
This is due to the fact that the first byte of x & m can only affect the first byte of the cyphered text and only a slight affect on the second byte. If you solve the bytes in order, its not too bad!

Err, is there any way to reconstuct them other than just guessing what they are? At least for the non-multiplicating ciphers you could have any four first characters by just using the proper initial k…Mütze wrote:BTW: I've ignored the first four characters, because it is easier to guess them.