Dilly

by Batey, Mavis;

  19. The letters ABL are looked for on the plugboard and the corresponding figures 1 2 12 are substituted. These show the message key chosen by the sender (01 02 12).

  20. These figures are now set in the windows and the enciphered message is typed, omitting the first six letters (PKPJXI). The result is the deciphered message as shown in Para IV, 12.

  These instructions for use of the Enigma machine appear in the National Archives, Public Record Office file HW 25/9.

  Author’s note

  The effect of the Stecker- or plugboard on an Enigma cipher was first to encipher the plain text with the reciprocal substitution given by the plugboard connections then, once the wheels had enciphered the result, to encipher the cipher text still further with the same substitution. This effect could be stripped off to reveal the text the machine would have produced without the plugboard. In the example given in this manual, the Stecker were plugged across 1/13, 6/9, 14/22, 16/19, 20/21 and 23/26 (see paragraph 11 on page 171). The figures represent the position of the letter in the German alphabet, thereby producing the following reciprocal pairs: A/M, F/I, N/V, P/S, T/U, W/Z. So A became M and M became A and so on.

  This table illustrates how the effect of the Stecker was stripped off both the cipher text and the plain text.

  This process produced the modified crib required for the buttoning-up procedure, where G equals I, C equals E etc.

  The message was ninety letters long. So once the effect of the Stecker was stripped off the enciphered text, Dilly had a ninety-letter crib with which to determine the wheel wiring of an un-Steckered machine through his routine ‘buttoning-up’ method (see Appendices 2 and 3).

  APPENDIX 2

  ‘Rodding’

  This technique (invented by Dilly Knox in 1937) was used to break messages that had been enciphered on Enigma machines that did not have a plugboard. The first commercial version of Enigma was of this type and a few countries adopted it for use by their armed services, after equipping it with different sets of rotors. The Italian navy used the machine during the Spanish Civil War, and continued to do so in a limited way after their entry into the Second World War in June 1940. In March 1941 rodding was used to break some important Italian messages, which lead to the dramatic and successful action in the Mediterranean, known as the Battle of Matapan. A new exhibition at Bletchley Park gives an account of these events and includes some detailed information showing how the first success was achieved. The following notes explain the basic principles of the technique by means of an illustrative example.

  Like most of the methods used at BP, rodding required a crib with which to begin; however, this technique did not provide a complete sequence of characters from the plain text, but only a very fragmented one, and considerable linguistic skill was required to fill in the gaps, not unlike that required for solving crossword puzzles. Every correct inference made about the content of a message obtained in this way could then be used as an extension of the crib, and this would enable the process to be continued.

  The versions of the Enigma machine without a plugboard had entry discs on which the letter terminals followed the sequence QWERTZUIOASDFGHJKPYXCVBNML in a clockwise sense when viewed from the right-hand side, in contrast to the standard service Enigma machines, for which the sequence was ABCD … XYZ.

  The basic idea used in ‘rodding’ can be explained by means of a diagram, in which an imaginary fixed disc with twenty-six electrical contacts is shown between the right-hand rotor of the Enigma machine and the remaining components of the rotor/reflector system on the left.

  Consider the contacts on the input disc, and suppose that the effect of the RH rotor is to connect contact ‘W’ to the contact ‘n’ on the imaginary disc. Likewise suppose that the effect of the RH rotor is to connect contact ‘B’ to the contact ‘r’ on the imaginary disc. If the letter W happens to be enciphered as B on the Enigma, then the pair of contacts ‘n’ and ‘r’ on the imaginary disc must be electrically connected through the remaining part of the Enigma system. For each position of the RH rotor there will be thirteen of these pairs of contacts on the imaginary disc, all of them being ‘mutually disjoint’, i.e. no two pairs have a common contact. For any given position of the RH rotor, the twenty-six letters on the entry disc will be directly connected to an individual contact on the fixed imaginary disc, and if the internal wiring of the RH rotor is known, then these can be determined. Since the rotor can be set to twenty-six different positions, the complete set of results can be presented in the form of a 26x26 tabulation, known as the ‘rod square’ table for the rotor.

