This technique (invented by Dilly Knox in 1937) was used to break messages that had been enciphered on Enigma machines that did not have a plugboard. The first commercial version of Enigma was of this type and a few countries adopted it for use by their armed services, after equipping it with different sets of rotors. The Italian navy used the machine during the Spanish Civil War, and continued to do so in a limited way after their entry into the Second World War in June 1940. In March 1941 rodding was used to break some important Italian messages, which lead to the dramatic and successful action in the Mediterranean, known as the Battle of Matapan. A new exhibition at Bletchley Park gives an account of these events and includes some detailed information showing how the first success was achieved. The following notes explain the basic principles of the technique by means of an illustrative example.
Like most of the methods used at BP, rodding required a crib with which to begin; however, this technique did not provide a complete sequence of characters from the plain text, but only a very fragmented one, and considerable linguistic skill was required to fill in the gaps, not unlike that required for solving crossword puzzles. Every correct inference made about the content of a message obtained in this way could then be used as an extension of the crib, and this would enable the process to be continued.
The versions of the Enigma machine without a plugboard had entry discs on which the letter terminals followed the sequence QWERTZUIOASDFGHJKPYXCVBNML in a clockwise sense when viewed from the right-hand side, in contrast to the standard service Enigma machines, for which the sequence was ABCD … XYZ.
The basic idea used in ‘rodding’ can be explained by means of a diagram, in which an imaginary fixed disc with twenty-six electrical contacts is shown between the right-hand rotor of the Enigma machine and the remaining components of the rotor/reflector system on the left.
Consider the contacts on the input disc, and suppose that the effect of the RH rotor is to connect contact ‘W’ to the contact ‘n’ on the imaginary disc. Likewise suppose that the effect of the RH rotor is to connect contact ‘B’ to the contact ‘r’ on the imaginary disc. If the letter W happens to be enciphered as B on the Enigma, then the pair of contacts ‘n’ and ‘r’ on the imaginary disc must be electrically connected through the remaining part of the Enigma system. For each position of the RH rotor there will be thirteen of these pairs of contacts on the imaginary disc, all of them being ‘mutually disjoint’, i.e. no two pairs have a common contact. For any given position of the RH rotor, the twenty-six letters on the entry disc will be directly connected to an individual contact on the fixed imaginary disc, and if the internal wiring of the RH rotor is known, then these can be determined. Since the rotor can be set to twenty-six different positions, the complete set of results can be presented in the form of a 26x26 tabulation, known as the ‘rod square’ table for the rotor.
The rod square table for ‘Rotor I’ used with the three-rotor, ‘QWERTZU’ version of the machine (without a plugboard), known as the ‘Railway’ Enigma, is shown below. The lower case letters in the column at the left represent the contacts on the imaginary disc, and the numbers in the top row represent the twenty-six possible positions of the rotor. The table gives the connections between the imaginary disc contacts and the entry disc contacts for all positions of the rotor. (For this table the rotor ring-setting used was ‘Z’. Then the 1st column in the table corresponds to the rotor position ‘A’, the 2nd to position ‘B’ etc.) For example, the table shows that contact ‘t’ on the imaginary disc is connected to contact ‘C’ on the entry disc when the rotor is at its tenth position.
It will be observed that the letters in all the diagonals running from top right to bottom left in the table follow the order of the cyclic sequence of the letters on the entry disc, i.e. Q, W, E, R, T, Z, U … B, N, M, L. This phenomenon can be explained by considering a particular case. The table shows that at the 15th position of the rotor, contact ‘Z’ on the entry disc is directly connected to the contact ‘v’ on the imaginary disc. Suppose that the RH rotor rotates forwards (i.e. anti-clockwise when viewed from the right-hand side) by one position at a time to give the sequence of positions 15, 16, 17, 18, 19, 20, 21 etc., while the contact selected on the fixed entry disc is changed ‘backwards’ (i.e. also anti-clockwise) by one position at a time, giving the corresponding sequence of contacts: Z, T, R, E, W, Q, L, M, N… The combination of these two actions will, on each occasion, cause the electrical signal to be conveyed to the same contact on the right-hand face of the RH rotor, and hence to a particular contact on its left-hand face.
