Habr•October 1, 2026•🇷🇺Translated from Russian

How the Lorenz SZ 42 Teleprinter Cipher Machine Worked: Nazi High Command Encryption and Its 1941 Breakthrough

In 1940, British interceptors detected unfamiliar teleprinter signals in the ether, mechanical trills instead of Morse code. These German encrypted teleprinter systems were collectively called Fish. Analysis of Lorenz messages between Vienna and Athens began in summer 1941, with the codename Tunny adopted in 1942. The German designation was Schlüsselzusatz, first SZ 40 then SZ 42 and variants.

Why Lorenz When Enigma Already Existed

Enigma M3 was portable but required separate encryption and transmission steps. The Wehrmacht high command needed direct teleprinter links between headquarters. The Lorenz SZ 40/42 sat between the teleprinter and the line, automatically encrypting the five-bit stream. Operators prepared messages on punched tape for transmission; the receiving unit restored plaintext for printing.

Four largely complete machines survive. Serial 1137 is at The National Museum of Computing, serial 1077 at Bletchley Park, serial 1116 at the National Cryptologic Museum, and one at the Deutsches Museum.

ITA2 Code and Vernam Cipher

Lorenz used the five-bit ITA2 code. It implements the Vernam cipher: plaintext bits XORed with a keystream produced by the wheels. When the keystream matches exactly and is used once, perfect secrecy results, but mechanical repetition created exploitable patterns.

Twelve Wheels: χ, ψ and μ Groups

Twelve wheels generated the keystream. Five χ wheels stepped every character; five ψ wheels stepped together but could be halted by two μ motor wheels. Each χ and ψ wheel contributed one bit, yielding Kᵢ = χᵢ ⊕ ψᵢ. Wheel lengths were pairwise coprime, producing a long period before repetition.

The Stuttering Psi Mechanism and Cryptanalysis

The μ61 wheel controlled μ37, which in turn decided whether the ψ wheels advanced. When ψ wheels stayed still, Δψ became zero, simplifying statistical attacks on ΔC = ΔP ⊕ Δχ ⊕ Δψ. Long messages revealed language biases once χ was correctly guessed, enabling recovery without exhaustive search of all 1.6 × 10¹⁹ starting positions.

Operator Error of 30 August 1941

Two long transmissions between Vienna and Athens used the same starting positions after an operator repeated a message with minor corrections. This depth allowed British analysts to reconstruct wheel patterns and movement rules, paving the way for Colossus in 1944.

Related articles

Securitylab•Other

10 Services for Instant Video Meetings by Link Without Registration

The article reviews ten platforms designed for quick video calls that require minimal setup. Services such as Bitrix24 Sync and SaluteJazz stand out because they allow organizers and guests to join meetings without creating accounts. Other options like Yandex Telemost, VK Calls, Google Meet, Zoom, Microsoft Teams, Jitsi Meet, MTS Link, and Kontur.Talk offer varying levels of registration requirements, participant limits, and time restrictions on free plans. The comparison highlights differences in meeting duration, guest access policies, screen sharing, and integration with corporate tools. Practical advice is provided on testing connections, checking mobile support, and understanding technical limits that may affect long sessions. The review concludes that choosing the right service depends on team size, need for extended calls, and existing ecosystem preferences.

AntiMalware•Other

Heterogeneous IT Infrastructure Management Persists Among Russian Companies

A recent AM Live viewer poll revealed that 54% of participants manage their heterogeneous IT infrastructure only partially, with just 3% achieving unified control across multiple vendors. The discussion took place during the broadcast titled 'IT Ecosystems: Convenience, Savings, or Dependency?' and highlighted ongoing challenges in the Russian market amid import substitution efforts involving companies such as Orion Soft and Astra Group. 23% of respondents reported using separate platforms with independent management, while 16% relied on a single vendor's unified ecosystem. Key drivers for interest in unified platforms included automation needs (78%), cost reduction (64%), compatibility issues (61%), and specialist shortages (53%). Experts Sergey Rychikhin and Alexander Gavrilenko emphasized that true ecosystems require technological integration, consistent user experience, scalable architecture, and unified support rather than simple branding alignment. Recommendations included clearly defining integration requirements and exit conditions in contracts to mitigate vendor lock-in risks.

Securitylab•Other

BGP Anycast and Traffic Filtering: How Distributed DDoS Protection Works

Powerful DDoS attacks can leave servers intact while blocking user access by overwhelming network links or equipment before traffic reaches applications. Scaling server resources offers little help in such cases. One effective defense distributes incoming traffic across multiple geographically dispersed scrubbing centers using BGP Anycast, which advertises the same IP addresses from different locations. Routers then direct packets to the nearest or most appropriate node based on BGP policies. This architecture allows each center to filter malicious traffic locally before forwarding clean data to the protected infrastructure. The approach proves especially useful against volumetric attacks but requires careful management of routing, load distribution, and application health checks. Providers such as Qrator Labs and Akamai Prolexic operate large anycast networks with multi-terabit capacity.

Securitylab•Other

Freedom Holding Corp Builds Integrated Financial Ecosystem Across Banking, Insurance, Telecom and AI

Freedom Holding Corp., listed on Nasdaq under FRHC, has grown from a brokerage founded by Timur Turlov into a diversified group operating in 24 countries with its core market in Kazakhstan. The company now encompasses Freedom Bank Kazakhstan, Freedom Life and Freedom Insurance, Freedom Telecom, Freedom Cloud, and the Arbuz marketplace, all unified through the Freedom SuperApp launched in April 2024. In the financial year ended 31 March 2026 the group reported revenue of $2.19 billion and net profit of $153.3 million, while banking assets reached $5.36 billion. Freedom Holding is also investing heavily in AI infrastructure, planning a 100 MW sovereign data center and a $2 billion AI hub in partnership with NVIDIA and the Kazakh government. The company has expanded into Tajikistan, Turkey and is seeking licenses in Georgia and France while maintaining strong growth in deposits and active users.