Page Analysis: p3-7

For a basic “Count”, “Double-Letter Occurrence”, “Running IoC”, and “Concealment” analysis use this, general purpose, cipher analysis tool.

Index of Coincidence (IoC)

Quick IoC recap: Normal rune-english IoC is about 1.77. Values below 1.4 are highly unlikely to be anywhat meaningful. Predicting english text with IoC gets worse if the text is very short.

Here, we are considering either ᚠ being an interrupt; or it's inverse ᛠ. The numbers (1–32) represent the key length. With a key length of 5, every fifth rune will be decrypted with the same alphabet.

Note: The darker the cell, the better the prediction. The runes per length columns influences the results of the other columns; so if this is low, the other columns are not reliable.

IoC-highIoC-normRunes / keylen
11.031.020.260.25641349
21.071.120.300.34320174
31.121.150.350.38213116
41.091.180.320.4016087
51.121.180.350.4012869
61.131.220.350.4510658
71.121.290.350.519149
81.141.270.370.508043
91.201.330.430.567138
101.161.230.380.456434
111.161.220.390.445831
121.221.420.440.635329
131.201.340.430.524926
141.151.330.380.504524
151.231.380.450.524223
161.251.480.470.624021
171.191.380.420.573720
181.221.440.450.533519
191.151.360.380.483318
201.241.450.460.533217
211.161.430.390.523016
221.241.410.470.522915
231.281.370.450.462715
241.301.610.490.582614
251.301.610.490.472513
261.341.630.520.452413
271.321.510.490.482312
281.211.450.420.502212
291.231.520.410.542212
301.331.570.500.552111
311.231.570.440.442011
321.321.680.480.432010
best26322612

Modulo IoC

This section explores the idea of multiple alphabet-sets alternating. For example, have two or three Vigenere ciphers that switch after each rune. A Vigenere with key length 3 (ABC) plus another Vigenere with key length 4 (DEFG) will generate a pattern that only repeats after 24 runes (ADBECFAGBDCEAFBGCDAEBFCG). So, the first group will represent every 2nd letter (starting with the first), and the second group will also contain every 2nd letter but starting with the second.

There are two main distinctions. Interrupt-first-then-mod assumes that an interrupt will pause the alternation between the different groups. Mod-first-then-interrupt assumes that an interrupt will pause the key alternation within that group. Lets look at the example Vig(3) + Vig(5). With the first, the decryption sequence is: Vig(3)[0], interrupt, Vig(5)[0], Vig(3)[1], etc. With the second, the decryption sequence is: Vig(3)[0], interrupt, Vig(3)[1], Vig(5)[0], etc. Note that the second decryption still switched to Vig(5) but was ignored because it was an interrupt.

Note: The row header format is {interrupt}.{mod}.{offset}. “ᚠ.2.0” means, assume the interrupt is ᚠ, divide the data into two sets, then look at the first set (rune at index 0, rune at index 2, etc.). The column shows the key length for which the IoC was calculated. In the previous example, with a key length of 7, indices 0, 14, 28, ... are part of one alphabet, and indices 2, 17, 30, ... are part of another alphabet. Both are from the same alphabet-set!

