Tass VVeir

LL Amalgams of cryptography and the work of "Shake-speare" can only be properly evaluated when viewed in the light of both the history and techniques of cryptology. Just as the correctness of a solution to a mathematical problem can only be determined by one who is cognizant of relevant fields of mathematics, so it is necessary to cast a question of cryptologic validity into appropriate contextual relief. While a complete treatment of the history of cryptography is to be preferred to the brief outline given here, it is hoped that a short review of pertinent information will provide the reader who has not researched the subject with a sufficient basis for judging the cryptogram solution demonstrated below.

   It was the Spartans, the most warlike of the Greeks, who established the first system of military cryptography. As early as the fifth century B.C., they employed a device called the 'skytale' [which] consists of a staff of wood around which a strip of papyrus or leather or parchment is wrapped close-packed. The secret message is written on the parchment down the length of the staff; the parchment is then unwound and sent on its way (@ Kahn 82).

    Francis Bacon, in Book VI of his 1623 Latin edition of The Advancement and Proficience of Learning, uses the text of a "Spartan letter sent once in a Scytale or round cypher'd staffe" as an example in his section on "cyphars" (1640 translation, 268). Specifically, the text is used in a demonstration of his "Bi-literarie Alphabet" cipher method, a means of enciphering a message and concealing its presence by using two alphabets, the corresponding letters of which differ slightly in appearance. The missive sent by "cypher'd staffe" serves as the secret message: Bacon calls this the "interiour letter". It is concealed in a quote "taken out of the first Epistle of Cicero, wherein a Spartan Letter is involved." Cicero's text serves as the "exterior letter" by which Bacon's secret message example is disguised or steganographically concealed [Greek: stegos = "roof", "cover"].
    Now, in Julius Caesar's Gallic Wars, Caesar tells of a time he sent a messenger with a letter to be delivered to Cicero. "The messenger was instructed, if he could not approach, to hurl a spear, with the letter fastened to the thong, inside the entrenchment of the camp" (v.48). Given what is to follow, it is rather interesting that the example texts chosen by Bacon in the explication of his method of steganographic "bi-literarie" ciphering are associated with Caesar, "cypher'd staff", and delivery of a message by means of a Spear.
    Julius Caesar "invented" the first substitution cipher, which bears his name to this day. To use it, one need only shift or cyclically displace an alphabet a certain number of positions with respect to itself. The "plaintext" or secret message is then enciphered by substituting for each letter the corresponding letter from the shifted alphabet. An example of a 21 letter alphabet key for this simple substitution Caesar cipher method is shown below (capital letters are "ciphertext", lowercase the "plaintext" substitution to make for each when deciphering). This is the key used to solve the first 25 letters of the acrostic cypher found in the Sonnets frontmatter.

    Ciphers were "used by monks all through the Middle Ages for scribal amusement, and the Renaissance knew from its study of such classic texts as Suetonius that the ancient world had used ciphers for political purposes" (@ Kahn 106). Around the middle of the 13th century, the English monk Roger Bacon wrote "Concerning the Marvelous Power of Art and of Nature and Concerning the Nullity of Magic". He listed seven cipher methods and asserted that "a man is crazy who writes a secret in any other way than one which will conceal it from the vulgar" (@ Davis).
    Geoffrey Chaucer is considered "the outstanding English poet before Shakespeare and 'the first finder of our language' " ( @ Britannica 3: 141). In The Equatorie of the Planetis, a supplement to his 1391 Treatise on the Astrolabe, Chaucer included six passages written in cipher. The cipher system consists of a substitution alphabet of symbols. The solution to the cryptogram shown below is: "This table servith for to entre in to the table of equacion of the mone on either side."

    The first European manual on cryptography, a collection of Gabriele de Lavinde's ciphers, was produced in 1379. The nomenclator system described therein "was to hold sway over all Europe and America for the next 450 years... [It] united the cipher substitution alphabet of letters and the code list of word, syllable, and name equivalents" ( @ Kahn 107).
    Simeone de Crema's work at Mantua in 1401 used a key (shown below) in which "each of the plaintext vowels [had] several possible equivalents. This testifies silently that, by this time, the West knew cryptanalysis. There can be no other explanation for the appearance of these multiple substitutes, or homophones. [...] That the homophones were applied to vowels, and not just indiscriminately, indicates a knowledge of at least the outlines of frequency analysis" (107). This type of cryptanalysis, which compares the relative frequency of letters in ciphertext to that generally found in regular text, allows the cryptanalist to make good guesses about letter substitution and can quickly lead to the solution of simple monoalphabetic ciphers, such as a Caesar cipher.

    In 1474, Sicco Simonetta published Regulae ad extrahendum litteras zifferatas sine exemplo, a short work which stressed "methods of decipherment and afford[ed] considerable statistical data" (@ Galland 171). Indeed, "the date of Simonetta's little essay on ciphers is important, for it was the period when cryptography became the universal practice, when simple ciphers developed into complicated cryptograms" (@ Thompson, qtd. in Galland 171).
    Cryptology began to have an increasing importance in the field of diplomacy and by the end of the 15th century, "cryptology had become important enough for most states to keep full-time cipher secretaries occupied in making up new keys, enciphering and deciphering messages, and solving intercepted dispatches" (@ Kahn 108-9). The subject of Cryptology was especially popular in the 16th and 17th centuries. In fact, so much was published that Duke August of Brunswick, author of the encyclopedic 1624 Cryptomenytices et Cryptographiae Libri IX, "had managed by 1622 to accumulate and analyze almost two hundred books on the subject of cryptology" (@ Strasser 51). In the preface of Cryptomenytices, he listed 187 authors of cryptographic works (45).
    The claim of a steganographically concealed cryptogram in the Sonnets frontmatter should be viewed and judged in the context of the popularity and availability of cryptographic information prior to (and after) the publication of the Sonnets. It must be understood that many books on cryptography were published prior to the 1609 first edition of Shake-speares Sonnets. A few of the more popular and important cryptographic works are listed below (indicating only dates prior to 1609):

   1470: Leone Battista Alberti's Trattati in cifra was published in Rome. Alberti dealt "especially with theories and processes of cipherment, methods of decipherment, and statistical data" ( @ Galland 3).

   1518: Johannis Trithemius wrote (but did not publish) his Steganographia, which "circulated in manuscript for a hundred years, being copied by many persons eager to suck out the secrets that it was thought to hold" (@ Kahn 132).

   1518: Trithemius' Polygraphiae libri sex, which included his tabula recta Caesar substitution tableau, was published (though there is some disagreement on the first edition date [Galland 183]). It was reprinted in 1550, 1564, 1571, 1600; a French translation appeared in 1561 and 1564.

   1526: Jacopo Silvestri's Opus novum...principibus maxime vtilissimum pro cipharis was published. The work discussed six cipher methods, including the Caesar cipher, for which he recommended the use of a cipher disc. Opus novum was written as a practical manual and "was clearly intended to reach a wide circle of readers" (@ Arnold 102).

   1540: Giovanni Battista Palatino published his Libro nvova d'imparare a scrivere... Con vn breue et vtile trattato de le cifere. If was reprinted in 1545, 1547, 1548, 1550, 1553, 1556, 1561, 1566, 1578, 1588. A revised version (the Compendio) was printed in 1566, 1578, and 1588.

   1550: Girolamo Cardano's De subtilitate libri XXI was published. "This famous work of a noted mathematician, physicist and philosopher contain[ed]...a considerable amount of information concerning processes of cipherment" (@ Galland 34). It was reprinted in 1551, 1554 {x2}, 1559, 1560 {x2}, 1580, 1582, with a French translation in 1556.

   1553: Giovanni Battista Bellaso's La cifra del was published. It "stress[ed] especially processes of cipherment" (21) and was corrected and reprinted in 1557 and 1564.

