01 The volume
Français 3022 is a sixteenth-century recueil of originals and copies, mostly imperial correspondence of 1527–28 that came into French hands. There are about twenty letters of Juan Pérez, the imperial secretary in Rome, several of them in clear. There are three letters of the Marquis del Vasto (Alfonso d’Ávalos), who commanded the imperial infantry after the Sack of Rome. There are Spanish “avertimientos” of 1528 from Fuenterrabía and Bayonne, and a small bundle of Italian espionage papers. The notice’s folio numbers run about three higher than the ink foliation. Below, folios are the ink numbers and “views” are Gallica’s (ark btv1b90601558).
| No. | Folios (views) | What it is | Outcome |
|---|---|---|---|
| 10 | ff. 26–28 and loose f. 39 (51–55, 76–77) | Del Vasto to Charles V, “de Ysola”, 27 September 1527 | Already solved (Lasry 2023, Tomokiyo 2026) |
| 6 | ff. 16v–17v (32–34) | Catalogued as an anonymous report; actually del Vasto to Charles V, Rome, early December 1527 | Read, about fifteen code groups open |
| 19 | ff. 40–43 (78–85) | Del Vasto to Charles V, Rome, 6 November 1527 (not in the target, same key as no. 6) | Lasry’s letter layer, partial; content summarised in CSP Spain |
| 20 | ff. 44–46v (86–91) | Italian letter to “Garbino”, Madrid, 11 April 1528 | Transcribed; not read |
| 20bis, 21 | ff. 48–50v (94–98) | A jargon, a code-name list and an “Aditione nel zifra” | Read; they explain the design of no. 20’s code |
02 Checked first: who had read them
The catalogue says “no decipherment noted”, and the obvious place for a French decipherment was checked first. The eighteenth-century Clairambault copies were searched. Clairambault 327 ff. 279–280 copies no. 20 as “Lettre non signée écrite au seigneur Garbino du 11 d’avril 1528 … partie en chiffre, partie non”, with the cipher copied and nothing deciphered. Clairambault 314 f. 337 copies the addition sheet. Neither carries a decipherment, and none turned up in the neighbouring français volumes.
The decipherments are modern. Tomokiyo’s cryptiana pages record that George Lasry sent him a solution of no. 10 in 2023. In 2026 Tomokiyo edited it into a Spanish text and published it as “Gasto–Charles V Cipher 1”. He also published Lasry’s preliminary letter-level decryption of a second cipher, used in no. 6 and in no. 19, asking for someone who knows Spanish to finish it. No. 10 is therefore counted here as found, not read. Its text was checked against the ciphertext and not redone.
03 No. 6: del Vasto’s December letter
The piece catalogued as an anonymous report opens in clear: “A seis de noviembre escrivi a V. M. muy largo y tanbien a xxvij de setiembre, cuyos duplicados van con esta”. The clear first page reports the agreement with the Pope for “la libertad suya y de los cardenales” (the capitulation of 26 November) and says that del Vasto is still in Rome only because the Prince of Orange, “el qual se espera que verna de aqui a tres dias”, has not yet arrived to take the command. That puts it in the first days of December 1527.
The cipher is a Caesar shift of one place over a 21-letter alphabet, with homophones, plus a nomenclator of three-letter groups beginning with b, c or d. Lasry’s decryption has the letter layer right; it checks against the f. 16v ciphertext word for word. It leaves the groups as [doz], [deh] and so on, and some of its short homophone labels are consistently off: “con” is como, some “al” are el, some “fin” are mas. Taking every occurrence of each group across nos. 6 and 19 and reading the Spanish around it fixes about forty of them.
| Group | Reading | Deciding context |
|---|---|---|
| doz | Lautreque | “piénsase que [doz] será para ir sobre el reino” |
| deh | la Marca | “su camino es por la [deh], porque traen su artillería por agua hasta Ravena” |
| bog | buelta | “camina la [bog] del reino”; “la [bog] de Perosa” |
| ceg | hombre | “no quieren ser más [ceg]s d’armas” |
| daf | quiere | “para caminar un exército se re[daf]n” (requieren) |
| dor | para | “[dor] ir sobre el reino”, “[dor] caminar” |
| baf | primero | “mi parecer es [baf] que salga el exército” |
| dnd | qual | “Siena, la [dnd] es muy devota de V. M.” |
| dnb | dinero | “alguna manera de [dnb] o de hazelles la guerra” |
| biq, boq | duque, estado | “al [biq] de Urbino”; “el [boq] de Urbino y tomallo” |
| cef | gente | “esta [cef] ha venido en un número tan poco” |
| dod, don, dum, cez, raq | quando, si, su, ni, mi | “por vía de [dum] Santidad”; “no se puede mover [cez] dar un paso” |
The full table, with confidence marks and the twenty or so probable readings (Milán, Florencia, poco/poca, mil, Roma, liga), is in n6_reading.md. With them the cipher of ff. 16v–17v reads as a strategic proposal. Del Vasto wants the army out of Rome and moving north before Lautrec settles the matter in Lombardy. His plan: secure Siena, “la qual es muy devota de V. M.”; threaten Florence so that the League must come to its aid; take Perugia, “una tierra del Patrimonio muy rica y muy gruesa”, and the state of Urbino, “en el qual se hallará poca resistencia”; and pass into the Marche, “donde no pueden faltar vituallas”. It ends with a warning that runs through all his letters of that winter: “que el exército por lo de advenir no se puede sostener desta manera”, and that with so many shortages “es imposible que el servicio de V. M. se haga como sus fieles vasallos deseamos”.
