Editing Cryptanalysis of the Enigma (section)

===Crib-based decryption===
The term ''[[known-plaintext attack|crib]]'' was used at Bletchley Park to denote any ''[[known plaintext]]'' or ''suspected plaintext'' at some point in an enciphered message.

Britain's Government Code and Cipher School (GC&CS), before its move to Bletchley Park, had realised the value of recruiting mathematicians and logicians to work in codebreaking teams. Alan Turing, a Cambridge University mathematician with an interest in cryptology and in machines for implementing logical operations—and who was regarded by many as a genius—had started work for GC&CS on a part-time basis from about the time of the [[Munich Agreement|Munich Crisis]] in 1938.<ref>{{Harvnb|Hodges|1995}}</ref> Gordon Welchman, another Cambridge mathematician, had also received initial training in 1938,<ref>{{Harvnb|Welchman|1997|p=12}}</ref> and they both reported to Bletchley Park on 4 September 1939, the day after Britain declared war on Germany.

Most of the Polish success had relied on the repetition within the indicator. But as soon as Turing moved to Bletchley Park—where he initially joined Dilly Knox in the research section—he set about seeking methods that did not rely on this weakness, as they correctly anticipated that the German Army and Air Force might follow the German Navy in improving their indicator system.

The Poles had used an early form of crib-based decryption in the days when only six leads were used on the plugboard.<ref name=MahonP13/> The technique became known as the ''Forty Weepy Weepy'' method for the following reason. When a message was a continuation of a previous one, the plaintext would start with ''FORT'' (from ''Fortsetzung'', meaning "continuation") followed by the time of the first message given twice bracketed by the letter ''Y''. At this time numerals were represented by the letters on the top row of the Enigma keyboard. So, "continuation of message sent at 2330" was represented as ''FORTYWEEPYYWEEPY''.

{| class="wikitable" | border=1 style="margin: 1em auto 1em auto; width:30%"
|+ Top row of the Enigma keyboard and the numerals they represented
|-
|align="center" |Q||align="center" |W||align="center" |E||align="center" |R||align="center" |T||align="center" |Z||align="center" |U||align="center" |I||align="center" |O||align="center"|P
|-
|align="center" |1||align="center" |2||align="center" |3||align="center" |4||align="center" |5||align="center" |6||align="center" |7||align="center" |8||align="center" |9||align="center"|0
|-
|}

''Cribs'' were fundamental to the British approach to solving Enigma keys, but guessing the plaintext for a message was a highly skilled business. So in 1940 [[Stuart Milner-Barry]] set up a special ''Crib Room'' in Hut 8.<ref>{{Harvnb|Mahon|1945|p=24}}</ref><ref name="Welchman97p120">{{Harvnb|Welchman|1997|p=120}}</ref>

Foremost among the knowledge needed for identifying cribs was the text of previous decrypts. Bletchley Park maintained detailed indexes<ref>{{citation |title=Bletchley Park Archives: Government Code & Cypher School Card Indexes |url=http://www.bletchleypark.org.uk/edu/archives/gccscoll.rhtm |access-date=8 July 2010 |url-status=dead |archive-url=https://web.archive.org/web/20110429032943/http://www.bletchleypark.org.uk/edu/archives/gccscoll.rhtm |archive-date=29 April 2011}}</ref> of message preambles, of every person, of every ship, of every unit, of every weapon, of every technical term, and of repeated phrases such as forms of address and other German military jargon.<ref>{{Harvnb|Budiansky|2000|p=301}}</ref> For each message the [[traffic analysis]] recorded the radio frequency, the date and time of intercept, and the preamble—which contained the network-identifying discriminant, the time of origin of the message, the callsign of the originating and receiving stations, and the indicator setting. This allowed cross referencing of a new message with a previous one.<ref>{{Harvnb|Welchman|1984|p=56}}</ref> Thus, as [[Derek Taunt]], another Cambridge mathematician-cryptanalyst wrote, the truism that "nothing succeeds like success" is particularly apposite here.<ref name="Taunt 1993 108"/>