   1556: Cardano published De rerum varietate libri XVII, which contained cryptographic information and was a follow-up to his popular De Subtilitate. Both books were "translated and pirated by printers throughout Europe" (@ Kahn 144). De rerum was reprinted in 1557, 1558, 1580, and 1581.

   1558: Ioan Baptista Porta's Magiae natvralis libri XX, in which Book XVI treats deciphering, was published. It was reprinted in 1560, 1561 {x2}, 1562, 1564, 1567, 1576, 1585, 1591, 1597, and 1607. An anonymous French translation was printed in 1565, 1567, 1570, 1571, and 1584.

   1563: Ioan Baptista Porta's De fvrtivis literarvm notis, vvlgo de ziferis Libri IIII was published; it appeared in the same year translated into English under the title On secret notations for letters, commonly called ciphers. "Its four books, dealing respectively with ancient ciphers, modern ciphers, cryptanalysis, and a list of linguistic peculiarities that will help in solution, encompassed the cryptologic knowledge of the time" (138). A working set of rococo cipher discs was packaged with it. The work was reprinted in 1591, 1593, 1602 {x2}, 1603, and 1606.

   1586: Blaise de Vigenère's 600 page Traicté des chiffres was published. In it he discussed many ciphers, including the "running autokey" system (used in some modern cipher machines) and the so-called "Vigenere tableau" method. He was "scrupulous in assigning credit for material from other authors, and he quoted them accurately and with comprehension" (146).

   1591: Porta's De fvrtivis was reprinted by John Wolfe in London who "counterfeited the original 1563 edition almost to perfection" (142). Wolfe's final edition differed from the first only by the addition of an AA headpiece, placed at the top of the original dedication which lacked it. Shake-speares Sonnets contains an AA headpiece which appears to be an imitation of the one used on the counterfeit Furtivis.

   1592: Julius Caesar Scaliger published his 1220 page Exotericarvm exercitationvm liber XV. "This philosophical treatise on Cardano's De subtilitate...was a popular text-book until the final fall of Aristotle's physics" (@ Galland 161). It was reprinted in 1557, 1560, and 1576.

   1593: Porta's De fvrtivis was reissued (without permission) as De occvltis literarvm notis and included the first set of cryptological synoptic tables ever published. It was reprinted in 1603 and 1606.

   1594: Sir Hugh Platt published The Jewell House of Art and Nature, conteining divers rare and profitable Inventions... The fifth tract included a description of a steganographic method: "How to write a letter secretlie that cannot easilie be discovered, or suspected" (144).

   1606: Johannes Trithemius' Steganographia...Ars per occvltam scriptvram animi svi volvntatem absentibvs aperiendi certa was printed for the first time (however there is "considerable disagreement concerning the early editions of this work", including some indication it was published in a very limited edition in 1531 at Lyon [181-3]). The work dealt explicitly with methods of hiding the very existence of cryptograms in "normal" appearing text. Book IV dealt with acrostic steganograms and listed words which could be used "to construct a cover text in which only the second letters of each word would carry the secret message" (@ Kahn 135).

 

    David Kahn, author of the encyclopedic Codebreakers, notes at the beginning of his chapter on Bacon/Shakespeare cryptography that attempts to discover cryptograms demonstrating Bacon wrote the Works are "not entirely without cryptologic warrant." He explains that "systems of steganography have preserved legitimate messages beneath an innocent camouflage. Among these are steganograms of authorship" (873). Three examples are cited, all of which are acrostic. Two of them are:

    The Testament of Love, published in 1532 and previously attributed to Geoffrey Chaucer. On the basis of the presence of an acrostic "signature", Thomas Usk is now recognized as the true author. The initial letters of each chapter spell "Margarete of Vitrw, have merci on thin[e] Usk". The spelling is somewhat "irregular", yet it is considered sufficiently accurate.

    Hypnerotomachia Poliphili, published anonymously in 1499. The first letters of the 38 chapters spell "Poliam frater Franciscus Columna peramuvit" or "Brother Francesco Colonna passionately loves Polia". There was a Dominican monk by the name of Francesco Colonna who was still alive at the time the book was published. His acrostically written name is considered proof of authorship.

    Kahn states: "It was thus perfectly possible for Francis Bacon to have used steganography to simultaneously conceal and reveal his authorship of the Shakespeare works" (874).
    In fact, Francis Bacon wrote about steganographic cryptography in 1605 -- four years before Shake-speares Sonnets was published and a year before Trithemius' Steganographia finally appeared in print. In book six of his Proficience and Advancement of Learning Divine and Humane, he explained that preference should be given to those ciphers whose "vertues" include that they "bee without suspition" (& 60-1). It is important to note that Bacon identified steganographic cipher methods as being preferable to others. He concludes the section thus:

    This Arte of Cypheringe , hath for Relatiue, an Art of Discypheringe ; by supposition vnprofitable; but, as things are, of great vse. For suppose that Cyphars were well mannaged, there bee Multitudes of them which exclude the Discypherer . But in regarde of the rawnesse and Vnskilfulnesse of the handes, through which they passe, the greatest Matters, are many times carryed in the weakest CYPHARS .

    Bacon's 1605 Advancement of Learning was rewritten in Latin, greatly expanded, and issued in 1623 (the year Shakespeares Comedies, Histories, & Tragedies was published) as De Dignitate et Augmentis Scientiarum . An english "translation" of Augmentis was published in 1640. At the end of the enlarged section on cryptology (now 7 pages rather than just one paragraph), Bacon elaborates on the necessity for using ciphers which

    may be managed without suspition. For if Letters Missive fall into their hands, that have some command and authority over those that write; or over those to whom they were written; though the Cypher it selfe bee sure and impossible to be decypher'd, yet the matter is liable to examination and question; unless the Cypher be such, as may be voide of all suspition, or may elude all examination.

    It should be noted that we find this "cyphar" sub-section at the conclusion of section three, whose subject matter is "the measure of words [which] hath brought us forth an immense body of Art, namely Poesie ; not in respect of the matter (of which we have spoken before) but in respect of stile and the forme of words, as Metre or Verse..." (263). Thus, Bacon categorized cryptography as a form of "Poesie".
    He considered "POESIS" to be one of the three fundamental "partitions" of Science. It is given a side of the triangle of fundamentals found at the base of the Light pillar, "SCIENTIAE", on the cover of his Advancement and Proficience of Learning . The word is upside down. The corresponding word on the other triangle, "HVMANA" or "human", is also upside down. Next to each triangle is a black-eyed owl, holding a lit torch. Owls are symbolic of secrecy, since they hide during the day and only move about in the cover of darkness. And what does an owl say?

    Bacon's discussion of cryptography is almost wholly concerned with his steganographic "bi-literarie" method. He lists the many kinds of cyphers, notes the "virtues" of those "to be preferr'd", then devotes the rest of the sub-section to a thorough elucidation of his own method of, as he significantly describes it, "shifting off examination." The invention (and Bacon's interest in ciphers) may be dated by his explanation that it is one which, "in truth, we devised in our youth, when we were at Paris," sometime between 1576 and 1579.
    A final point may be made with reference to the 1640 Advancement treatise before the Sonnets solution is discussed. Though chapters are indicated by Roman numerals and sections by typographic marks, the conclusion of Chapter I is not separated from the sub-section on cryptography. White space "is as essential as the black of the letters...and space between words is a key marker for meaning and governs the way people read" (@ McArthur 1062). It is thus rather interesting that a sentence which ends, "the greatest Matters, are many times carryed in the weakest CYPHARS," is followed directly, without any typographic indication of a new section or even paragraph, by this:

    But it may be, that in the enumeration, and, as it were, taxation of Arts, some may thinke that we goe about to make a great Muster-rowle of Sciences, that the multiplication of them may be more admired... Neither have we (in our opinion) touched these Arts perfunctorily, though cursorily; but with a piercing stile extracted the marrow and pith of them out of a masse of matter. The judgement hereof we referre to those who are most able to judge of these Arts. For seeing it is the fashion of many who would be thought to know much, that every where making ostentation of words and outward termes of Arts, they become a wonder to the ignorant, but a derision to those that are Masters of those Arts: we hope that our Labours shall have a contrarie successe, which is, that they may arrest the judgment of every one who is best vers'd in every particular Art; and be undervalued by the rest.