Interrupt first, then mod (IoC-high):
runes12345678910111213
ᚠ.2.03211.101.101.181.221.231.311.271.321.351.341.381.441.54
ᚠ.2.13201.121.131.191.231.211.331.281.301.371.311.311.491.59
ᚠ.3.02141.181.291.421.441.401.451.321.50
ᚠ.3.12141.191.301.401.441.371.441.441.54
ᚠ.3.22131.201.321.421.391.431.521.391.50
ᛠ.2.01751.161.321.301.441.381.551.501.861.581.791.691.781.83
ᛠ.2.11741.161.361.361.421.441.661.401.711.711.871.561.791.95
ᛠ.3.01171.311.371.591.671.751.681.811.83
ᛠ.3.11161.281.431.521.691.801.821.991.83
ᛠ.3.21161.371.491.641.791.981.841.701.83
Interrupt first, then mod (IoC-norm):
runes12345678910111213
ᚠ.2.03210.330.330.400.450.450.540.460.540.530.550.550.600.67
ᚠ.2.13200.350.360.420.460.430.560.470.510.560.530.530.620.69
ᚠ.3.02140.410.520.610.650.630.680.540.64
ᚠ.3.12140.420.520.600.670.590.660.630.69
ᚠ.3.22130.430.550.610.620.650.730.580.67
ᛠ.2.01750.380.550.530.670.600.700.630.830.720.720.680.700.60
ᛠ.2.11740.380.580.580.650.670.730.620.720.710.740.600.720.60
ᛠ.3.01170.540.600.780.830.760.830.700.76
ᛠ.3.11160.510.650.700.800.720.810.770.76
ᛠ.3.21160.600.690.860.930.800.810.780.76
Mod first, then interrupt (IoC-high):
runes23456789101112131415161718
ᚠ.2.05731.041.041.061.081.071.081.101.051.121.121.111.191.101.161.121.171.10
ᚠ.2.15721.061.091.081.111.131.091.131.141.161.111.181.111.161.191.181.191.24
ᚠ.3.03821.061.141.111.141.131.091.121.221.251.261.191.151.081.231.171.231.25
ᚠ.3.13821.051.091.111.121.031.091.171.151.181.151.131.201.081.201.231.191.22
ᚠ.3.23811.061.051.091.071.101.091.161.091.121.181.141.261.081.131.291.221.13
ᛠ.2.05011.071.131.131.141.211.141.191.171.211.241.231.291.171.271.241.331.24
ᛠ.2.14121.051.121.141.111.211.141.181.211.151.201.241.151.291.321.291.291.38
ᛠ.3.03821.091.161.141.171.181.221.211.311.211.371.281.281.301.351.261.261.32
ᛠ.3.13821.071.111.171.121.121.171.281.231.261.251.181.291.231.241.501.331.38
ᛠ.3.23811.091.061.151.101.161.091.161.181.091.201.171.241.131.231.371.181.32
Mod first, then interrupt (IoC-norm):
runes23456789101112131415161718
ᚠ.2.05730.270.270.290.310.290.310.330.280.350.350.340.420.330.390.350.400.32
ᚠ.2.15720.290.320.300.340.350.320.360.370.380.340.400.340.380.420.410.410.46
ᚠ.3.03820.290.360.340.370.350.320.350.440.470.490.390.370.300.440.360.400.45
ᚠ.3.13820.280.310.340.340.260.310.400.380.400.370.350.430.300.430.430.410.43
ᚠ.3.23810.280.280.320.290.330.310.380.310.340.410.360.440.300.330.480.410.34
ᛠ.2.05010.290.350.350.360.440.370.420.400.430.470.460.510.400.470.460.530.47
ᛠ.2.14120.270.350.370.340.430.370.410.430.370.420.460.370.460.520.500.450.54
ᛠ.3.03820.320.380.370.390.410.450.430.530.430.600.490.480.520.520.450.430.52
ᛠ.3.13820.300.340.400.350.350.390.490.460.490.440.410.510.450.430.590.500.52
ᛠ.3.23810.320.290.370.330.380.310.380.400.320.400.380.470.350.440.450.410.50

Pattern IoC

This section looks at different ways to extend a short key into a longer one. The result of this expansion is still a plain Vigenere-like encryption but the key is so long that we would not be able to find it with IoC analysis. However, we can use the fact that the same letters appear again and so there are less alphabets than the key length.

The two mirror pattern variants simply flip the key in reverse and append it to the original key. For example, the key ABCD will become ABCDDCBA (Variant A) or ABCDCB (Variant B). Both keys will repeat after that. Notice how the first variant produces double letters (DD and AA) and the second does not.

The shift pattern simply offsets the key by one and appends this permutation to the key. For example, ABCD becomes ABCDBCDACDABDABC. Each key length n (here 4) has n - 1 shifts. The example before was shift = 1. The other two are ABCDCDAB (shift=2) and ABCDDABCCDABBCDA (shift=3). And again, like with the mirror pattern, we greatly increase the key length without increasing the alphabet count.

Note: While the column in the mirror pattern represents the key length, the column in the shift pattern is not the key length. Instead, the key length is given in the row title, e.g., “ᚠ.5”. The column header represents the key shift variation.

