17 19 10 31 30 03 10 45 59 45 · 495 · 03 35 19 · 04 45 59 35 10 31 57 31 03 19 · 19 57 57 19 · 830
i a c o n o s c e r e · quanto · s i a · p e r i c o l o s a · a l l a · francia
6 = word break · 2x = null · 19|38|47 = a · 44 = che · 474 = mente · 830 = Francia

Rome → Paris · homophonic and syllabic cipher in two-digit figures, with a nomenclator · September and December 1632

Francesco Barberini to Nuncio Ceva: the two letters of Francia 346 without a published decipherment

Francesco Barberini
fromFrancesco Barberini

Archivio Apostolico Vaticano, Segretario di Stato, Francia, doss. 346, nos. 2 and 11: despatches of Cardinal Francesco Barberini to Giovanni Battista Ceva, nuncio extraordinary at the French court (DECODE R75 and R84, “partially decrypted”).

George Lasry reconstructed the key of this dossier in 2020 and deciphered three of the five ciphertexts the catalogue named. His key was applied here to the other two. It is variable-length (two-digit codes and three-digit nomenclator elements written without separation), so decryption means choosing among divisions of the digit stream; a language model did that. Both letters are deciphered except for most nomenclator elements, and six elements he left blank are given values.

Daniel Bourdeau · posted · updated

Method: read with known key · Extent: partial (78% of the cipher)

Summary. The catalogue listed five ciphertexts of Barberini to Ceva as a transcription job: DECODE says “deciphered in original”, so the text was taken to have been deciphered at the time and the work to be copying a decipherment off the leaf. That was only half right. George Lasry reconstructed the key of the whole dossier on 24 October 2020, and it is attached to all eleven of its DECODE records; he also published aligned decipherments of four letters, which covers three of the five this entry named. Two were left: R75, of 25 September 1632, and R84, of 18 December 1632. His key was applied to both here. The system is homophonic and syllabic on two-digit figures, with every pair beginning 2 a null and the single figure 6 as word separator; because 6 occurs inside no code, word boundaries are certain and the only ambiguity is whether the next code is two digits or a three-digit nomenclator element. A decoder that tries the possible divisions and keeps the most probable resolves that under an Italian character model, interpolated with a model built from the dossier’s own clear passages; calibrated leave-one-out against Lasry’s four letters it agrees with his segmentation on 95.8% of tokens. R75 carries a partial contemporary interlinear decipherment, which was used only as a check; the decryption agrees with it on 77.5% of letters. Aligning the two then gives meanings from the interlinear for six of the ninety-five nomenclator elements Lasry left open, among them 830 = Francia. R75 argues that the Swedish victories make an accommodation easier but the union far harder; R84, written a month after Lützen, ends on the fear that the consequences will hold France disunited and unable to help her allies. One hundred and seventeen nomenclator elements stay open, and the names of both letters are inside them.

01 What was catalogued, and what was there

Busta 346 of the Francia series of the Segreteria di Stato holds the originals and ciphers sent from Rome to Ceva during his extraordinary nunciature, 1632 to 1634. DECODE catalogued eleven ciphertexts from it, R74 to R84. The catalogue entry here named five (R75, R77, R78, R82, R84) and scored them by rule from the metadata, unviewed.

Opening the records changed the problem. Every one of the eleven carries, as an attachment, a key marked #KEY: reconstructed, #TRANSCRIBER NAME: George Lasry, #DATE OF TRANSCRIPTION: October 24, 2020. Every one also carries the same 29,050-byte file of aligned decipherments, covering four letters. So the state of the dossier before this session was:

DECODEItemDatePagesBefore
R74346-17 Sept 16321read by Lasry
R75346-225 Sept 16322not read
R76346-316323marked decrypted
R77346-416322read by Lasry
R78346-516322read by Lasry
R79–R81, R83346-6 to -8, -101632–347marked decrypted
R82346-927 [Oct] 16321read by Lasry
R84346-1118 Dec 16322not read

Three of the five ciphertexts the catalogue named were therefore already deciphered by Lasry, and two were not. R75 and R84 carry a raw ciphertext transcription and nothing else. Lasry, for his part, left every one of the ninety-five nomenclator elements he met printed as <xxx>; none was given a value.

02 The system

The key is Lasry’s. It was re-derived here from his four aligned decipherments, parsed into 104 line pairs and 179 distinct tokens, which confirms it and settles three points the key note leaves open.

