Introduction
The M-94, also known as CSP-488 in the U.S. Navy, was the standard tactical field cipher of the U.S. Army from 1922 through 1943. It consists of 25 aluminum strips, each carrying a scrambled 26-letter alphabet, arranged on a central axle. The strip order is the key. Major Parker Hitt described the underlying wheel-cipher principle in his 1916 "Manual for the Solution of Military Ciphers," and Joseph Mauborgne refined the design into the M-94. This tool reproduces all 25 historical strip alphabets transcribed from declassified documents. Set the strip order, type your message, and read the ciphertext from any row. Everything runs in your browser.
What this tool does
- Encrypts plaintext using 25 aluminum strips with the historical M-94 / CSP-488 mixed alphabets, each strip carrying a different scrambled A-Z sequence.
- Decrypts by aligning ciphertext on the reference row and reading plaintext from the inverse row offset.
- Lets you set the strip order (the key) manually, shuffle it randomly, or use the default sequential arrangement.
- Displays the full 26-row strip grid so you can see the plaintext row and the chosen ciphertext row highlighted side by side.
- In decode mode, shows all 25 candidate plaintext rows sorted by English-language score, so you can pick the correct one when the offset is unknown.
- Processes all data locally. No plaintext or ciphertext leaves your browser.
How this tool works
The tool loads the 25 M-94 strip alphabets and arranges them in your chosen order. In encode mode, each 25-character block is aligned across row 0 of the strip grid. The ciphertext is read from the row at your chosen offset (default 1). Non-alphabetic characters pass through unchanged. In decode mode, the tool aligns ciphertext on row 0 and reads plaintext from the inverse offset.
The grid display shows all 26 rows for the first block. The plaintext row is blue, the ciphertext row green. If you do not know the offset, enable "Show all rows" in decode mode. The tool generates all 25 candidate plaintexts sorted by English frequency score, with the most likely reading at top. The shuffle button randomizes the strip order. The current order is encoded in the URL, so you can share a link that reproduces your exact configuration.
Each strip is labeled with a letter and number (B1 through Z25), matching the stampings on the original aluminum strips. Strip R17 begins with "ARMYOFTHEUS," reflecting its Army origin. You can display all 25 raw alphabets to inspect the exact letter arrangements used by the U.S. military.
How the M-94 cipher works
The M-94 is a cylindrical strip cipher based on the Jefferson disk principle. Thomas Jefferson sketched his wheel cipher around 1795 with 36 disks. Parker Hitt, a U.S. Army officer and cryptographer, described the wheel-cipher concept in his 1916 "Manual for the Solution of Military Ciphers," one of the first American textbooks on military cryptanalysis. Major Joseph Mauborgne refined the design and standardized it as the M-94 in 1922. The Navy adopted the same device under the designation CSP-488.
The device has 25 aluminum strips, each with a scrambled 26-letter alphabet. The key is the order of the strips on the axle, giving 25! possible arrangements (approximately 1.55 x 10^25, or about 84 bits). To encrypt, the operator aligns the plaintext across one row and reads any other row as ciphertext. Decryption reverses the process: arrange the strips in the agreed order, align the ciphertext, and scan the other 25 rows for the one that reads as English.
The cipher resists frequency analysis on a single message because each letter position uses a different strip. But if an analyst obtains multiple messages with the same strip order, they can superimpose them so corresponding columns come from the same strip. A multiple-anagram attack on those columns recovers the strip order. Friedman and Kullback at the Signal Intelligence Service demonstrated practical breaks before WWII. The U.S. replaced the M-94 with the M-209, a mechanical rotor cipher, for field use in 1943. The 25 strip alphabets used in this tool are transcribed from declassified documents, also documented at the M-94 Wikipedia article) and the Maritime Park Association. For the French predecessor, see the Bazeries Cylinder tool. For the original Jefferson design, see the Jefferson Disk tool.
How to use this tool
- Choose a mode: Encode to encrypt plaintext, or Decode to recover plaintext from ciphertext.
- Set the strip order. Use Shuffle to randomize the 25 strips into a new key, or keep the default 1-25 sequential order.
- Set the row offset (1-25). This determines which row the ciphertext is read from during encryption. The default is 1.
- Type or paste your text. The output updates instantly. In encode mode, the ciphertext appears in the output field.
- To decrypt, switch to Decode mode and use the same strip order and row offset. If you do not know the offset, enable Show all rows and pick the reading that makes sense.
- Use the strip grid display to see how the plaintext row maps to the ciphertext row across all 25 strip columns.
