0x0D: Säkerhetspodcasten interview Vesa Virta

## Overview This interview features Vesa Virta discussing the cryptanalysis of the Geheimschreiber, a German strategic cryptographic device used during World War II for high-level communications between German troops in Norway and Berlin, and later between German forces in Finland and the German embassy in Stockholm.

## Key Topics Swedish cryptanalysts, led by mathematician Arnold Burling, successfully decrypted the Geheimschreiber without ever examining the physical machine—working solely from intercepted ciphertext. Burling determined the encryption algorithm and designed a decryption machine subsequently built by an engineer from Ericsson. This cryptanalytic breakthrough proved historically significant: Sweden's ability to intercept German military communications about troop movements and intentions allowed the country to maintain neutrality during WWII by staging defensive exercises and military shows of force whenever German troops approached the Swedish border.

## Technical Details The Geheimschreiber employed a five-bit code with two transmission modes (letters and numbers). The machine contained 10 wheels; five were set fixed daily (the day key), while five were designated for message-specific keys. Several critical operational failures enabled the cryptanalytic break:

- **Message Key Reuse**: Operators frequently reused the five message wheels instead of generating unique keys for each message - **Predictable Patterns**: Operators always shifted to letter mode between words to prevent garbled output from transmission errors, creating consistent bi-gram cribs between every word - **Multiple Messages Under Same Key**: When several messages used identical keys, overlapping bi-gram cribs allowed cryptanalysts to progressively recover the keystream - **Plaintext Context**: Earlier unencrypted German radio communications using Q-codes and known five-bit encoding structure provided additional leverage

The Geheimschreiber was classified as "strategic" (used by generals between headquarters) rather than "tactical" (Enigma used by field soldiers), meaning it operated from heavily guarded facilities rather than mobile units, yet remained vulnerable to these cryptanalytic methods.

## Takeaways The case demonstrates that cryptographic algorithms alone are insufficient; operational practices and user behavior are equally critical vulnerabilities. Modern cryptography research continues addressing this through AESE and deterministic encryption modes designed to prevent user error. Virta notes that Section Security maintains a museum featuring these machines, though public tours were suspended during the pandemic.