Caesar vs Vigenère — which cipher fits which job?

Caesar and Vigenère are the two “historical” ciphers everyone meets first. They share the same surface mechanics (“I shift each letter in the alphabet”) but are in fact fundamentally different — and the difference is measured in centuries of resistance.

The shift: a number or a word?

Caesar uses a single key: an integer (Julius picked 3). Every plaintext letter steps back N positions in the alphabet, always by the same amount. Quick to apply by hand, and catastrophic in security terms: only 25 keys are possible. Human brute-force takes five minutes.

Vigenère extends the idea with a text key. Each letter of the key indicates the shift to apply to the corresponding plaintext letter. The key repeats when you reach the end. A 7-letter key gives 26⁷ ≈ 8 billion combinations — direct brute-force becomes infeasible by hand.

Why Vigenère held for three centuries

Caesar falls to the first frequency analysis: the most frequent letter in the ciphertext remains the image of E, you reconstruct the table in fifteen minutes.

Vigenère, by contrast, flattens the frequency distribution: one same plaintext E is sometimes enciphered as I, sometimes as J, sometimes as V, depending on the key letter that lands on it. For three centuries, it was called “the indecipherable cipher.”

Its fall dates from 1854 (Babbage, never published) then 1863 (Kasiski). The trick: if the same plaintext sequence lands twice on the same position of the key cycle, it produces the same ciphertext. The Kasiski test looks for these repetitions, deduces the key length, then reduces the whole thing to L independent frequency analyses.

When to use which

• Classroom workshop, escape room, quick puzzle → Caesar. Key in two seconds, solution accessible to beginners, immediate satisfaction.
• Longer puzzle, community challenge, QR code in a treasure hunt → Vigenère. Resists a distracted eye, requires real cryptanalysis to fall.
• Real security → neither. AES-256 or ChaCha20.