Elizebeth Smith Friedman's Work Algorithms

1. What exact hidden-writing claim is being made?
2. Which part of the text is evidence and which part is wishful interpretation?
3. What would count as a disproof?

philology, source criticism, skeptical reading

Convert interpretive excitement into a bounded, falsifiable cryptanalytic question.

claim inventory; evidence ledger; disproof checklist

Curiosity can become pattern-seeking unless negative evidence is preserved.

1. Can another analyst reproduce the reading?
2. Are rules fixed before the result is known?
3. Does the claimed cipher explain more than chance would?

reproducibility, literary scholarship, analytic restraint

Separate literary enthusiasm from proof by requiring reproducibility, fixed rules, and error accounting.

cipher-rule memo; reproducibility table; negative findings note

A beautiful theory can survive too long if every anomaly is explained away.

1. Which repetitions are structural rather than accidental?
2. What constraints would any candidate alphabet need to satisfy?
3. Which proposed reading fails earliest?

symbolic patterning, combinatorics, hypothesis testing

Build candidate systems incrementally, discard weak alphabets, and document why each survives or fails.

candidate alphabet sheet; constraint table; rejection log

Premature commitment can make the analyst fit messages to an alphabet instead of the reverse.

1. What can be enumerated by hand without guessing?
2. Which partial result reduces the search space?
3. How can fatigue errors be caught?

pencil-and-paper analysis, patience, exactness

Turn a large uncertainty space into checkable small steps, with every discarded path recorded.

work sheets; enumeration ledger; error-correction pass

Manual brilliance can become a single-point failure unless the method is teachable.

1. What was general in this solution?
2. What should the next analyst learn first?
3. Which example proves the rule without overfitting it?

teaching, abstraction, technical writing

Abstract working techniques into written doctrine and examples for government training.

manual; training booklet; worked example

Doctrine can become rigid if new systems are forced into old templates.

1. Who needs the answer and by when?
2. Which messages are legally and evidentially usable?
3. What would change the enforcement or national-security decision?

requirements analysis, triage, executive communication

Rank traffic by decision value before spending scarce analytic time.

requirement note; priority queue; decision-use summary

Urgency can distort priorities if the requirement is politically defined rather than evidentially defined.

1. What did the failed reading prove impossible?
2. Which assumption should be revised first?
3. What independent check confirms the new path?

iteration, resilience, analytic humility

Use disciplined iteration: attempt, fail cleanly, revise, and confirm.

attempt log; contradiction list; confirmation note

Persistence without stopping rules can waste time on an unsolvable or irrelevant problem.

1. Which patterns are ordinary for the traffic?
2. Which anomalies appear after context is applied?
3. Is the anomaly signal, error, deception, or noise?

quantitative intuition, anomaly detection, caution

Use statistical-looking regularity as a clue, then test it against message context and external facts.

frequency note; anomaly list; context check

A numerical pattern can be persuasive even when the sample is too small.

1. Who likely sent it and why?
2. What external event makes the text intelligible?
3. What does the sender expect the receiver to do?

all-source synthesis, chronology, inference

Fuse cryptanalytic output with geography, law-enforcement reports, shipping records, and human context.

context memo; actor timeline; evidence map

Context can become confirmation bias when contradictory facts are ignored.

1. What changed between messages?
2. Which actors recur and which disappear?
3. What deadline or movement pattern is implied?

timeline analysis, data ordering, pattern recognition

Build chronological traffic files that reveal coordination, tempo, and intent.

traffic chronology; actor table; movement summary

Chronology can imply causality where only sequence exists.

1. What external record can confirm the reading?
2. What alternative reading remains plausible?
3. Can the result support action without overclaiming?

validation, legal prudence, evidentiary discipline

Require cryptanalytic conclusions to be checked against independent facts before enforcement or policy use.

corroboration matrix; confidence note; caveat line

An agency may act on the exciting interpretation before the boring check is done.

1. Who collected the message and how is it preserved?
2. Can the analytic path be explained without secret mystique?
3. What would opposing counsel challenge?

evidence handling, courtroom reasoning, documentation

Preserve originals, working steps, and translations so the result can survive adversarial scrutiny.

exhibit file; work-paper trail; testimony script

Intelligence value can be lost if evidentiary custody is sloppy.

1. Which traffic belongs together?
2. Which subset can unlock the rest?
3. Which cases have immediate enforcement value?

workload management, clustering, priority design

Cluster traffic by system, sender, region, and urgency before assigning analytic labor.

backlog map; traffic clusters; assignment sheet

Untriaged backlog hides the decisive message among routine noise.

1. Which nodes coordinate vessels, shore transmitters, warehouses, and money?
2. Who issues orders rather than merely relays them?
3. What evidence ties actors to a conspiracy?

link analysis, organizational inference, law-enforcement support

Convert repeated communications into actor-node maps for enforcement and prosecution.

network chart; node dossier; conspiracy map

A network map can overstate command relationships if relay behavior is misread.

1. What movement is implied without being stated?
2. Which coast, vessel, or rendezvous matters?
3. What legal action is proportionate to the inference?

logistics reasoning, maritime context, inference control

Extract logistics from coded traffic and translate it into actionable but legally bounded information.

logistics brief; route inference; enforcement cue

Overconfident inference can misdirect limited patrol resources.

1. What must a non-specialist understand?
2. Which steps can be shown without confusion?
3. Where must certainty be limited?

expert communication, pedagogy, legal explanation

Translate technical work into transparent, stepwise explanation for courts.

court exhibit; plain-language method statement; expert summary

Oversimplification can make rigorous work look like assertion.