TokenValue
6word separator
2xnull — no pair beginning 2 ever carries plaintext
XYletter or syllable, 61 codes: three homophones for each vowel, two for most consonants, and groups for al, che, chi, con, da, de, di, et, il, in, io, la, ma, mi, no, per, qu, quel, se, si, st
pXYnomenclator element: one prefix digit followed by an ordinary two-digit code

First, the figure 6 occurs inside no code, neither in a key pair nor in any of the ninety-five nomenclator elements. Word boundaries in this cipher are therefore certain, which is unusual and is what makes the rest tractable.

Second, the DECODE key note says the nomenclator elements “have 4 digits starting with prefix 4”. They have three. Concatenating Lasry’s own token stream for 346:1 and diffing it against the original transcription of the same leaf gives a 99.7% match with no dropped prefix; the elements are three digits as they stand. The prefix is 4 in twenty-seven of the ninety-five, but it is also 0, 1, 3, 5, 7, 8 or 9.

Third, in ninety-one of the ninety-five the two digits after the prefix are themselves a valid key code. The element is a prefix plus an ordinary code, which is exactly why the parse is ambiguous: at most positions a two-digit and a three-digit reading are both legal. Twenty-nine of the hundred pairs are dead (02 05 06 12 16 32 33 36 42 46 52 56 60–69 72 76 82 86 92 96 99), and meeting one forces the three-digit reading, but that is not enough on its own.

03 Dividing and decrypting the digit stream

The decoder works along the digit stream and keeps the several hundred most probable partial decryptions at each position. Every 6 is taken as a separator; elsewhere the decoder chooses between a two-digit code, a two-digit null and a three-digit element, scored by a character model. Scoring is incremental: the shared lang package’s dense model is a flat table of log P(c | previous four characters), so each emitted character costs one array lookup and several hundred candidates are cheap to keep.

The model matters more than the search. it-cinquecento is Renaissance diplomatic Italian but stops around 1620 and knows nothing of this clerk’s hand: one sign for u and v, doubled letters dropped, word division his own. It was interpolated with a model built on 7,693 characters from the dossier itself: the passages the clerk wrote in clear, plus Lasry’s plaintext of whichever letters were not under test.

Calibration is leave-one-document-out against Lasry’s four letters: the nomenclator inventory offered for a document is built from the other three only, which is the situation of R75 and R84. Agreement with his own segmentation:

ModelTokensNomenclator recallPrecision
it-cinquecento alone0.9450.520.70
interpolated, w = 0.60.9580.700.79

Per letter, interpolated: 346:1 0.871, 346/4 0.928, 346/5 0.905, 346/9 0.951. The figure to keep in view is the nomenclator recall. Three elements in ten are still missed, and a missed element comes out as two or three plausible Italian letters, with no gap to mark it. Errors in the decipherments below are concentrated there.

The one independent check is R75’s own leaf. A decipherer in 1632 wrote his decipherment between the cipher lines, and the DECODE transcriber copied what was legible of it. It was used for nothing else: neither for the key, the model nor the decoder. On the twenty-four lines where enough survives, 1,105 letters, 77.5% agreement, ignoring word division; the last line agrees at 100%. The residue is shared between errors in this decryption and the witness’s own illegibility, since the transcriber flagged much of the faded interlinear with ? and *.

Lines of small digits with a contemporary Italian decipherment written in larger letters between them
R75 (25 September 1632), f. 81r, left half of four lines in the lower part of the page: the 1632 decipherer’s interlinear, … di guerra saranno sempre in pericolo … a conoscere quanto sia pericolosa alla Francia … cominciano hormai a pensar a …, the witness this decryption was checked against. Image: Archivio Apostolico Vaticano, Segreteria di Stato, Francia 346 f. 81r, via DECODE R75.

04 R75: “Di Roma li 25 di Settembre 1632”

Two pages, 1,446 code groups. Barberini on what the Swedish victories do to the French alliance. The letter makes one argument: the victories make l’accomodamento easier and l’unione far harder, and the nuncio is to make the French court see that the power now winning is a danger to France herself. Gaps are unresolved nomenclator elements or transcription noise; italics mark elements given values here.

