The Reflector

The Enigma machine had a part its designers were rightly proud of, and it was the part that killed it.

At the top of the rotor stack sat the reflector — the Umkehrwalze, the reversal rotor. Where the other rotors passed the current onward, the reflector sent it back: it joined its twenty-six contacts in pairs and returned each incoming signal down a different path, back through the whole stack a second time, to light a lamp. It was a patented flourish, unique to Enigma among the rotor machines of its era, and it bought something worth having. Because the current always made the round trip, the machine became its own inverse. The same setting that scrambled a message would, fed the scrambled text, unscramble it. One machine, one setting, both directions — no switch to throw, no separate decrypt mode. An operator in a field tent could encipher, and an operator four hundred miles away could decipher, with identical machines set identically. No clerk ever had to think about which way the box was pointing.

It came with a guarantee. Because the reflector wired its contacts in thirteen pairs — each joined to some other contact, never to itself — no letter could ever come out as itself. Press A, and the lamp that lit was never A. Not usually; never. It was a hard fact of the wiring, not a tendency — a promise the machine made about every letter it would ever carry.

If you had to guess which property strengthened the cipher and which weakened it, you would probably guess wrong. The guarantee feels like thoroughness. A cipher that might, now and then, leave a letter sitting as itself seems leakier, sloppier — a seam where the plaintext shows through. The reflector sealed that seam. It made the disguise total. And the totality was the flaw.

The reciprocity and the guarantee were the same fact seen twice. A reflector that pairs all twenty-six letters is, in the language of permutations, a fixed-point-free involution: apply it twice and you are home — that is the reciprocity — and it never sends anything to itself — that is the guarantee. You cannot keep one and drop the other. They are one wiring diagram read two ways.

Here is how a certainty gets turned against you. Suppose you suspect a stretch of the enemy's message says something — a weather report, or the flat daily phrase Keine besonderen Ereignisse, "no special occurrences," which the German operators transmitted with such discipline that it became a reliable slab of known text. You do not know where in the intercept it sits. So you slide your suspected words along the ciphertext, position by position, looking for where they might line up. Most positions you have no way to test — except that the reflector has handed you a free filter. At any alignment where one of your guessed letters sits above the same letter in the cipher, you can stop: impossible. The machine promised that never happens. One clash and the whole position is dead.

It is a cheap knife and it cuts deep. At each column the chance that crib and cipher do not collide is twenty-five in twenty-six, so a guessed phrase of twenty-five letters kills close to two-thirds of its possible alignments outright, struck off on sight. The guarantee that no letter is ever itself lets the attacker erase, for free, most of the places the message could be hiding.

What survives goes to the machine Alan Turing designed. Once a crib is correctly placed, its letters and the cipher's form a small graph, and the prize is a loop — a chain where the encipherings close back on themselves. The bombe took such a loop and raced through the rotor settings, seventeen thousand five hundred seventy-six per wheel order. At each one it held a single guess about the plugboard and chased its consequences around the loop; where they contradicted themselves, the setting was impossible, and the drums stepped on. It was an elimination engine — it did not read the message out, it threw away the settings that could not have produced it and handed the survivors to people. And it ran on the reflector twice over: the self-exclusion had told the codebreakers where a crib could sit, and the machine's own reciprocity — every encipherment its own reverse — was what let a single guess be chased around a full circle until it caught on its own contradiction.

None of this broke Enigma by itself. The Poles broke it first, years earlier, through a different door; there were captured codebooks, operators who chose their keys badly, Gordon Welchman's diagonal board multiplying the contradictions, and a war's worth of labor turning the cranks. The reflector was not the cause. It was the lever that made a good guess decisive.

Marian Rejewski, the Polish mathematician behind that first break, had done it by exploiting a procedure — a habit of the German operators, who enciphered their three-letter message key twice at the start of every message and left a fingerprint in the repetition. It was brilliant, and it was fragile, because a procedure is a choice. In 1940 the Germans changed the habit, dropped the doubled key, and Rejewski's method fell away beneath him.

The crib-and-bombe attack did not fall away, and it is worth being honest about why. It leaned on a habit too: it needed the Germans to keep sending predictable text — the weather reports, the Keine besonderen Ereignisse — because without known words there is no crib to drag. That leg they could have cut. Disciplined, varied messages would have starved the attack, at no cost but effort. They never did. The attack's other leg was the reflector, and that leg could not be cut. They tried to harden it — a later reflector whose wiring could be reset and folded into the key settings — but a rewired reflector is still a reflector: pair the letters however you like, and a letter still cannot become itself.

So the machine stood on two exposed legs and severed neither: one it simply never bothered to, and one it could not sever without ceasing to be Enigma. That is the whole difference. A procedure is a choice, and choices can be unmade. A guarantee is the shape of the thing.

The flaws you can fix are the ones in what a system does — its procedures, its habits, the choices it could make otherwise tomorrow. The flaws you cannot fix are the ones in what it guarantees — the promises built so deep that changing them means becoming a different machine. And the self-exclusion was never a blind spot: it was patented, intended, trusted, and the Germans looked straight at it and saw a convenience. What they never did was imagine it from the far side of the war — a property built for their own ease, impossible to remove, being a thing the enemy could build on. That is the quieter danger in a guarantee. Not that you cannot see it, but that you stop testing it, because to test a promise is to admit it might not hold — and an adversary is only someone willing to lean on it and find out. The self-exclusion never varied, across any reflector the Germans ever wired, and that constancy was the whole of it: the one property they could count on to spare themselves a switch was the one the codebreakers could count on to tell them where the message was not.