The ADFGVX cipher, or how Germany's most complex field cipher fell to a former fossil specialist
On the morning of 5 March 1918, German radio operators on the Western Front began transmitting messages in a cipher nobody on the Allied side had encountered before. Every encrypted character resolved to one of six letters — A, D, F, G, V, and X — producing intercepts that looked, to untrained eyes, like a telegraph operator’s hiccup. Someone in the French cipher bureau had to break it before Germany’s Spring Offensive reached Paris.
That someone was a paleontologist.
Georges Painvin had never planned to be a codebreaker. In 1914 he was teaching fossil classification at the École des Mines in Paris, with a first-prize certificate in cello from the Nantes Conservatory on his wall. He came to cryptanalysis through the informal economy of wartime — a chance friendship with a signals officer, some bored afternoons with intercepted telegrams, an aptitude his superiors noticed before he did (Wikipedia). By 1918 he was arguably the best cryptanalyst in France.
The cipher had been designed by Lieutenant Fritz Nebel of the German signal corps. Nebel chose those six letters deliberately: their representations in Morse code — short and long pulses in sufficiently distinct patterns — were unlikely to be confused by a radio operator transmitting under shellfire. ADFGX, the five-letter original, first appeared in transmissions on 5 March 1918, weeks before the Spring Offensive. On 1 June Nebel extended it: the added V brought a sixth row and column to the grid, expanding capacity from 25 to all 26 letters plus the ten digits — enough for coordinates, dates, and unit designations without ambiguity (Wikipedia).
Mechanically, ADFGVX was a two-step. Each plaintext letter entered a scrambled 6×6 grid and converted to a pair of characters from the six-letter alphabet, the specific pairing reset with each day’s key. Then the resulting string of pairs was written under a keyword and rearranged by columnar transposition: columns sorted alphabetically, then read off in that sequence. Substitution, then permutation. No military field cipher before it had chained both techniques together.
Painvin worked through 1 June and into the following day. He found what the Germans had overlooked: two messages intercepted that day began with the same enciphered header. Identical openings are a cryptanalyst’s gift — they let you subtract one ciphertext from the other and pull out the transposition key by difference. Once the column order collapsed, the Polybius square followed. It was a procedural failure, not a mathematical one: the cipher was sound; the key discipline was not.
On 2 June he delivered a decrypted radiogram to Marshal Foch’s headquarters. The plaintext read: Munition voranbringen. Falls auch bei Tag nicht gesehen. Speed up the supply of ammunition. If not seen during the day either. It traced a German build-up near Compiègne (Cipher Museum). When the Gneisenau Offensive opened on 9 June, French forces had repositioned. The attack was repulsed.
Painvin collapsed after handing over the solution and was ordered into convalescence. He had reportedly lost fifteen pounds.
In 1968, he met Fritz Nebel for the first time. Nebel remarked that the enemies of yesterday were meeting as the friends of today. Painvin replied that if Nebel’s original cipher design — not the modified version his superiors had approved — had been deployed, it would never have been broken (Wikipedia).
The two-step principle Nebel worked out under operational pressure — substitute, then permute, in sequence — turned out to be not a wartime expedient but a permanent insight. Every modern block cipher, AES included, runs through those same two operations, repeated for as many rounds as security demands. Nebel was trying to keep ammunition trains invisible to French intelligence. The structure he built to do it is still running.
Sources
- ADFGVX cipher — Wikipedia — Nebel’s design, Morse-distinctiveness rationale for letter selection, the ADFGX-to-ADFGVX extension on 1 June 1918, cipher mechanics (Polybius square + columnar transposition).
- Georges Painvin — Wikipedia — Painvin’s background in paleontology and cello, path to cryptanalysis, physical toll of the break, the 1968 meeting with Nebel.
- ADFGVX Cipher — The Cipher Museum — Painvin’s break technique, decrypted message content, strategic impact on the Gneisenau Offensive; fractionation as a forerunner of modern block-cipher design.