Friday, June 29, 2012

German microwave communications of WWII

During WWII the Germans used microwave communications in areas where it was not possible to have landlines. This was either due to geography or for military reasons (partisan interference etc).

There were several types of microwave equipment. The main types were:

1.     Michael - DMG 4,5 (one speech plus 3 teletype channels)

2.     Rudolf -DMG 3aG  (9 channels)

3.     Stuttgart I and II - Fu G 03 (10 channels)

These types could be used together with carrier frequency equipment which allowed for several teletype links to be passed on each channel.

A good source on the German comm equipment is cdvant.org

The microwave equipment was used in all theaters. After the German forces in Stalingrad were surrounded it was this type of equipment that allowed for voice communications with the outside world.

The equipment used had a max range of 40km so in order to extend this to 110km it was necessary to find the highest possible location. The Germans built a tower on a hill near Nizhnyaya Chirskaya and during the night they raised the microwave tower and communicated with the encircled forces. During the day however they dismantled the tower because the Soviet airforce would destroy it.

This link was used by general Paulus to communicate with general von Manstein and other high level personnel.

Voice communications were not available after 22 December ’42 due to the withdrawal of the German front. [Source: FMS D-271The Battle of Stalingrad. Signal Communications in the Pocket of Stalingrad and Communications with the Outside’]

Other examples are available from FMS P-132Signal Communications in the East. By General der Nachrichtentruppen Albert Praun’, (available through fold3.com)

Athens-Derna




Norway




Belorussia



Greece



Courland


Monday, June 25, 2012

Update

I added information from ‘Hitler’s Spies’ and 'Historical dictionary of German intelligence' in German intelligence on operation Overlord.

Specifically in these paragraphs:

1.     Luftwaffe reconnaissance

2.     Polish resistance movement code London-Warsaw

3.     Uncontrolled spies

4.     SIS-SOE codes

Sunday, June 24, 2012

Insecurity of Greek codes - Part 2

In a previous piece I looked into the lack of security of Greek codes during WWII. The systems used by the Greeks were solved cryptanalytically by the Germans.

It seems that post war both the Soviet Union and Britain were able to gain access to our secret diplomatic communications. This time however it was thanks to ‘bugs’ and spies rather than cryptanalysis.

One step forward, two steps back…

Let’s take a look at the relevant information:

From ‘The Mitrokhin Archive-The KGB in Europe and the West’, p458

Despite the Sixteenth Directorate's reluctance to share most SIGINT secrets with its intelligence allies, it depended on their assistance. With the growing complexity of computer-generated cipher systems, Soviet cryptanalysts were increasingly dependent on the penetration of foreign embassies to steal cipher materials and, when possible, bug cipher machines and teleprinters. During 1974 alone joint operations by the FCD Sixteenth Department and its Soviet Bloc allies succeeded is abstracting cipher material from at least seven embassies in Prague, five in Sofia, two in Budapest and two in Warsaw. Soviet Bloc intelligence services also shared some of their agents in Western embassies and foreign ministries with the KGB. Among those who were particularly highly rated by the KGB Sixteenth Directorate was a Bulgarian agent codenamed EPIR, a security official in the Greek foreign ministry recruited by Bulgarian intelligence in 1966. Over the next ten years he assisted in the removal of over 12,000 classified pages of documents from the ministry.

From ‘Spycatcher: the candid autobiography of a senior intelligence officer’, p113

After STOCKADE, plans were laid to attack most European ciphers, starting with the Germans. But after much effort, we aborted the operation, because their machines were too well screened. But we successfully placed a probe microphone behind the cipher machine in the Greek Embassy in London. This was a particularly valuable target, since the Greeks were giving considerable support to Colonel Grivas, the Cypriot guerrilla leader, during the Cyprus Emergency.

From 'SOVIET COMINT IN THE COLD WAR' by David Kahn in Cryptologia (Volume 22, Issue 1, January 1998, pages 1-24), p8-9

Kahn’s information comes from an interview with Victor Makarov a translator of Greek intercepts at the KGB’s 16th Directorate. Makarov gives several examples from the messages he translated:

During the Israeli siege of Beirut in August 1982 the Greek ambassador had a meeting with Yasser Arafat who asked for the Greek prime minister Andreas Papandreou to intervene diplomatically.

In 1981 a message from the Washington embassy had details of a meeting between the Greek ambassador and American officials which concerned events in Eastern Europe and especially the Solidarity movement in Poland. The Russians found the information very interesting.

Conclusion:

Greek communications security was poor during WWII. It seems that post war this problem was corrected by using cipher teleprinters with OTP tape.

However during the Cold war interested parties were able to sidestep the unbreakable OTP code by using ‘bugs’ and spies.

