For more information on Enigma, visit Britannica.com.
For more information on Enigma, visit Britannica.com.
| 5min Related Video: Enigma machine |
| Military History Companion: Enigma |
In 1919, Hugo Koch from the Netherlands invented an electronic enciphering machine that provided 22 million different combinations. It really began to be used in 1923 as a commercial product and by this time a German named Arthur Scherbius had taken over the development of the machine, which was aimed at business needs for secure communications. The German navy became interested in the machine and it was withdrawn from the civilian market and refined for military use.
In its developed form the Enigma machine had a keyboard, plugboard, three (army, air force) or four (navy) rotors, and a lamp table. The rotors were set to a ‘ground setting’ (grundstellung), usually changed daily. Each message would be preceded by an individual ‘key setting’. The message would be typed onto the keyboard, the rotors changed the cipher at each letter, and the enciphered letters would light up on the lamp table. After wireless transmission by Morse code the enciphered message would be typed by the receiver onto an Enigma machine having the same ground setting, the key setting entered, and the text deciphered automatically.
Three Polish mathematicians (Rejewski, Rozycki, and Zygalski) established the theoretical basis for breaking the output of German military Enigma machines in early 1933, through a process of combining mathematics, statistics, computational ability, and inspired guesswork. In July 1939, at a secret meeting with British representatives, the Polish government handed over their theoretical data on breaking Enigma and a replica Enigma machine. In August the Government Code and Cypher School (GC&CS) was moved to Bletchley Park, an estate 46 miles (75 km) from London. Chess masters, mathematicians, professors, and linguists were recruited from all over Britain, many from Cambridge University. The first Bombe machine (named after the ice cream, not explosive) permitted the British to read some traffic during the fall of France. This intelligence, dubbed ULTRA, was passed on to a very limited number of recipients, among whom the most voracious reader was certainly Churchill. ULTRA supplied advanced warning of Luftwaffe intentions during the battle of Britain in 1940 and was instrumental in the interdiction of Axis supplies in the Mediterranean, contributing substantially to the turning point at Alamein. Theoretical data was shared with the Americans even before they entered the war, although there were always reservations about their less stringent distribution and occasionally careless use of ULTRA.
The battle against Enigma was never completely won. Advances came from the capture of ground settings from German weather ships (taken in a ‘cutting out’ operation on suggestion from Bletchley Park) and a U-boat. First principle was the identification of a standard message such as ‘nothing to report’ and the possible key setting such as the operator's wife's name, from which it was possible to work back to the ground setting. The Bombe machine could then find the key settings for other messages in that ground setting. By 1944, over 4, 000 German messages were being decrypted daily at Bletchley Park.
The flood of SIGINT, of which the product from the attack on Enigma was only a part, crucially influenced the direction and outcome of WW II. The North Africa, Italian, and North-West Europe campaigns, but above all the battles of the Atlantic and the Pacific (though this latter did not involve Enigma), were heavily affected by the Allies' foreknowledge of Axis intentions. Never in a major war has one combatant had his intentions betrayed so comprehensively to his opponent. It is remarkable that the secret was entirely kept for 30 years and much of it for 50 years: the story is still unfolding.
Bibliography
— Danny M. Johnson/Peter Jarvis
| Intelligence Encyclopedia: Enigma |
Enigma was a ciphering (code communication) system used by the German military from 1926 until the end of World War II, and by several other nations for some years after. Enigma was the first mechanized message-encryption system to see wide use. Enigma produced such thoroughly scrambled messages that for many years its cipher was considered unbreakable both by the German military and its foes. Polish and British mathematicians, however, cracked the Enigma cipher in time to give the Allies access to most German military communications throughout World War II. The German government never knew that the Enigma cipher had been broken and that its military communications were often transparent, giving a significant advantage to the Allies on many occasions. The Japanese military also used a cipher related to Enigma during World War II. The Japanese version of Enigma was cracked by American cryptographers, providing a crucial advantage to the Allies in the Pacific theater. U.S. knowledge of secrete Japanese transmissions was essential, for example, to victory at the crucial battle at Midway, the Japanese navy's first major defeat in several centuries. Many military strategists and historians hold that Allied success in cracking the Enigma and related ciphers helped significantly shorten World War II.
Origin of Enigma. During World War I, cumbersome paper-and-pencil ciphers were still the rule, as they had been for centuries past. (A cipher is any scheme for transforming ordinary written language—plaintext—into a coded, but apparently random string of characters, ciphertext.) After World War I, several inventors turned their attention to the mechanization of ciphering, seeking to increase accuracy, speed, and security. The most successful of these inventors was German engineer Arthur Scherbius, who in 1918, created a cipher machine he named the Enigma. (This is not a translation; the word "enigma" is the same in German and English). Scherbius was unsuccessful in selling Enigma to commercial buyers. It was not until 1923 that Enigma was chosen by the German government as its standard ciphering system, as Germany had only just learned how much damage had been done by the breaking of its ciphers by the Allies in World War I. Between 1925 and 1945, the German military bought over 30,000 Enigma machines, deploying slightly different systems to its European armies, its army in North Africa, its air force, and its navy.
The Enigma cipher. The Enigma cipher is built upon the simplest of all cipher types, the substitution cipher. In a substitution cipher, one letter of the alphabet is substituted directly for another. A substitution cipher for a sixletter alphabet might appear as
Plaintext: A B C D E F
Ciphertext: F C A B D E
Using this cipher, the plaintext word BAD (for example) would produce the ciphertext word CFB. Such ciphers are easy to implement, but also contain easily broken code, as their ciphertext contains all the regularities of ordinary language: that is, double letters in plaintext appear as double letters in ciphertext, the ciphertext letter for "e" will appear in the ciphertext just as often as "e" appears in plaintext, and so forth. Such codes are weak because analyzing regularities is one of the primary means by which codebreakers attack codes.
