In the early 1920s, the Enigma machine was a portable encryption machine with rotor scramblers used for encoding and decoding confidential messages. Since German electrical engineer Arthur Scherbius (1878-1929) invented it at the end of World War I, it was progressively developed over the decades to use additional rotors that vastly increased the difficulty of cracking its codes.
For much of the first half of the 20th century, the Enigma Machine played a key role in protecting secret communications between warring parties. Governments allocated phenomenal resources and rallied the best minds available in an effort to defeat this electro-mechanical device, built to protect the intangible asset that would determine the outcome of the modern world’s most significant military conflict.
Breaking Enigma became a global race like no other and as early as December 1932, its secrets were cracked. The Polish government’s team attributed the win to three military intelligence analysts. As the years passed, German military added rotors and complexity to the plugboard device to make it keep up with the times. In response, British intelligence created the massive Bletchley Park, impressively staffed both in numbers and in cerebral horsepower. The effort included one Alan Turing, widely recognized as the father of computer science and later correctly credited with playing a major part in defeating the German encryption machine in the early 1940s.
And that’s where romantics need to stop reading, because there’s a bit more to the story that rarely makes the news.
Those without much time on their hands can be forgiven for not knowing that the Polish Cipher Bureau’s accomplishment was catalyzed by the critical contribution of secret Enigma keys liberated from the Germans by a spy working with French Military Intelligence. And in the same breath we should mention that the Bletchley Park efforts were themselves assisted in no insignificant way by the Allied efforts to convince German U-boat crews to surrender Enigma rotors and keys, even as their vessels were sinking.
And so it was that the mighty Enigma’s secrets were reverse-engineered using the keys stolen by a German spy named Hans-Thilo Schmidt and later by leveraging the pilfered data and equipment from U-110, U-559 and U-505.
Fast forward 60 years and right past some ill-conceived efforts by a certain government to weaken global encryption standards so they would have less trouble cracking the communications they had an interest in. Today’s sensitive communications take place between browsers and servers that communicate politely after presenting certificates and exchanging keys. And of course, there exist clever cryptologists who assiduously study them, occasionally presenting influential papers on how they might be defeated.
One notable situation began unraveling on April 7, 2014, when the world discovered that the only thing thought capable of still protecting sensitive communications from prying eyes on the otherwise open Internet has in reality been the equivalent of a paper sign with the sign “KEEP OUT (please)”. It must be noted that much like the well-engineered Enigma machine long before it, the defeat of Web encryption has not been a design flaw, but a development and operational issue. As dictated by history, the weak implementation will be strengthened and clean up efforts for the Heartbleed Bug will continue.
And the elegance and lightness of this dance continues, punctuated only by the periodic gasp that follows each instance where secrets get unscrambled and private information again sees the light of day, invariably facilitated by the theft of keys and cloning of certificates rather than the unadulterated purity of an applied mathematical method.
(Note: I took the above picture of the Enigma Machine in April 2004 at London’s Imperial War Museum)
Claudiu Popa – CEO, Informatica Group
Claudiu Popa is a public speaker, cybersecurity expert, and passionate defender of privacy rights who engages audiences through storytelling and weaponizes academic courses, radio, television, podcasts, social media, and the written word to fight for the vulnerable in society and catalyze positive social change in Canada.