About Me

Simon Hunt

Simon Hunt
Chief Technology Officer, Endpoint and Innovation

VP and CTO, Endpoint Security Simon Hunt has more than 20 years experience in software development, design and ...

Read More

Corporate Blogs

Feeds & Podcasts

Meet the Bloggers

Archive

Tags

12 Scams of Christmas, 2012 Virtual Sales Kickoff, Accredited Channel Engineer, ACE, ACE certification partner, Acquisition, Alex Thurber, Annual Partner Survey, Apple, ASIC, attacks, Australia, automobile, automotive, award, awards, beyond the PC, Biological Computer, Blackhat, C-SAVE program, Change Control, channel partner, Channel Partners, Channel Partner Town Hall, Channel Program, Channels Town Hall, chromebook, CIO Insomnia Project, Citrix, Civil War, cloud, Cloud computing, cloud security, Commercial/SMB, Commercial and Enterprise Deal Registration, Compliance, Consumer, consumerization, consumerization of IT, Continuing Education, Corporate Responsibility, critical infrastructure, cyberattacks, Cybercrime, Cyber risks, cybersafety, cybersecurity, cyber security awareness, Cyber Security Mom, cyberthreats, Database, database security, data breach, data center, data center security, Data Loss Prevention, Data Protection, Dave DeWalt, Dave Marcus, David Small, Deal Registration, Deep Command, DeepDefender, Deep Defender, DeepSAFE, DLP, Dmitri Alperovitch, education, Email & Web Security, Email Protection, embedded, EMEA, encryption, Endpoint Protection, Endpoint security suite upgrade, Enhanced Deal Registration, enterprise, epo, ePO DeepCommand, ePolicy Orchestrator, Family Safety, Focus, Focus11, FOCUS 2011, Foundstone, France, France Law, French Law, Gartner, Gavin Struthers, George Kurtz, Global Risk 2012 report, global threat intelligence, gold software support, google, government, GTI, Hackers, heidi klum, identity fraud, identity protection, IDF 2011, Incumbency Advantage Program, India, Initiative to Fight Cybercrime, innovation, integration, intel, intellectual property, intrusion prevention, iPad, IPv6, I Series, IT as a Service, IT Security market, Joe Sexton, julian Assange, kurtz, labs, law, LCEN, mac, Mac OS X, malware, Marc Olesen, mcaf.ee, McAfee, McAfee Application Control, McAfee Channel, McAfee Channel Partner, McAfee Cloud Security Platform, McAfee Data Loss Prevention, McAfee Employees, McAfee Firewall Enterprise, McAfee FOCUS, McAfee Identity Protection, McAfee Initiative to Fight Cybercrime, McAfee Labs, McAfee Labs Q3 Threat Report, McAfee Network Security Platform, McAfee Network Threat Response, McAfee Partner, McAfee Partner Learning Center, McAfee Partner of the Year Award, McAfee Partner Program, McAfee Partner Summit, McAfee Rewards, McAfee Security Management, mcafee total protection, McAfee Vulnerability Manager, Microsoft, Microsoft Security Bulletin, Mid-Market, Middle East, Mike Decesare, Mike Fey, Mobile, mobile applications, Mobile Data Protection, mobile malware, mobile security, MS12-020, M Series, national cybersecurity awareness month, National Cyber Security Awareness Week, NCSA, Network Security, Next Generation, next generation data center, Night Dragon, NitroSecurity, Nitro Security, north america, OCTO, Operation Aurora, Operation Shady RAT, PARC, Partner Acceleration Resource Center, Partner Care, partners, Partner Summit, Patch Tuesday, Paul Otellini, PCI, PCI DSS, Pemberton, peter king, policies, president obama, privacy, Products, promotion, Public Sector, quarterly threat report, regulation, regulations, Renee James, risk, risk and, Risk and Compliance, Risk Management, Riverbed, ROI, RSA, RSA 2010, s, SaaS, SaaS Monthly Specialization, safe, SAIC, Saudi Arabia, SCADA, scareware, security, Security-as-a-Service, Security Connected, security management, short url, SIEM, Small Business, Smart Grid, smartphones, SMB, SMB Advisor Tool, SMB Extravaganza, SMB Specialization, social media, social networking, social networks, social responsibility, solid state drive, spam, Steve Jobs, Stop.Think.Connect, Support, targeted attacks, TCO, Tech Data, technology trends, Telecommunications, The VARGuy, threat reduction, thurber, Todd Gebhart, Trust and Safety, twitter, UAE, Ultrabook, Underground Economies, United Arab Emirates, Vanity Fair, Virtualization, Virtual Sales Kickoff 2012, virus, VMworld 2011, WAN, Web 2.0, web security, wikileaks

Decrypting Civil War Messages..