However, by adding complications to this simple idea, a powerful code can be devised. Consider the following substitution cipher for a three-letter alphabet
Plaintext: A B C
Ciphertext: A C B
In this simple example, A is enciphered as itself. This cipher can be imagined as a physical device consisting of three disks or dials arranged in a row. The first (left-hand) and third (right-hand) disks, each of which has the alphabet ABC spaced evenly around its edge, are identical, and are aligned so that their letters are in the same positions; the third disk, which sandwiched between the other two, is different. It contains three wires that pass from its left side right through to its right, connecting the two alphabet disks so that the A of the left-hand disk is wired to the A of the right-hand disk, the B of the left-hand disk to the C of the right-hand disk, and the C of the left-hand disk to the B of the right-hand disk. In effect, the middle disk scrambles the alphabet. The result is a simple substitution cipher. If the middle disk, (the scrambler) is rotated, however, so that the wire which touched A on the plaintext disk now touches C on that disk, all the other letters on the plaintext and ciphertext disks will also be connected differently by the scrambler, producing the following substitution cipher
Plaintext: A B C
Ciphertext: B A C
This can be verified by describing the wires in the scrambler as a set of input-output rules, one for each wire
By rule 1, when scrambler input position 1 is lined up with the letter A on the left-hand (plaintext) disk, it is connected to output position 1, which is lined up with the letter A on the right-hand (ciphertext) disk. The other two substitutions are produced by the other two wires: B → C, C → B. When the scrambler is rotated so that its input 1 moves from A to C on the plaintext disk, its output 1 moves from A to C on the ciphertext disk. Now, instead of producing A → A, wire 1 produces C → C. The other two wires now produce the substitutions A → B, B → A. Thus, each time the scrambler is rotated by one letter position, a new different substitution code is produced. This continues until the scrambler returns to its starting position, whereupon the substitution codes produced by the device begin to repeat. In this example, repetition begins with the third shift of the scrambler.
Rotation of the scrambler can be used to make a cipher that is more formidable than a straightforward substitution. Consider a three-letter plaintext message is to be sent: ABA. First, A is enciphered with the scrambler in the first position described above: A → A. Before the second letter is encrypted, the scrambler disk is rotated by one letter-position. The second plaintext letter is then enciphered: B → A. The disk is rotated, and A is enciphered again: A → C. Although in this case one would start repeating substitutions after only three letters, the resulting cipher is significantly more complex, and thus harder to crack, than a static substitution cipher.
Decryption in this system is simple as long as the receiving party possesses an identical machine; the wires in the scrambler disk work equally well in either direction, so decryption is simply encryption run backwards. The receiver must, however, begin decrypting with their scrambler set to the same position as the sender's at the start of transmission, otherwise the substitution codes used by the receiver to decipher the message will be out of step with those used by the sender to encipher it, and decipherment will fail.
The Enigma system was based upon the scramblerdisk principle described above. Enigma used not a 3-letter, but a 26-character alphabet and not one, but four scrambler disks. The first scrambler scrambled plaintext or ciphertext, the second scrambler scrambled the outputs of the first scrambler, the third scrambled the outputs of the second, and the fourth fed back, or "reflected," the outputs of the third so that messages passed through the other three scramblers before the encrypted ciphertext (or decrypted plaintext) was read. Each letter was thus scrambled a total of seven times during its passage through the machine. Three of the scrambler disks could be rotated freely, but the fourth, the "reflector," was stationary.
In order to use an Enigma unit, its operator typed plaintext or ciphertext into a keyboard. For each keystroke typed, Enigma automatically shifted one or more of its scramblers and lit up a letter on a display board. The letter on the display board showed the output text for the typed input letter: ciphertext if plaintext was input, plaintext if ciphertext was input. To produce further scrambling between ciphertext and plaintext, each Enigma also had a built-in commutator or "plugboard" that enabled the operator to crisscross paired letters of the alphabet before their signals fed into the first scrambler disk. The result was that Enigma had over 1020 different "keys" or distinct settings of scramblers and plugboard. Simply guessing the correct key for a given message was, therefore, essentially impossible. Every day at midnight, all operators of a given Enigma system would switch to a new key; these initial daily keys were printed in a codebook that was distributed to the operators. For added security, the scrambler-disks part of the key was changed for every single message sent; this message-key information was transmitted twice at the beginning of every message. This technique was intended to prevent message loss due to transmission errors, but in fact reduced Enigma's effectiveness by introducing an element of predictability.
The defeat of Enigma. Enigma was long considered impossible to crack. However, in 1931, a disgruntled German exofficer gave drawings for the machine to the French secret service. The French, who considered Enigma too tough to crack even with this information in their possession, gave it to the Polish government. Polish mathematician Marian Rejewski (1905–1980) used it to devise automatic devices (specialized electromechanical calculators) for re-cracking the ever-changing Enigma cipher on a daily basis. Just before the fall of Poland in 1939, Rejewski's findings were transferred to the British government, which continued to improve them.
During World War II, the German military modified the Enigma system at intervals, requiring the British to continue re-cracking the cipher throughout the war. With the help of a motley team of crossword-puzzle experts, bridge devotees, chess champions, mathematicians, and linguists led by British mathematician and computing pioneer Alan Turing (1912–1954), the group succeeded. Tragically, however, Turing was persecuted after the war for his homosexuality. His security clearance was revoked, he was forced to undergo debilitating hormone treatments, and he was banned from the development of the digital computer. Turing committed suicide in 1954, some 20 years before his crucial contribution to the cracking of Enigma, and thus, to the Allied victory, was declassified.
