Rail Fence (zig-zag)

The Rail Fence cipher (or zigzag) is the canonical example of a transposition cipher: no letter is changed, only rearranged following a geometric pattern.

How does Rail Fence (zig-zag) work?

Write the plaintext diagonally, top-down then bottom-up, across a fixed number of rails (rows). The ciphertext is read by concatenating each rail left to right.

With 3 rails and CIPHERCHRONICLE:

Rail 1 : C . . . E . . . R . . . C . . .
Rail 2 : . I . H . R . H . O . I . L . .
Rail 3 : . . P . . . C . . . N . . . E .

Reading rail by rail: CERC + IHRHOIL + PCNE = CERCIHRHOILPCNE.

The key is simply the number of rails (here 3).

What are the variants of Rail Fence (zig-zag)?

• Redefence — same principle but with a starting offset (you don’t have to begin on the first rail).
• Scytale — ancient variant that uses a cylinder rather than a sheet.
• Columnar transposition — generalization where column order is permuted by a keyword.
• Double transposition — Rail Fence applied twice with different rail counts.

What are the weaknesses of Rail Fence (zig-zag)?

Strengths

• Trivial to apply by hand, even for a child.
• Resists raw frequency analysis — letter distribution stays identical to the plaintext.

Weaknesses

That’s also its tell: if the frequency distribution looks normal but the text reads as gibberish, you’re facing a transposition.

• Brute force: humanly, rail counts range from 2 to 10. Testing each is instant.
• Text structure: ciphertext length divided by the number of rails often hints at the correct key (the zigzag should fill rails evenly).

In CipherChronicle

Rail Fence is the gateway to transpositions, stepping out of the substitution world (Caesar, Atbash). Its grids reward players who notice the “natural” distribution and realize no letter was swapped.