As this rotor is advancing by one position each time, this particular left-hand contact will move backwards (anti-clockwise) relative to the fixed contact points on the imaginary disc, giving the sequence of contact points v, c, x, y, p, k, j… on it. This behaviour is illustrated in the following diagram, and confirms that the patterns in the diagonals in the rod square table consist of letter sequences running top right to bottom left, in the same order as those for the contacts on the RH side of the entry disc, i.e. Q, W, E, R, T, Z, U…
A set of twenty-six rods is made up from the individual rows of a rod-square table. Originally three sets would have been needed, one for each of the three rotors used in the machine. These sets were colour coded to avoid confusion.
Two examples are shown with a pair of rods (for ‘rotor I’) aligned side by side. The 1st rod shows that for the succession of RH rotor positions 1, 2, 3, 4, 5, 6 … 26, the corresponding sequence of contacts on the entry disc, C, U, L, H, I, V, Y, R, … M, A, are all connected to contact ‘q’ on the imaginary disc. Likewise the 2nd rod shows that for the same succession of rotor positions the corresponding sequence of contacts on the entry disc, M, A, N, K, P, T, S, B, … G, W, are all connected to contact ‘u’.
Suppose that the letter V from a cipher message is known to represent the plain-text letter T, and that this occurs when the RH rotor is at its 6th position. Then it follows as a consequence of the reciprocal relationship between the two letters V and T, (each being the encipherment of the other), that the two terminals ‘q’ and ‘u’ on the imaginary disc must be electrically connected together through the remaining components of the Enigma machine. The letters q and u are known as the ‘rod coupling’ letters, and the diagram shows the pair of rods ‘q’ and ‘u’ coupled together side by side with the pair of letters (V, T) at position 6. Now suppose that the third letter of the cipher message happens to be B (appearing at the 8th position on the second rod), then as a result of the same rod coupling it should be evident that the corresponding plain-text letter must be R. Thus by means of the rods one known letter of the plain text crib has enabled an additional letter to be deduced. The validity of this deduction is, however, dependent on two conditions:
The application of this useful property of the rods can be extended. A general description of the procedure is hard to formulate, but an understanding can be obtained by means of an illustrative practical example. A message was enciphered on the ‘Railway’ Enigma machine (which has an adjustable reflector) configured in the following way: rotor order 3, 2, 1; ring settings ‘ZZZZ’; reflector setting ‘F’; rotor settings ‘LCZ’. The cipher message obtained was as follows:
MLXVK SCLDU HOHSV FKXKU SDVRP NGCYA T
(31 characters)
A description follows showing how the process of ‘rodding’ can be used to recover the plain text, given the accurate starting crib ‘CODEX’ (X was commonly used as a ‘space’ mark).
The procedure would originally have begun with the lengthy task of trying in turn each of the three possible rotors that might have occupied the RH location in the machine together with its possible initial position (there are up to 3 × 26 = 78 possible configurations to try). Each could be tested by finding the corresponding set of pairs of rod couplings and checking them for inconsistencies (i.e. no two to contain a common letter). If, for a particular combination of rotor and initial position, no inconsistencies occurred in the set of rod couplings derived from the crib, then there was a good chance that it was the correct combination. (Much time and effort would have been required to find the correct combination by this process of elimination.)
In the demonstration example this protracted task (and another described later on) has been avoided (dishonestly!) by the prior knowledge of the Enigma configuration used. (In reality ‘rodding’ must have been an extremely tedious process, requiring great patience as well as skill.) The crib and cipher provide the following pairs of reciprocal characters (bigrams):
(M C) (L O) (X D) (V E) (K X)
The five corresponding pairs of rod couplings (shown in the following table) for rotor I, starting in its 1st position, are (u q) (t s) (o y) (r k) (b x), and there are no inconsistencies between them.
Using the rods for Rotor I starting at its 1st position, the five pairs of coupled rods arising from the crib are shown. These rod pairs contain the bigrams obtained from the crib and cipher characters, but in addition, outside the range of the crib, there are some places where a letter on one of the rods matches a letter in the cipher, and at these places the letter on the other rod provides an additional character of the plain text (assuming that no prior middle rotor TO has taken place) These pairs of letters are shown in the diagrams in bold type.
The eight-letter word ‘??E??I?G’ in the partially recovered plain text between the two ‘space’ characters (X) very probably ends with ‘ING’, and taking into account the crib ‘CODE’, it is realistic to assume that this word is probably ‘BREAKING’. (This is an example of the type of linguistic assumption that had to be made.)