Further Reading
Books
Churchouse, Robert. Codes and Ciphers. Cambridge, England: Cambridge University Press, 2002.
Singh, Simon. The Code Book. New York: Doubleday, 1999.
| Wikipedia: Enigma machine |
An Enigma machine is any of a family of related electro-mechanical rotor machines used for the encryption and decryption of secret messages. The first Enigma was invented by German engineer Arthur Scherbius at the end of World War I.[1] This model and its variants were used commercially from the early 1920s, and adopted by military and government services of several countries—most notably by Nazi Germany before and during World War II.[2] A range of Enigma models were produced, but the German military model, the Wehrmacht Enigma, is the version most commonly discussed.
The machine has become well-known because, during World War II, Polish and British codebreakers were able to decrypt a vast number of messages which had been enciphered using the Enigma. The intelligence gleaned from this source, codenamed ULTRA by the British, was a substantial aid to the Allied war effort. The exact influence of ULTRA on the course of the war is debated; an oft-repeated assessment is that decryption of German ciphers hastened the end of the European war by two years.[3][4][5]
Though the Enigma cipher had cryptographic weaknesses, in practice it was only in combination with other factors (procedural flaws, operator mistakes, occasional captured hardware and key tables, etc.) that those weaknesses allowed Allied cryptographers to cryptanalyze so many messages.[6]
Contents |
Like other rotor machines, the Enigma machine is a combination of mechanical and electrical subsystems. The mechanical subsystem consists of a keyboard; a set of rotating disks called rotors arranged adjacently along a spindle; and one of various stepping components to turn one or more of the rotors with each key press. The stepping component varies slightly from model to model. Most often the right-hand rotor steps once with each key stroke, and other rotors step occasionally. The continual movement of the rotors results in a different cryptographic substitution after each key press.
The mechanical parts act in such a way as to form a varying electrical circuit; the actual letter substitution is indicated electrically. When a key is pressed, the circuit is completed; current flows through the various components in their current configuration and ultimately lights one of the display lamps, indicating the output letter. For example, when encrypting a message starting ANX…, the operator would first press the A key, and the Z lamp might light, so Z would be the first letter of the ciphertext. The operator would next press N, and then X in the same fashion, and so on.
To illustrate the detailed operation of Enigma, please refer to the wiring diagram to the left. To simplify the example, only four components of a complete Enigma machine are shown. In reality, there are 26 lamps and keys, several plugs (varied with model) and rotor wirings inside the rotors (at least three were installed). Current flowed from the battery (1) through a depressed bi-directional letter-switch (2) to the plugboard (3). The plugboard allows rewiring of some letter connections between the keyboard (2) and the fixed entry wheel (4). Next, the current wends through the (unused in this instance, so shown closed) plug (3) via the entry wheel (4) through the wiring of the three (Wehrmacht Enigma) or four (Kriegsmarine M4 and Abwehr variants) installed rotors (5), and enters the reflector (6). The reflector returns the current, via an entirely different path, through the rotors (5) and entry wheel (4), proceeding through plug 'S' connected with a cable (8) to plug 'D', and another bi-directional switch (9) to light the appropriate lamp.[7]
The repeated changes of electrical paths through an Enigma, because of the rotation of the rotors (which cause the pin contacts to change with each letter typed), implemented a polyalphabetic encryption which provided Enigma's high security.
The rotors (alternatively wheels or drums, Walzen in German) formed the heart of an Enigma machine. Each rotor was a disc approximately 10 cm in diameter made from hard rubber or bakelite with brass spring-loaded pins on one face arranged in a circle; on the other side are a corresponding number of circular electrical contacts. The pins and contacts represent the alphabet—typically the 26 letters A–Z (this will be assumed for the rest of this description). When the rotors were mounted side-by-side on the spindle, the pins of one rotor rest against the contacts of the neighbouring rotor, forming an electrical connection. Inside the body of the rotor, 26 wires connected each pin on one side to a contact on the other in a complex pattern. Most of the rotors were identified by Roman numerals and each issued copy of rotor I was wired identically to all others. The same was true of the special thin beta and gamma rotors used in the M4 naval variant.
By itself, a rotor will perform only a very simple type of encryption—a simple substitution cipher. For example, the pin corresponding to the letter E might be wired to the contact for letter T on the opposite face, and so on. The Enigma's complexity, and cryptographic security, came from using several rotors in series (usually three or four) and the regular stepping movement of the rotors, thus implementing a poly-alphabetic substitution cipher.
When placed in an Enigma, each rotor can be set to one of 26 possible positions. When inserted, it can be turned by hand using the grooved finger-wheel which protrudes from the internal Enigma cover when closed. So that the operator can know the rotor's position, each had an alphabet tyre (or letter ring) attached to the outside of the rotor disk, with 26 characters (typically letters); one of these could be seen through the window, thus indicating the rotational position of the rotor. In early Enigma models, the alphabet ring was fixed to the rotor disk. An improvement introduced in later variants was the ability to adjust the alphabet ring relative to the rotor disk. The position of the ring was known as the Ringstellung ("ring setting"), and was a part of the initial setting of an Enigma prior to an operating session. In modern terms it was a part of the session key.
The rotors each contained a notch (more than one for some rotors) which was used to control rotor stepping. In the military variants, the notches are located on the alphabet ring.