Stereotypical messages included ''Keine besonderen Ereignisse'' (literally, "no special occurrences"—perhaps better translated as "nothing to report"),<ref>{{Harvnb|Milner-Barry|1993|p=93}}</ref> ''An die Gruppe'' ("to the group")<ref>{{Harvnb|Smith|2007|p=38}}</ref> and a number that came from weather stations such as ''weub null seqs null null'' ("weather survey 0600"). This was actually rendered as ''WEUBYYNULLSEQSNULLNULL''. The word ''WEUB'' being short for ''Wetterübersicht'', ''YY'' was used as a separator, and ''SEQS'' was common abbreviation of ''sechs'' (German for "six").<ref>{{Harvnb|Taunt|1993|pp=104, 105}}</ref> As another example, Field Marshal [[Erwin Rommel]]'s Quartermaster started all of his messages to his commander with the same formal introduction.<ref>{{Harvnb|Lewin|2001|p=118}}</ref>

With a combination of probable plaintext fragment and the fact that no letter could be enciphered as itself, a corresponding ciphertext fragment could often be tested by trying every possible alignment of the crib against the ciphertext, a procedure known as ''crib-dragging''. This, however, was only one aspect of the processes of solving a key. Derek Taunt has written that the three cardinal personal qualities that were in demand for cryptanalysis were (1) a creative imagination, (2) a well-developed critical faculty, and (3) a habit of meticulousness.<ref>{{Harvnb|Taunt|1993|p=111}}</ref> Skill at solving crossword puzzles was famously tested in recruiting some cryptanalysts. This was useful in working out plugboard settings when a possible solution was being examined. For example, if the crib was the word ''WETTER'' (German for "weather") and a possible decrypt before the plugboard settings had been discovered, was ''TEWWER'', it is easy to see that ''T'' with ''W'' are ''stecker partners''.<ref>{{Harvnb|Singh|1999|p=174}}</ref> These examples, although illustrative of the principles, greatly over-simplify the cryptanalysts' tasks.

A fruitful source of cribs was re-encipherments of messages that had previously been decrypted either from a lower-level manual cipher or from another Enigma network.<ref>{{Harvnb|Mahon|1945|p=44}}</ref> This was called a ''[[kiss (cryptanalysis)|kiss]]'' and happened particularly with German naval messages being sent in the ''dockyard cipher'' and repeated ''verbatim'' in an Enigma cipher. One German agent in Britain, [[Nathalie Sergueiew]], code-named ''Treasure'', who had been [[Double Cross System|'turned']] to work for the Allies, was very verbose in her messages back to Germany, which were then re-transmitted on the ''Abwehr'' Enigma network. She was kept going by [[MI5]] because this provided long cribs, not because of her usefulness as an agent to feed incorrect information to the ''Abwehr''.<ref name="Michael Smith 2007 p. 129">{{Harvnb|Smith|2007|p=129}}</ref>

Occasionally, when there was a particularly urgent need to solve German naval Enigma keys, such as when an [[Arctic convoys of World War II|Arctic convoy]] was about to depart, mines would be laid by the [[Royal Air Force|RAF]] in a defined position, whose grid reference in the German naval system did not contain any of the words (such as ''sechs'' or ''sieben'') for which abbreviations or alternatives were sometimes used.<ref>{{Harvnb|Mahon|1945|p=41}}</ref> The warning message about the mines and then the "all clear" message, would be transmitted both using the ''dockyard cipher'' and the [[U-boat]] Enigma network. This process of ''planting'' a crib was called ''[[gardening (cryptanalysis)|gardening]]''.<ref>{{Harvnb|Morris|1993|p=235}}</ref>

Although ''cillies'' were not actually cribs, the ''chit-chat'' in clear that Enigma operators indulged in among themselves often gave a clue as to the cillies that they might generate.<ref>{{Harvnb|Smith|2007|p=102}}</ref>

When captured German Enigma operators revealed that they had been instructed to encipher numbers by spelling them out rather than using the top row of the keyboard, Alan Turing reviewed decrypted messages and determined that the word ''eins'' ("one") appeared in 90% of messages.{{citation needed|date=February 2015}} Turing automated the crib process, creating the ''Eins Catalogue'', which assumed that ''eins'' was encoded at all positions in the plaintext. The catalogue included every possible rotor position for ''EINS'' with that day's ''wheel order'' and plugboard connections.<ref>{{cite web |title=The 1944 Bletchley Park Cryptographic Dictionary |publisher=codesandciphers.org.uk |url=https://www.codesandciphers.org.uk/documents/cryptdict/page34.htm |access-date=8 August 2020}}</ref>