A topic in the Open Knowledge Graph — a free, open map of 15,290 topics and the order to learn them in.
Classical ciphers -- substitution, transposition, and their combinations -- formed the basis of secret communication for centuries. Studying them introduces core cryptographic concepts (keys, keyspaces, Kerckhoffs' principle) and, equally important, the methods used to break them. Frequency analysis, known-plaintext attacks, and pattern exploitation demonstrate why security through obscurity fails and why modern cryptography demands mathematically grounded definitions of security.
Before modern cryptography existed as a mathematical discipline, civilizations relied on classical ciphers to protect secrets. These fall into two broad families. Substitution ciphers replace each symbol in the plaintext with a different symbol according to some rule — the Caesar cipher shifts every letter by a fixed amount, while a general monoalphabetic cipher uses an arbitrary permutation of the alphabet. Transposition ciphers rearrange the positions of plaintext symbols without altering them — a columnar transposition, for instance, writes the message into a grid and reads out columns in a permuted order. More sophisticated classical systems, like the Enigma machine, combine both operations in multiple rounds.
The study of classical ciphers matters not because anyone would use them today, but because their vulnerabilities establish the foundational principles of modern cryptography. Frequency analysis, developed by Arab scholars in the 9th century, showed that monoalphabetic substitution preserves the statistical fingerprint of the plaintext language — 'E' remains the most common symbol regardless of what it's renamed to. Polyalphabetic ciphers like the Vigenere attempted to defeat frequency analysis by using multiple alphabets, but their periodic key repetition introduced its own exploitable patterns. The recurring lesson is that any cipher with deterministic, structured behavior leaks information through statistical regularities.
These failures motivated two crucial principles. Kerckhoffs' principle (1883) states that a cipher's security must depend entirely on the secrecy of the key, not the algorithm. If the algorithm is compromised, the system should remain secure as long as the key is unknown. This principle drove cryptography from art toward science: instead of inventing clever-seeming schemes and hoping no one can break them, cryptographers define precise security goals and prove that breaking the cipher requires solving a problem believed to be computationally hard. The second principle is that security requires formal definitions — vague notions like "hard to break" are insufficient because clever adversaries find attacks that intuition misses.
Classical cryptanalysis also introduced the taxonomy of attack models still used today: ciphertext-only (the attacker sees only encrypted messages), known-plaintext (the attacker has some matched plaintext-ciphertext pairs), chosen-plaintext (the attacker can choose messages to be encrypted), and chosen-ciphertext (the attacker can choose ciphertexts to be decrypted). Modern ciphers must be secure under the strongest of these models. The progression from "we think this is secure" to "we can prove this is secure under stated assumptions" is the intellectual arc from classical to modern cryptography, and understanding why classical ciphers fail is the essential first step along that arc.