Slashdot Mirror


The Science of Secrecy

Matthew Sparkes writes "Ever since the first codes and ciphers were developed, there has been a battle between those who want to keep their information secret, and those who want to read that information. It has been a purely intellectual war, but one that is often driven by motives from above that are far more violent. This book chronicles that battle, from it's inception, to the modern day, and outlines the techniques used to obfuscate information, and the fascinating history of the application of those techniques." Read the rest of Matthew's review. The Science of Secrecy - The History of Codes and Codebreaking author Simon Singh pages 224 publisher Fourth Estate, London rating 7 reviewer Matthew Sparkes ISBN 1841154350 summary An historical look into cryptography and crypt-analysis, with a significant amount of technical knowledge to impart also.

Cryptography has been a tool largely used by governments to avoid their communications being read by the enemy or other unfriendly states, but historically it has also been utilized by individuals to protect their more questionable or taboo activities from discovery.

This battle is presented in the book as a rather bipolar trend; cryptographers trying to protect data and crypt-analysts trying to discover the meaning of that data. I found this to be slightly misleading. The representation of the history of the field as a constant struggle between two distinct parties does make for a more entertaining read, and adds an element of conflict by conjuring images of an ancient and continual intellectual game, but in reality these two groups are often one and the same.

Whilst I admit that the race to develop stronger codes and ciphers was in many ways separate from the race to break them, they were also inextricably linked, and undertaken by the same people. One has to allow a certain amount of poetic license in popular science books, especially in this case, as it has lightened what could have been a dry topic.

The way in which the book is structured allows a complete novice access. Starting from the first discoveries in cryptography and working forward chronologically, whilst explaining the method behind the discoveries, educates the reader in basic technique without effort. One reads a fascinating historical account, and later realizes that they now have a good understanding of the mathematical concepts behind these approaches they've been reading of.

The book places these techniques into context, giving historical examples of their use. Often they are revealed to have played large and important parts in famous events, ranging from wars and political plots, to events which are not even strictly related to cryptography.

For example it is shown how crypt-analytic approaches were utilized in the deciphering of ancient languages such as hieroglyphics. These languages are dead, in that there are no living individuals who have the ability to read them, and no information was available to help in their deciphering. By studying the frequency of letters or symbols in the text, as when attempting to break a cipher, it was possible to slowly read meaning into the text, and map the alphabet.

Many of these scripts were decrypted by amateur crypt-analysts, rather than academics. One point the author makes is that there are still many that remain a mystery, such as the Etruscan and Indus scripts. One has to wonder whether a book like this, combined with the current national fixation with puzzles such as Soduko, would create a resurgence in interest, and lead to some of these being broken.

One interesting point that the book makes is that the vast majority of work performed by cryptographers is done in secret, largely for security agencies all over the world, and that this has been true for some time. Therefore it is not uncommon for crypt-analysts to receive no recognition for their work, or to have a discovery attributed to them long after their death. These organizations must classify the work in the interest of national security, so in a way this book stands as an anonymous tribute to their cunning and multidisciplinary talent.

Examples from the book of such discoveries include Charles Babbage breaking the Vigenere cipher in 1854, which only came to light in the 1970s. The author suggests that the work was kept secret to aid the Royal Navy, as it occurred just after the Crimean War started. The credit for the discovery instead fell to a retired Prussian army officer who independently discovered it in 1863.

This is shown to be one of the enduring themes of the story of cryptography, leading right through to the 1970s where credit for developing the RSA cryptographic technique went to Diffie, Hellman and Merkle in 1975, despite being developed in 1969 at GCHQ, a fact that was only publicly admitted in 1997.

A section of the book that will be of particular appeal to computer scientists is where cryptography is shown to have given birth to computing. Born from the desire for a method to perform simple operations on numbers very quickly. Computers now dominate the field of cryptography and crypt-analysis, and their ability to perform a task millions of times with no errors has transformed the science. It is also noted how much we rely on cryptography daily, in areas such as e-commerce, where our details are encrypted without us even being aware of the fact.

The final chapter is an examination into the politics of cryptography, and a balanced look into the ethical implications of governmental snooping on communication, versus the possible benefits of reducing serious crime and terrorism. This is clearly a very pertinent point in todays political climate, and a balanced look at this issue is a very valuable thing. With the heightened risk of terrorist attack, or at least the public perception of such, the government are intercepting more and more communications for analysis, and encryption by criminals is becoming more and more popular.

The book covers the topic well; from governmental use, to anecdotes about lovers exchanging secret messages. Throughout this the reader is constantly being eased into the mathematical technique behind, in a manner that does not require a background in mathematics. There is an appendix to the book, in the form of 5 cipher challenges for the reader to attempt to crack. The knowledge gleaned from the book should be preparation enough to do so, and will fascinate the curious nature of the books audience.

Matthew Sparkes' is a journalist and programmer, his homepage is Non-Tech City."

You can purchase The Science of Secrecy from bn.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.

