ADFGVX and Fractionation

By 1918, the German military faced a critical problem: Allied cryptanalysts were breaking their field codes faster than they could be replaced. A new, stronger cipher was urgently needed for the Spring Offensive of 1918.

Colonel Fritz Nebel developed the ADFGVX cipher, which combined two classical techniques in a way that had never been done before in military cryptography.

The cipher is named after its six ciphertext letters: A, D, F, G, V, X. These letters were chosen deliberately because their Morse code representations are very different from each other.

This minimized transmission errors over field radio. Confusing one letter for another could corrupt an entire message, so the designers selected letters whose Morse patterns are maximally distinguishable.

The first step is substitution using a 6x6 Polybius square. The 36 cells contain the 26 letters and the digits 0-9, arranged in a keyed order. The row and column headers are the six letters A, D, F, G, V, X.

Each plaintext character is replaced by two letters: the row header and the column header of its cell. For example, if H is at row A, column F, it becomes "AF".

After substitution, the doubled ciphertext is written into a grid with a number of columns equal to the key length. A second keyword determines the column order.

The columns are read out in alphabetical order of the key letters. This rearranges the substituted pairs, breaking any remaining patterns and creating a cipher that resists both frequency analysis and pattern matching.

Fractionation is the technique of splitting each plaintext character into multiple ciphertext symbols before transposing them. In ADFGVX, each letter becomes two symbols (row and column), which are then shuffled independently.

This means the two "halves" of one plaintext letter end up in different positions in the final ciphertext, making it impossible to analyze substitution and transposition separately.

Pure substitution ciphers (like Playfair) are vulnerable to frequency analysis. Pure transposition ciphers (like rail fence) are vulnerable to anagramming. Combining them addresses both weaknesses.

ADFGVX makes frequency analysis harder by fractionating and transposing the substituted symbols. Breaking the transposition requires knowing the substitution key, and vice versa.

French cryptanalyst Georges Painvin broke the ADFGVX cipher in June 1918, just days before the German offensive it was protecting. It was considered one of the most brilliant cryptanalytic achievements of WWI.

Painvin's method exploited patterns in messages sent on the same day with the same key. By comparing ciphertexts of similar length, he could identify column boundaries and work backwards through the transposition.

Painvin's breakthrough provided the Allies with intelligence that helped blunt the German Spring Offensive. The offensive failed partly due to the intelligence advantage gained from breaking ADFGVX.

The story demonstrated that even clever cipher designs can be broken when operational security is poor. The Germans reused keys and sent too many messages in a short time, giving Painvin the material he needed.

In columnar transposition, you write the plaintext in rows under a keyword, then read the columns in the alphabetical order of the keyword letters. The keyword "KEY" would produce column order 2-1-3 (E before K before Y).

The output columns interleave the original text in a way that destroys local patterns. Decryption requires writing the ciphertext back into columns in the same order and reading row by row.

Each layer of a classical cipher addresses a different weakness. Substitution obscures letter identity; transposition obscures letter position. Together, they create a cipher that requires attacking both layers simultaneously.

This principle of combining confusion (substitution) and diffusion (transposition) was later formalized by Claude Shannon and became the theoretical foundation of modern block ciphers like AES.

Before ADFGVX, the Germans used ADFGX, a simpler 5-letter variant that did not include digits in its Polybius square. ADFGVX expanded the square to 6x6 to include all 10 digits, allowing numeric data to be encrypted.

The expansion from ADFGX to ADFGVX was a response to Allied partial success against ADFGX. Adding digits increased the key space and made digraph frequency analysis more difficult by distributing patterns across more symbol pairs.

Test your understanding of fractionation in ADFGVX.

ADFGVX combined a Polybius square substitution with columnar transposition, using fractionation to interleave them. The six-letter alphabet was chosen to minimize Morse code transmission errors.

Despite its sophistication, Painvin broke it by exploiting key reuse. The cipher illustrated both the power of combining classical techniques and the critical importance of operational security.