Mirror Pattern (IoC-high):
runes456789101112131415161718
ᚠ.a6411.091.131.171.101.151.171.161.181.201.231.181.221.221.241.25
ᚠ.b6411.151.151.161.271.151.191.211.251.191.281.261.181.271.251.32
ᛠ.a3491.191.181.281.191.301.261.281.311.361.391.331.451.401.371.36
ᛠ.b3491.221.281.291.351.261.521.321.421.311.441.551.291.371.541.43
Mirror Pattern (IoC-norm):
runes456789101112131415161718
ᚠ.a6410.320.350.400.330.370.400.390.410.430.450.400.440.450.440.47
ᚠ.b6410.370.380.380.500.360.420.420.480.420.450.490.410.460.460.49
ᛠ.a3490.420.410.500.410.520.480.490.530.580.510.500.500.570.550.53
ᛠ.b3490.450.480.480.540.450.590.520.550.510.620.520.510.510.580.58
Shift Pattern (IoC-high):
runes1234567891011121314151617
ᚠ.41601.121.131.12
ᚠ.51281.111.121.141.14
ᚠ.61061.141.131.161.151.10
ᚠ.7911.131.161.191.141.141.15
ᚠ.8801.121.151.181.151.141.141.14
ᚠ.9711.201.171.171.161.171.171.131.13
ᚠ.10641.171.151.141.131.161.191.141.161.14
ᚠ.11581.161.171.171.191.171.151.181.191.191.16
ᚠ.12531.161.161.221.171.131.201.161.161.211.121.17
ᚠ.13491.191.181.181.221.201.211.191.221.191.171.181.15
ᚠ.14451.191.221.161.261.191.201.161.181.211.201.161.251.23
ᚠ.15421.161.151.201.221.191.231.201.191.201.201.161.221.231.22
ᚠ.16401.251.151.181.191.231.211.191.221.191.181.181.171.161.221.22
ᚠ.17371.271.251.191.231.291.201.171.261.241.201.221.211.281.241.151.21
ᚠ.18351.261.261.241.201.181.201.211.201.251.261.261.281.201.181.201.211.14
ᛠ.4871.161.191.14
ᛠ.5691.211.191.251.16
ᛠ.6581.221.291.301.241.24
ᛠ.7491.201.261.231.221.251.26
ᛠ.8431.281.261.211.321.261.271.19
ᛠ.9381.331.331.281.241.351.241.281.22
ᛠ.10341.371.281.271.351.351.281.261.231.23
ᛠ.11311.261.381.281.311.321.351.291.351.331.36
ᛠ.12291.241.261.481.251.291.281.331.331.501.421.34
ᛠ.13261.451.291.321.381.351.331.351.311.371.321.291.32
ᛠ.14241.331.441.301.361.311.321.321.291.281.411.361.361.29
ᛠ.15231.361.371.341.471.291.361.281.451.371.301.331.321.291.44
ᛠ.16211.361.341.331.341.401.441.281.431.281.511.351.261.441.321.34
ᛠ.17201.391.311.521.331.431.311.321.381.421.421.431.441.401.391.381.35
ᛠ.18191.391.391.371.481.331.371.301.371.341.431.381.381.401.381.341.341.32
Shift Pattern (IoC-norm):
runes1234567891011121314151617
ᚠ.41600.350.360.35
ᚠ.51280.340.350.370.37
ᚠ.61060.370.360.390.380.32
ᚠ.7910.360.390.420.370.370.37
ᚠ.8800.350.370.400.380.360.360.37
ᚠ.9710.430.390.390.390.400.400.360.36
ᚠ.10640.400.380.360.360.380.420.360.380.37
ᚠ.11580.390.390.390.420.400.370.410.420.410.39
ᚠ.12530.380.390.440.400.360.430.380.390.430.350.39
ᚠ.13490.420.410.410.440.430.440.410.440.420.400.410.37
ᚠ.14450.400.440.390.480.420.430.390.400.440.410.390.470.46
ᚠ.15420.390.380.420.440.410.460.430.420.420.430.380.440.450.44
ᚠ.16400.480.380.410.420.440.440.410.440.420.410.410.380.380.430.44
ᚠ.17370.460.470.410.440.500.410.390.490.460.420.440.440.470.470.380.44
ᚠ.18350.480.480.430.420.400.410.440.430.470.480.480.470.420.390.420.410.37
ᛠ.4870.390.410.37
ᛠ.5690.440.410.480.39
ᛠ.6580.450.520.520.470.47
ᛠ.7490.430.480.460.440.470.48
ᛠ.8430.510.480.430.550.490.500.42
ᛠ.9380.530.550.510.460.540.470.500.45
ᛠ.10340.590.480.500.570.500.510.490.460.44
ᛠ.11310.490.600.460.540.510.540.510.540.510.57
ᛠ.12290.460.470.680.470.460.490.520.480.590.560.52
ᛠ.13260.590.470.510.560.540.490.570.510.530.530.450.50
ᛠ.14240.520.570.490.550.500.500.530.490.450.590.580.540.50
ᛠ.15230.500.560.530.590.500.510.460.620.510.480.510.530.490.63
ᛠ.16210.480.490.470.480.540.550.470.570.480.580.530.430.530.500.54
ᛠ.17200.550.440.560.510.530.480.520.480.540.530.580.550.560.490.520.53
ᛠ.18190.580.510.550.640.510.530.460.510.500.540.530.530.540.510.480.550.52