How a sarcastic phrase nearly lost a naval battle

Technology · Published 18 October 2026 Swipe more like this →

In short: In the world of cryptography, padding is the art of adding extra data to hide patterns. But in 1944, a misunderstood piece of padding—intended as nonsense filler—was mistaken for a biting insult by an Admiral, nearly causing a catastrophic military blunder during World War II.

Padding serves several roles depending on the era of cryptography. In classical systems, it was used to obscure predictable linguistic patterns, such as standard sign-offs like "Sincerely yours." By adding nonsense phrases or random lengths, cryptanalysts were prevented from identifying known plaintexts that could break an encryption. However, because these fillers were often human-readable, they could be misinterpreted by the recipient.

A primary example of this occurred on October 25, 1944, during the Battle of Leyte Gulf. Admiral Chester Nimitz sent a message to Admiral William Halsey asking for the location of Task Force Thirty Four. To obscure the message's structure, he used padding that included the phrase "THE WORLD WONDERS." Because the radio operator failed to signal that this was filler (using the standard "RR" indicator), Halsey’s team read it as a sarcastic reprimand. This caused Halsey to sulk for an hour before moving his forces, nearly resulting in an Allied loss at the Battle off Samar.

Modern cryptography has largely moved away from these types of linguistic fillers because contemporary ciphers are secure even if an attacker chooses the message content. Today, padding is primarily a structural necessity. Block cipher modes like Cipher-block chaining (CBC) require input to be a multiple of a specific block size; padding fills those remaining gaps. For example, PKCS#7 might add bytes where each byte's value equals the total number of bytes added. While necessary for structure, these patterns can introduce vulnerabilities like "padding oracle attacks," which modern systems mitigate using Message Authentication Codes (MACs) or by switching to streaming modes that require no padding at all.

Hash functions also rely on padding to process messages in fixed-length blocks. Schemes like those used in MD5 and SHA-1 include specific termination rules to prevent "length extension attacks." These mechanisms ensure that the mathematical integrity of the hash remains intact regardless of the input message's original size.

General information, not professional advice. Spotted an error? Flag the card or see corrections and complaints.

Intellect Plus is a visual educational discovery platform for exploring fascinating facts and ideas. Brain Food, Not Brain Rot. What is Intellect Plus?

Related

• From an Egyptian tomb to the internet: four thousand years of secret writing
• From Roman tablets to digital hashes: the evolution of the secret word
• The only encryption method mathematically proven to be impossible to crack
• The 1854 cipher that turned secret military communication into a simple pencil-and-paper game
• The linguistic evolution of a word once meaning nothing at all
• How asymmetric keys secure your digital identity and data
• Can a melody hide a secret name or a coded message?
• How modern digital communication secures secrets without needing to meet in person
• Can you change an encrypted message without knowing the secret key?
• Why quantum computers might break the internet's current locks
• The invisible physics powering your contactless credit card payments
• How Merkle Trees and Distributed Architecture Power the World of Modern Cryptocurrencies

More in Cryptography · More in Technology · Latest · A–Z · All topics