The Army and Air Force Enigmas were used with several rotors; when first issued, there were only three. On 15 December 1938, this changed to five, from which three were chosen for insertion in the machine for a particular operating session. Rotors were marked with Roman numerals to distinguish them: I, II, III, IV and V, all with single notches located at different points on the alphabet ring. This variation was probably intended as a security measure, but ultimately allowed the Polish Clock Method and British Banburismus attacks.
The Naval version of the Wehrmacht Enigma had always been issued with more rotors than the other services: at first six, then seven, and finally eight. The additional rotors were marked VI, VII and VIII, all with different wiring, and had two notches cut into them resulting in a more frequent turnover. The four-rotor Naval Enigma (M4) machine accommodated an extra rotor in the same space as the three-rotor version. This was accomplished by replacing the original reflector with a thinner one and by adding a special, also thin, fourth rotor. That fourth rotor was one of two types, Beta or Gamma, and never stepped, but it could be manually set to any of its 26 possible positions, one of which made the machine perform identically to the three-rotor machine.
To avoid merely implementing a simple (and easily breakable) substitution cipher, every key press caused one or more rotors to step and so changed the substitution alphabet used for encryption. This ensured the cryptographic substitution would be different at each new rotor position, producing a more formidable polyalphabetic substitution cipher.
The most common arrangement used a ratchet and pawl mechanism. Each rotor had a ratchet with 26 teeth and, every time a key was pressed, each of the pawls corresponding to a particular rotor would move forward in unison, trying to engage with a ratchet, thus stepping the attached rotor once. A thin metal ring attached to each rotor upon which the pawl rode normally prevented this. As this ring rotated with its rotor, a notch machined into it would eventually align itself with the pawl, allowing it to drop into position, engage with the ratchet, and advance the rotor. The first rotor, having no previous rotor (and therefore no notched ring controlling a pawl), stepped with every key press. The five basic rotors (I–V) had one notch each, while the additional naval rotors VI, VII and VIII had two notches. The position of the notch on each rotor was determined by the letter ring which could be adjusted in relation to the core containing the interconnections. The points on the rings at which they caused the next wheel to move were as follows.[8]
| Rotor | Turnover position(s) | BP Mnemonic |
|---|---|---|
| I | R | Royal |
| II | F | Flags |
| III | W | Wave |
| IV | K | Kings |
| V | A | Above |
| VI, VII and VIII | A and N |
If this were all the Enigma machine did, rotor one would step 26 times for every step of rotor two and rotor two 26 times for every step of rotor three. However, the design also included a feature known as double-stepping. This was enabled due to each pawl being aligned with both the ratchet of its rotor and the rotating notched ring of the neighbouring rotor. If a pawl was allowed to engage with a ratchet through alignment with a notch, as it moved forward it would push against both the ratchet and the notch, advancing both rotors at the same time. In a three-rotor machine the double-stepping would affect rotor two only. This, if in moving forward allowed the ratchet of rotor three to be engaged, would move again on the subsequent keystroke, thus resulting in two consecutive steps. Rotor two also pushes rotor one forward after 26 of its steps, but as rotor one moves forward with every keystroke anyway, there is no double-stepping.[9] This double stepping caused the rotors to deviate from odometer style regular motion.
With three wheels and only single notches in the first and second wheels, the machine had a period of 26 × 25 × 26 = 16,900 (not 26 × 26 × 26 because of the double stepping of the second rotor).[9] Historically, messages were limited to a few hundred letters, and so there was no chance of repeating any net combined rotor position during a single message session, and so cryptanalysts were denied a valuable clue to the substitution used.
To make room for the Naval fourth rotors, Beta and Gamma (introduced in 1942), the reflector was changed, by making it much thinner. The special fourth rotors fit into the space made available. No changes were made to the rest of the mechanism, which eased the changeover to the new mode of operation. Since there were only three pawls, the fourth rotor never stepped, but could be manually set into one of its 26 possible positions.
When pressing a key, the rotors stepped before the electrical circuit was connected.
The entry wheel (Eintrittswalze in German), or entry stator, connects the plugboard, if present, or otherwise the keyboard and lampboard, to the rotor assembly. While the exact wiring used is of comparatively little importance to the security, it proved an obstacle in the progress of Polish cryptanalyst Marian Rejewski during his deduction of the rotor wirings. The commercial Enigma connects the keys in the order of their sequence on the keyboard: Q
A, W
B, E
C and so on. However, the military Enigma connects them in straight alphabetical order: A
A, B
B, C
C, etc. It took an inspired piece of guesswork for Rejewski to realise the modification.
With the exception of the early models A and B, the last rotor came before a reflector (German: Umkehrwalze, meaning reversal rotor), a patented feature distinctive of the Enigma family amongst the various rotor machines designed in the period. The reflector connected outputs of the last rotor in pairs, redirecting current back through the rotors by a different route. The reflector ensured that Enigma is self-reciprocal: conveniently, encryption was the same as decryption. However, the reflector also gave Enigma the property that no letter ever encrypted to itself. This was a severe conceptual flaw and a cryptological mistake subsequently exploited by codebreakers.
In the commercial Enigma model C, the reflector could be inserted in one of two different positions. In Model D, the reflector could be set in 26 possible positions, although it did not move during encryption. In the Abwehr Enigma, the reflector stepped during encryption in a manner like the other wheels.