 

    Consider the pages of Shake-speares Sonnets frontmatter, as found in the first edition "to be solde by William Aspley". The appearance of the dedication text is very strange, to say the least. Each word is followed by a period and there are no linear spaces except for one between "Mr.W.H." and "ALL.HAPPINESSE." Furthermore, every letter is Capitalized, except for the superscripted "r" at the end of "Mr." Contemporary dedications in all Caps are to be found in two other publications which appeared before 1609: the dedication of Spenser's Faerie Qveene  and the dedication of Joshuah Sylvester's translation of du Bartas' Seconde Weeke . But, nowhere else does a dedication appear with periods at the end of each word. The only other place this type of "punctuation" can be found is in ancient Roman inscriptions, which will be shown to have significance when Bacon's cipher alphabet key is discussed.
    Another striking feature of the Sonnets frontmatter is the fact that the text of the dedication is not grammatically correct. It reads (non decimum punctum ): "To the onlie begetter of these insving sonnets Mr WH all happinesse and that eternitie promised by ovr ever-living poet wisheth the well-wishing adventvrer in setting forth." No satisfactory explanation has been given by Scholars for the failure of the dedication writer to adhere to simple grammatical standards. No one (besides Penn Leary) has been able to give a good reason why an unintelligible "dedication" was allowed to appear on such a great Work.
    The dedication's final word, "FORTH", is the only place besides "Mr.W.H." where a period is definitely appropriate. The word "FORTH" is echoed by Four incongruous blank lines in the text. This should be noted because Bacon used both -4 and +4 Caesar shifts in his Sonnets cipher, switching to a +4 method after 25 letters. The following discussion is confined to the first 25 letters of a total 54 letter solution. See Chapter 12 of Penn Leary's Second Cryptographic Shakespeare for an elucidation of the remainder, followed by the solutions of many more contextually signaled +4 Caesar ciphers in other "Shake-speare" works.
    Prior attempts to locate cryptograms in Shakespeare have generally suffered from the simple defect of unrepeatability. That is, the method of "deciphering" is one which is ambiguous, open to varying interpretations, or without distinct rules of application. What is described below is a precise and specific acrostic method of letter selection and subsequent decryption which may be repeated by anyone.

 

    In the Sonnets frontmatter, the letters of a -4 Caesar enciphered message are steganographically "concealed" in the last letter of the first 25 Capitalized words. This is a type of acrostic. Literally akro ("extremity") stich ("row"), the word designates "a series of lines or verses in which the first, last, or other particular letters form a word, phrase...etc" (@ Webster's ).

    Acrostics were common among the Greeks of the Alexandrine period, as well as with the Latin writers Ennius and Plautus, many of the arguments of whose plays were written with acrostics on their respective titles. Medieval monks were also fond of acrostics, as were the poets of the Middle High German and Italian Renaissance periods (@ Britannica, emphasis added).

Acrostics were popular at the time the Sonnets were published and they generally took a person's name as their subject. Commendatory or explanatory verses which acrostically spelled out the author's name were occasionally placed at the beginning of books.
    When an author uses the last letters of each line to acrostically spell words, it is called telestich. An old example of this can be seen in the Preface to the "Aenigmata Aldhelmi", or "Aldhelm's Riddles". The "Aenigmata" are found in Aldhelm's treatise on prose, the Epistola ad Acircium de Metris, written around 695. The first and last letters of each line of the "Præfatio" are capitalized and they form a sentence which includes the author's name. Aldhelm also used both acrostic and telestich methods in the prologue of his poetic Carmen de Virginitate, where the first letters reading down and the last letters reading up form a sentence describing the contents of the poem.
    Joshua Sylvester wrote many acrostic poems using his own name as well as the names of others. Sylvester was best known for his translations of du Bartas' French Divine Weekes and Workes, first published as a collection in 1605, then reissued in 1608, 1611, 1613, 1614, &c. The following acrostic/telestich sonnet was published posthumously in a collection of Sylvester's work (@ 322):

ACROSTITELIOSTICHON.

J f  patience  true   could  termine   passion's  war R---
O ur   thankefull   Harpe   had   tendred   long-a  g O---
S ave  that, our  Griefs, whose  deep-gulfs  never eb B---
U nto    you   sAcred,   by   the   which    you   se E---
A h,  muse  not, then, if  all  our  Muse-work  favou R---
H eart  sad, Art  bad; yet  pray  you  read  the  res T---
S o   deare   Mecaenas,  if   your   patience   daig N---
Y our   praises   due   to   publish   farre   and  n I---
L ifting   your   Name,  the   glory   of   your  Sto C---
V nthrall   to  Time,  for,  Time   that   tryeth   s O---
E lse  had  th' old  Hebrews  and  brave  Worthies al L---
STones wear,steel wasts,too weak to bear their glorie S---
E ven   so   devout   as   wee   are   found   to  do O---
R ecording    loftie     though    wee    low    begu 
N---
    Now, Sylvester knew Francis Bacon's brother Anthony, who was "evidently an 'inward' friend" (@ Grosart 1: xvi). His Sonnets Upon the Late Miraculous Peace in France are dedicated "To the Most Honourable, Learned, and Religious Gentleman, Master Anthonie Bacone." Anthony is asked to "accept it as a due, / From him whose all doth all belong to You." The 1605 edition of Du Bartas' Seconde Weeke contains two chapter dedications to Anthony, similarly titled. One is found at the head of "Babylon", where Sylvester thanks Anthony for "reprieving from decay / My fame-lesse Name doom'd to oblivion." He concludes that it is Anthony "to whom I owe my hand, my head, my heart." At the head of "The Furies" Sylvester asks Anthony:

To whom, but Thee, should I present the same?
  Sith, by the Breath of Thine encouragement
  My
sAcred-furie thou didst first inflame
To prosecute This sAcred Argument.
  Such as it is, accept it, as a signe
  Of thankfull Love, from Him, whose all is Thine.

    Sylvester's association with "Anthonie Bacone" is interesting in the context of the present discussion because Anthony was a professional "spy" and cryptologist. He was an agent of Sir Francis Walsingham's Secret Service and was trained at Walsingham's cryptology school. Anthony traveled extensively and sent enciphered dispatches containing news of import back to England. He and his brother Francis were close friends, as can be seen in the dedication of the first edition of Francis' 1597 Essayes to "Anthony Bacon his deare...louing and beloued Brother" (@). Francis further dedicates them,

    such as they are, to our loue, in the depth whereof (I assure you) I sometimes wish your infirmities translated vppon my selfe, that her Maiestie mought haue the seruice of so actiue and able a mind, & I mought be with excuse confined to these contemplations & Studies for which I am fittest....

    On the title page of the 1605 edition of Deuine Weekes & Workes, a motto may be seen encircling a scene: "Acceptam Refero Lvcem: Sine Lvce Silesco" or "Light takes Credit for Its Reflection: Without Light, Silence". The translator seems to be indicating his dependence on the original work for the Light or textual substance of which his words are only a reflection or reproduction in another language. A crescent moon appears at the center of the "emblem" (shown below). The Bacon Brothers' family crest included a crescent moon.