  The rod square table for ‘Rotor I’ used with the three-rotor, ‘QWERTZU’ version of the machine (without a plugboard), known as the ‘Railway’ Enigma, is shown below. The lower case letters in the column at the left represent the contacts on the imaginary disc, and the numbers in the top row represent the twenty-six possible positions of the rotor. The table gives the connections between the imaginary disc contacts and the entry disc contacts for all positions of the rotor. (For this table the rotor ring-setting used was ‘Z’. Then the 1st column in the table corresponds to the rotor position ‘A’, the 2nd to position ‘B’ etc.) For example, the table shows that contact ‘t’ on the imaginary disc is connected to contact ‘C’ on the entry disc when the rotor is at its tenth position.

  Rod square for Rotor I

  It will be observed that the letters in all the diagonals running from top right to bottom left in the table follow the order of the cyclic sequence of the letters on the entry disc, i.e. Q, W, E, R, T, Z, U … B, N, M, L. This phenomenon can be explained by considering a particular case. The table shows that at the 15th position of the rotor, contact ‘Z’ on the entry disc is directly connected to the contact ‘v’ on the imaginary disc. Suppose that the RH rotor rotates forwards (i.e. anti-clockwise when viewed from the right-hand side) by one position at a time to give the sequence of positions 15, 16, 17, 18, 19, 20, 21 etc., while the contact selected on the fixed entry disc is changed ‘backwards’ (i.e. also anti-clockwise) by one position at a time, giving the corresponding sequence of contacts: Z, T, R, E, W, Q, L, M, N… The combination of these two actions will, on each occasion, cause the electrical signal to be conveyed to the same contact on the right-hand face of the RH rotor, and hence to a particular contact on its left-hand face.

  As this rotor is advancing by one position each time, this particular left-hand contact will move backwards (anti-clockwise) relative to the fixed contact points on the imaginary disc, giving the sequence of contact points v, c, x, y, p, k, j… on it. This behaviour is illustrated in the following diagram, and confirms that the patterns in the diagonals in the rod square table consist of letter sequences running top right to bottom left, in the same order as those for the contacts on the RH side of the entry disc, i.e. Q, W, E, R, T, Z, U…

  The rods

  A set of twenty-six rods is made up from the individual rows of a rod-square table. Originally three sets would have been needed, one for each of the three rotors used in the machine. These sets were colour coded to avoid confusion.

  Two examples are shown with a pair of rods (for ‘rotor I’) aligned side by side. The 1st rod shows that for the succession of RH rotor positions 1, 2, 3, 4, 5, 6 … 26, the corresponding sequence of contacts on the entry disc, C, U, L, H, I, V, Y, R, … M, A, are all connected to contact ‘q’ on the imaginary disc. Likewise the 2nd rod shows that for the same succession of rotor positions the corresponding sequence of contacts on the entry disc, M, A, N, K, P, T, S, B, … G, W, are all connected to contact ‘u’.

  Suppose that the letter V from a cipher message is known to represent the plain-text letter T, and that this occurs when the RH rotor is at its 6th position. Then it follows as a consequence of the reciprocal relationship between the two letters V and T, (each being the encipherment of the other), that the two terminals ‘q’ and ‘u’ on the imaginary disc must be electrically connected together through the remaining components of the Enigma ma
chine. The letters q and u are known as the ‘rod coupling’ letters, and the diagram shows the pair of rods ‘q’ and ‘u’ coupled together side by side with the pair of letters (V, T) at position 6. Now suppose that the third letter of the cipher message happens to be B (appearing at the 8th position on the second rod), then as a result of the same rod coupling it should be evident that the corresponding plain-text letter must be R. Thus by means of the rods one known letter of the plain text crib has enabled an additional letter to be deduced. The validity of this deduction is, however, dependent on two conditions:

  That the pair of rods is taken from the correct set for the RH rotor originally used.