17 of 68 comments (clear)

  1. Other good books by ackthpt · · Score: 5, Informative

    Between Silk and Cyanide : A Codemaker's War, 1941-1945; Leo Marks
    Leo worked in the Special Operations Executive (SOE) during WWII. During his work he observed the Poem Codes were easily breakable and suspected the Dutch undergound had been compromised in what the german's called Englandspiel (or The Game Against England) which resulted in the capture and eventual deaths of many ">dutch agents. Marks was instrumental in developing unbreakable Use-Once codes

    Enigma; Robert Harris

    Fictional thriller surrounded by the code-breaking effort at Bletchley Park
    --

    A feeling of having made the same mistake before: Deja Foobar
    1. Re:Other good books by Expert+Determination · · Score: 2, Informative

      I really recommend Silk and Cyanide. It's all very well reading books with lots of theory about codes but Silk and Cyanide tells you how it really is down on the ground. It was interesting how much effort was expended by the British in cracking their own codes. Out in the field agents were encrypting messages by hand and frequently made mistakes rendering messages unreadable. Part of Leo Marks's work was deciphering these messages. Leo Marks also worked on introducing the one-time-pad and it's interesting to read the reaction to this. All in all, a great book.

      --
      "The White House is not an intelligence-gathering agency," -- Scott McClellan, Whitehouse spokesman.
  2. Buy it here! (It's not available at B&N) by Anonymous Coward · · Score: 0, Informative

    The book isn't available at Barnes and Noble, but you can buy it here for as low as $4.86: Science of Secrecy: The Secret History of Codes and Codebreaking. And if you use the "secret" A9.com discount, you can save an extra 1.57%!

  3. Don't forget Cryptonomicon! by Anonymous Coward · · Score: 4, Informative

    An fun novel by Neal Stephenson about WWII's codebreaking effort and turing machines, among other things.

  4. From memory by Rei · · Score: 4, Informative

    Polyalphabetic ciphers like the Vigenete are old - 1500s. They replaced the easy to crack alphabetic ciphers used previously. A much more effective cipher was an iterative alphabetic cipher like that used on the Enigma; it was a successive series of alphabetic substitutions, but the substitutions changed based on what letter was typed previously (each letter would rotate the substitution wheels by varying amounts).

    Does this book cover the Voynich Manuscript? I'd be interested in seing if someone cracks that (or determines that it says nothing - still, it's interesting that it follows Ziph's law!).

    --
    By a scallop's forelocks!
    1. Re:From memory by MyNymWasTaken · · Score: 2, Informative

      For those as clueless as I was...

      Zipf's law

      The probability of occurrence of words or other items starts high and tapers off. Thus, a few occur very often while many others occur rarely.

      Note: In the English language words like "and," "the," "to," and "of" occur often while words like "undeniable" are rare. This law applies to words in human or computer languages, operating system calls, colors in images, etc., and is the basis of many (if not, all!) compression approaches.

      More precisely it is the observation that frequency of occurrence of some event (P), as a function of the rank (i) when the rank is determined by the above frequency of occurrence, is a power-law function P(i) ~ 1/i^a with the exponent a close to unity (1).

      Named for Harvard linguistic professor George Kingsley Zipf.

      http://www.nist.gov/dads/HTML/zipfslaw.html
      http://planetmath.org/encyclopedia/ZipfsLaw.html
      http://www.nslij-genetics.org/wli/zipf/

    2. Re:From memory by Elonka · · Score: 2, Informative
      Thanks Xenon. :) BTW, the Amazon listing is wrong and they haven't gotten around to fixing it yet. More up-to-date information on the book is here, and my current best guess as to publication date is somewhere between March 28 and April 26, 2006.

      Elonka :)

  5. Is this review in error? by HidingMyName · · Score: 2, Informative
    The reviewer writes.
    This is shown to be one of the enduring themes of the story of cryptography, leading right through to the 1970s where credit for developing the RSA cryptographic technique went to Diffie, Hellman and Merkle in 1975, despite being developed in 1969 at GCHQ, a fact that was only publicly admitted in 1997
    I though Diffie, Hellman and Merkle were credited with inventing the first public key encryption approaches (with Diffie and Hellman working together and Merkle working independently). RSA is a kind of public key encryption but uses a different approach from the Diffie-Hellman approach.
    1. Re:Is this review in error? by Kaptain_Korolev · · Score: 1, Informative
      I agree and I think someone is confused here.

      RSA asymmetric key cryptography and Diffie-Hellman Key exchange are two fundamentally different procedures, although at the end of the day they allow two parties to come to the agreement of a shared secret.

      One reason why no-one hears much about Diffie-Hellman is that Diffie-Hellman keys/parameters are usually generated per secure comms session and not persistently stored. Although the computational hit to do this is nothing like generating RSA pub/priv keys it is still a major bottleneck ( generating a big num in a required range ). With RSA you can generate your keys once, with DH you generate them per-session.

      So in the context of a secure comms session. I could use RSA to wrap some AES ( for example ) keys and have my protocol up and running in a metter of seconds or I could use DH and take a 15-30 second hit ( 2048 bit keys ) to generate my DH paramaters, from which I can then generate a shared secret to act as a seed for my AES session keys.