Small countries should make every effort to protect their communications. Are Greek communications secure today? Probably not.

Friday, June 22, 2012

German intelligence on operation Overlord

In the summer of 1944 the German army suffered two horrific defeats that sealed the fate of the NS regime. In the West the Anglo-Americans were able to invade France and after hard fighting in Normandy they routed the German forces in the West and liberated France.

In the East a huge Soviet offensive against Army Group Centre in Belorussia resulted in a crushing defeat for the Germans and the liberation of the last part of occupied Soviet territory.

Operation Overlord was the Anglo-Americans plan to invade and liberate France. It had been planned thoroughly and huge military forces were assigned for it.

One of the most interesting questions of WWII history is whether the Germans could have taken measures that would lead to a defeat of the Allies in the West. Many authors and historians claim that the Germans had huge forces in the West but were prevented from moving them to Normandy because of a deception plan. I have criticized this belief here and here. The problem is that the positioning of German divisions in the West does not correspond with that theory.



During the first half of 1944 the Germans had not only moved new units into Normandy but out of their best divisions 3 out of 4 were close to it and only 1 near Calais. It was these forces that held the Allies contained in Normandy for two months.

Specifically out of their 4 operational Panzer divisions in the West 3 ( Pz Lehr, 12 SS ‘Hitlerjugend’ and 21st Pz) were positioned close to Normandy and only 2nd Pz close to Calais.

Also many units had been moved to Normandy during May ‘44. The 91st Air Landing Division was posted to the Cotentin peninsula along with Parachute Regiment 6, 101 Werfer regiment, 206 Pz battalion, 70 Army Assault battalion, 17 machine gun battalion and 100 Pz training battalion. Total strength of these units was more than 14.000 men plus 70-80 French tanks and 54 rocket launchers. [Sources: ‘British intelligence in the Second world war’ vol3 part 2 - Appendix 9 and ‘Normandy 1944: German Military Organization, Combat Power and Organizational Effectiveness’]

In addition the 352 Infantry Div was moved to the shore and the 21st Pz close to Caen. The last minute movement of these two units was not identified by Allied intel with serious consequences on D-day.

Why did the Germans place new units in Normandy? Why did they position powerful mobile units close by? Weren’t they expecting an Allied assault against the Calais area?

It seems that by May ’44 their attention had definitely shifted towards the Normandy-Brittany areas.

Hitler in a talk with Japanese ambassador Oshima on 27 May 1944 said that diversionary attacks would take place in Norway, Denmark, the Southern part of Western France and the coasts of the French Mediterranean. A major allied assault would come in either Normandy or Brittany. This would be a serious operation but once the Allies had consolidated their position it would probably be followed by the main invasion in the Calais area.

From NARA archives RG 457 SRDJ Nos 59973-5:





Another report FMS B-675 ‘Army Group B-Intelligence Estimate (1 Jun 1944)’ By Oberst i. G. Anton Staubwasser (head of intelligence for Army Group B in 1944-45) says that the German high command became convinced that Normandy would be the site of Allied landings in April/May ’44:

It is important that - for the first time in April/May - Hitler informed OB West, through General O. JODEL, as follows: "The Fuehrer has definite information that Normandy is endangered." It has not become known from, what source this news originated. This message was immediately and also later repeatedly passed on to A Gp B and all armies of the west, that is, approximately 4 weeks before the beginning of the invasion. This is also the reason for the transfer of the 91 Luftwaffe Division, several armored battalions and antitank battalions to the COTENTIN peninsula and for the assembly by OKW of the Pz Lehr Division.



General Alfred Jodl, Chief of the Operations Staff of OKW said the following in TICOM I-143 ‘Report on the Interrogation of Five Leading Germans at Nuremburg on 27th September 1945', p3

3. Signals Intelligence, however, provided very little definite information regarding the invasion before ‘D. Day’. They had not much idea where the schwerpunkt was going to be but thought it would probably be at Cherbourg, with a second attack in the Pas de Calais.

How could the Germans have correctly identified the invasion area at that time?

I’ve tried to look into all the Germans sources of secret intelligence during the period late ’43-mid ’44:

Luftwaffe reconnaissance:

By 1944 the Luftwaffe was hopelessly outnumbered both in the East and in the West. Allied fighter defenses made long range recon missions over Britain very dangerous. According to an official British study called ‘The Rise and Fall of the German Air Force, 1933-1945’, p323 the German effort was extremely limited in extent. The main effort was over the South and South-West coasts but Scapa Flow and Northern Scotland were also covered. German planes did not penetrate overland and there was no frequent coverage.