 

    It should be understood that Francis Bacon used "many images drawn from light and darkness, the contrast between artificial and natural lights, and other 'light' effects, which constantly recur in his writings. [...] When thinking of mental activity, some picture of light seems nearly always to come before him" (@ Spurgeon 17). In the first of his Essayes, "Of Truth", we are told that

    truth is a naked and open daylight that doth not show the masques and mummeries and triumphs of the world half so stately and daintily as candlelights. [...] The first creature of God in the works of the days was the light of the sense; the last was the light of reason; and his sabbath work ever since is the illumination of his Spirit. First he breathed light upon the face of the matter or chaos; then he breathed light into the face of man; and still he breathed and inspireth light into the face of his chosen. [...] Certainly it is heaven upon earth to have a man's mind move in charity, rest in providence, and turn upon the poles of truth (@).

    In the 1608 second edition of Divine Weekes, a different "emblem" (shown below) was used along with a shortened motto: "Acceptam refero." The words, like most Latin, are laden with meaning. In addition to the above, "Acceptam refero" may also mean "Acceptable to carry Back" or "Welcome Reference". Note that the "Sun circle" touches only the "F" and "B" crescents. Thus, the crescents with letters corresponding to the initials of Francis Bacon are linked through a loop whose ends terminate at the Light source.
    It may also be worth noting here that AA headpieces, one of which is found on Shake-speares Sonnets , are always drawn with relatively symmetrical halves mirrored across a central axis. Absolute symmetry is broken, in every case, by features and highlights which characterize a "light" side and a "dark" side. An axis taken through the "F" and "B" spheres divides the "refero" emblem in a similar way. Furthermore, the stylized "A"s in AA devices are often drawn with two horizontal bars, so the letter "B" may be seen in the upper half and an "F" in the lower half. And the "A"s are always drawn so that they curl over, forming a crescent or "C". The AA devices, like the "Acceptam refero" device, may be considered steganographic "cipher images", concealing important semaphores in seemingly superfluous "decorations".

 

    Now, if it is "Acceptable to carry Back", the "F" crescent phase may be "carried back" in time, perhaps taking a short-cut along the bottom half of the Sun circle, and put back on its diametrically opposite and prior "B" phase. Thus, "F" = "B", as with a -4 Caesar alphabet shift. Or, the "B" may be carried up and back to its opposite "F" so that "B" = "F", a +4 Caesar shift. Francis Bacon used a -4 Caesar shift for the first 25 letters of the Sonnets cipher, then switched to a +4 Caesar shift for the following 29 letters. He used the +4 shift thereafter, enciphering his name in other "Shake-speare" works in certain key places, signaled by textual clues, as elaborated by Penn Leary in his Second Cryptographic Shakespeare . Whether or not the Divine diagram was expressly designed to serve as a "Welcome Reference", it may be seen as a succinct and beautiful iconic representation of Bacon's cipher system.

 

    In the Sonnets cipher, a -4 Caesar shift is to be applied to letters acrostically selected from the last letter of the first 25 Capitalized words, beginning with "SHAKE-SPEARES" and reading left to right, top to bottom. While the acrostic "steganograms" of Usk and Colonna used the first letter of each significant word (chapter titles), we have only to look to cryptologist Trithemius's 1518 Polygraphiae for an example of using some other letter as the "message-bearer". Book IV "lists 117 columns of artificial words whose second letter varied in each column from 'a' to 'w'... These served to construct a cover text in which only the second letters of each word would carry the secret message" (@ Kahn 135). Also remember that telestich was a known form of acrostic -- selecting the last letter of each word, rather than line, might be considered a "word telestich".
    When the date number 1609 is reached, simply "translate" each digit to its corresponding letter. The number 0 (zero) has no corresponding letter, so it is "skipped" as a null. The "translation" of numbers to letters is not unwarranted because in both Greek and Hebrew, numbers are represented by letters of the alphabet (or "Aleph-Bet"). This familiar fact would be known to anyone who read or wrote in these languages, such as Francis Bacon and contemporary scholars who were schooled in ancient languages. It should also be noted that the Romans used letters to write numbers; the system of Roman numerals is still occasionally used today.
    In Elizabethan english, the letters "I" and "J" were used interchangeably ("Ben Ionson"), as were "U" and "V" ("INSVING"). The letter "W" was often printed as two "V"s ("VVilliam"). That these letters were used interchangeably is only too well known to those who choose to read the works of "Shake-speare" (or other contemporary writers) in their "original spelling". Bacon's cipher alphabet key was minimal. Of the letters named above, it used only "I" and "V", the letters "J", "U" and "VV" being "translated" to their homophonetic equivalents when encountered while deciphering text. The letters "X" and "Z" were not included in the key and were "skipped" when they occured in text being deciphered.
    Bacon's 21 letter cipher alphabet key was essentially the first Roman alphabet, though it included the letter "G", which was added by the Romans later. The fact that Bacon's alphabet key corresponds to the ancient Roman alphabet takes on additional significance when it is recalled that "in almost all Roman inscriptions points were used to separate words" which were written entirely in capital letters (@ Britannica 29: 1007). Indeed, the capitalized text of the Sonnets looks very much like an ancient Roman inscription.
    If a 21 letter alphabet still seems too short, note that Giovanni Porta used only 20 letters in the cipher alphabet key given in his 1563 De Furtivis Literarum Notis. Porta's alphabet (shown below) did not have the letters "J", "K", "U", "W", "X", or "Y":

 

    Philip van Marnix's alphabet key solution for a cipher used by Don Juan de Austria in 1577 is shown to the left. It is a 22 letter alphabet which does not include the letters "J", "K", "U", and "W". While Trithemius used 24 letters in his cipher system, he excluded the letters "J" and "V" and placed "W" at the end of his alphabet, after "Z".
    The "exclusion" of letters from cipher alphabets had several consequences. It made deciphering more difficult by forcing the cryptanalist to try different alphabet keys. But more importantly, it helped to defeat frequency analysis techniques, as de Crema clearly understood back in 1401. De Crema's alphabet key did not include the letters "J", "V" and "W" and the letters "A", "E", "O" and "U" were each assigned 4 substitutes.
    While some excluded letters were to be "translated" into their homophonic (similar sounding or appearing) substitutes, others (say, "X") were considered "nulls" and skipped over. It was also the case that "regular" letters in the middle of a solution string could be considered nulls. Null letters "mean nothing and are intended to confuse interceptors" (@ Kahn xiv). The use of "nulls" in cryptograms was a common practice, known to the earliest cryptographers. In his 1605 Advancement treatise, Bacon noted the use of "intermixtures of NVLLES, and NONSIGNIFICANTS" in ciphers. Again, in the revised edition, he listed as one of the kinds of "cyphars" those which are "intermixt with Nulloes, or non-significant Characters" (264).
    All that said, the best reason for using the particular 21 letter alphabet described here is that it works -- the bottom line in any cryptologic analysis. Strictly speaking, the only requirement is that "the letters which make up the cipher alphabet cannot be chosen at random; the key must be of such a nature that any one of the several correspondents, desiring to make use of it, will have it at his disposal" (@ Gaines 69). That Bacon was so kind as to leave clues and hints is merely icing on the cake, though they do serve as confirmation that the particular key and cipher techniques are correct.
    Because the use of the 21 letter alphabet me and a -4 Caesar substitution applied to acrostically selected letters yields the 25 letter solution given below, we know it is the one Bacon used to encrypt his message. The great length of the solution and its ability to explain anomalous features of the "ciphertext" dedication preclude the possibility that the solution is just a function of "randomness". Further analysis supporting the conclusion that the 25 letter string simply can not be random will be discussed nonetheless, after the solution is demonstrated.

