Chris Spackman's NeoCities Page

Rail Fence Cipher

The Rail Fence cipher is a transposition cipher — instead of replacing letters with different letters (like a substitution cipher does), it rearranges the positions of the letters. The letters themselves stay exactly the same; only their order changes.

The Bouncing Ball Analogy

Imagine writing your message on a series of rails (horizontal lines), with a ball bouncing diagonally down and then back up, placing one letter on each rail as it goes. When it reaches the bottom rail, it bounces back up; when it reaches the top rail, it bounces back down. After placing all the letters, you read off each rail from left to right, top to bottom, to produce the ciphertext.

Try It

Result

Zigzag Grid

This shows how the letters are placed on the rails. Read each row from left to right, top to bottom, to get the ciphertext.

Frequency Analysis

Compare the letter frequencies of the ciphertext to standard English. Notice anything? Because this is a transposition cipher, the frequencies are identical to the plaintext frequencies — we only moved letters around, we never changed them. This is a major weakness: frequency analysis immediately tells an attacker that no substitution was used.

How It Works

To encrypt with a Rail Fence cipher:

1. Choose the number of rails (rows).
2. Write the plaintext letters diagonally downward across the rails. When you hit the bottom rail, change direction and go diagonally upward. When you hit the top rail, bounce back down. Continue until all letters are placed.
3. Read off each rail from left to right, starting at the top rail and working down. Concatenate all the rails together to form the ciphertext.

For example, "HELLO WORLD EXAMPLE" with 3 rails:

Rail 0: H . . . O . . . L . . . A . . . E
Rail 1: . E . L . W . R . D . X . M . L .
Rail 2: . . L . . . O . . . E . . . P . .

Reading off each rail: HOLAE + ELWRDXML + LOEP = HOLAEELWRDXMLLOEP

To decrypt, you reverse the process: figure out how many letters belong on each rail (based on the zigzag pattern), fill the ciphertext back into the rails, then read in zigzag order to recover the plaintext.

Why This Is a Different Kind of Cipher

Most ciphers you will encounter in this series (Caesar, Substitution, Vigenere) are substitution ciphers — they replace each letter with a different letter. The Rail Fence cipher is a transposition cipher: the letters are the same, just rearranged into a different order.

This distinction matters because the two types of ciphers have different strengths and weaknesses. Transposition ciphers preserve letter frequencies, which means frequency analysis will not help you figure out which letters were substituted — because none were. However, an attacker who notices the frequencies match normal English immediately knows a transposition cipher was used, not a substitution cipher.

Things to Try

• Try 2 rails. Notice that encryption simply reads every other letter first, then the remaining letters. Can you see why?
• Encrypt a message, then look at the frequency chart. Compare it to the plaintext frequencies — why are they identical? (Hint: did any letters actually change?)
• Try rails = 1. What happens? Why?
• Try setting the number of rails equal to the message length. What happens? Why?
• Encrypt a message, then decrypt the result with the same number of rails. Do you get your original message back?