The probable extension of the plain text arising from this assumption leads to the following new bigrams and rod couplings shown below:
The new pairs of rods giving additional information are shown below.
The message has now become ‘C O D E X B R E A K I N G X A ? X B ? ? ? C ? Z A’. The conjecture ‘C O D E X B R E A K I N G X A T X B L E T C H L E Y’ might seem to be a possibility but there is a clash at the 24th and 25th places in the cipher with the pair of letters Z and A given earlier by the rods. However, their advanced locations in the cipher make it probable that a TO of the RH rotor will have occurred before the 24th place, and that consequently these letters are incorrect. Taking into account that the letter C at the 22nd place appears to be correct, it seems likely that a middle rotor TO has occurred either between the 22nd and 23rd or between the 23rd and 24th places in the cipher. Assuming the conjecture ‘ATXBLETCHLEY’ to be correct then up to the 23rd place in the cipher the following new bigrams appear: (F T), (K L), (U E), (S T) and (V H). However only (K L) at the 19th position, with the rod coupling (i d), gives a useful result by providing the valuable confirmation of the letter pair (V H) at the 23rd position, thus indicating that the TO almost certainly must occur between the 23rd and 24th positions. This rod coupling is shown below.
The message now appears to be ‘C O D E X B R E A K I N G X A T X B L E T C H L E Y ? ? ? ? ?’ (with a middle rotor TO taking place between the letters H and L).
The next stage of the work requires an understanding of the effect of a middle rotor TO, which will change the rod coupling letter pairs in the way shown in the following diagrams.
The first diagram (Fig. 1) shows the pair of contacts (α and β) on the imaginary disc connected to the pair of contacts ‘P’ and ‘Q’ on the entry disc through the RH rotor, before the middle rotor TO has taken place. The second diagram (Fig. 2) shows how two contacts (δ and γ) on the LH rotor are connected to the pair of contacts (α β) on the imaginary disc through the middle rotor, before the TO. The third diagram (Fig. 3) shows how the same two contacts (δ and γ) are connected to the pair of contacts (α1 β1) on the imaginary disc through the middle rotor after the TO.
The diagrams show that both of the pairs of contacts (α β) and (α1 β1) on the imaginary disc are connected to the contacts (δ γ) through the middle rotor, in just the same way as the contacts (P and Q) on the entry disc are connected to the contacts (α β) through the RH rotor. This means that the correct relationships between the contacts (α β), (α1 β1) and (δ γ) will appear in the rod square table for the middle rotor, as shown in the following diagram.
It follows that the correct rod square table for the middle rotor will contain a pair of adjacent columns (i.e. those corresponding to the ‘pre’ and ‘post’ middle rotor TO positions) that will satisfy the following conditions:
(As the upper case letters in the rod square tables are now being used to represent contacts on the imaginary disc, these entries in the table must be changed (mentally) to their lower case forms.)
The diagram shows that once the rod square has been correctly identified, and its original setting (s1) has been found, then any rod coupling (α β) found before the TO can be used to find the corresponding rod couplings (α1 β1) after the TO and vice-versa.
A procedure for identifying the middle rotor (from the two remaining ones), together with its position before the TO, is as follows. First consider the following bigrams that must occur after the TO:
(None of these couplings happen to provide any additional letters of the plain text.)
An important point is that these couplings must correspond to others that were valid before the TO had occurred, and which could be found from the appropriate column of the rod square table for the correct middle rotor, provided that the TO position of this rotor were known.
If assumptions are made for both the identity of the middle rotor and its starting position, then the appropriate two columns of the rod square table for this rotor can be used to find a set of corresponding ‘pre-TO’ rod couplings from the known ‘post-TO’ couplings given above. If, however, either of these assumptions are wrong, then it is very likely that logical inconsistencies will occur between these and the original ‘pre-TO’ couplings previously found, and when this happens two or more of the couplings will have a letter in common. Otherwise the couplings need to be checked to see if they give ‘promising’ letters of plain text when set up against the cipher. Originally a tedious process of elimination (involving up to 2 × 26 = 52 trials) would have been necessary to find the correct combination of assumptions. To see how this works in practice remember that the pre-TO rod couplings enumerated earlier were (u q), (t s), (o y),(r k), (b x), (a n), (l z), (w v), (m h) and (i d).