Another book ‘Eagle in flames: the fall of the Luftwaffe’ by E. R. Hooton, p284 gives more details. According to Hooton recon missions were very dangerous since the RAF had standing fighter patrols over the assembly areas, so most photographs were of targets within 40km of the coast. A Bf-109 was able to take pictures of Portsmouth harbor shortly before D-day but was destroyed when landing in France. However the Germans were able to take more photos by using a captured P-47 Thunderbolt. Recon units in France flew missions over Southern England and those in Norway covered Scotland.

David Kahn in ‘Hitler’s Spies’, p499 says that on 25 April Luftwaffe recon showed 234 LCT’s, 254 small and 170 auxiliary landing boats and 15 transports in Portsmouth, Southampton and Selsey Bill. These were judged capable of transporting 70.000 men.

Cicero spy:

The valet of the British ambassador to Turkey was a German spy and provided them with classified reports held in the ambassadors safe. Through these reports the Germans learned the codename Overlord:
Thanks to Cicero, Hitler was soon reading the British ambassador’s enraged telegram to Churchill on December 13, reporting that the Turks were demanding impossible amounts of armaments before they would agree to terms – a ploy familiar to the Führer from his dealings with the Italians. Eden accepted temporary defeat and cabled the following to his ambassador:

To sum up. Our object is to get Turkey into the war as early as possible, and in any case to maintain a threat to the Germans from the eastern end of the Mediterranean, until Overlord is launched… We still have not given up the idea that our squadrons should fly in on 15th February. [Source: ‘Hitler’s War’, p641]

However no details of the actual operation were betrayed.

Royal Navy low level codes:

Low level codes used by small ships were easily read by German naval codebreakers and they allowed them to identify the movement of landing ships from the Med and the Scottish coast to the Southern and East coasts of the UK. [Source: ADM 1/27186, p85 and 91]





British railways code:

This same Heer station had broken into the British railroads codes by late November 1943 and claimed a 98 percent success rate in reading the two thousand plus signals produced by twenty-six keys in December 1943. Although not considered vital in peacetime, such intelligence on Britain proved important by providing information on the movement of troops and supplies. [Source: ‘Delusions of intelligence’, p46]

It’s not clarified whether this code was also solved in 1944 and what insight it gave them on the movement of troops and equipment. In combination with the RN codes mentioned earlier it could have revealed to them the concentration of forces in the South.

Allied airforce radio traffic:

Creation of Allied Expeditionary Air Forces - AEAF:

The Luftwaffe signal intelligence service was able to ascertain that the call sign procedure of the US 9th Airforce was changed to be similar to that used by the British 2nd TAF (Tactical Air Force). This meant that the British and American ground support airforces had combined under one Command.

Conclusion of practice traffic:

Practice traffic of military units in Britain had been monitored for years. In March 1944 after exercise ‘Spartan’ all practice traffic stopped. This was an obvious sign that actual operations were imminent.

Transfer of units of the RAF’s 2nd TAF:

The units of 2nd TAF were monitored through traffic analysis and direction finding. In April/May most of the units were being transferred to Southern England, specifically the Portsmouth-Tangmere and Reading-Odiham areas.

Reinforcement of IX and XIX tactical air commands:

In the middle of May units of the US 8th AF were moved to the 9th AF. This was revealed when they changed their frequencies to those used by 9th AF. The traffic of 9th AF units showed a large concentration in the Middle-Wallop area in South England and a smaller one in South East England.

US Transport Command code:

The codebreakers of the German airforce were able to solve the Bomber code used by units of the US Transport Command. Bomber code was a daily changing 2-letter code table.

This allowed them to identify that the aircraft used was the C-47 transport. The bases of these units were found in the following areas through D/F (direction finding):

1.     Grantham-Cottesmore

2.     Aldermaston

3.     Exeter

Also through statistical analysis and D/F they established that the transport command had a very large number of aircraft (around 1.000) and it was assumed that they would take part in air-landing operations during the upcoming invasion

Preparation of RAF 38th Group for air landing operations:

The 38th Group of the RAF worked with the intelligence service SOE and SIS in secret operations. Their main function was to transport spies and saboteurs into occupied Europe as well as airdrop weapons for the resistance movements.

The Luftwaffe’s signal intelligence service was able to find out (through cryptanalysis of the Bomber code and traffic analysis and D/F) that the 38th Group was preparing for air landing operations in cooperation with the 2nd TAF.

Practice traffic between aircraft control stations and Air Support Parties:

In the second half of May ’44 the practice traffic between aircraft control stations aboard warships and Air Support Parties was intercepted. Through D/F this traffic was located in the area off Plymouth and Southampton. The appraisal of the signal intelligence service was that embarkation had begun and the allied operation was imminent.

The endangered area was from Calais to Cherbourg.