In the German Army and Air Force Enigma, the reflector was fixed and did not rotate; there were four versions. The original version was marked A, and was replaced by Umkehrwalze B on 1 November 1937. A third version, Umkehrwalze C was used briefly in 1940, possibly by mistake, and was solved by Hut 6.[10] The fourth version, first observed on 2 January 1944, had a rewireable reflector, called Umkehrwalze D, allowing the Enigma operator to alter the connections as part of the key settings.
The plugboard (Steckerbrett in German) permitted variable wiring that could be reconfigured by the operator (visible on the front panel of Figure 1; some of the patch cords can be seen in the lid). It was introduced on German Army versions in 1930, and was soon adopted by the Navy as well. The plugboard contributed a great deal to the strength of the machine's encryption: more than an extra rotor would have done. Enigma without a plugboard (known as unsteckered Enigma) can be solved relatively straightforwardly using hand methods; these techniques are generally defeated by the addition of a plugboard, and Allied cryptanalysts resorted to special machines to solve it.
A cable placed onto the plugboard connected letters up in pairs; for example, E and Q might be a steckered pair. The effect was to swap those letters before and after the main rotor scrambling unit. For example, when an operator presses E, the signal was diverted to Q before entering the rotors. Several such steckered pairs, up to 13, might be used at one time. However, normally only 10 pairs were used at any one time.
Current flowed from the keyboard through the plugboard, and proceeded to the entry-rotor or Eintrittswalze. Each letter on the plugboard had two jacks. Inserting a plug disconnected the upper jack (from the keyboard) and the lower jack (to the entry-rotor) of that letter. The plug at the other end of the crosswired cable was inserted into another letter's jacks, thus switching the connections of the two letters.
A feature that was used on the M4 Enigma was the Schreibmax, a little printer which could print the 26 letters on a small paper ribbon. This did away with the need for a second operator to read the lamps and write the letters down. The Schreibmax was placed on top of the Enigma machine and was connected to the lamp panel. To install the printer, the lamp cover and all light bulbs had to be removed. Besides its convenience, it could improve operational security; the printer could be installed remotely such that the signal officer operating the machine no longer had to see the decrypted plaintext information.
Another accessory was the remote lamp panel. If the machine was equipped with an extra panel, the wooden case of the Enigma was wider and could store the extra panel. There was a lamp panel version that could be connected afterwards, but that required, just as with the Schreibmax, that the lamp panel and lightbulbs be removed.[7] The remote panel made it possible for a person to read the decrypted plaintext without the operator seeing it.
In 1944, the Luftwaffe introduced an extra plugboard switch, called the Uhr (clock). There was a little box, containing a switch with 40 positions. It replaced the default plugs. After connecting the plugs, as determined in the daily key sheet, the operator turned the switch into one of the 40 positions, each position producing a different combination of plug wiring. Most of these plug connections were, unlike the default plugs, not pair-wise.[7] In one switch position, the Uhr did not swap any letters, but simply emulated the 13 stecker wires with plugs.
The Enigma transformation for each letter can be specified mathematically as a product of permutations. Assuming a three-rotor German Army/Air Force Enigma, let
denote the plugboard transformation,
denote that of the reflector, and
denote those of the left, middle and right rotors respectively. Then the encryption
can be expressed as
After each key press, the rotors turn, changing the transformation. For example, if the right hand rotor
is rotated
positions, the transformation becomes
, where
is the cyclic permutation mapping A to B, B to C, and so forth. Similarly, the middle and left-hand rotors can be represented as
and
rotations of
and
. The encryption transformation can then be described as
In German military usage, communications were divided up into a number of different networks, all using different settings for their Enigma machines. These communication nets were termed keys at Bletchley Park, and were assigned code names, such as Red, Chaffinch, and Shark. Each unit operating on a network was assigned a settings list for its Enigma for a period of time. For a message to be correctly encrypted and decrypted, both sender and receiver had to set up their Enigma in the same way; the rotor selection and order, the starting position and the plugboard connections must be identical. All these settings (together the key in modern terms) must have been established beforehand, and were distributed in codebooks.
An Enigma machine's initial state, the cryptographic key, has several aspects:
Note that although the ring settings (ringstellung) were a required part of the setup, they did not actually affect the message encryption because the rotors were positioned independently of the rings. The ring settings were only necessary to determine the initial rotor position based on the message setting which was transmitted at the beginning of a message, as described in the "Indicators" section, below. Once the receiver had set to his rotors to the indicated positions, the ring settings no longer played any role in the encryption.
In modern cryptographic language, the ring settings did not actually contribute entropy to the key used for encrypting the message. Rather, the ring settings were part of a separate key (along with the rest of the setup such as wheel order and plug settings) used to encrypt a session key for the message. The session key consisted of the complete setup except for the ring settings, plus the initial rotor positions chosen arbitrarily by the sender (the message setting). The important part of this session key was the rotor positions, not the ring positions. However, by encoding the rotor position into the ring position using the ring settings, additional variability was added to the encryption of the session key.
Enigma was designed to be secure even if the rotor wiring was known to an opponent, although in practice there was considerable effort to keep the wiring secret. If the wiring is secret, the total number of possible configurations has been calculated to be around 10114 (approximately 380 bits); with known wiring and other operational constraints, this is reduced to around 1023 (76 bits).[4] Users of Enigma were confident of its security because of the large number of possibilities; it was not then feasible for an adversary to even begin to try every possible configuration in a brute force attack.
Most of the key was kept constant for a set time period, typically a day. However, a different initial rotor position was used for each message, a concept similar to an initialisation vector in modern cryptography. The reason for this is that were a number of messages to be encrypted with identical or near-identical settings, termed in cryptanalysis as being in depth, it would be possible to attack the messages using a statisitical procedure such as Friedman's Index of coincidence.[11] The starting position for the rotors was transmitted just before the ciphertext, usually after having been enciphered. The exact method used was termed the indicator procedure. It was design weakness and operator sloppiness in these indicator procedures, that were two of the main reasons that breaking Enigma messages was possible.
