Phillips cipher

The Phillips cipher is a polyalphabetic cipher designed in the early 20th century by A. R. Phillips in the United States. It sits in an intermediate position between monoalphabetic substitution and Vigenère — less predictable than the former, but simpler to execute by hand than the latter.

It is now mostly studied for its pedagogical architecture: it introduces the idea of families of grids derived from one another by simple geometric operations, anticipating the Enigma rotors and other mechanical devices of WWII.

Principle

The base grid

Start with a 5×5 grid (Polybius) built from a keyword and filled in with the remaining letters (I/J merged):

Keyword: KEYWORD
        K E Y W O
        R D A B C
        F G H I L
        M N P Q S
        T U V X Z

The eight derived grids

From this base grid (call it G1), build seven other grids (G2 through G8) by cyclic row rotation:

• G2: shift the first row of G1 down by one position.
• G3: shift the second row of G2 down by one position.
• … and so on through G8.

In total, you obtain 8 different grids, each a rotational permutation of the previous one.

Encryption

The plaintext is split into blocks of 5 letters. Each block is encrypted with a different grid in the cycle:

• Block 1 → G1
• Block 2 → G2
• Block 3 → G3
• … up to G8, then start over from G1.

Within a block, each letter is encrypted by a monoalphabetic substitution derived from the active grid: locate the plaintext letter in the grid and replace it with the letter sitting two rows down and one column to the right (with wrap-around).

Example

Plaintext CIPHE (first block, grid G1):

• C is at row 2, column 5 → take row 4, column 1 → M.
• I is at row 3, column 4 → take row 5, column 5 → Z.
• P is at row 4, column 3 → take row 1, column 4 → W.
• H is at row 3, column 3 → take row 5, column 4 → X.
• E is at row 1, column 2 → take row 3, column 3 → H.

Partial result: CIPHE → MZWXH.

Strengths and weaknesses

Strengths

• Enriched key space: 8 grids derived from a single one (keyword + rotation order).
• Frequency distribution flattened compared with a mono substitution — better resistance to plain analysis.
• Quick by hand: once the 8 grids are prepared, encryption becomes mechanical.

Weaknesses

• 8-block periodicity (40 letters) → Kasiski analysis on repetitions.
• Grids derived by simple operations: breaking one grid lets you derive the other 7.
• Crib + known position: if the attacker guesses a word and its block index, they identify the active grid and the substitution table.

Today, Phillips is breakable in minutes by a cryptanalyst with a computer. At its time of invention, it offered an acceptable trade-off between security and hand-feasibility.

Variants

• 4-grid Phillips — simpler version, periodicity of 20 letters.
• Random-rotation Phillips — the grid order is no longer G1→G2→…→G8 but a random permutation agreed upon in advance.
• Phillips + transposition — the Phillips ciphertext is then run through a columnar transposition, largely killing the periodicity.

Why it’s historically interesting

Phillips is a missing link between:

• 19th-century classical cryptography (Vigenère, Beaufort, Bazeries) — based on pure alphabetic operations.
• 20th-century mechanical cryptography (Hebern, Enigma, SIGABA) — based on geometric operations on rotating plates.

Phillips’s eight grids, derived by cyclic rotation, directly anticipate Enigma’s electromechanical rotors: the same geometric mechanism applied at scale.

In CipherChronicle

Phillips is the eight-clock cipher — the one where eight dials spin at different speeds to produce a polyalphabetic effect. Companion grids can ask the player to rebuild the 8 grids from a keyword, then synchronise the decryption block by block with the cycle. An excellent exercise to grasp how a simple geometric operation multiplies the complexity of a cipher.