 

    Acrostically select the last letter of each Capitalized word, from "SHAKE-SPEARE" to the superscripted "r" in "Mr." (see pages). Treat number digits as one-letter Capital word equivalents. String the letters together in sequential order, thus:

S S R D T N Y G D T T M Y A F I O E E R F E G S R

 

    Now, using the 21 letter alphabet key, substitute for each letter of the acrostic string the corresponding letter in an alphabet shifted 4 letters back with respect to itself, where an enciphered "F" = deciphered "b" (shown above). The resulting text is:

o o n y p i r c y p p h r s b e k a a n b a c o n

    This is a sentence consisting of Four words and 25 letters which ends at the first proper use of a period and the only lowercase letter in the dedication ("Mr."). The last word in the solution string is the name of our Author, spelled perfectly and correctly: "Bacon".
    The first word, "Nypir", refers to a mathematician about whose name "we do not know the correct spelling...since many forms of the word are found, such as Napeir, Nepair, Nepeir, Neper, Napare, Napar, Naipper" (@ Gibson). Indeed, when "Nypir" is considered within the total context of the message, it is clear that the word refers to the mathematician John Napier, the celebrated inventor of logarithms.
    Initially, it may seem problematic that mention is made of Napier's revolutionary work prior to the first publication of Mirifici Logarithmorum Canonis Descriptio in 1614. However, "Napier tells us that he had been working on his invention of logarithms for twenty years before he published his results, a statement that would place the origin of his ideas about 1594" (@ Boyer 311). Furthermore, Kepler wrote that in 1594, "Tycho Brahe was led by a Scotch correspondent to entertain hopes of the publication of the Canon or Table of Logarithms" (@ Macdonald xv). There is also evidence that the 1619 Mirifici Logarithmorvm Canonis Constrvctio, which explains the theoretical nature of logarithms, was written well before the Descriptio.

        Numerus Artificialis, or simply Artificialis, is used in the body of the Constructio for Logarithm, the number corresponding to the logarithm being called Numerus Naturalis.
    Logarithmus, corresponding to which Numerus Vulgaris is used, is however employed in the title-page and headings of the Constructio, and in the Appendix and following papers. It is also used throughout the Descriptio published in 1614 ; and as the word was not invented till several years after the completion of the Constructio (see the second page of the Preface, line 12), the latter must have been written some years prior to 1614 (@ 85).

    Given Bacon's extensive contacts with the best minds of his time, it is not at all unlikely that he knew about Napier's invention prior to 1609. From the time of first conception, Napier seems to have openly discussed his invention with other leading-edge mathematicians and thinkers, such as Kepler and Brahe. Indeed, unlike the generally selfish and proprietary attitude of modern inventors, Napier was interested in the common good. He noted in an "Authors Preface" to the 1616 English translation of Descriptio that his

    inuention, being (as all other good things are) so much the better as it shall be the more common, I thought good heretofore to set forth in Latine for the publique vse of Mathematicians. But now some of our Countreymen in this Island well affected to these studies, and the more publique good, procured a most learned Mathematician to translate the same into our vulgar English tongue... (@).

    It is to be expected that a great intellect (such as that responsible for the Sonnets ) would have some knowledge of mathematics, since it is "so necessary for man, that (as I thinke nowe) so much as a man lacketh of yt, so muche hee lacketh of hys sence and wytte" (@ Record). Thus, it should not be too surprising to find that the author of Shake-speares Sonnets knew about logarithms, as can be seen in Sonnet 136:

    In things of great receit with ease we prooue,
Among a number one is reckon'd none.
Then in the number let me pass vntold,
Though in thy stores account I one must be,

    Though Napier "was essentially using a base 1/e " in his 1614 Descriptio, he had previously "proposed a table using log 1 = 0" which later became known as the common logarithm (@ Boyer 313-4). Only by this means may the "number one [be] reckon'd none." Logarithms are used when performing calculations with large numbers, i.e. "things of great receit". Thus, for example, "logarithms were hailed gladly by Kepler...because they vastly increased the computational power of the astronomer" who regularly performed calculations with large numbers (315). That logarithms are being referred to in Sonnet 136 is further reinforced by the author's contrastive reminder that "in thy stores account I one must be", since "regular" numbers are required for simple inventory counting.
    With respect to the "periods" found at the end of each word in the Sonnets dedication, it should be noted that "by the time of Viete's forthright advocacy of decimal fractions in 1579 they were generally accepted by mathematicians on the frontiers of research. [...] In the 1616 English translation of Napier's 'Descriptio' decimal fractions appear as today, with a decimal point separating the integral and fractional portions" (317). Thus, the "periods" may be considered steganographically concealed decimal points, further reinforcing the validity of the solution text.
    The word "cypphr" was also spelled "sipher, cyfer, cifer, ciphre, sypher, ziphre, scypher, cyphar, cyphre, ciphar, zifer, cypher," according the the Oxford English Dictionary. It is both a reference to the cryptogram itself and the mathematical associations given by Nypir's name. The word "cipher" may be used to refer to Arabic numeral notation as a whole. The expression "Nypir cypphrs" serves as an indication that Bacon had an early knowledge of logarithms because Napier originally called logarithms Numerus Artificialis, or "Artificial Numbers". Thus, the newly invented logarithm numbers may have been referred to in English as "Napier numbers" or "Napier ciphers".
    When used as a verb in a mathematical context, "cipher" means "to calculate", which is what Napier's invention facilitates: "He had laboriously built up his system for one purpose-- the simplification of computations" (313). In the Descriptio Dedicatorie, Napier rhetorically asks: "For what can bee more delightfull and more excellent in any kinde of learning then to dispatch honourable and profound matters, exactly, readily, and without losse of either time or labour" (@).
    Furthermore, the word "cipher" is also synonymous with "zero", thereby explaining the "oo" at the beginning of the cryptogram solution. In Robert Record's 1542 Grovnd of Artes: Teachyng the worke and practise of Arithmetike, he uses a delightful pedagogical method of Teacher-Student discourse to explain simple mathematics. In the section on "Nvmeration", Record has the student realize, "though that cypher that is pricked, signifie nothyng, yet must he have the pricke" to indicate the proper value of the number (@). William Bedwell's 1616 translation of Bernard Salignacke's Latin Principles of Arithmeticke (@ 3) concludes a discussion of numeral notation with a description of "zero":

    Both Hebrew and Arabic (languages known by Bacon) assign the meaning "zero" to the homonymous root sound "sfr". The Hebrew "safar" () means "counted" and also "book". Etymological relatives include "sofer" () or "author" and "safah" () or "language". Finally, the word "sof" (), which means "end", also has significance here. Five Hebrew letters take a different form when they occur at the end of a word -- they are called "sofeet" () or "final" letters and serve to distinguish words from each other since ancient Hebrew lacks punctuation of any kind, including spaces. Thus, there are no periods used in Hebrew to mark the end of sentences or even spaces to designate words. The appearance of the dedication text stands in sharp contrast when viewed in this light. It brings to mind the opposite: ancient Hebrew texts such as the Torah scroll consist of line after line of contiguous letters, like the string of letters resulting from the acrostic selection performed in the solution of the Sonnets cipher.
    Adjoining the "FOURTH" word, "Bacon", is the word "Bekaan". It is a homophonetic spelling of "beckon" (meaning "to signal or summon") and also of the name "Bacon". Recall that Elizabethan spelling was not standardized and any spelling which approximated the sound of the word was considered acceptable. (This may be easily verified by thumbing through a facsimile of the Comedies, Histories, & Tragedies or any other contemporary publication.) The word "Bekaan", then, may serve double duty as a second instance of the name of the author. In fact, there are a total of 4 instances of "Bacon" homophones in the complete 54 letter solution.
    It may also be noted that "Bekaan" is spelled with two "a"s and appears just before the name of the author. This may have been an intentional indication of Bacon's association with AA headpieces. The initial zerOes ("oo") may also be considered a reference to AA since the letter "a" used as a prefix means "not". Furthermore, using a +4 Caesar shift, the initial ciphertext letters "SS" become AA, as seen at the conclusion of the full 54 letter solution. Thus, the author has essentially begun and ended his cipher with an AA signature.

