Signal Hunter Teacher Guide Classified // Math Div
Department of Cryptanalysis & Statistics
Signal Hunter
Statistical Cryptography & Substitution Cipher Analysis • Teacher Guide
Lesson Overview
Students act as intelligence analysts, discovering how the laws of probability and character frequencies break monoalphabetic substitution ciphers. By analyzing letter distribution profiles, they uncover the mathematical "fingerprint" of languages, proving that encryption without structural shuffling cannot hide statistical signals.
Target Level High School Math / CS
Duration 60 - 90 Minutes
Core Mathematical Concepts
1. Probability Distributions: Every natural language has a static probability distribution for individual characters. In English, the probability of selecting an 'E' at random is approximately \(12.7\%\), whereas 'Z' is less than \(0.1\%\).2. Frequency Conservation: A monoalphabetic substitution cipher replaces letters 1-to-1. While the letters change (e.g., all E's become X's), the underlying frequencies remain identical. The "fingerprint" is preserved, only shifted.3. Chi-Squared Test Concept (Extension): Modern cryptanalysis measures how close a decrypted sample's distribution is to expected English text using standard goodness-of-fit formulas: \[\chi^2 = \sum \frac{(O_i - E_i)^2}{E_i}\]
Materials & Preparation
• Cipher Breaker Slides: For whole-group modeling and concept introduction.
• Cryptic Patterns Activity Sheet: Contains the team-based decoding mission.
• Frequency Fingerprints Worksheet: Independent calculations and analysis.
• Tools: Scientific calculators or student laptops for graphing distribution charts.
Lesson Pacing
10m
The Hook (Unbreakable?): Present a heavily encoded paragraph. Ask students to solve it. Highlight the sheer combinatorial explosion of checking keys (\(26! \approx 4 \times 10^{26}\) possibilities). Introduce the "statistical backdoor."
15m
Statistical Analysis: Present English letter probability distributions. Show how mapping the most common cipher text characters allows high-confidence decoding. Walk through decryption of a short test sentence.
20m
Team Cryptanalysis (Activity): Hand out the "Cryptic Patterns Activity Sheet." Teams count ciphertext frequencies, construct histograms, compare to base English frequencies, and crack the message.
15m
Independent Worksheet: Students complete the "Frequency Fingerprints Worksheet" to evaluate independent ciphertext fragments and calculate statistical frequencies mathematically.
UNIT: APPLIED PROBABILITY PAGE 1 OF 2 SECRET SERVICE INTEL
Facilitation Strategy & Intelligence Briefing
Facilitation & Solutions
How to handle hurdles, prompt student insight, and check activity outputs.
Common Student Misconceptions
Pitfall: Believing small ciphertext samples match distributions perfectly
Students get frustrated when a 20-character message doesn't have its most common character as 'E'. Reinforce the **Law of Large Numbers**: distributions converge to expected value as the sample size \(n\) increases. In tiny samples, variance is extremely high.
Pitfall: Reverting to arbitrary guessing when frequencies don't align instantly
Remind them of the "clue matrix": look for common 2-letter words ("is", "to", "it") or 3-letter combinations ("the", "and") which preserve their structural signatures too.
Guided Discussion Questions
Q: If you replace every space with another character, does encryption become significantly safer? Q: How do we fix this vulnerability? (Transition to modern cryptography)
Answer Key & Solution Paths
Activity Sheet: The Team Mission Decode
Ciphertext: HGZGRHGRXH RH GSV XLNKZHH LU WZGZ
Plaintext: STATISTICS IS THE COMPASS OF DATA
Key Mechanics: This is a standard Atbash cipher (alphabet reversal: A ↔ Z, B ↔ Y). Notice that the letters 'G', 'Z', 'H' appear with absolute dominance corresponding exactly to English 'T', 'A', 'S' frequencies.
Worksheet: Frequency Fingerprints Decode
Sample Cipher text: WZXZ RH GSV MBT HRTMZO IN GSV MLRHV
Plaintext: DATA IS THE KEY SIGNAL IN THE NOISE
Statistical distribution highlights: 'S' consistently represents 'H', 'V' represents 'E'. 'G' consistently represents 'T'. Total character counts on worksheet: E (represented by V) appears 3 times, T (represented by G) appears 2 times.
UNIT: APPLIED PROBABILITY PAGE 2 OF 2 SECRET SERVICE INTEL
Cipher Breaker Slides SYSTEMS PROTOCOL: SIG-INT
DECRYPT MISSION // LEVEL 01
The Signal in
the Noise
Shattering substitution ciphers using probability distributions and letter frequency analysis.
HOST: HEAD OF CRYPTANALYSIS
DO NOT COPY • RESTRICTED USE
THE COMBINATORIAL BARRIER
SLIDE 02 / 04
The Brute-Force
Impossibility
A monoalphabetic substitution maps every alphabet letter to a unique random letter. Finding the key looks easy, but the math reveals a fortress.
