Columnar Transposition — Bench tool
Published 14 Oct 2026 ·
Columnar transposition is the workhorse of classical field ciphers: simple enough to do with a pencil, strong enough to be worth double-encrypting, and the second half of almost every serious military cipher from the First World War. It has no arithmetic at all — only order.
- Era
- Renaissance
- Type
- Transposition
- Key space
- keyword permutations
- Level
- Field
IWhat this tool does
Write the plaintext in rows under the keyword. Then number the keyword's letters in alphabetical order, and read the columns in that numbered order.
Keyword BRASS, plaintext LOOM NEVER STOPS:
| B | R | A | S | S |
|---|---|---|---|---|
| L | O | O | M | N |
| E | V | E | R | S |
| T | O | P | S | X |
The keyword's alphabetical order is A(3), B(1), R(2), S(4), S(5), so the reading order is column 3, then 1, then 2, then 4, then 5. Reading that way gives OE P then LET then OVO then MRS then NSX, joined as OEPLETOVOMRSNSX.
Then the padding: the final row needed an X to close the rectangle, and the receiver has to know to discard it. That is the whole method — and note how differently it fails from a substitution. The letters are all exactly where the alphabet left them; only their neighbours changed.
IIThe key
A keyword of k distinct letters gives k! possible column orderings. For k = 8 that is 40,320; for k = 10, 3.6 million.
That is respectable, and it is why militaries used it. But two practical factors shrink it badly. First, the keyword must be memorable, so real keys come from a small pool of words. Second, and more importantly, an attacker rarely needs the key — they need the column order, and the column order can be recovered statistically.
The attack on a transposition cipher is not a search over keys. It is a search over orderings, guided by the statistics of the language.
The standard technique is to compare digraph and trigraph frequencies across candidate column pairs. Certain pairs of letters occur together far more often than chance — TH, HE, IN, ER — and a wrong column adjacency kills those pairs. With a few hundred letters of ciphertext, the ordering falls out.
IIIWhat it will not protect
Historical ciphers are for study and recreation and are not suitable for protecting real information. The full analysis is in the cipher entry.
Read the full entry, with deciphering steps and weakness analysis →