Book Cipher — Bench tool
Published 2 Oct 2026 ·
A book cipher replaces the alphabet with a book. Every letter is written as a position — page, line, word, letter — and the receiver looks it up. The method requires no mathematics, no memorised square and no equipment, which is why it recurs whenever people need to communicate secretly with nothing but what is already in the room.
- Era
- Medieval
- Type
- Substitution
- Key space
- the shared volume
- Level
- Field
IWhat this tool does
Two people agree on an edition. The numbers 14.2 mean the fourteenth word, second letter of that word — or, in the fuller convention page.line.word, three numbers per letter.
Both parties must hold the same edition, not merely the same title. Page numbering differs between printings; a pocket edition and a folio do not agree. This is the method's defining practical constraint.
| Convention | Written as | Digits per letter |
|---|---|---|
| page.line.word.letter | 214.07.11.3 | 8-12 |
| line.word.letter | 214.3 | 4-6 |
| word.letter (single fixed page) | 14.2 | 2-4 |
| running index into one page of text | 61 | 2 |
The last row is what the bench beside this entry uses: one fixed string of letters stands in for the page, and each letter is written as the index of the matching character. It is not how a real book cipher is written, but it exposes exactly what the technique depends on — that both parties hold an identical, indexed object.
IIThe key
The key space is the set of books two people might both own, and it is not searchable in any useful sense. But that is not the same as being strong.
Consider what the attacker needs. They need the book. If they capture the book, they do not need to break anything at all — the ciphertext becomes a lookup table. If they do not capture the book, they can still exploit the fact that the numbers have structure: the first number in each group varies slowly across a page, and the last varies quickly. That structure is a fingerprint.
A cipher whose key is a public object held by two people has a security level equal to the secrecy of the correspondence, not the secrecy of the algorithm.
Related historical difficulty: running out of the agreed edition. Armies moved, libraries burned, and a cipher that cannot be used is worse than a cipher that can be broken.
IIIWhat it will not protect
Historical ciphers are for study and recreation and are not suitable for protecting real information. The full analysis is in the cipher entry.
Read the full entry, with deciphering steps and weakness analysis →