 

    Now, the confluence of general elements in the Sonnets cipher is not without precedent. Consider an interesting acrostic/telestich "sonnet" which occurs in Thomas Watson's 1582 Hekatompathia or Passionate Centurie of Loue, published 27 years before the Sonnets. The Hekatompathia "served as a model of metrical form, a salient experiment in the evolution of the English sonnet.... It provided a comprehensive reference-book of Petrarchan themes" (@ v). The second part of the book, titled "My Love is Past", consists of 21 sonnets and is initiated by a "Pasquine Piller erected in the despite of Loue."
    On the first of three pages devoted to the "Pasquine Piller", Watson explains the five "principall" features, one of which is quite pertinent to the present discussion:

    Fourthly, that the foote of the piller is Orchematicall, yt is to say, founded by transilitien or ouerskipping of number by rule and order, as from 1 to 3, 5, 7, &9 : the secret vertue whereof may be learned in *Trithemius, as namely by tables of transilitien to decypher any thing that is written by secret transposition of letters, bee it neuer so cunningly conveighed. (e.a.)

A side note, "* Polygraphiæ suæ lib 5," indicates that Book 5 of Trithemius' Polygraphiae should be consulted. In Book 5, Trithemius presents his polyalphabetic "tabula recta" which "uses the normal alphabet in various positions as the cipher alphabets. Each cipher alphabet produces, in other words, a Caesar substitution" (@ Kahn 136, e.a.).
    Watson's "Pasquine Piller" and "preaty obseruations" contain the main elements of the Sonnets cipher:

   The Fourth enumerated "principall" feature includes a reference to the section of a cryptography book which deals specifically with Caesar substitution; Bacon's Sonnets cipher is solved by using a 4 letter shift Caesar substitution method.

   The words in the given pillar arrangement must be re-arranged so the meaningful letters are aligned to yield the acrostic/telestich solution; the words in the Sonnets frontmatter must essentially be re-arranged one word to a line and aligned along the right side to yield the (enciphered) telestich solution.

   The author explains that "ALL such as are but of indifferet capacitie, and haue some skill in Arithmetike " may be able to appreciate the "Piller"; the full significance of the Sonnets cipher solution can only be understood when the "message" is considered in a mathematical context.

   The term "Pasquine Piller" is derived from the Italian "Pasquino", a "name given an antique Roman statue...which was annually decorated and posted with verses" (@ Webster's ); the Sonnets Dedication, in all capitals with periods separating the words, has the appearance of a Roman inscription.

   The first two letters in the Piller are AA and the author's first "obseruation" is that the "whole piller...is by relation of either halfe to the other Antithetical " or symmetrically contrastive; the AA headpiece above the first of the Sonnets is similar in style to the one found throughout the Hekatompathia and AA headpieces always feature a dark "A" and a light "A" mirrored across a central axis.

    A final point should be made regarding the title page and numerous appearances of an AA device in The Hekatompathia. The title page contains three noteworthy features: a man holding a type of Spear (halberd) and two important headpieces. The "headpiece" used at the bottom appears in a slightly different form on the 1623 First Folio of Shakespeares Comedies, Histories, & Tragedies and Bacon's 1620 Novum Organum -- the arrow on the right lacks the "message" hanging from the middle of the shaft. The headpiece is a steganographic pictorial cryptogram which contains (at least) two instances of the name "Bacon" in the form of rebuses.

 

    Above is an image of a headpiece used throughout the Hekatompathia. The same block used to print it was used in the production of the counterfeit Furtivis cryptography book printed by John Wolfe in 1591. Again, it should be noted that the counterfeit was essentially perfect, including the 1563 original publication date, with the exception of the AA headpiece.

 

    At the head of the first page of Shake-speares Sonnets there is an AA device which is very similar to that found in the Hekatompathia and counterfeit Furtivis. While there were (at least) 14 distinct AA designs used until a last appearance in the 1720 edition of Bacon's Essays, they differed widely. The design shown above, which appeared on the Sonnets, seems to have been an attempt to reproduce or imitate the Furtivis device.
    The unusual AA headpiece at the top of the Hekatompathia title page consists of two overlapping images of what will be refered to as the Furtivis AA device. This double Furtivis AA headpiece also appears in several places in Ben Jonson's 1616 Works. Ben Jonson was a good friend of Francis Bacon. Several important references are made to Bacon/Shakespeare in the Works, including the Poet/Lawyer "Ovid the play-maker" (@ 279) in Poetaster and Sogliardo in Euery Man out of his Humour, a lampoon of the Actor Shakspere who was apparently paid to act as a decoy for Bacon after the trial of Essex. Sogliardo purchases a crest, a "Boore without a head," and takes as his motto "Not without mustard," a clear reference to Shakspere's "Not without right" motto. Curiously, Carlo comments, "I commend the Heralds wit, hee has decyphered him well : A swine without a head, without braine, wit, any thing indeed, ramping to gentilitie" (124, e.a.). Though much other Jonsonian evidence could be presented, the last piece given here is the beginning of a poem published in Under-Woods (@ 225, e.a.) and originally written for Francis Bacon's birthday:

    Haile, happie Genius of this antient pile !
How comes it all things so about the smile ?
The fire, the wine, the men ! and in the midst,
Thou stand'st as if some Mysterie thou did'st !

    Normal Furtivis AA images appear in Hekatompathia 11 times; in 3 cases the image is upside-down (11x3). None of the other 33 instances of 3 other "decorative devices" are upside-down. The number of occurrences of these "ornaments" may be a steganographic reference to Bacon's "name/number signature": 33.
    The second most extensive use of a Furtivis type device appears in a book published 2 years later in Scotland. There are 7 instances, with 1 inverted, in the 1584 Essayes of A Prentise, in the Divine Art of Poesie by James I, a book which was widely circulated because of his political stature. In the preface to the section "Ane Metaphoricall Invention of a Tragedie called Phoenix" may be found a Pasquine Piller whose acrostic/telestich solution reads "Es Me Stewart D Wike" (@).
    Now, The Hekatompathia was printed in 1582 by "Iohn Wolfe" in London, 2 years before Thomas Vautroullier printed The Essayes of A Prentise in Edinburgh using the same AA block. The block was used a second time in 1584 for the publication of Dauid Powel's The historie of Cambria, "Imprinted at London by Rafe Newberie and Henrie Denham" (@) and notable for its apparently unique "Boar Riders Spearing Dragons" headpiece. The use of the AA block by printers was clearly not "proprietary". Subsequent to its use by Vautroullier in Edinburgh and Newberie in London, John Wolfe again used it in London in his 1591 counterfeit printing of the cryptography manual De Furtivis Literarum Notis . Why did Wolfe "ruin" what would have been a perfect counterfeit, including the 1563 date, by using an AA headpiece imprint?

 

    In The Shakespearean Ciphers Examined, eminent cryptologists William & Elizabeth Friedman explain that "about twenty-five letters are needed before the cryptanalyst can be sure that his solution of a mono-alphabetic substitution cipher is the only possible solution" (@ 22, e.a.). The Friedmans also cite Claude Shannon's Bell Systems Technical Journal article "Prediction and Entropy of Printed English," explaining that for a "trustworthy solution", he "puts the minimum length at 25 letters" (@ cf. Shannon 50-64). Mathematician and cryptologist Gustavus Simmons points out that "because of the redundancy of the English language, only about 25 symbols of ciphertext suffice to permit the cryptanalysis of monoalphabetic substitution ciphers" (@ 862, e.a.). Even if the "leading zeroes" (i.e., "cipher cipher") are thrown out, the message is still 23 letters long which is "about twenty-five letters."

    According to the technical experts, the length of the Sonnets solution is sufficient to warrant the conclusion that it is a valid decipherment.

