The Cabinet of Ciphers, №1 — Vigenère

An intermediate cipher puzzle you can play in your browser, with the story of why it mattered.

The pitch

This is the first entry in the Cabinet of Ciphers — a graded collection of secret-writing puzzles where each one pairs a working engine with the intelligence around it: how the cipher works, why people trusted it, the curious history, and an idea for using it yourself. №1 is the Vigenère cipher, the code that contemporaries called le chiffre indéchiffrable — "the indecipherable cipher" — and believed unbreakable for three centuries.

Open the page and you get four things: a short illustrated explainer, a live encode/decode engine with an interactive Vigenère table, an "attacker's view" with the classic cryptanalysis tools, and a challenge ciphertext left with no key. Crack it.

Where it came from

Seeded from a prompt to collect ciphers and encryption techniques as working, shareable, graded artifacts. Research framed the collection as a "curiosity cabinet" of the secret-writing tradition, with a spine borrowed from how cryptography is actually taught — shift → substitution → polyalphabetic → transposition → mechanical — which doubles as the difficulty grade. Vigenère is the natural intermediate rung: it feels unbreakable until you meet the one weakness that undoes it.

Comparable tools in the space — CyberChef, cryptii, dCode — are excellent engines but aren't graded or story-driven. The gap this collection fills is editorial: a playable engine, the curious story, an application idea, and a difficulty grade in one shareable page.

The playtest

A blind solver — given only the page, with no access to the solution — was run against the challenge. It used the on-page tools the way a player would: estimate the key length by index of coincidence, then recover the key by per-column frequency analysis, then decode.

• Outcome: solvable
• Difficulty: intermediate (target) → intermediate (actual)
• Unique path: yes — no unintended shortcut found

The puzzle is genuinely solvable with the tools provided, and not trivially so: a naive single-letter frequency attack (the kind that cracks a Caesar cipher) does not work here, which is exactly the lesson.

How to play

1. Read the intelligence panel so the Vigenère table makes sense.
2. Under the challenge, click load into the attacker's view.
3. Estimate key length, then read the column frequencies to recover the keyword one letter at a time.
4. Enter the keyword in the engine, switch to decode, and read the hidden message — it ends in a flag of the form CABINET{…}.

Use copy share link to send any message as a single URL; the keyword never travels with it.

Solution

The full intended path, alternate approaches, and designer notes are kept in a separate gated solution so the puzzle isn't spoiled here — withheld while the puzzle is live. Try the challenge first.