Slidex used by British ALO’s (Army Liaison Officers):

The SLIDEX referred to by the Germans as the EC 30/3 was reconstructed by 9 Fixed Intercept Sta in May 44. Traffic intercepted had been originated by ALOs links (FLIVONETZE) in UK. Control of these links was always at Corps level and reading of traffic gave an insight into Corps O of B, etc. PW states that traffic was British and not American and that as far as he could make out the ALOs were Army and RAF officers.



M-209 used by US armed forces:

The M-209 cipher machine was used extensively by the US armed forces in the period 1943-45. Army units in England sent training messages on the M-209 which the Germans decoded.

The USAAF used it in operational and administrative networks.

M-209 traffic together with D/F may have allowed the Germans to discover the concentration of US forces in the South.


Bell Labs A-3 speech scrambler:

The A-3 speech scrambler was used on the Washington-London radiotelephone link during the war. Two separate German teams were able to solve it and eavesdrop on sensitive Allied talks. One of these talks is described by General Walter Schellenberg of the SD security service in his memoirs:

Early in 1944 we hit a bull's eye by tapping a telephone conversation between Roosevelt and Churchill which was overheard and deciphered by the giant German listening post in Holland. Though the conversation was scrambled, we unscrambled it by means of a highly complicated apparatus. It lasted almost five minutes, and disclosed a crescendo of military activity in Britain, thereby corroborating the many reports of impending invasion. Had the two statesmen known that the enemy was listening to their conversation, Roosevelt would hardly have been likely to say good-bye to Churchill with the words, 'Well, we will do our best-now I will go fishing.' [Source: ‘The memoirs of Hitler’s spymaster’, p418]

However in summer 1943 another speech privacy system, called SIGSALY, was introduced and this was secure. The A-3 and SIGSALY were used concurrently and perhaps when the secure system was overloaded important conversations were routed on the A-3. That would explain why Roosevelt and Churchill continued to use it in 1944. Perhaps some important detail passed on the A-3 link.

US diplomatic codes:

In 1943 till mid ’44 the Germans could read the State Department codes Gray, Brown, A1, C1 and M-138 strip. Could there be details of op. Overlord in the diplomatic messages? The Germans already knew of the codename Overlord through their spy ‘Cicero’.

In ‘Swedish Signals Intelligence’, p208 an interesting episode is described. On 30 May 1944 the Finnish codebreakers decoded a US message on the M-138 strip that said Ira Hirschmann would be in Europe with ‘Overlord’ on 6 June. The Finns realized this referred to the major Allied operation but did not tell their German Allies.

Could the Germans have decoded similar messages dealing with Overlord? No concrete details are known.

Polish codes:

The Polish government in exile was a close ally of the British and its secret service provided the Allies with countless important reports. In exchange for this work Polish communications did not have to adhere to the same rules as other small Allied nations. Specifically they were allowed their own communication facilities and their own codes with no interference from the British authorities.

Because of its close relation to the Anglo-Americans and the efficiency of its secret service the Polish government was exceptionally well informed on important events.

The Germans were able to take advantage of this by decoding Polish codes. According to postwar reports they got information of great value from Polish diplomatic, secret service and resistance movement communications.

Let’s take a look at the relevant cases.

Polish resistance movement code London-Warsaw:


It was possible, moreover, to crack all wireless traffic which the Polish government in LONDON carried on with its organizations in Poland. The methods by which these transmissions were compromised are not known to PW. This activity was kept very secret indeed, owing to the importance of the source, which furnished the German Government with up to date information on the situation in POLAND and the development of the Polish question. To preserve secrecy and partly to ensure quicker delivery of the decodes, members of the Polish section of Referat VAUCK, which was then in DORF ZINNA near JUTERBOG, were transferred in autumn 43 to the Polish Referat of OKW/Chi, Gruppe V (angestellter BERND) in BERLIN. The clear text was published by OKW/Chi as "VN" (Verlässliche Nachrichten) and given extremely limited distribution. Simultaneously, Polish wireless traffic was also intercepted by FNAST LAUF, an intercept station of OKW/Chi. This double-interception was ordered deliberately, on account of the value of the traffic. A further success against the cipher systems of the Polish Government in exile was achieved over the link LONDON - TURKEY (ANKARA). PW does not know if this system was solved by Referat VAUCK or by the Polish section of OKW/Chi

47. Results in this field were almost sensational when, just before the Allied invasion of France a ban on all WT transmissions from ENGLAND was instituted which included even diplomatic channels; the wireless traffic of Polish agents to ENGLAND, however, continued to operate.

In ‘Hitler’s Spies’, p508 it is stated that a message was intercepted from the Polish government in London calling for all Poles to take up weapons against the Germans on 15 May.