    In order to further demonstrate that the 25 letter solution can not be random, an acrostic analysis computer program was written which performs several types of acrostic letter selection in addition to the one that yields the solution to the Sonnets cryptogram. An interactive version is available on this site. Several kinds of selection procedures were used in order to generate a broader statistical sample. The program selects letters from words of the following types:

    Every word
    Every Capitalized word
    Every UN-capitalized word
    The leftmost word in every line
    The rightmost word in every line
    The leftmost word in every line when the word is Capitalized
    The leftmost word in every line when the word is UN-Capitalized

    When the program determines that a particular word in the text being analyzed is one of the 7 types, each letter in the word is then selected and added to the appropriate acrostic string. Letters are processed by choosing every letter from the left to the right end of the word and every letter moving from the right to the left end of the word. That is, an "offset" value is incrementally increased so that every letter of a word is added to two acrostic strings of letters for that word type.
    For example, when a three letter word is of the type "every Capitalized word" (say, "Pig"), it will append letters to acrostic strings consisting of:

      [From the left end of "Pig"]
    0 letter offset: the leftmost letter of Every Capitalized word (i.e., 1st letter of the word: "P");
    1 letter offset to the right from the leftmost letter of Every Capitalized word (2nd letter: "i");
    2 letter offset to the right from the leftmost letter of Every Capitalized word (3rd letter: "g");
      [From the right end of "Pig"]
    0 letter offset: the rightmost letter of Every Capitalized word (3rd letter: "g");
    1 letter offset to the left from the rightmost letter of Every Capitalized word (2nd letter: "i");
    2 letter offset to the left from the rightmost letter of Every Capitalized word (1st letter: "P").

    Short words will not "contribute" letters to acrostic strings of letters chosen using a large offset -- they are effectively "skipped". For example, a Capitalized 3 letter word will not "contribute" to an acrostic string consisting of letters which are offset 5 letters to the right from the leftmost letter of Every Capitalized word (i.e. the 6th letter of every Capitalized word).
    Letters in the acrostic strings resulting from every permutation of "type" and end-offset are then substituted for corresponding letters in each possible Caesar alphabet shift. Thus, each acrostic string will yield a total of 21 strings: the original string of "unshifted" or "plaintext" letters and 20 strings generated by consecutive Caesar shift and substitution. Applying every possible Caesar substitution to each acrostically selected string of letters increases the sample size 20 fold and helps demonstrate the uniqueness of the -4 Caesar substitution solution.
    All the strings of letters resulting from this process are checked for the presence of the target "plaintext message". Every string is also checked for the presence of a backward instance of the target. Strings too short to contain the "message" text are not checked and therefore don't add to the reported total number of strings checked.
    The original spelling text of Shake-speares Sonnets was divided into "blocks" of text, each consisting of a sonnet number and corresponding sonnet. The Title page and Dedication comprised the first block of text. The whole was searched for occurrences of the strings "Bacon" and "SHAKSPERE" with the following results:

Found Bacon in block 1:
Select words from top to bottom, left to right;
rightmost letter of every word;
-4 Caesar shift (a=S):
OONAYPIRCYNPPYAKAARHRSBEKAANBaconQDGAYPAYRNCPDACNICDPP

Found Bacon in block 1:
Select words from top to bottom, left to right;
rightmost letter of every Capitalized word;
-4 Caesar shift (a=S):
OONYPIRCYPPHRSBEKAANBaconQDGAYPAYRNCPDACNICDPP

+++ Summary +++
Blocks of text: 155
Lines of text: 2328
Words in text: 17965
Letters in text: 75028

Found 2 occurrences of "Bacon".
Acrostic strings checked for "Bacon": 444192
Total letters in All Acrostic strings: 14483196

Found 0 occurrences of "SHAKSPERE".
Acrostic strings checked for "SHAKSPERE": 370524
Total letters in All Acrostic strings: 14014140

    The 9 letter word "SHAKSPERE" was chosen to serve as a "control" and present a contrast to the shorter word "Bacon". Any words could have been used -- the intent of the exercise was to demonstrate that a sufficiently long string of letters will not "show up" with greater than expected frequency when text is searched using acrostic selection and Caesar substitution. The choice of "Bacon" effectively tested for two things: the frequency of appearance of the full 25 letter solution string (since it contains the short string) and the frequency of appearance of a relatively short string.
    It is to be expected that a short string will show up more often than a longer one. That is, the longer the "target" string, the less likely it is that it will appear. The simple probability that a particular word will result when each letter is chosen randomly is given by the "product rule". Specifically, "the number of r -permutations of a set of n objects with repetition allowed is n^r " (@ Rosen 272). The probabilities are:

    "Bacon":  21^5 = 4,084,101 to 1.
    "SHAKSPERE":  21^9 = 794,280,046,600 to 1.
    "OONYPIRCYPPHRSBEKAANBacon":
       21^25 = (aprox.) 1,136,272,166,000,000,000,000,000,000,000,000 to 1 (or 1.13 x 10^33 to 1).

    Now, meaningful text is not random. That is, the Sonnets can not be considered a sequence of random letters. However, it should be pointed out that in selecting letters acrostically from meaningfully ordered words, the chances of "finding" a meaningful word are relatively low. An English text only yields its meaning when letters and words are processed (read) in a linear and sequential order, along a horizontal axis. But the direction of acrostic selection is oriented orthogonally with respect to the normal horizontal "reading axis". Even when a letter is selected from every word of the text, the procedural axis is vertical: it is as though all the words were aligned vertically and the selection proceeds "across the rows". So, a random acrostic consists of letters taken "out of order" with respect to the standard profile of meaningfully arranged letters.
    It may be easily demonstrated that the letter frequencies which characterize meaningful text are not the same as those of acrostically selected letter strings. A comparison of the frequency characteristics of letters in text read normally (i.e., all letters) and those in an acrostic string (e.g., last letters of words), will quickly show that various acrostic selection procedures generate very different "frequency profiles" than that which characterizes "normal" text. For example, consider the letter frequency profile of the original spelling text of George Puttenham's 1589 Arte of English Poesie, shown below. Numbers below letters indicate the frequency of a letter's occurrence as a percentage of total letters analyzed.

Every letter.  Total letters: 426827
E T A O I N S R H L D U C M F G W P Y B K V X Q Z J 14 8.7 7.8 7.7 6.9 6.8 6.6 6.5 5.6 4.1 3.6 3.3 less than 3.0 %

The left end of the profile above corresponds to the standard English high-frequency progression of letters familiar to cryptanalysts: "E T A-O N-I R-S H". Compare this with the frequency profile of the last letter of every word in the same text (see also additional profiles):

Last letter of every word.  Total letters: 96172
E S T D R N Y O F H L G A M I W U B C P K X Z Q J V 25 11 9.4 9.3 7.9 5.8 4.9 4.3 3.7 less than 3.0 %

    Performing -4 Caesar shift substitution on the letter frequency list for last letters in the Poesie example text (using Bacon's 21 letter alphabet) does not produce a frequency profile corresponding to that which results when every letter is taken into account (as seen below). None of the other possible shifts will produce the frequency signature characteristic of "normally read" text, either.

