Introduction
Thomas Jefferson sketched a wheel cipher around 1795, built from 36 lettered disks on a single axle. He used it briefly, then filed it away. His design was not rediscovered until 1922, the same year the U.S. Army fielded the M-94, a 25-disk device independently developed by Major Joseph Mauborgne. The M-94 served from 1922 through 1943 as a tactical field cipher. This tool reproduces it with the actual 25 mixed alphabets stamped on the original Bakelite disks. Set the disk order, type your message, and read the ciphertext from any row. Everything runs in your browser.
What this tool does
- Encrypts plaintext using 25 disks with the historical M-94 / CSP-488 mixed alphabets, each disk carrying a different scrambled A-Z sequence.
- Decrypts by aligning ciphertext on the reference row and reading the plaintext from the inverse row offset.
- Lets you set the disk order (the key) manually, shuffle it randomly, or use the default sequential arrangement.
- Displays the full 26-row disk grid so you can see the plaintext row and the chosen ciphertext row highlighted side by side.
- In decode mode, shows all 25 candidate plaintext rows sorted by English-language score, so you can pick the correct one when the offset is unknown.
- Processes all data locally. No plaintext or ciphertext leaves your browser.
How this tool works
The tool loads the 25 M-94 disk alphabets and arranges them in your chosen order. In encode mode, each 25-character block is aligned across row 0 of the disk grid. The ciphertext is read from the row at your chosen offset (default 1). Non-alphabetic characters pass through unchanged. In decode mode, the tool aligns ciphertext on row 0 and reads plaintext from the inverse offset.
The grid display shows all 26 rows for the first block. The plaintext row is blue, the ciphertext row green. If you do not know the offset, enable "Show all rows" in decode mode. The tool generates all 25 candidate plaintexts sorted by English frequency score, with the most likely reading at top. The shuffle button randomizes the disk order. The current order is encoded in the URL.
How the Jefferson disk cipher works
Jefferson designed his wheel cipher around 1795. The device had 36 disks on a central axle, each with the 26 letters engraved around its rim in a different scrambled order. The key was the disk order on the axle. To encrypt, the operator rotated each disk until the plaintext formed a horizontal line, then chose any other row as ciphertext. Decryption reversed this: arrange the disks in the agreed order, rotate to spell the ciphertext, and scan the other 25 rows for the one that reads as sensible text.
The M-94, designed by Major Joseph Mauborgne in 1917 and standardized in 1922, used 25 disks. The Navy designated it CSP-488. Each disk carried a mixed alphabet chosen to minimize repeated letter pairs. Disk 17 begins with "ARMYOFTHEUS," reflecting its Army origin. The disks are identified by the letter following A, from B1 to Z25. The key space is 25! (about 1.55 x 10^25), roughly 84 bits.
Each column is independently scrambled by its disk's alphabet, and the row offset adds a second variable. The cipher resists frequency analysis on a single message because each letter position uses a different disk. But if an analyst obtains multiple messages with the same disk order, they can superimpose them so corresponding columns come from the same disk. A multiple-anagram attack on those columns recovers the disk order. Friedman and Kullback at the Signal Intelligence Service demonstrated practical breaks before WWII. The U.S. replaced the M-94 with SIGABA for strategic communications. See the Wikipedia M-94 article) and the Jefferson disk article.
How to use this tool
- Choose a mode: Encode to encrypt plaintext, or Decode to recover plaintext from ciphertext.
- Set the disk order. Use Shuffle to randomize the 25 disks into a new key, or keep the default 1-25 sequential order.
- Set the row offset (1-25). This determines which row the ciphertext is read from during encryption. The default is 1.
- Type or paste your text. The output updates instantly. In encode mode, the ciphertext appears in the output field.
- To decrypt, switch to Decode mode and use the same disk order and row offset. If you do not know the offset, enable Show all rows and pick the reading that makes sense.