1. What conclusion is supported by the record?
2. Which challenge is likely from defense counsel?
3. What is opinion and what is reconstruction?

testimony, clarity under pressure, legal boundaries

Compress months of work into testimony that is precise, calm, and resistant to cross-examination.

witness outline; evidence summary; cross-examination defense

The expert can become the case if the prosecution relies too heavily on cryptanalysis alone.

1. Which bureau owns the next step?
2. What format will that bureau trust?
3. What cannot be shared without legal or source risk?

interagency writing, translation, mandate awareness

Translate codebreaking results into the evidentiary and operational languages of partner agencies.

liaison memo; shared case file; agency routing note

Liaison can blur authority unless responsibility is explicitly assigned.

1. Which tasks require the expert and which can be trained?
2. How should work pass between clerk, analyst, and supervisor?
3. Where does quality control occur?

team design, quality control, supervision

Create a compact analytic workflow with division of labor, review, and training.

unit workflow; desk procedures; review checklist

A small unit can collapse if all difficult judgments depend on one person.

1. Can the trainee reproduce the result?
2. Can the trainee explain why alternatives fail?
3. Can the trainee solve a changed case?

mentorship, pedagogy, reproducibility

Teach by worked examples, reconstruction, and supervised variation.

training packet; graded reconstruction; trainee notes

Training becomes imitation if trainees never face unfamiliar traffic.

1. What volume proves the need is durable?
2. Which skills must be hired or trained?
3. What authority should the unit receive?

institution building, metrics, management

Turn a personal workload crisis into a formal unit proposal.

staffing request; workload statistics; unit charter

Institutions may under-resource invisible analytic labor until failure is imminent.

1. Where is authority earned by results rather than title?
2. Which gatekeeping behavior must be documented?
3. How can standards protect the work from bias?

professional resilience, leadership, boundary management

Use demonstrable excellence, records, and teachable methods to preserve authority under constraint.

performance record; standards memo; attribution note

Institutions may consume the work while denying the worker credit.

1. What did the unit learn?
2. What file will the next analyst need?
3. Which mistakes should be preserved?

archiving, documentation, knowledge management

Archive solutions, methods, false starts, and lessons in a retrievable form.

case archive; lesson memo; method index

Secrecy and turnover can erase hard-won knowledge.

1. Which stations belong to the same network?
2. What regional pattern serves the adversary?
3. Which messages need immediate counterintelligence review?

SIGINT analysis, regional synthesis, counterintelligence

Build a hemisphere-scale traffic picture that connects stations, agents, routes, and command links.

network map; station chronology; regional brief

A regional map can look complete while blind spots remain in local politics.

1. Which alias can be tied to a person or node?
2. What external fact confirms the traffic?
3. What is the confidence level for enforcement?

counterintelligence validation, identity analysis, caution

Validate agent identities through traffic, collateral facts, and careful caveats.

alias table; identity-confidence note; CI lead sheet

Identity inference can damage innocent people if caveats disappear.

1. What ordinary surface story is being used?
2. Which details exceed innocent explanation?
3. What independent business record can test the claim?

cover analysis, open-code reading, restraint

Assess whether apparently ordinary messages function as covert communications in context.

cover assessment; commerce-context check; lead memo

Suspicion can overread normal business language as espionage.

1. What must be reported now?
2. What can wait for confirmation?
3. Which caveat must travel with the alert?

crisis judgment, prioritization, caveat discipline

Issue time-sensitive findings with visible confidence levels and follow-up requirements.

priority alert; caveated brief; update queue

Panic produces false certainty; excessive caution misses the window.

1. What changed after our success?
2. Is the new traffic a different system, silence, or deception?
3. What baseline must be rebuilt?

adaptive analysis, trend monitoring, humility

Monitor changes in adversary communications as evidence of adaptation, fear, or deception.

adaptation log; new-baseline memo; warning note

Past success can blind the unit to a changed adversary.

1. Which agency produced the analysis?
2. Who needs the result for action?
3. What public story will obscure the record?

records discipline, ethics, interagency boundaries

Separate analytic production, enforcement action, and public credit so history can be reconstructed.

attribution memo; routing record; declassification note

Operational secrecy can become historical erasure.

1. Which record proves authorship?
2. Who benefited from the silence?
3. How should public memory be corrected without exaggeration?

archival research, historiography, fairness

Recover credit through documents, collection guides, institutional recognition, and careful public writing.

attribution dossier; legacy brief; exhibit text

Corrective history can overcorrect if it turns one hidden figure into a myth.

1. What should be public for history?
2. What remains sensitive or private?
3. How does release build trust?

archival ethics, transparency, contextualization

Balance archival openness with privacy, classification, and contextual annotation.

release note; collection guide; redaction rationale

Too little release preserves myth; careless release can injure privacy or distort context.

1. Which source family supports this claim?
2. Is the source official, archival, secondary, or popular?
3. Where is the uncertainty?

source evaluation, citation discipline, transparency

Attach claims to public, official, archival, and secondary sources with limits stated.

source spine; claim table; uncertainty note

A polished narrative without source hierarchy becomes mythology.

1. Which result is method, not magic?
2. Where does uncertainty remain?
3. How can the reader learn the discipline without operationalizing harm?

public education, humility, method exposition

Explain reasoning, limits, and uncertainty so codebreaking is seen as disciplined inquiry.

method note; limits paragraph; public education panel

Heroic storytelling can replace method with legend.