  That a middle rotor ‘turnover’ (TO) has not occurred between the 6th and 8th positions in the cipher.

  The application of this useful property of the rods can be extended. A general description of the procedure is hard to formulate, but an understanding can be obtained by means of an illustrative practical example. A message was enciphered on the ‘Railway’ Enigma machine (which has an adjustable reflector) configured in the following way: rotor order 3, 2, 1; ring settings ‘ZZZZ’; reflector setting ‘F’; rotor settings ‘LCZ’. The cipher message obtained was as follows:

  MLXVK SCLDU HOHSV FKXKU SDVRP NGCYA T

  (31 characters)

  A description follows showing how the process of ‘rodding’ can be used to recover the plain text, given the accurate starting crib ‘CODEX’ (X was commonly used as a ‘space’ mark).

  The procedure would originally have begun with the lengthy task of trying in turn each of the three possible rotors that might have occupied the RH location in the machine together with its possible initial position (there are up to 3 × 26 = 78 possible configurations to try). Each could be tested by finding the corresponding set of pairs of rod couplings and checking them for inconsistencies (i.e. no two to contain a common letter). If, for a particular combination of rotor and initial position, no inconsistencies occurred in the set of rod couplings derived from the crib, then there was a good chance that it was the correct combination. (Much time and effort would have been required to find the correct combination by this process of elimination.)

  In the demonstration example this protracted task (and another described later on) has been avoided (dishonestly!) by the prior knowledge of the Enigma configuration used. (In reality ‘rodding’ must have been an extremely tedious process, requiring great patience as well as skill.) The crib and cipher provide the following pairs of reciprocal characters (bigrams):

  (M C) (L O) (X D) (V E) (K X)

  The five corresponding pairs of rod couplings (shown in the following table) for rotor I, starting in its 1st position, are (u q) (t s) (o y) (r k) (b x), and there are no inconsistencies between them.

  Using the rods for Rotor I starting at its 1st position, the five pairs of coupled rods arising from the crib are shown. These rod pairs contain the bigrams obtained from the crib and cipher characters, but in addition, outside the range of the crib, there are some places where a letter on one of the rods matches a letter in the cipher, and at these places the letter on the other rod provides an additional character of the plain text (assuming that no prior middle rotor TO has taken place) These pairs of letters are shown in the diagrams in bold type.

  The eight-letter word ‘??E??I?G’ in the partially recovered plain text between the two ‘space’ characters (X) very probably ends with ‘ING’, and taking into account the crib ‘CODE’, it is realistic to assume that this word is probably ‘BREAKING’. (This is an example of the type of linguistic assumption that had to be made.)

  The probable extension of the plain text arising from this assumption leads to the following new bigrams and rod couplings shown below:

  At the 6th place, (S B) gives rod couplings (a n), providing the bigram (A V) at the 15th place.

  At the 7th place, (C R) gives rod couplings (l z), confirming the bigram (U K) at the 10th place.

  At the 9th place, (D A) gives rod couplings (w v), providing the bigram (K X) at the 17th place.

  At the 12th place, (O N) gives rod couplings (m h), which provides no useful results.

  The new pairs of rods giving additional information are shown below.

  The message has now become ‘C O D E X B R E A K I N G X A ? X B ? ? ? C ? Z A’. The conjecture ‘C O D E X B R E A K I N G X A T X B L E T C H L E Y’ might seem to be a possibility but there is a clash at the 24th and 25th places in the cipher with the pair of letters Z and A given earlier by the rods. However, their advanced locations in the cipher make it probable that a TO of the RH rotor will have occurred before the 24th place, and that consequently these letters are incorrect. Taking into account that the letter C at the 22nd place appears to be correct, it seems likely that a middle rotor TO has occurred either between the 22nd and 23rd or between the 23rd and 24th places in the cipher. Assuming the conjecture ‘ATXBLETCHLEY’ to be correct then up to the 23rd place in the cipher the following new bigrams appear: (F T), (K L), (U E), (S T) and (V H). However only (K L) at the 19th position, with the rod coupling (i d), gives a useful result by providing the valuable confirmation of the letter pair (V H) at the 23rd position, thus indicating that the TO almost certainly must occur between the 23rd and 24th positions. This rod coupling is shown below.