Polish diplomatic link London-Washington:

From TICOM I-159 ‘Report on GAF Intelligence based on Interrogation of Hauptmann Zetzsche’, p3

9. Intelligence concerning foreign diplomatic exchanges was received from the Forschungsamt (subordinated directly to GOERING) through Ic/Luftwesen/Abwehr, and was given a restricted distribution. It consisted of intercepted Allied radio-telegrams (e.g. London-Stockholm), ordinary radio reports (e.g. Atlantic Radio) and intercepted traffic between diplomats and ministers on certain links, e.g. Ankara-Moscow (Turks), Bern-Washington (Americans), London-Washington (Poles).

10. The last-mentioned source was of great value before and during the invasion and after the breaking-off of Turkish-German relations. In general the Forschungsamt reports contained a great deal of significant information concerning economic and political matters.

Polish secret service link London-Grenoble:

The Polish secret service operated many networks in occupied France. In 1943 their communications on the link London-Grenoble were decoded by OKW/Chi. The code used was a version of the British Stencil Subtractor Frame.

From report CSDIC SIR 1719  'Notes on Leitstelle III West Fur Frontaufklarung’, p15

CODE-CRACKING BY FUNKABWEHR

107. Leitstelle III West also benefited from the work done by the code and cipher department of Funkabwehr, which studied all captured documents connected with codes and ciphers, with the object of decoding and deciphering the WT traffic of agents who were regarded as important and could not be captured.

108. Valuable results were often obtained by Funkabwehr. During the winter of 43/44, the above-mentioned code and cipher department succeeded in breaking codes used by one of the most important transmitters of the Polish Intelligence Service in FRANCE. For months thereafter WT reports from Polish agents to ENGLAND were intercepted and understood; the same applied to orders they received from ENGLAND. The Germans also learnt that important military plants were known to the Allies, and a considerable number of names and cover names of members of the Polish Intelligence Service were discovered.

109. The code and cipher dept of Funkabwehr succeeded only rarely in breaking codes used by Allied agents in cases where no document containing the code or cipher was available. It more frequently succeeded in breaking codes when documents containing them were captured.

However British report DS/24/1556 says that this link was ‘a properly controlled leakage’. This probably means that when the Brits found out about the German success they sold out the Poles in order to protect Overlord.

Overview of Polish communications:

Could the Poles have transmitted information on op. Overlord? It’s not unlikely. They were after all very well informed on military and political events. British report DS/24/1556 admitted that no one knew what kind of information passed on Polish links.

Uncontrolled spies:

The spies that the Germans sent to Britain were all(?) identified and controlled by the British. This meant that the information they sent back to Germany was designed to mislead the German high command.

However in 1944 two spies existed that were not controlled by the Allies and they transmitted interesting information to the Germans. One was in Sweden, the other in Portugal.

From Stockholm Karl Heinz Krämer provided a steady stream of maritime and aviation intelligence allegedly obtained in Britain by agents code-named HEKTOR and JOSEPHINE. A British investigation showed that he did not really have agents in the UK but rather got his intel from the press and conversations with Swedish officers and foreign envoys, notably the Japanese military attaché Makato Onodera. [Source: Historical dictionary of German intelligence, p244]

Another German agent in Lisbon said in May 1944: ‘the plan of attack favored by the Allies was an assault on La Manche (Cherbourg) peninsula.’ [Source: ‘British intelligence in the Second world war’ vol3 part 2, p61]

SIS-SOE codes:

From TICOM I-115 'Further Interrogation of Oberstlt METTIG of OKW/Chi on the German Wireless Security Service (Funkuberwachung)’, p5

26. PW cannot give any accurate details of playing back activities in which Referat VAUCK participated. Dr VAUCK told him that shortly before the beginning of the invasion twelve links, operated either by German personnel or by agents turned round, were running from FRANCE to ENGLAND. Of these twelve links, the Germans intended in six cases to reveal in the course of transmission that the cipher had been broken and that the agent was being played back. It was hoped thereby to confuse the British Intelligence Service, so that they would begin worrying which other of their many links were compromised. PW does not know whether, and if so with what success, this operation was carried out.

The Agents section of OKH/in 7/IV (later moved to the Funkabwehr) was able to decode agents transmissions, usually through physical capture of the cipher material but sometimes through cryptanalysis.

German intelligence agencies like the Abwehr and the Sicherheitsdienst had many agents inside Western European movements and especially in France they controlled whole resistance groups.

In June ’44 they were aware that the BBC had issued secret orders for the resistance movements to prepare for the invasion.