      If anyone is more interested in the area, I'd recomment Practical Cryptography and Applied Cryptography, both by Bruce Schneier. Both are excellent works for getting to know the algorithms inside-out and understanding how to implment communications security in the real world.

  6. Simon Singh has *LOTS* of great books by bensafrickingenius · · Score: 5, Informative

    Take a peek at his website: http://simonsingh.net/. As a math enthusiast, I really liked "Fermat's Last Theorem."

    --
    I am not left-handed, either!
  7. Same material as Singh's previous "The Code Book" by stanwirth · · Score: 4, Informative

    The first thing I wanted to know when I looked at this review was, "How is this different from his previous, The Code Book ??

    The answer is, not much at all, by the author's own admission:

    NB: The Science of Secrecy is my second book on cryptography. My first, called The Code Book, covers similar material to the Science of Secrecy. It is already available in paperback so it is somewhat cheaper. The advantages of The Science of Secrecy are that it is in hardback, better illustrated, and follows the structure of the TV series. If you have read The Code Book then you probably would not want to read The Science of Secrecy, but you might want to buy it as a present for a friend. Signed copies of The Code Book can be bought via this site. You can buy the Science of Secrecy from Amazon.co.uk

    In other words, if you've already read The Code Book (and you should! It's great!), you won't need to rush out and buy Science of Secrecy -- but if you want to get a gift for someone, a hardback copy of The Science of Secrecy (along with the DVDs of the TV series if available) might server better.

  8. Wrong title by Logic+Bomb · · Score: 3, Informative

    The book's correct title is "The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography". (See title at Amazon.)

    I'm a little surprised we're seeing a review of it only now; it's 5 or 6 years old. I have it, and greatly enjoyed it.

    1. Re:Wrong title by cdn-programmer · · Score: 2, Informative
    2. Re:Wrong title by jim_deane · · Score: 3, Informative

      And for some strange reason, my copy of The Code Book is fully titled:

      The Code Book: The Evolution of Secrecy from Mary, Queen of Scots to Quantum Cryptography

      It's a 1999, 1st edition hardback. I emailed the publisher to find out why the subtitle had changed, and when. The ISBN is identical to the current edition. I need to check out a current edition to see if there are any substantive differences in the text.

      Jim

  9. The facts by slashdotmsiriv · · Score: 5, Informative

    Is the reviewer clueless of crypto history? "This is shown to be one of the enduring themes of the story of cryptography, leading right through to the 1970s where credit for developing the RSA cryptographic technique went to Diffie, Hellman and Merkle in 1975, despite being developed in 1969 at GCHQ, a fact that was only publicly admitted in 1997" RSA=Rivest Shamir Adleman. Diffie, hellman and Mercle introduced the concept public key crypto. Diffie and Hellman based their DH scheme on the difficulty of the discrete log problem. RSA introduced public key crypto based on the hardness of factorization of a large composite.

  10. Re:Not entirely correct... by Kaptain_Korolev · · Score: 1, Informative

    I think someone is confused here. RSA asymmetric key cryptography and Diffie-Hellman Key exchange are two fundamentally different procedures. Although at the end of the day allow two parts to come to the agreement of a shared secret, both also however suffer from the pain in the arse that is PKI. One reason why no-one hears much about DiffieHellman is that Diffie-Hellman keys/parameters are usually generated per secure comms session and not persistently stores. ALthough the computational hit to do this is nothing like generating RSA pub/priv keys it is still a major bottleneck. With RSA you can generate your keys once, with DH you generate them per-session. So in the context of a secure comms session. I could use RSA to wrap some AES keys and have my protocol up and running in a metter of seconds or I could use DH and take a 15-30 second hit to generate my DH paramaters, from which I can generate a shared secret to act as my a gen. for my AES key. If anyone is more interested in the area, I'd recomment Practical Cryptography and Applied Cryptography, both by Bruce Schneier. http://www.schneier.com/books.html Both are excellent works for getting to know the algorithms inside-out and understanding how to implment communications security in the real world.

  11. Made by Diverse for UK Channel 4... by Kadin2048 · · Score: 3, Informative

    While the show may have been shown on the Discovery Channel, it was originally made for the UK's "Channel Four" network by Diverse Productions. It was written by Simon Singh, so the same-name thing is not just a coincidence.

    Diverse lists it on their website, but there's no link to a DVD or any other signs that it exists. Too bad, because at 5, 30-minute episodes it would make a good two disc set (throw one 30-minute reel of extras on there and you'd have two 90 minute DVDs). I'd bet they'd make far more revenue from that then they would from having it sit around in their archives.

    Their web page for the series is:
    http://www.diverse.tv/programme.aspx?id=8

    In a completely unrelated note, they are apparently looking for families who want to be on a show they're filming for TLC here in the US. Very ... wide variety of subject matter they deal with. (One might almost call it 'diverse' ... okay, I'm done.)

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."