  The message now appears to be ‘C O D E X B R E A K I N G X A T X B L E T C H L E Y ? ? ? ? ?’ (with a middle rotor TO taking place between the letters H and L).

  Dealing with a turnover of the middle rotor

  The next stage of the work requires an understanding of the effect of a middle rotor TO, which will change the rod coupling letter pairs in the way shown in the following diagrams.

  The first diagram (Fig. 1) shows the pair of contacts (α and β) on the imaginary disc connected to the pair of contacts ‘P’ and ‘Q’ on the entry disc through the RH rotor, before the middle rotor TO has taken place. The second diagram (Fig. 2) shows how two contacts (δ and γ) on the LH rotor are connected to the pair of contacts (α β) on the imaginary disc through the middle rotor, before the TO. The third diagram (Fig. 3) shows how the same two contacts (δ and γ) are connected to the pair of contacts (α1 β1) on the imaginary disc through the middle rotor after the TO.

  The diagrams show that both of the pairs of contacts (α β) and (α1 β1) on the imaginary disc are connected to the contacts (δ γ) through the middle rotor, in just the same way as the contacts (P and Q) on the entry disc are connected to the contacts (α β) through the RH rotor. This means that the correct relationships between the contacts (α β), (α1 β1) and (δ γ) will appear in the rod square table for the middle rotor, as shown in the following diagram.

  It follows that the correct rod square table for the middle rotor will contain a pair of adjacent columns (i.e. those corresponding to the ‘pre’ and ‘post’ middle rotor TO positions) that will satisfy the following conditions:

  One pair of corresponding cells in these two columns will contain the two elements α and α1.

  A second pair of corresponding positions in the same columns will contain the two elements β and β1.

  The positions of these two adjacent columns in the table will give the ‘pre’ and ‘post’ TO positions of the middle rotor.

  (As the upper case letters in the rod square tables are now being used to represent contacts on the imaginary disc, these entries in the table must be changed (mentally) to their lower case forms.)

  The diagram shows that once the rod square has been correctly identified, and its original setting (s1) has been found, then any rod coupling (α β) found before the TO can be used to find the corresponding rod couplings (α1 β1) after the TO and vice-versa.

  Part of the rod square for the middle rotor

  A procedure for identifying the middle rotor (from the two remaining ones), together with its position before the TO, is as follows. First consider the following bigrams that must occur after the TO:

  At the 24th position, bigram (R L) gives the rod coupling
(o w).

  At the 25th position, bigram (P E) gives the rod coupling (k i).

  At the 26th position, bigram (N Y) gives the rod coupling (l t).

  (None of these couplings happen to provide any additional letters of the plain text.)

  An important point is that these couplings must correspond to others that were valid before the TO had occurred, and which could be found from the appropriate column of the rod square table for the correct middle rotor, provided that the TO position of this rotor were known.

  If assumptions are made for both the identity of the middle rotor and its starting position, then the appropriate two columns of the rod square table for this rotor can be used to find a set of corresponding ‘pre-TO’ rod couplings from the known ‘post-TO’ couplings given above. If, however, either of these assumptions are wrong, then it is very likely that logical inconsistencies will occur between these and the original ‘pre-TO’ couplings previously found, and when this happens two or more of the couplings will have a letter in common. Otherwise the couplings need to be checked to see if they give ‘promising’ letters of plain text when set up against the cipher. Originally a tedious process of elimination (involving up to 2 × 26 = 52 trials) would have been necessary to find the correct combination of assumptions. To see how this works in practice remember that the pre-TO rod couplings enumerated earlier were (u q), (t s), (o y),(r k), (b x), (a n), (l z), (w v), (m h) and (i d).