Could they have identified the Allied interest in Normandy through their agents? A report dated 20 March from the evaluation center Foreign Armies West said:

…………Continuing observation of enemy air attacks, agents activities and agents wireless networks in the occupied areas of the West unanimously and  clearly show concentrations in the areas Pas de Calais, Paris, Tours, Loire estuary and the south coast of France. [Source: ‘British intelligence in the Second world war’ vol3 part 2, p54]

Normandy is not mentioned. Could they have received new information in the period April-May?
It seems so, as the Sicherheitsdienst intercepted messages to the underground  Armée Secrète in the Le Havre area. This resistance group was ordered on 15 May to go on full alert on 20 May. Prealarm messages were analyzed by the Reich Main Security Office-RHSA and the majority were addressed to groups in Brittany, Normandy and the Lille-Amiens area. [Source: ‘Hitler’s Spies’, p510-1]

Conclusion:

In 1944 the German high command knew that a major landing operation would come in the West. Although they expected diversionary operations in Norway, Southern France and the Balkans they believed that the main invasion would take place in the Northern coast of France. The area they considered most likely to be invaded was from Calais to Cherbourg.
Initially their belief was that the area around Calais was the most likely target.

However by May ’44 the Germans had shifted their attention to the Normandy-Brittany areas. New units were moved there and they were the reason that the fighting in Normandy was hard for the Allies.

It is not clear on what information they based this change in strategy. It is reasonable to assume that some or all of the intelligence that alerted the Germans came from a combination of codebreaking with traffic analysis and D/F.

The Allied units in Britain took many security measures but could not keep 100% radio silence. Their decoded messages and their radio emissions gave vital clues regarding the concentration of forces in the South.

Low level naval codes gave excellent intelligence on the movement of landing ships. 

Radio traffic of the Allied air forces showed the movement of units to the South of England.

Did the Germans learn more specific details of ‘Overlord’? How could Hitler have ‘definite information’?

The Polish resistance movement and diplomatic codes could have revealed information on Overlord. Unfortunately details are lacking. The problem for the Allies was that Polish communications were not monitored nor were they forced to share their codesystems with the British.

US diplomatic communications were also vulnerable in the first half of 1944.
Despite the Allied effort to fortify their codes even in 1944 many of their systems were insecure. The intelligence gathered from secret Allied communications must have been the reason that the Germans moved units to Normandy. The battle of attrition was finally won by the Allies but if the difference of forces was more tolerable then the outcome of the battle might have been different.

More research is needed to identify if ‘Overlord’ was compromised from signals intelligence. Instead we’ll probably get more books and articles on how the Germans had millions of troops in the West but were tricked into holding them back.

Wednesday, June 20, 2012

Sunday, June 17, 2012

The Irish Government Telegraph Code

Although Ireland was a small country the Irish diplomatic codes attracted the attention of the German Foreign Ministry’s Pers Z and Goering’s Forschungsamt. These two organizations were able to read the Irish codes during WWII.

The Republic of Ireland used for its secret diplomatic communications the British Government Telegraph Code, a five-letter, one-part, 84,000 group system. This was used unenciphered for low level messages and enciphered for more important traffic.

The Germans had managed to capture a copy of the Government Telegraph Code at Bergen in 1940.

The section of Pers Z that was responsible for Irish codes was Dr Ursula Hagen’s group. This covered England, Ireland, Spain, Portugal and Latin American countries.

Technical Assistant (Wissenschaftliche Hilfsarbeiterin) Dr.  Ursula Hagen was born March 23, 1901. She entered Pers Z S on October 1, 1922 and by 1939 (and through 1945) she was head of the group which was responsible for work on England, Ireland, Spain, Portugal, and Latin American countries. In 1942 her group had 12 people assigned to it. [Source: EASI vol 6]

Irish codes were also worked on by Goering’s Forchungsamt.

The Forschungsamt’s Abteilung 7 had considerable success (‘ziemlich laufend’) with Irish codes up to the end of the war. [Source: I-54 ‘Second interrogation of five members of the RLM/Forschungsamt’, p2-3].

Abt. 7 covered: USA, England, Ireland, South America, Spain, Portugal, Turkey, Egypt and Far East. Personnel were roughly 60-70.

More details on the Irish codes are given in TICOM I-172Interrogations of Hagen and Paschke of Pers Z S’, p3-4

11. Eire

HAGEN described the work done by Pers Z S on Irish Diplomatic substitution recoding tables for use with G.T.C. There were 26 hatted alphabets, each group being taken from one alphabet. The alphabets were not necessarily used in order but always systematically. The last group of a telegram indicated the system to be used in the next message, e.g, if the last group was recyphered with alphabet 5, then this alphabet would also be used for the first group of the next message. The tables changed at irregular intervals - only about four times during the war. Different keys were used for various posts, e.g. Berne, Rome, Berlin, Paris, Madrid. The traffic became more difficult to read in 1942-43, when there was insufficient material and not enough staff. Then the Forschungsamt started work on it and solved the Berlin and Madrid links. Pers Z S took over the keys from the Forschungsamt in 1944. The first three figures of the message gave the page number, the fourth figure the number of the block, and the fifth and sixth figures the line-numbers. This new system used a 300-figure subtractor; each end of the link was allotted 25 such keys, e.g. 25 Dublin-Berlin and 25 Berlin-Dublin, etc. If the length of the message exceeded 300 figures, the key was repeated, but a new key was used for each new message, always in the order 1 to 25.