About fifteen groups stay open, each with a single context that could support two or three words. A third letter in the same key would settle them. No. 19 is one, but only its first leaf has a decryption, and CSP Spain III.2 no. 233 summarises its content from a copy in the Salazar collection, not its words.
04 No. 20: the Garbino letter and Ranzo’s code
No. 20 is an Italian letter, dated at Madrid on 11 April 1528, endorsed on the back to “Garbino”. It alternates clear and code. The clear passages report that the Chancellor was ill with gout, that fifty galleys were being fitted out, that a million ducats had been raised in Castile and 500,000 more were expected from the Cortes of Aragon, and that the Empress was in the seventh month and the prince would be sworn heir. The coded passages, about two thirds of the letter, are what it was sent for.
The design is explained by the sheets bound after it. On f. 48 is a jargon, with more on f. 49: cover letters signed “Antonio de Cosenza” to “Andrea Romano in Valencia”, news disguised as the price of grain, and a list of cover names. On f. 49v the Emperor is “Joan Jacobo”, del Vasto “portolano de Gergenti”, Garbino himself “antonio petra”. On f. 50 is an “Aditione nel zifra” that shows how the code works.
Each code group is the initial of the word with a number: apresso is a327, Cartagenia c327, Garbino g215, soa santità s395, and common syllables get groups of their own. The addition continues each letter’s list from where the base table stopped (a1–326, b1–156, c1–326 …). The same code is used in the signed letters of Hieronimo Ranzo in BnF fr. 2988 ff. 2 and 9–10 and fr. 3019 f. 73. Ranzo was a Vercelli nobleman at Charles V’s court, of the family of Gattinara’s mother. Norbert Biermann had already tied the addition sheet to Ranzo’s code in a 2017 Cipherbrain thread. The Garbino letter is very likely Ranzo’s.
05 Why it does not read
An initial-letter code is usually weak for one reason: if each letter’s list is in alphabetical order, the number tells you roughly where in the dictionary the word sits. That was the first thing tested. The distribution of the numbers within each initial was compared with where frequent Italian words fall in an alphabetical list, against shuffled orders. No. 20 scores z = −0.5. The same test run on Castiglione’s letters encoded with a genuinely alphabetical code scores about +6.5. Ranzo’s numbering is not alphabetical, so a number says nothing about its word beyond the initial.
What is left is a word substitution under one constraint, the initial letter, with about 550 group types in no. 20 and 730 in Ranzo’s own letters. All 1,315 groups of no. 20 were transcribed from full-resolution scans, and about 2,600 more from the six Ranzo pages. The two share 316 group types, which confirms the key is one table. An annealer then assigned each group a word with the right initial, treating the z groups as nulls, and scored the result with a word-bigram model built from Castiglione’s Lettere (diplomatic Italian written from Spain in these same years) and Guicciardini. It was first run on a control: 3,900 words of Castiglione held out of the model and encoded the same way.
| Test | Tokens right | Group types right |
|---|---|---|
| Control, 3,900 encoded words of Castiglione | about 46 % | about 9 % |
| No. 20 and Ranzo, 3,900 groups | Same function words on every restart; content words vary from run to run | |
That is the limit of the method, and the control shows it. Frequent words come out, because their contexts pin them: c170 che, i100 il, p149 per, n38 non, r41 re, s233 sua, m170 mi, p246 più. The words that carry the news occur once or twice each and do not. Nor was there a crib to be had. No Ranzo page repeats a passage of no. 20 (the longest shared run is a stock three-group phrase), the copy marked “dup.ª” duplicates another Ranzo letter rather than this one, and the Clairambault copy is undeciphered. The other “pièces en chiffre” of fr. 2988 are a different, French, symbol cipher.
06 What would finish it
Only new evidence will finish no. 20: Ranzo’s base table, or any of his letters that was deciphered at the time or survives in clear. The places to look are Gattinara’s papers in the Archivio di Stato di Vercelli, the imperial correspondence in Simancas and Vienna, and the other side of the Garbino network. The transcriptions and the solver are ready for a key or a crib; with even a few hundred words of known plaintext the substitution would close quickly. For no. 6, a clear copy or a full decryption of no. 19 would settle the remaining groups.
07 Sources and files
- BnF français 3022 (Gallica); français 2988 (Gallica), views 6–7 and 17–20; français 3019 (Gallica), views 114–116; Clairambault 327 (Gallica), views 263–264.
- S. Tomokiyo, cryptiana, George Lasry’s solutions and Spanish ciphers, “From the Archives”.
- Calendar of State Papers, Spain, vol. III part 2 (1527–29), British History Online, no. 233.
- K. Schmeh, Cipherbrain, 17 May 2016, comments by Norbert Biermann and Thomas, 2017.
- Repository: vasto1527/, with notes, the no. 6 reading, the transcriptions of no. 20 and of Ranzo’s letters, the addition sheet as JSON, and the solvers and control.