 · scrambled-alphabet transfer
This is a genuine fixed substitution using the Case File 01 alphabet. Reuse the crib ZIT = THE, then validate the entire sentence.
Intercept 03 · repeating keyword
The keyword is a five-letter citrus fruit.
12 · Screenshot board
Quick reference
A compact field card for deciding what you are looking at and which first attack is justified.
CAESAR
One fixed alphabet shift.
Attack: brute force all 25 shifts.
SUBSTITUTION
One fixed scrambled alphabet.
Attack: frequency + word patterns.
VIGENÈRE
Repeating sequence of shifts.
Attack: key length + grouped frequencies.
TRANSPOSITION
Letters rearranged, not replaced.
Attack: route and grid reconstruction.
COUNT SYMBOLS → FIND REPETITION → COMPARE PATTERNS → TEST ONE HYPOTHESIS → SEARCH FOR CONTRADICTIONS → REASSESS THE FAMILY