HISTORICAL CONTEXT AND LESSONS
Every failure in OTP history was human, not mathematical. VENONA proves the system works — and proves operators break it.
Understanding where this system comes from deepens respect for its requirements.
10.1 Origins
The one-time pad was invented (or independently discovered) around 1917–1919 by Gilbert Vernam (AT&T) and Joseph Mauborgne (US Army). Vernam's original system used a teletype key tape and XOR. Mauborgne recognized that true randomness in the key was necessary for perfect secrecy.
Shannon proved the theoretical security in 1949 in "Communication Theory of Secrecy Systems." His proof showed that perfect secrecy requires that the key be at least as long as the message and uniform (random).
10.2 Soviet Practice
Soviet intelligence services (GRU, NKVD, later KGB) used one-time pads extensively from the 1920s onward. The pads were typically:
- Silk or flash paper (nitrocellulose)
- Printed in small typeface, two copies
- Pages numbered and initialed
- Burned after use
The straddling checkerboard they used was called "VIC" in Western cryptanalysis (named after a Soviet agent). It was sophisticated: the blank positions in row 1 were derived from a keyword and a date, and a sequential number added a further keying layer.
10.3 VENONA: The Limits of Perfect Ciphers
The US VENONA project (1943–1980) decrypted thousands of Soviet messages. It exploited:
- Depth from reuse. During WWII, the Soviet pad printing facility in the Urals, under production pressure, printed some pages twice. When the same page was used for two different messages, analysts could subtract the ciphertexts to get a depth (superimposition of two plaintexts). Statistical analysis of the depth, combined with probable-word cribs, gradually recovered both messages and ultimately the key segment.
- Partial plaintext known. Some messages were known to contain standard header phrases (diplomatic boilerplate). These cribs helped anchor the decryption.
- Code book overlap. Some messages used a codebook as an intermediate step between plaintext and the OTP input. Recovering the codebook (via captures and other intelligence) unlocked additional messages.
None of these exploited a mathematical weakness in the OTP itself. All exploited operational failures. The cipher is stronger than the operation.
10.4 Known Agents Identified via VENONA
VENONA identified agents including Klaus Fuchs (passed nuclear weapon design to Moscow), Julius and Ethel Rosenberg (atomic spy network), Alger Hiss (State Department), Donald Maclean and Guy Burgess (British Foreign Office). All were identified through traffic analysis, depth exploitation, and crib attacks — not by breaking the cipher.
These were not failures of the OTP. They were failures of the humans operating it.
10.5 Lessons Distilled
The cipher is provably secure. Human procedures are not.
Every operational shortcut is a potential depth, crib, or traffic analysis vector.
Pad reuse is the worst failure. It is unrecoverable.
Frequency of transmission reveals operational tempo. Use dummy traffic.
Intermediate plaintext (checkerboard output) is as sensitive as the plaintext itself. Destroy it.
Standard phrases and fixed-format messages create cribs. Vary message structure while maintaining discipline.
Destroying used material is not optional. It is the last step of every operation.