One of the earliest indicator procedures was used by Polish cryptanalysts to make the initial breaks into the Enigma. The procedure was for the operator to set up his machine in accordance with his settings list, which included a global initial position for the rotors (Grundstellung, meaning ground setting), AOH, perhaps. The operator turned his rotors until AOH was visible through the rotor windows. At that point, the operator chose his own, arbitrary, starting position for that particular message. An operator might select EIN, and these became the message settings for that encryption session. The operator then typed EIN into the machine, twice, to allow for detection of transmission errors. The results were an encrypted indicator—the EIN typed twice might turn into XHTLOA, which would be transmitted along with the message. Finally, the operator then spun the rotors to his message settings, EIN in this example, and typed the plaintext of the message.
At the receiving end, the operation was reversed. The operator set the machine to the initial settings and typed in the first six letters of the message (XHTLOA). In this example, EINEIN emerged on the lamps. After moving his rotors to EIN, the receiving operator then typed in the rest of the ciphertext, deciphering the message.
The weakness in this indicator scheme came from two factors. First, use of a global ground setting—this was later changed so the operator selected his initial position to encrypt the indicator, and sent the initial position in the clear. The second problem was the repetition of the indicator, which was a serious security flaw. The message setting was encoded twice, resulting in a relation between first and fourth, second and fifth, and third and sixth character. This security problem enabled the Polish Cipher Bureau to break into the pre-war Enigma system as early as 1932. However, from 1940 on, the Germans changed the procedures to increase the security.
During World War II, codebooks were only used each day to set up the rotors, their ring settings and the plugboard. For each message, the operator selected a random start position, let's say WZA, and a random message key, perhaps SXT. He moved the rotors to the WZA start position and encoded the message key SXT. Assume the result was UHL. He then set up the message key, SXT, as the start position and encrypted the message. Next, he transmitted the start position, WZA, the encoded message key, UHL, and then the ciphertext. The receiver set up the start position according to the first trigram, WZA, and decoded the second trigram, UHL, to obtain the SXT message setting. Next, he used this SXT message setting as the start position to decrypt the message. This way, each ground setting was different and the new procedure avoided the security flaw of double encoded message settings.[12]
This procedure was used by Wehrmacht and Luftwaffe only. The Kriegsmarine procedures on sending messages with the Enigma were far more complex and elaborate. Prior to encryption with the Enigma, the message was encoded using the Kurzsignalheft code book. The Kurzsignalheft contained tables to convert sentences into four-letter groups. A great many choices were included, e.g. logistic matters such as refueling and rendezvous with supply ships, positions and grid lists, harbor names, countries, weapons, weather conditions, enemy positions and ships, date and time tables. Another codebook contained the Kenngruppen and Spruchschlüssel: the key identification and message key. [13]
The Army Enigma machine used only the 26 alphabet characters. Signs were replaced by rare character combinations. A space was omitted or replaced by an X. The X was generally used as point or full stop. Some signs were different in other parts of the armed forces. The Wehrmacht replaced a comma by ZZ and the question sign by FRAGE or FRAQ. The Kriegsmarine, however, replaced the comma by Y and the question sign by UD. The combination CH, as in "Acht" (eight) or "Richtung" (direction) were replaced by Q (AQT, RIQTUNG). Two, three and four zeros were replaced by CENTA, MILLE and MYRIA.
The Wehrmacht and the Luftwaffe transmitted messages in groups of five characters. The Kriegsmarine, using the four rotor Enigma, had four-character groups. Frequently used names or words were to be varied as much as possible. Words like Minensuchboot (minesweeper) could be written as MINENSUCHBOOT, MINBOOT, MMMBOOT or MMM354. To make cryptanalysis harder, more than 250 characters in one message were forbidden. Longer messages were divided into several parts, each using its own message key. For more details see Tony Sale's translations of "General Procedure"[14] and "Officer and Staff procedure".[15]
Far from being a single design, there are numerous models and variants of the Enigma family. The earliest Enigma machines were commercial models dating from the early 1920s. Starting in the mid-1920s, the various branches of the German military began to use Enigma, making a number of changes in order to increase its security. In addition, a number of other nations either adopted or adapted the Enigma design for their own cipher machines.
|
A selection of seven Enigma machines and paraphernalia exhibited at the USA's National Cryptologic Museum. From left to right, the models are: 1) Commercial Enigma; 2) Enigma T; 3) Enigma G; 4) Unidentified; 5) Luftwaffe (Air Force) Enigma; 6) Heer (Army) Enigma; 7) Kriegsmarine (Naval) Enigma—M4.
|
On 23 February 1918 German engineer Arthur Scherbius applied for a patent for a cipher machine using rotors and, with E. Richard Ritter, founded the firm of Scherbius & Ritter. They approached the German Navy and Foreign Office with their design, but neither was interested. They then assigned the patent rights to Gewerkschaft Securitas, who founded the Chiffriermaschinen Aktien-Gesellschaft (Cipher Machines Stock Corporation) on 9 July 1923; Scherbius and Ritter were on the board of directors.
Chiffriermaschinen AG began advertising a rotor machine—Enigma model A—which was exhibited at the Congress of the International Postal Union in 1923 and 1924. The machine was heavy and bulky, incorporating a typewriter. It measured 65×45×35 cm and weighed about 50 kg. A model B was introduced, and was of a similar construction.[16] While bearing the Enigma name, both models A and B were quite unlike later versions: they differed in physical size and shape, but also cryptographically, in that they lacked the reflector.
