Cardan Grille

IPhenomenon

The bench writes grilles as a 5 x 5 grid with six openings, using the same layout every time so the example is reproducible:

Writing SECRET through the holes fills cells (1,2), (1,5), (2,3), (3,1), (4,4) and (5,3). Everything else is filler. An interceptor holding the page sees a 5 x 5 block of letters and no obvious order to them.

The grille's real subtlety is that a good mask is designed so that rotation covers the page. A 4 x 4 grid rotated in four orientations visits every cell exactly once, which means a well-made grille can fill an entire page with no filler at all. Cardano's own designs were simpler and did use filler; the rotational refinement came later.

Note what has not changed: the frequencies. The page contains exactly the letters of the plaintext plus filler, and the filler can be chosen to look like ordinary prose. Frequency analysis on the visible page tells the analyst almost nothing, because most of what they can see is a decoy.

IIKey space

The key is the hole pattern. For an n x n grid the number of distinct masks grows combinatorially, and for a 6 x 6 grid it is already in the millions — a genuinely large space by the standards of the period.

Two details make it workable in practice. First, a mask and its rotations are equivalent keys, which cuts the count by the symmetry factor. Second, a mask that does not cover the page evenly wastes capacity, so usable masks are a small fraction of all masks.

The Cardan grille's contribution to this collection is the idea of a key that is not a number, not an alphabet and not a book, but a shape.

The modern descendant is the permutation table: in a block cipher, the order in which bits are rearranged is exactly a grille, expressed as arithmetic instead of paper.

IIIEnciphering

• Cut the grille. Mark the holes on a sheet of card the same size as the page you will write on.
• Place the grille on a blank page and fix it so it cannot shift.
• Write the plaintext through the holes, one letter per hole, in reading order.
• Remove the grille. The message letters are now scattered across the page.
• Fill every remaining position with innocuous text that reads naturally around the existing letters.
• Copy the finished page or send it as it stands. The receiver needs an identical grille and nothing else.
• If the mask is a rotational design, rotate it a quarter turn and repeat the process to use the whole page.

IVDeciphering

• Obtain the matching grille. This is not a step you can skip or substitute; without the mask, the page is just prose with occasional odd letters.
• Align the grille to the page using the registration marks the two correspondents agreed on — usually the corners of the writing area.
• Read through the holes in reading order. That is the plaintext.
• If the design is rotational, rotate the grille a quarter turn after each pass and read again, continuing until the message is complete.
• Disregard everything visible outside the holes, however odd it looks. Filler is allowed to be strange; that is what it is for.

VWeakness

The physical mask is the whole secret. Lose it, have it stolen, or have it photographed, and the correspondence opens immediately. There is no way to rekey without making a new grille.

Grilles are hard to conceal. A sheet of card with holes in it is unusual to carry and easy to find. Agents carrying grilles have historically hidden them inside book covers, which works until the book is examined.

Filler text is a giveaway if it is bad. Filler that repeats, that has odd word lengths, or that fails to read as prose is a loud signal. In practice, writing convincing filler is the hardest part of using a grille well.

Line lengths leak. If the writer fills lines to a fixed length, the positions of message letters can be inferred from the regularity. Good practice requires genuinely variable filling.

It is a transposition, so the letters are all there. Given enough captured pages, an analyst can attempt anagramming; the mask slows this down but does not change the underlying statistics.

VIPractice

·History note

Girolamo Cardano, the Milanese physician and mathematician better known for his work on cubic equations and for De subtilitate (1550), described the grille as a way of hiding a message inside an innocuous letter. The technique was used in European diplomatic correspondence and later by revolutionary and intelligence services; a grille recovered from a Soviet spy ring in the 1950s is preserved in a museum collection. The rotational variant, in which a single mask is turned four times to cover a full page, was developed as a refinement and remains the version taught in introductory cryptology courses.

·Further reading

Cardano described the grille in De subtilitate in 1550, and it belongs to a family of ciphers whose secret is an object rather than a rule — the same family as the book cipher earlier on this loom.

Its most famous modern appearance is not cryptographic at all: the grille is the standard plot device in espionage fiction, and for good reason. It is the only cipher a reader can fully understand from a single illustration.

Next on the loom: columnar-transposition takes the transposition idea and keys it with a word instead of a mask.

+Weave into