Caesar & ROT13 Cipher Tool

Understanding the Caesar and ROT13 cipher tool — concept and principle

The Caesar cipher replaces every letter with the letter a fixed number of places further along the alphabet. ROT13 is the special case with a shift of 13. People use it to learn the basic ideas of cryptography, to solve puzzles and geocaching clues, and to hide spoilers or punchlines in plain sight. It is a teaching tool, not a way to protect information.

How it is calculated

Number the letters A = 0, B = 1, … Z = 25. For a letter x and a shift k:

• Encrypt: E(x) = (x + k) mod 26
• Decrypt: D(x) = (x − k) mod 26

The tool keeps upper and lower case separate, leaves digits, spaces and punctuation unchanged, and reduces any shift modulo 26, so a shift of 29 behaves like 3 and a negative shift moves letters backwards. The second output applies the shift in the opposite direction to the same text.

The principle

"mod 26" makes the alphabet a circle: after Z you wrap back to A. Shifting forward by k and then back by k returns every letter to where it started, which is why decryption is simply the reverse shift. With k = 13, shifting forward and shifting back are the same move, because 13 + 13 = 26 is one full turn. That is why ROT13 is its own inverse: applying it twice gives back the original text. The cipher is attributed to Julius Caesar, who, according to Suetonius, used a shift of three.

Worked example

1. Inputs: text "Hello World", shift k = 13.
2. H (7) → (7 + 13) mod 26 = 20 → U. e (4) → 17 → r. l (11) → 24 → y. o (14) → 27 mod 26 = 1 → b.
3. W (22) → 35 mod 26 = 9 → J; r (17) → 30 mod 26 = 4 → e; d (3) → 16 → q.
4. Encrypted: Uryyb Jbeyq. The space is kept.
5. Shifting back by 13 also gives Uryyb Jbeyq, because for ROT13 the forward and backward shifts are identical. Paste "Uryyb Jbeyq" back in and you get "Hello World".

How to read the result

If the output looks like readable text in a different word order, the shift was wrong; try other values. For an unknown shift, only 25 meaningful keys exist, so trying them all (brute force) breaks any Caesar message in seconds. Frequency analysis is even faster: in English the most common letter of the ciphertext usually corresponds to E.

Common mistakes

• Treating the cipher as encryption for passwords or personal data. It offers no real security.
• Using shift 26 or 0, which leaves the text unchanged.
• Expecting accented or non-Latin letters (such as Korean Hangul) to change; only A–Z and a–z are shifted.

Frequently asked questions

Why is ROT13 used on the internet?

It hides text from a casual glance, for example spoilers or puzzle answers, while anyone who wants to read it can decode it instantly.

How many possible keys does a Caesar cipher have?

26 shifts, of which 25 actually change the text, so an attacker needs at most 25 tries.

Is ROT13 applied twice more secure?

No. Applying ROT13 twice is a total shift of 26, which returns the original text.

Sources: Suetonius, The Lives of the Twelve Caesars, "Divus Julius" 56 · Simon Singh, The Code Book, Fourth Estate, 1999