…le vittorie di […] e quella forza renderanno per avventura più facile […] quell’accomodamente di […], ma più difficile assai […] quell’unione… per […] interessi di Francia…

è tempo che se cominci a conoscere quanto sia pericolosa alla Francia la potenza d[i …], che cominciano [hor]mai a pensar a cose [grandi] et ad indrizar la [mira] loro a […]; consideri quanto sia oportuno alli vastissimi pens[ieri] di […] natione estendere il loro dominio sino al Mediterraneo con acquisto d’una piazza, e con quanto buon fondamente lo possono sperare in una [rivoluzione] … di Francia … hanno tanto forze marittime e terrestri; consideri… che la vittoria […] è altretanto formidabile alla Francia quanto alla […]…

[non si] sarà sempre al medesimo, darà sempre orecchie a[l] torbidi, et haverà chi li suggerisca; et un successor[e]… restringer in maniera che sempre non habbi libertà di [salvarsi] in campagna… [bisogna] cercar di compor[re gli] esterni, che cagioneranno e fo[men]teranno li domestici…

[è] già… arrivata a tal […] di gloria… che può con ragion temere che la […] fortuna non si rivolti; cerchi dunque d’augumentarla con l’arti… pur vuol seguitar… indrizi le cose per intraprender guerra contro… quel[li] che sola parte manca alla gloria di […]. In somma… le congiunture presenti sono più contrarie alla s[ua] […] quell’unione, tanto più deve […] pensar a ritrovar ragioni che la persuadano.

The unnamed power is Sweden. The 1632 decipherer’s own interlinear supplies, where this decryption has a gap, the words pensieri di goto natione (the Gothic nation), and it is the reach of that nation sino al Mediterraneo that Rome wants Paris to contemplate.

05 R84: “Roma li 18 di Xbre 1632”

Two pages, 954 code groups, written a month after Lützen (16 November 1632). The first folio is largely in clear: Barberini acknowledges Ceva’s despatch of the 8th, says he has nothing further to answer, and refers him to Mons. Bichi at court. The cipher carries the analysis, and it turns throughout on quella vittoria.

ricordando a […] che si […] quella vittoria contro […] con la sua consueta prudenza, ad indur[re] […] a facilitar il […]…

[…] che bollivano in Francia dopo la mia partenza; pure de[…] li torbidi di […] furono cagione che li […] concludessero la […]…

le gelosie [che] quella potenza di Francia cerca di […]; e li spiriti inquieti […] fanno pastura su li impegni che il […] tiene con […] potenti, e si muovono più facilmente con speranza di fo[men]to e diversione. Per stabilire et assicurar le cose […] bisogna levarsi le inimicitie esterne… nascerà l’alt[r]o in mano di Francia. Posso dire che stia […] se vo[gliono] ridur a termini ragionevoli le pretensioni…

non […] entrar in […] cose, non lascierà di andar [f]acilitando le […] maniera che a lei s[i] accenna… la fuga di […] non so quanto sia a proposito con ins[o]liti rigori… [in] Francia metter in disperatione… potendo da[…] conseguenze che tengano disunita per un lungo pezzo la Francia, e sotto giogo alle esterne violenze, o almeno impotente a soccorrer li suoi alleati.

That last clause is the point of the despatch. A month after Lützen and the death of Gustavus Adolphus, Rome’s concern is France: the danger is now a France held disunited, under external pressure, and unable to help her allies.

06 Six elements of the nomenclator

Lasry gave no value to any of the ninety-five elements he met. Deciphering R75 puts a placeholder at each element; aligning that decryption against the 1632 interlinear shows which word of the contemporary decipherment stands at the placeholder. Twenty-two elements caught a witness fragment, and six survive checking against Lasry’s four letters, where they were not fitted:

CodeReadingEvidence
474mentepiena~, principal~, non sola~ per il solo proprio, malacomoda~; witness fragment met
495quanto“e ~ al proporre arbitrare”; pairs with 498
498tanto“che ~ in <347> quanto in <857> si sappia la cagione”
830Franciafour times out of four in Lasry’s letters, always after a feminine article: “render la ~ più poderosa”, “valere a danno quella ~”, “hoggi la ~ in a di dar legge”
854guerraR75 interlinear, twice
149piazzaR75 interlinear, “acquisto d’una ~”

Adding the six raised the control agreement on R75 from 0.737 to 0.775. That test is partly circular for 854 and 149, which came from the witness itself; the independent evidence for 474, 495, 498 and 830 is that they fit the four letters Lasry read, which the witness never touched. The pairing of 498 and 495 as tanto…quanto around two undecoded place codes is the best supported of them.

One element was rejected. 491 drew the fragment goto (the Gothic nation, Sweden), but it does not fit its four contexts in Lasry’s letters, where it stands before unione and after conferito con. It is left open.

07 What remains open

08 Sources

The transcriptions, the key, the decoder, the calibration and control scripts and the full decipherments are in ceva1632/.