Real-world examples
Encrypting a field message with a shuffled key
A reenactor sets the strip order to a random permutation of 1-25 and types "ATTACK AT DAWN ON SECTOR FOUR." The tool aligns each 25-character block across the plaintext row and reads the ciphertext from row 7. The output is a block of seemingly random letters. The recipient must know the same strip order and the row offset (7) to recover the message.
Decrypting when the offset is unknown
A student receives ciphertext encrypted with the M-94 but does not know which row offset was used. They paste the ciphertext, switch to Decode mode, and enable Show all rows. The tool generates all 25 candidate plaintexts and sorts them by English frequency score. The top result reads as coherent English, revealing both the plaintext and the offset that was used.
Identifying strips by their stampings
A historian examines the strip grid and notices that strip R17 begins with "ARMYOFTHEUS," a mnemonic reflecting the strip's Army origin. Each strip is identified by the letter following A and a number (B1 through Z25). This labeling system allowed operators to quickly set up the agreed daily strip order without confusion.
Demonstrating the multiple-anagram weakness
A cryptography class encrypts five 25-character messages with the same strip order. By stacking the ciphertexts vertically, each column contains letters scrambled by the same strip. Students anagram each column independently to recover the strip order, showing why the M-94 required frequent key changes.
Comparison with similar methods
| Method | Complexity | Typical use |
|---|---|---|
| M-94 / CSP-488 (1922) | O(n) with 25! key space (~84 bits) | U.S. Army tactical cipher 1922-1943 |
| Bazeries cylinder (1898) | O(n) with 20! key space (~61 bits) | French military cipher, late 19th century |
| Jefferson disk (1795) | O(n) with 36! key space (~138 bits) | U.S. diplomatic correspondence, early 19th century |
| M-209 (1943) | O(n) with mechanical rotor, ~100 bits | WWII U.S. tactical field cipher |
| Enigma (3-rotor) | O(n) with ~10^23 key space | WWII German field communications |
Limitations or considerations
The M-94 is insecure by modern standards. Its key space of 25! (about 84 bits) sounds large, but the cipher falls to multiple-anagram attacks when an analyst obtains several messages with the same key. Friedman's team at the Signal Intelligence Service demonstrated this before WWII. The cipher also requires both parties to share the same physical strip set and daily strip order, creating a key distribution problem.
This tool uses the historical M-94 alphabets, which are declassified and public. The tool processes text in blocks of 25 characters, and non-alphabetic characters pass through unchanged, leaking word boundaries. For actual encryption, use AES-256 via the Block Cipher tool. For the WWII replacement, see the Enigma Machine simulator.
Frequently asked questions
What is the difference between the M-94 and CSP-488?
They are the same device. M-94 is the Army designation, and CSP-488 is the Navy designation. Both use 25 aluminum strips with scrambled alphabets on a central axle. The strip alphabets and operating procedure are identical.
Who designed the M-94?
Parker Hitt described the wheel-cipher principle in his 1916 "Manual for the Solution of Military Ciphers." Joseph Mauborgne refined the design and standardized it as the M-94 in 1922. The device is based on Thomas Jefferson's 1795 wheel cipher, which Jefferson sketched but never widely deployed.
How large is the M-94 key space?
The key is the order of 25 strips on the axle, giving 25! possible arrangements. That is approximately 1.55 x 10^25, or about 84 bits of key material. This was considered strong in the 1920s, but the cipher is vulnerable to multiple-anagram attacks when several messages share the same key.
Why was the M-94 replaced?
The U.S. Army replaced the M-94 with the M-209 in 1943. The M-209 was a mechanical rotor cipher that was faster to operate and easier to key, since it used internal pin and lug settings rather than physical strip rearrangement. The M-94 also had a known weakness to multiple-anagram attacks, which Friedman's team had demonstrated before WWII.
Was the M-94 ever broken in practice?
Yes. Friedman and Kullback at the Signal Intelligence Service demonstrated practical cryptanalysis before WWII using multiple-anagramming techniques. When an analyst obtains several messages encrypted with the same strip order, they can superimpose them so each column comes from the same strip, then solve each column independently.
Conclusion
This tool reproduces the M-94 strip cipher with all 25 historical alphabets from declassified documents. The visual grid shows how each strip column scrambles the plaintext independently, and the all-rows decode mode mirrors the recipient's original workflow of scanning for the readable row. The M-94 is a good teaching tool for polyalphabetic substitution and multiple-anagram cryptanalysis. For the French predecessor, see the Bazeries Cylinder tool. For the original 1795 design, try the Jefferson Disk tool. For the WWII-era German field cipher, see the Enigma Machine simulator.