26! Possible Keys ≈ 403,291,461,126,605,635,584,000,000
TIME COMPLEXITY ANALYSIS
Suppose a supercomputer could test 1 Billion keys per second:
Total time required to test all keys:
12.7 Billion Years
Equal to the age of our universe
There must be a mathematical backdoor.
ALGEBRAIC COMBINATORICS SECRET SERVICE INTEL
PROBABILITY DISTRIBUTIONS
SLIDE 03 / 04
Language Fingerprints
Letters do not appear with equal likelihood. Natural languages follow strict, predictable probability distributions.
EXPECTED PROBABILITY DISTRIBUTION OF ENGLISH LETTERS (%)
12.7%
E
9.1%
T
8.2%
A
7.5%
O
7.0%
I
6.7%
N
6.3%
S
6.1%
H
6.0%
R
Statistical Conservation Principle: Substitution replaces the letters , but leaves the frequencies completely unchanged.
DATA & PROBABILITY SECRET SERVICE INTEL
THE BACKDOOR PROTOCOL
SLIDE 04 / 04
How to Attack
The Cipher
01
Count: Find the character frequencies in the ciphertext sample.
02
Map: Match the dominant spike characters directly to ETAOIN SHRDLU .
03
Reconstruct: Leverage word layouts and double letters (e.g., OO, EE) to solve the remainder.
LIVE CASE ANALYSIS
CIPHERTEXT SAMPLE:
HGZGRHGRXH
Top Frequencies: G (3x) • H (3x) • R (2x)
Cryptic Patterns Activity Sheet Applied Probability // Team Activity
Cryptic Patterns
Mission ID: SIG-INT-01
Date: __________________
Analyst Names (Team Members) 1. ______________________ 2. ______________________
Designated Team Code __________________________________________
Active Intercept Briefing
Intelligence services intercepted an enciphered string. We know the adversaries used a monoalphabetic substitution cipher (a 1-to-1 letter swap). Since substitution preserves the native relative frequencies of letters, you must tally the characters in the intercept to uncover the hidden language signal.
INTERCEPTED STREAM HGZGRHGRXH RH GSV XLNKZHH LU WZGZ
Step 1: Character Tally Matrix
Tally and count every occurrence of the characters found in the intercepted message above. Write "0" if a letter does not appear.
G
H
Z
R
X
S
V
L
N
K
U
W
Total
Step 2: Translate & Decode
Using your tally matrix and your slides' English frequency distribution chart, map the high frequency letters to their respective plaintext characters. Then, reconstruct the full message below.
RECONSTRUCTED PLAINTEXT MESSAGE
Step 3: Intelligence Debrief
1. Which ciphertext letters had the highest frequency counts? Explain why this matches the expectation for standard English text.
2. Calculate the probability of selecting an 'H' at random from the ciphertext. Is this value higher or lower than the theoretical probability of selecting an 'S' in a massive English novel? Why?
UNIT: APPLIED PROBABILITY ACTIVITY SHEET RESTRICTED USE ONLY
Frequency Fingerprints Worksheet Independent Practice // Statistics & CS
Frequency Fingerprints
Workspace: STAT-CRYPT
Score: ______ / 20
Analyst Name ________________________
Date ________________________
Class Period ________________________
Part 1: Probability Calculations
Consider the following intercepted ciphertext snippet (spaces are preserved but not counted in total characters):
WZXZ RH GSV MBT HRTMZO IN GSV MLRHV
Q1. Determine the sample size (n):
Count the total number of alphabetic characters in the ciphertext snippet above.
\(n\) = ____________________ characters
Q2. Find the Relative Frequencies:
Calculate the experimental probability \(P(C)\) of each letter occurring in this message.
P('V') = ______ / \(n\) = __________ %
P('G') = ______ / \(n\) = __________ %
P('Z') = ______ / \(n\) = __________ %
Part 2: Linguistic Mapping
In natural English, the top four most frequent letters are E (12.7%) , T (9.1%) , A (8.2%) , and O (7.5%) .
Based on your probability calculations in Part 1, construct a mapping theory for the ciphertext letters 'V', 'G', and 'Z'. Which English letters do they represent? Justify your choice using frequency data.
Test your hypothesis. Replace the letters 'V', 'G', and 'Z' in the word "GSV" with your expected values. Does it reveal a common English word? Explain.
Part 3: The Law of Large Numbers
In standard English, the theoretical probability of selecting the letter 'E' at random is \(12.7\%\). In this 28-character sample, the actual occurrence might differ. Why do shorter ciphertext samples show higher statistical variance than longer chapters of a book? Refer to the Law of Large Numbers.
UNIT: APPLIED PROBABILITY WORKSHEET RESTRICTED USE ONLY