Messages consisted of reports from the Irish minister on the state of affairs in Germany. The Staatssekretär was interested in diplomatic reports on the trend of events, air-raids; etc. The traffic was regarded as valuable by Ribbentrop and some messages were shown to Hitler. HAGEN said that with any luck six fairly long messages were sufficient to break a new substitution recoding table, and this work took less than a week.

Irish messages in plain G.T.C. did not provide information of any value.

Thursday, June 14, 2012

The Soviet K-37 ‘Crystal’ cipher machine

The Soviet Union used during WWII a large number of 2,3,4 and 5-figure codes of various types. These were all hand systems. When it came to machine ciphers they had in 1941 three different machines in service, the K-37 ‘Crystal’ off-line machine and the M-100 and B-4 cipher teleprinters.

The K-37 was a copy of the Hagelin B-211 with Cyrillic characters on the keyboard. According to cryptomuseum.com before the outbreak of WWII, Boris Hagelin was forced (by the Swedish authorities) to sell two B-211 units to the Russian Embassy. The Russians took the design and copied the machine. At the same time they converted the 5 x 5 matrix into a 5 x 6 one, in order to accommodate more characters. It allowed 30 letters of the Cyrillic alphabet to be used.



According to a very interesting article in agentura.ru production started at Leningrad plant No 209 in 1940 and by the summer of ’41 roughly 150 K-37 machines were in use.

The Germans were able to capture one K-37 machine in 1941 and they evaluated its security. They found that it had low security and could be solved on a 10-letter crib.

From the TICOM reports it seems that they never had the chance to try their theoretical solution on actual traffic, as the machine was not used by the Soviet forces in the West.

From TICOM I-2 ‘Interrogation of Dr. Huettenhain and Dr. Fricke at Flenshurg,21 May 1945’, p1-2

Q. DID THE RUSSIANS USE MACHINES?
A. THEY HAVE A MACHINE MODELLED AFTER THE FRENCH PATTERN 211, HAGELIN TYPE.

Q. DID YOU HAVE ANY SUCCESS WITH THIS MACHINE?
A. WE CAPTURED A MACHINE BUT DID NOT INTERCEPT ANY TRAFFIC.


From TICOM I-64 ‘Answers by Wm. Buggisch of OKH/Chi to Questions sent by TICOM’, p4

K-37:

This was an electrical machine, almost exactly similar to the French B 211 but without the "Ueberschluesseler"(added E. wheel at one point) of the B211. It was considerably less secure than the B211 and a theoretical solution was worked out which did not need much text. B. had forgotten the details on this. The K37 had been captured, but never really used by the Russians.

From TICOM I-58 ‘Interrogation of Dr. Otto Buggisch of OKW/Chi’, p5

K-37 - A Russian machine, same principle as B211, but more primitive model was captured in 1941, and a theoretical solution worked out by HILBURG and Dr. V. DENFFER. They found it could be solved on a 10 letter crib. The work remained purely theoretical as no traffic in the machine was ever received.

From TICOM I-92 ‘Final Interrogation  of Wachtmeister Otto Buggisch (OKH/In 7/VI and OKW/Chi)’, p4

10. K-37 differed from B211 in lacking the "Surchiffreur", or ‘’Ueberschluesseler’’, a sort of Enigma wheel by which the path of the current was turned to another channel at one point, crossing  over and exchanging positions with another path instead of continuing parallel. Buggisch called this an X effect, and said it greatly complicated analysis, as it was hard to tell when it was being employed in place of the parallels.

Perhaps the K-37 was not used in the Western areas of the Soviet Union because its low security had been discovered by Soviet cryptologists or they learned that one of their machines had been captured and suspected that the Germans had found a solution.

However the German assertion that the Russians never used the K-37 is not correct. It was definitely used in the Soviet Far East in 1945. The Americans intercepted this traffic. It seems reasonable to assume that the K-37 was also used prior to ‘45 in the Soviet East.

Postwar history

The captured German K-37 was apparently handed over to the Western Allies at the end of WWII. The Americans built an analog model of the K-37 which they called Sauterne Mark I.

This machine was attacked after the war by the Anglo-American codebreakers. It was used on Red army circuits in the Far East.