Wednesday, January 19, 2011 at 7:11am by Simon Hunt
Simon Hunt

Over the holiday break an interesting story broke on a US Civil War message being finally decrypted after 147 years. The message was in a bottle that had been stored in a Virginia museum since 1896, but had never been investigated. Finally in 2010 a curious collections manager, Catherine Wright asked retired CIA codebreaker David Gaddy to crack it and see what it said.

The story of the message is interesting in itself, but what I wanted to share with you is how obscure the craft of codebreaking can be. Let’s start with a picture of the message so you know what we are dealing with here…

Civil War Encrypted Message

Encrypted message to Gen John Pemberton, 1863

Now, the first stage of decryption is of course to read the actual message itself, which as you can see due to the damage (and penmanship) is pretty hard – I solicited a smart person to help me read it and this is what we came up with.

STAN WITUIIUZH ORO ONP LBNXOK OZ HJQB FEQT FEQT XZBW JJOA
TK EHR FPZWK PBW RYSQ VOWPZXGG QEOH BK WASEKIPW PLVO
JKZ NMN NIAEVO XVE DWAJ BOYPA SK VLD TYVROE LVPL.
MTYSIN XY FQEO NPK M OBPC FYXJFHONT AS ETOV B OCAJOSVQU
U ZTZV TPJY DAW RQTI WTTJ. J DQGOAIA FLWHTXTH QMTR STA LVLPLXTO

Now, luckily I know the right key to this message, so imagining I was the guy who received it back in 1863, I thought I’d give it a go decrypting it..

gtnl pebberton jmc oan exvekt no nelp frok bmxn gyqc eeca
gi xdz mlivz vwr fyfo okewvgfv wzjv bx utomreyv erqj
xkm lfj vpwnud dqz rwnh ukgww bj kry omvemx hdwh.
vsnydi ly soxk vwg v nqvx amxwdakva wb diuq w ccnhhodxq
d yifq odjl bts zxpr vize. e rqtmtei mhfgidoc emgp lpi sruoadoj

Obviously something has gone very wrong indeed here. The first part of the text is mildly readable – you could infer it says “Genl Pemberton, ??? can expect no help from ???? ???…” then it gets totally messed up.

A hint can be found in the original ciphertext on the first line – you can see the code word “FEQT” is repeated. Now, this is VERY unlikely using the Vigenere cipher, so maybe it’s an accidental duplicate – maybe the person drafting the message wrote the same word twice by mistake?

Let’s try again after deleting this extra codeword and see what we get:

gtnl pebberton jmc oan exvekt no nelp frok this sidg
of she diver lkv genl jojnston mnnw hf rosrible when
yqu ian agtadv ted scve polnt os chm snbmjs line.
ibform me also and i will endeavoar to make a divecsion
q have sept yow eome eaps. i swbjoin despatcg fsom gtn johxstcn

This is much better – we can infer a lot from this, in fact the end of the message makes a lot of sense:

“Inform me also, and I will endeavorer to make a diversion. I have sent you some caps. I subjoin dispatch from Gen Johnson”.

You can see how vital it is to properly encrypt messages to start with – our poor interpretation of the original makes the bulk of this message unintelligible.

Digging around and playing with my interpretation of the letters, it’s possible to get the actual intended cipher and plaintext back, which for posterity is:

SEAN WIEUIIUZH DTG CNP LBHXGK OZ BJQB FEQT XZBW JJOY
TK FHR TPZWK PVU RYSQ VOUPZXGG OEPH CK UASFKIPW PLVO
JIZ HMN NVAEUD XYF DURJ BOVPA SF MLV FYYRDE LVPL.
MFYSIN XY FQEO NPK M OBPC FYXJFHOHT AS ETOV B OCAJDSVQU
M ZTZV TPHY DAU FQTI UTTJ. J DOGOAIA FLWHTXTI QLTR SEA LVLFLXFO
Genl Pemberton you can expect no help from this side
of the river let Genl Johnston know if possible when
you can attack the same point on the enemys line
inform me also and I will endeavour to make a diversion
I have sent you some caps I subjoin despatch from Gen Johnston

The lesson of this blog of course is, if you have to hand-encrypt something:

1. Make sure you write legibly

2. Double check you didn’t make any mistakes before sending your message out!

Bookmark and Share

Tags: , ,

Comments are temporarily suspended due to blog maintenance, comments will be available again from Monday 21st May.