The reflector—an idea suggested by Scherbius's colleague Willi Korn—was first introduced in the Enigma C (1926) model. The reflector is a key feature of the Enigma machines.
Model C was smaller and more portable than its predecessors. It lacked a typewriter, relying instead on the operator reading the lamps; hence the alternative name of "glowlamp Enigma" to distinguish from models A and B. The Enigma C quickly became extinct, giving way to the Enigma D (1927). This version was widely used, with examples going to Sweden, the Netherlands, United Kingdom, Japan, Italy, Spain, United States, and Poland.
The Navy was the first branch of the German military to adopt Enigma. This version, named Funkschlüssel C ("Radio cipher C"), had been put into production by 1925 and was introduced into service in 1926.[17] The keyboard and lampboard contained 29 letters—A-Z, Ä, Ö and Ü—which were arranged alphabetically, as opposed to the QWERTZU ordering.[18] The rotors had 28 contacts, with the letter X wired to bypass the rotors unencrypted.[19] Three rotors were chosen from a set of five[20] and the reflector could be inserted in one of four different positions, denoted α, β, γ and δ.[21] The machine was revised slightly in July 1933.[22]
By 15 July 1928,[23] the German Army (Reichswehr) had introduced their own version of the Enigma—the Enigma G, revised to the Enigma I by June 1930.[24] Enigma I is also known as the Wehrmacht, or "Services" Enigma, and was used extensively by the German military services and other government organisations (such as the railways[25]), both before and during World War II. The major difference between Enigma I and commercial Enigma models was the addition of a plugboard to swap pairs of letters, greatly increasing the cryptographic strength of the machine. Other differences included the use of a fixed reflector, and the relocation of the stepping notches from the rotor body to the movable letter rings.[24] The machine measured 28×34×15 cm (11"×13.5"×6") and weighed around 12 kg (26 lbs).[19]
By 1930, the Army had suggested that the Navy adopt their machine, citing the benefits of increased security (with the plugboard) and easier interservice communications.[26] The Navy eventually agreed and in 1934[27] brought into service the Navy version of the Army Enigma, designated Funkschlüssel M or M3. While the Army used only three rotors at that time, for greater security the Navy specified a choice of three from a possible five.[28]
In December 1938, the Army issued two extra rotors so that the three rotors were chosen from a set of five.[24] In 1938, the Navy added two more rotors, and then another in 1939 to allow a choice of three rotors from a set of eight.[28] In August 1935, the Air Force also introduced the Wehrmacht Enigma for their communications.[24] A four-rotor Enigma was introduced by the Navy for U-boat traffic on 1 February 1942, called M4 (the network was known as "Triton", or "Shark" to the Allies). The extra rotor was fitted in the same space by splitting the reflector into a combination of a thin reflector and a thin fourth rotor.
There was also a large, eight-rotor printing model, the Enigma II. In 1933 the Polish Cipher Bureau detected that it was in use for high-level military communications, but that it was soon withdrawn from use after it was found to be unreliable and to jam frequently.[29]
The Abwehr used the Enigma G (the Abwehr Enigma). This Enigma variant was a four-wheel unsteckered machine with multiple notches on the rotors. This model was equipped with a counter which incremented upon each key press, and so is also known as the "counter machine" or the Zählwerk Enigma.
Other countries also used Enigma machines. The Italian Navy adopted the commercial Enigma as "Navy Cipher D"; the Spanish also used commercial Enigma during their Civil War. British codebreakers succeeded in breaking these machines, which lacked a plugboard. The Swiss used a version of Enigma called model K or Swiss K for military and diplomatic use, which was very similar to the commercial Enigma D. The machine was broken by a number of parties, including Poland, France, Britain and the United States (the latter codenamed it INDIGO). An Enigma T model (codenamed Tirpitz) was manufactured for use by the Japanese.
It has been estimated that 100,000 Enigma machines were constructed.[30] After the end of the Second World War, the Allies sold captured Enigma machines, still widely considered secure, to a number of developing countries.[30]
|
Enigma G, used by the Abwehr, had four rotors, no plugboard, and multiple notches on the rotors. |
|||
The effort to break the Enigma was not disclosed until the 1970s. Since then, interest in the Enigma machine has grown considerably and a number of Enigmas are on public display in museums in the U.S. and Europe. The Deutsches Museum in Munich has both the three- and four-rotor German military variants, as well as several older civilian versions. A functional Enigma is on display in the NSA's National Cryptologic Museum at Fort Meade, Maryland, where visitors can try their hand at encrypting messages and deciphering code. The Armémuseum in Stockholm in Sweden had an Enigma on display. There are also examples at the Computer History Museum in the United States, at Bletchley Park in the United Kingdom, at the Polish Army Museum in Poland, at the Australian War Memorial, and in the foyer of the Defence Signals Directorate, both in Canberra, Australia, as well as a number of other locations in Germany, the U.S., the UK and elsewhere. The now-defunct San Diego Computer Museum had an Enigma in its collection, which has since been given to the San Diego State University Library. A number are also in private hands. Occasionally, Enigma machines are sold at auction; prices of US$20,000 are not unusual.[31][32]
Replicas of the machine are available in various forms, including an exact reconstructed copy of the Naval M4 model, an Enigma implemented in electronics (Enigma-E), various computer software simulators and paper-and-scissors analogues.