Last letter of every word, -4 Caesar Shift.  Total letters: 96172
A O P Y N I R K B D G C S H Q E T V L F M 25 12 9.4 9.3 7.9 6.2 5.8 4.9 4.3 3.7 less than 3.0 %

    The point is that acrostically selected letters will not appear with the same frequency as letters found in "regular" meaningful text, where every letter is included in the analysis. It is thus less likely that a string of acrostically selected letters will contain meaningful words or sentences. It is extremely unlikely that a 25 letter meaningful English sentence like "00 Nypir Cypphrs Bekaan Bacon" will appear in a string of letters resulting from a randomly chosen type of acrostic selection.
    In order to further demonstrate that the probability of a very long string occurring as the result of acrostic selection and Caesar substitution is sufficiently small to warrant the claim that the cipher must be intentional and valid, additional text was processed by the same acrostic analysis computer program described above.
    The remaining works of "Shake-speare" were divided up into lines of from 1 to 8 words and blocks of from 10 to 13 lines (both numbers being determined by a random number generating function). The text used was not the original spelling -- unfortunately a digital version is not freely available. It was used only as a "random sample" of parsed meaningful text, albeit ironically selected.
    The complete list of "hits" is available for perusal, along with a list which includes context. None of the acrostic instances of "Bacon" is accompanied by additional meaningful text. The three longest words which show up next to "Bacon" (in separate instances) are very short and hence random: "COOL", "TACT", and "NOOON". Here is a summary of an Acrostic Analysis of the complete works of "Shake-speare":

Total Words of text: 922239
Total Letters: 3891140
Bacon's found: 66
   Acrostic strings checked: 47520312
   Letters in all Acrostic strings: 792898680
SHAKSPERE's found: 0
   Acrostic strings checked: 31537800
   Letters in all Acrostic strings: 690145596

    So, out of about 31 million strings consisting of 690 million letters, not one instance of an acrostically selected 9 letter string spelling "SHAKSPERE" was found. The string "Bacon" occurs once for every 720,005 acrostic strings. That is about one sixth of the number resulting from random selection of each letter: 4,084,101 to 1.
    In order that the sample space might include "olde English" text, the original spelling text of George Puttenham's 1589 Arte of English Poesie and Richard Mulcaster's 1582 Elementarie were processed with the following results:

Total Words of text: 183767
Letters in text: 823493
Bacon's found: 10
   Acrostic strings checked: 9553404
   Letters in all Acrostic strings: 167434428
SHAKSPERE's found: 0
   Acrostic strings checked: 6516636
   Letters in all Acrostic strings: 148118292

    Again, the relatively long string "SHAKSPERE" did not occur, in keeping with the odds given above of 794,280,046,600 to 1. The Elizabethan English texts showed a lower number of "Bacon" occurrences, relative to the number of strings checked: once for every 955,340 strings. That is about one fourth of the random probability and still relatively close to the frequency of occurrence in the modernized text of "Shake-speares" works.
    A total of 1,106,006 words of text were analyzed. The 9 letter string "SHAKSPERE" was not found at all in a search of 38,054,436 strings consisting of 838,263,888 letters. In a check of nearly a billion letters, there was not a single instance of a 9 letter "target". And exactly one occurrence was found of a string over 2 times as long as "SHAKSPERE", the meaningful four word sentence

OO Nypir Cypphrs Bekaan Bacon.

 

    By way of summary, reference may be made to the instructions for solving a "concealment cipher" given in Cryptanalysis: A Study of Ciphers and Their Solution, by Helen Fouche Gaines (@ 4-7). The author tells us that the

    concealment cipher goes by various names, as null cipher, open-letter cipher, conventional writing, dissimulated writing, and so on... The name "null cipher" derives from the fact that in any given cryptogram the greater portion of the letters are null, a certain few being significant, and perhaps a few others being significant only in that they act as indicators for finding truly significant letters. [...] Significant letters may be concealed in an infinite variety of ways. The key...may be their positions in words, or in the text as a whole. It may be their distance from one another, expressed in letters or in inches, or their distance to the left or right of certain other letters (indicators) or of punctuation marks (indicators)...

Note that the text of the Sonnets dedication contains periods (or decimal points) at the end of every word. The anomalous punctuation and capitalization serves to draw attention to the significant cipher letters, the last letters of each capitalized word.

        Concerning the decryptment of concealment cipher, we regret to say that cryptanalysis has little help to offer. Fortunately, most of these ciphers depend absolutely on the belief that they will not be recognized as cipher, and once they are so recognized, they present no resistance. In those few cases where the secret message is not at once obvious, it is sometimes useful to arrange the words (or sentences) in columns, or in rows, for a closer inspection...and where the alignment from the left gives no results, letters or words can be aligned from the right...

    The author recommends acrostic analysis, the very method used to solve the Sonnets cipher, "in those few cases where the secret message is not at once obvious." Aligning capitalized words from the right, then using a -4 Caesar substitution on the rightmost letters, yields the solution to Bacon's cryptogram. Trying Caesar substitution is reasonable and appropriate, as Mrs. Gaines explains:

    Many of the classic ciphers, fundamentally of the concealment type, are also substitution ciphers, and their decryptment would follow substitution methods. Of these, perhaps the best known is Bacon's biliteral cipher.... The subject is fascinating, and the literature of cryptography is rich with examples. [...] Concealment cipher has, of course, the unique virtue of being able to convey messages under circumstances which make it seem that no communication has passed... (e.a.)

 

Linked Summary

   The solution to the Shake-speares Sonnets cipher consists of a meaningful and grammatically correct sentence: "Nypir cyphhrs bekaan Bacon."

   The solution is 25 letters long, satisfying the criterion of minimum length for a valid cipher given by expert cryptologists.

   The length of the solution precludes a palliative claim of "mere randomness", as demonstrated by an analysis of over 1 million words of text, generating over 38 million acrostic strings.

   The characteristic frequency profiles of acrostically selected letters differ from the frequency profile of "normally" selected letters (i.e., all letters in a text), further adding to the improbability of a meaningful sentence randomly appearing in acrostic strings of letters.

   The solution contains the correctly spelled name "Bacon" and the word "Bekaan", which serves double duty as a name homophone. There are a total of 4 instances of "Bacon" homophones in the complete 54 letter solution.

   The solution words "Nypir cyphhrs" indicate the author knew of Napier's unpublished prior term for logarithms: "artificial numbers".

   The sentence "Nypir cyphhrs bekaan Bacon" is highly meaningful and appropriate: the system of Napier numbers, or logarithms, was the greatest mathematical invention of Bacon's time. It is only natural that logarithms would "bekaan" Bacon given his early decision to pursue the acquisition of all knowledge, as he stated in a letter to his uncle, Lord Burghley:
       I have...vast contemplative ends...for I have taken all knowledge to be my province.... I hope I should bring in...profitable inventions and discoveries.... This...is so fixed in my mind as it cannot be removed. [...] I will [become] a true pioneer in that mine of truth.

   The solution contains self-references: the word "cyphhrs" and initial "zerOes" (cyphers) refer to both mathematics (echoing "Nypir") and the cryptogram itself.

   The letters AA prior to "Bacon" and the "OO" at the head of the solution echo the Sonnets AA headpiece, which imitates the one found in the 1591 counterfeit publication of the cryptography book De Furtivis .

   The AA device which appears in Napier's Descriptio is the same as the one on Bacon's 1620 Novum Organum and the 1623 Comedies, Histories, & Tragedies of "Shakespeare".

   The first appearance of an AA headpiece was on a book of which Bacon owned a copy containing proof sheets.

   The final letter of the solution corresponds to the only lowercase letter in the Dedication and the first appropriate use of a period.

   The odd punctuation of the Dedication draws attention toward the significant last letter of words.

   The odd punctuation also corresponds to mathematical decimal notation which first appeared in the form used today in Napier's 1616 Descriptio.

   Words in all caps in the Dedication correspond to Capitalized word acrostic (telestich) selection.

   The letters in Bacon's abbreviated alphabet key correspond to those used by ancient Romans, whose inscriptions were written using only capital letters, with periods between every word.

   Four unnecessary vertical spaces and the final word "FORTH" correspond to the Caesar shift amount and number of words in the first 25 letters of the solution, as well as the number of "Bacon" homophones in the complete 54 letter solution.

   Francis Bacon understood and wrote about steganographic cryptography prior to the publication of the Sonnets. He later expanded this work, focusing almost exclusively on steganographic methods. It is appropriate to give him the last word:

    This Arte of Cypheringe , hath for Relatiue, an Art of Discypheringe ; by supposition vnprofitable; but, as things are, of great vse. For suppose that Cyphars were well mannaged, there bee Multitudes of them which exclude the Discypherer . But in regarde of the rawnesse and Vnskilfulnesse of the handes, through which they passe, the greatest Matters, are many times carryed in the weakest CYPHARS .