- Use the disk grid display to see how the plaintext row maps to the ciphertext row across all 25 disk columns.
Real-world examples
Encrypting a field message with a shuffled key
A reenactor sets the disk order to a random permutation of 1-25 and types "ATTACK AT DAWN ON SECTOR FOUR". The tool aligns each 25-character block across the plaintext row and reads the ciphertext from row 7. The output is a block of seemingly random letters. The recipient must know the same disk order and the row offset (7) to recover the message.
Decrypting when the offset is unknown
A student receives ciphertext encrypted with the M-94 but does not know which row offset was used. They paste the ciphertext, switch to Decode mode, and enable Show all rows. The tool generates all 25 candidate plaintexts and sorts them by English frequency score. The top result reads as coherent English, revealing both the plaintext and the offset that was used.
Demonstrating the multiple-anagram weakness
A cryptography class encrypts five 25-character messages with the same disk order. By stacking the ciphertexts vertically, each column contains letters scrambled by the same disk. Students anagram each column independently to recover the disk order, showing why the M-94 required frequent key changes.
Comparison with similar methods
| Method | Complexity | Typical use |
|---|---|---|
| Jefferson disk / M-94 | O(n) with 25! key space (~84 bits) | U.S. Army tactical cipher 1922-1943 |
| Enigma (3-rotor) | O(n) with ~10^23 key space | WWII German field communications |
| ADFGVX | O(n) with Polybius + columnar transposition | WWI German field cipher |
| Vigenere | O(n) with keyword | 19th century polyalphabetic substitution |
Limitations or considerations
The M-94 is insecure by modern standards. Its key space of 25! (about 84 bits) sounds large, but the cipher falls to multiple-anagram attacks when an analyst obtains several messages with the same key. Friedman's team demonstrated this before WWII. The cipher also requires both parties to share the same physical disk set and daily disk order, creating a key distribution problem. This tool uses the historical M-94 alphabets, which are public. For actual encryption, use AES-256. The tool processes text in blocks of 25 characters, and non-alphabetic characters pass through unchanged, leaking word boundaries.
Frequently asked questions
What is the difference between the Jefferson disk and the M-94?
Jefferson designed his wheel cipher around 1795 with 36 disks. The M-94, designed independently by Mauborgne in 1917 and fielded in 1922, uses 25 disks. The mechanism is identical: scrambled-alphabet disks on an axle, with the disk order as the key. Jefferson's design was not rediscovered until 1922, the same year the M-94 entered service.
How large is the M-94 key space?
The key is the order of 25 disks on the axle, giving 25! possible arrangements. That is approximately 1.55 x 10^25, or about 84 bits of key material. This was considered strong in the 1920s, but the cipher is vulnerable to multiple-anagram attacks when several messages share the same key.
Why does the tool show all 25 rows in decode mode?
In the original M-94, the recipient aligned the ciphertext and then visually scanned all 25 other rows to find the one that read as English. The tool automates this by generating all 25 candidate plaintexts and sorting them by an English frequency score. The top result is usually the correct plaintext, even when the row offset is unknown.
Was the M-94 ever broken in practice?
Yes. Friedman and Kullback at the Signal Intelligence Service demonstrated practical cryptanalysis before WWII using multiple-anagramming techniques. When an analyst obtains several messages encrypted with the same disk order, they can superimpose them so each column comes from the same disk, then solve each column independently. The U.S. replaced the M-94 with the more secure SIGABA for strategic communications.
Conclusion
This tool reproduces the M-94 disk cipher with the actual 25 mixed alphabets from the original Bakelite disks. The visual grid shows how each disk column scrambles the plaintext independently, and the all-rows decode mode mirrors the recipient's original workflow of scanning for the readable row. The Jefferson disk is a good teaching tool for polyalphabetic substitution and multiple-anagram cryptanalysis. For modern encryption, use AES-256. To explore related historical ciphers, try the Enigma machine simulator, the ADFGVX cipher, or the Vernam cipher.