Breaking Ciphers and Zero Knowledge Proofs
Where
Cryptocurrency Village
DEF CON 34
Duration
53 min
Walks attendees through breaking classic ciphers by hand, from shift and substitution ciphers to the Vigenère cipher and the Kasiski method.
Summary
This hands-on workshop from the Cryptocurrency Village has attendees break classic ciphers themselves instead of only reading about them. The session starts with the shift cipher, where there are only 25 useful alphabets and a couple of letters can reveal the shift. Participants work through encrypted messages from a handout, and the presenters use each one to show why the weakness exists.
The middle section moves to substitution ciphers. The presenters explain why brute force fails against a random alphabet, since the possible keys number roughly 26 factorial, and then show how frequency analysis narrows the search. Useful clues include letter counts compared with English text, short common words, apostrophes followed by an S, and vowel patterns in two-letter words. The recurring point is that human habits leak into implementations, and statistics can shrink a huge key space.
The session then covers polyalphabetic substitution, using a keyword to shift letters in the Vigenère cipher. It ends by introducing the Kasiski method: find repeated strings, measure the distances between them, and use common factors to estimate the key length. The presenters ran short of time and said the Kasiski walkthrough would continue the next day. The takeaway is that each cipher upgrade fixes one weakness and exposes another, which mirrors how real cryptography is tested and improved.
Materials
Related talks
Crypto Privacy Village·51 min
Steven Barker · Kevin Hewlin · George · Roberto · Cooper
Gold Bug puzzle writers and members of last year's winning team discuss how the contest is built, how to start, and how to approach puzzles with no obvious entry point.
Cryptocurrency Village·35 min
Michael Schloh · Diego Salazar
Recaps the Cryptocurrency Village's hackathon, CTF, workshops and prizes at DEF CON 34, and previews its plans for Singapore and Bahrain.
Adversary Village·38 min
Abhijit · Anant Srivastava
Looks back at six years of Adversary Village, from early debates over emulation versus simulation to how AI fits into adversary testing.