If the middle rotor is assumed to be rotor II, initially set to its 1st position, then from the 1st and 2nd columns of this rod square, the three post-TO rod couplings (o w), (k i) and (l t) are found to have the corresponding pre-TO couplings (j u), (w k), and (r p). Comparing these with the list of couplings given above, it can be seen that all three are inconsistent, (for example the couplings (u q) and (j u) are contradictory); this implies that at least one of the initial assumptions must be wrong.
If the setting of the assumed middle rotor (still rotor II) is changed to position 3, then the 3rd and 4th columns of the rod square table give the corresponding pre-TO couplings (r k), (b x) and (t s). As each of these appears on the original list of couplings, there are no inconsistencies, and consequently the two assumptions (i.e. that the middle rotor is rotor II and that it was set to the 3rd position) are probably correct. The rod pairs for these couplings also confirm some of the bigrams found previously, thus providing further evidence that these assumptions are the correct ones. By using the 3rd and 4th columns in the rod square in the reverse order, the remaining original rod couplings can be used to find their corresponding post-TO couplings, and two of them providing additional information are (u q) → (b v) and (l z) → (h g).
The new rod coupling (b v) gives at the 31st place the bigram (K T), and the new coupling (h g) gives at the 30th place the bigram (R A).
The two additional bigrams give the plain text letters R and K, so that the plain text becomes ‘C O D E X B R E A K I N G X A T X B L E T C H L E Y ? ? ? R K’, credibly leading to the message:
C O D E X B R E A K I N G X A T X B L E T C H L E Y X P A R K
In addition to the meticulous care that would have been necessary during the elimination procedures described above, the wartime successes required considerable linguistic ability and creative imagination. It was often necessary to make correct inferences about the context of messages expressed in German or Italian, based only on the fragmentary evidence of some of the letters contained in them.
If the reader does not consider the deductions made in this example to be plausible, it is suggested that a visit to the exhibition at BP might be of interest, as some of the deductions actually made during the breaking of a genuine cipher message on display are quite surprising and show that much higher levels of skill and imagination were required for success than are suggested by the somewhat contrived example given above.
The following short summary on how the first break was made in 1940 may give the reader some insight into the difficulties encountered at the time.
When the Italians entered the war in June 1940, it was thought likely that their navy might still be operating the same type of Enigma machine as they had used at the time of the Spanish Civil War, and the attempts to break their ciphers were based on this assumption. For the technique of ‘rodding’ to succeed it was essential to have accurate cribs, and initially a serious difficulty was the lack of knowledge about the stereotyped forms of text that were likely to occur in the Italian messages.
In the absence of anything more specific, Dilly Knox instructed his assistants (a group of young women known as ‘Dilly’s girls’) to use ‘PERX’ as a crib for the first four characters of each intercepted signal (= ‘FOR’ followed by a ‘space’) and, for those cases when this did not lead to any inconsistencies between the crib and the first four letters of a cipher message, to record any other letters that could be found by the rods in the hope that these might provide some clues about the plain text.
These assistants worked continuously for three months at this task without having any success until September 1940, when one of them, Mavis Lever, a nineteen-year-old student whose university course had been interrupted by the war, achieved a remarkable break. With the message on which she was then working, for a particular starting position for the ‘green’ rotor (i.e. rotor I), the rods had given the letter S in the 4th place, which clashed with the letter X in the crib (i.e. resulting in the letter sequence ‘PERS’ instead of ‘PERX’, as was anticipated).
If Miss Lever had obeyed her instructions, she would have rejected this rotor starting position and gone on to try the next one. However in a moment of inspiration she decided to assume that the crib ‘PERX’ was in fact wrong and guessed that it was ‘PERSONALE’. After making this assumption and continuing with the ‘rodding’ process, she was gratified to find that the additional letters of plain text then given by the rods made good sense, so that the first part of the message turned out to be ‘P E R S O N A L E X P E R X S I G N O R X…’ (X = ‘space’). (More information on how this was done is to be found in the exhibition.)
This was a most remarkable and valuable achievement, as it proved (after three months’ effort!) that the Italians were indeed still using the same early version of the Enigma machine. From this message and others, which were subsequently broken, a vocabulary of useful cribs was built up which greatly increased the effectiveness (and speed) of the ‘rodding’ technique.
Frank Carter