A rare Abwehr Enigma machine, designated G312, was stolen from the Bletchley Park museum on 1 April 2000. In September, a man identifying himself as "The Master" sent a note demanding £25,000 and threatened to destroy the machine if the ransom was not paid. In early October 2000, Bletchley Park officials announced that they would pay the ransom but the stated deadline passed with no word from the blackmailer. Shortly afterwards the machine was sent anonymously to BBC journalist Jeremy Paxman, but three rotors were missing. In November 2000, an antiques dealer named Dennis Yates was arrested after telephoning The Sunday Times to arrange the return of the missing parts. The Enigma machine was returned to Bletchley Park after the incident. In October 2001, Yates was sentenced to ten months in prison after admitting handling the stolen machine and demanding ransom for its return, although he maintained that he was acting as an intermediary for a third party.[33] Yates was released from prison after serving three months.
In October 2008 the Spanish daily newspaper El País reported that 28 Enigma machines were discovered by chance in an attic of the Army headquarters in Madrid during inventory taking. These machines helped Franco's Nationalists win the Spanish Civil War because although the British code breaker Alfred Dilwyn Knox broke the code generated by Franco's Enigma machines in 1937, this information was not passed to the Republicans and they never managed to decipher any of the messages generated by these machines. The Nationalist government continued to use Enigma machines into the 1950s and eventually purchased 50 of them. Some of the original 28 machines are now on display in the Spanish military museums.[34]
The Enigma was influential in the field of cipher machine design, and a number of other rotor machines are derived from it. The British Typex was originally derived from the Enigma patents; Typex even includes features from the patent descriptions that were omitted from the actual Enigma machine. Owing to the need for secrecy about its cipher systems, no royalties were paid for the use of the patents by the British government. A Japanese Enigma clone was codenamed GREEN by American cryptographers. Little used, it contained four rotors mounted vertically. In the U.S., cryptologist William Friedman designed the M-325, a machine similar to Enigma in logical operation, although not in construction.
A unique rotor machine was constructed in 2002 by Netherlands-based Tatjana van Vark. This unusual device was inspired by Enigma but makes use of 40-point rotors, allowing letters, numbers and some punctuation to be used; each rotor contains 509 parts.[35]
The play Breaking the Code, by Hugh Whitemore, is about the life and death of Alan Turing, who was the central force in continuing to break the Enigma in Britain during World War II. Turing was played by Derek Jacobi, who also played Turing in a 1996 television adaptation of the play. The television adaptation is generally available (though currently only on VHS). Although it is a drama and thus takes artistic license, it is nonetheless a fundamentally accurate account. It contains a two-minute, stutteringly-nervous speech by Jacobi that comes very close to encapsulating the entire British Enigma-decryption effort.
Robert Harris' 1995 novel Enigma is set against the backdrop of World War II Bletchley Park and cryptologists working to read Naval Enigma in Hut 8. The book, with substantial changes in plot, was made into the 2001 film Enigma, directed by Michael Apted and starring Kate Winslet and Dougray Scott. The film has been criticized for many historical inaccuracies, including neglect of the role of Poland's Biuro Szyfrów in breaking the Enigma cipher and showing the British how to do it. The film – like the book – makes a Pole the villain, who seeks to betray the secret of Enigma decryption.[36]
An earlier Polish film dealing with Polish aspects of the subject was the superficial 1979 Sekret Enigmy (The Enigma Secret).[37]
Wolfgang Petersen's 1981 film Das Boot includes an Enigma machine which is evidently a four-rotor Kriegsmarine variant. It appears in many scenes, which probably capture well the flavour of day-to-day Enigma use aboard a World War II U-Boat. The plot of U-571, released in 2000, revolves around an attempt to seize an Enigma machine from a German U-boat.
Neal Stephenson's novel Cryptonomicon prominently features the Enigma machine and efforts by British and American cryptologists to break variants of it, and portrays the German U-boat command under Karl Dönitz using it in apparently deliberate ignorance of its having been broken.
In the comedy war film All the Queen's Men (2001, starring Matt LeBlanc and Eddie Izzard), four World War II Allied soldiers are parachuted into Germany, where, dressed as women, they attempt to steal an Enigma machine. They eventually learn that the Allies already had the machine and that the mission was a ruse intended to mislead the Germans into thinking that Enigma was a closed book to the Allies.
| Wikimedia Commons has media related to: Enigma machine |
|
||||||||||||||||||||||||||||||||
This entry is from Wikipedia, the leading user-contributed encyclopedia. It may not have been reviewed by professional editors (see full disclaimer)
| Cipher Machines | |
| Codes and Ciphers | |
| ULTRA |
| What were enigma machines like? Read answer... | |
| Can you buy an enigma machine? Read answer... | |
| What was the Enigma machine used for? Read answer... |
| How was the enigma machine created? | |
| What did the Enigma Machine accomplish? | |
| How was the enigma machine broken? |
Copyrights:
![]() | Britannica Concise Encyclopedia. Britannica Concise Encyclopedia. © 2006 Encyclopædia Britannica, Inc. All rights reserved. Read more | |
![]() | Military History Companion. The Oxford Companion to Military History. Copyright © 2001, 2004 by Oxford University Press. All rights reserved. Read more | |
![]() | Intelligence Encyclopedia. Encyclopedia of Espionage, Intelligence, and Security. Copyright © 2004 by The Gale Group, Inc. All rights reserved. Read more | |
![]() | Wikipedia. This article is licensed under the Creative Commons Attribution/Share-Alike License. It uses material from the Wikipedia article "Enigma machine". Read more |
Mentioned in