In February 1946 US cryptanalysts managed to reconstruct its internal settings, in March the first message was decoded and by April a regular supply of decrypts was being produced.

The US success was short-lived as K-37 traffic dried up by 1947.

Sources:The Secret Sentry’, agentura.ru, various TICOM reports, Intelligence and National security article: ‘Behind Venona: American signals intelligence in the early cold war’, ‘The Russian Target’ by Matthew M. Aid, cryptomuseum

Tuesday, June 12, 2012

Update

Time for some new TICOM reports:

I-90 ‘Interrogation of Herr Reinhard Wagner (OKW/Chi) on Japanese systems’ - 1945

I-109  ‘Translation of a Report by Lt. Ludwig of Chi Stelle OB.d.L, based on questions set for him at ADI(K)’ - 1945

I-119  ‘Further Interrogation of R.R. Voegele and Major Feichtner on GAF Sigint’ - 1945

I-154 ‘Interrogatlon of Uffz. Rudolph Schneider of In 7/VI’ - 1945

I-155  ‘Report by Ostuf SCHUEDDEKOPF on the Forschungsstelle Der Deutschen Reichspost at Langenveld near Eindhoven’ - 1945

I-186 'Interrogation of Oberpostrat Kurt VETTERLEIN on Attempted Tapping of Transatlantic Cables’ - 1946

I-202 ‘Interrogation of Min Rat Viktor Wendland of OKW/Chi’ - 1946

I-204 ‘Preliminary interrogation report of  former Regierungsbaurat  Johannes Anton Marquart of OKH/Gen.d.NA’ - 1947

Report of interrogation of Kurt Friedrichsohn - 1947
CSDIC/CMF/Y 40 - 'First Detailed Interrogation Report on Barthel Thomas’ - 1945

Available both from my Google Docs and Scribd accounts.

 
Also added professor Hoheisel in German mathematicians in the cryptologic service and made a change in  The US TELWA code regarding the SIGRIM code. This was the US War Department Telegraph code 1919 edition and not 1938 as i had written.

Sunday, June 10, 2012

The US TELWA code

In a previous piece on the M-209 cipher machine there was mention of the US TELWA code. Reinold Weber a member of NAAS 5 in France described the solution of this code in his interview by Klaus Schmeh.

The TELWA code was the US War Department Telegraph code 1942 edition (SIGARM). The previous version was WDTC 1919 edition (SIGRIM). [Sources: EASI vol4, p158 and EASI vol1, p5]

Some details on these codes are given in various TICOM reports:

From CSDIC/CMF/Y 40 - 'First Detailed Interrogation on Report on Barthel Thomas’, p4-5

II. The AC1

This was a US army Admin code, of no strategic value. Traffic in this code was passed by fixed US WT stas and bases abroad. The code was of the 5- letter type, with about 60,000 groups, each page containing 90 groups. There were code-groups for complete phrases, but these were not used  very often, PW thought that operators found it easier to encode text by taking clear single words rather than be bothered to look down the clear phrases column to find the required sentence. The code had been ‘captured’ before 39 and all German crypto secs in the field were equipped with Photostat copies. In Norway, 9-fixed Intercept Sta took and read this traffic from summer 42 to autumn 43.

III. The TELWA

This code succeeded the AC 1 in autumn 43. It was a simpler edition of the AC 1, with fewer variants provided, but built up on the same lines and of the same size. 9 Fixed Intercept Sta broke and reconstructed it to a large extent, with the help of the available AC 1.

From TICOM I-154 ‘Interrogation of Uffz. Rudolph Schneider of In 7/VI’, p2

B. A second system was a five letter, pronounceable code. Since a copy of the code book was available, Schneider assumes it had been captured and since there was no re-encipherment, cryptanalysis presented few complications. Frequent transmission garbles and a number of missing pages in the copy available provided the only difficulties. The code was a large one, however, and alphabetical; as a result, complete success was achieved more often than not. This system, too, was discontinued early in 1944. Prisoner thinks it was in use at a relatively high level and remembers Stillwell as a frequent signator.

From TICOM I-112  ‘Preliminary Interrogation of Reg. Rat Dr Ferdinand Voegele (Chi Stelle, Ob.d.L.) and Major Ferdinand Feichtner (O.C. of LN Regt. 352)’,p5

4) U.S. Telegraph Code.

Alphabetical code of 140,000 5 letter groups with discriminant TELWA was introduced in October, 1943. Had recovered about 12,000 items by May, 1944. By February, 1945, the traffic was being read currently.

EASI vol4 says that although no traffic of strategic value was passed on the War Department Telegraph codes, the intelligence was valuable enough for the Germans to invest resources in reconstructing them.