Book Summary
In 1586, Mary Queen of Scots was signing her death warrant every time she wrote a letter. Her encrypted correspondence with Anthony Babington — encoded with a nomenclator cipher, a mix of symbols and codewords — was being intercepted, deciphered by Thomas Phelippes, and read by spymaster Francis Walsingham, who even added a forged postscript to trap her. Simon Singh opens The Code Book with her execution because the stakes of cryptography have always been absolute: for most of history, a broken code meant a lost war or a lost head.
From there Singh marches through the great cipher stories. The Vigenère cipher, “le chiffre indéchiffrable,” unbreakable for three centuries until Babbage and Kasiski independently cracked it. The Zimmermann telegram, whose decryption pulled America into World War I. The Enigma machines of World War II and the Bletchley Park codebreakers — Marian Rejewski’s Polish mathematicians first, then Alan Turing’s bombe — in what may be the single highest-leverage intellectual achievement of the war. The Navajo code talkers of the Pacific, whose unwritten language became an unbreakable code the Japanese never cracked.
The book’s pivot comes with the invention of public-key cryptography in the 1970s. For all of history, sender and receiver had to share a secret key in advance — the key-distribution problem that made large-scale secrecy nearly impossible. Whitfield Diffie, Martin Hellman, and Ralph Merkle’s key exchange, and then the RSA algorithm of Rivest, Shamir, and Adleman, solved it with a beautiful asymmetry: multiply two large primes easily, factor the product back almost impossibly. Singh explains the mathematics with unusual clarity — you will actually understand why RSA works, which is rare in popular writing.
The final chapters bring cryptography into the present: Phil Zimmermann’s PGP and the “crypto wars” of the 1990s, when the US government tried to classify strong encryption as a munition and Zimmermann faced criminal investigation for giving privacy to ordinary people; and the coming threat of quantum computers, which could factor those large primes and break RSA entirely. The arc of the book is the arc of secrecy itself: from wax seals to mathematics, from kings to everyone.
Who is Simon Singh?
Simon Singh earned a PhD in particle physics from Cambridge, worked at CERN, and then became a science producer at the BBC’s Horizon — the combination shows in everything he writes. His first book, Fermat’s Last Theorem, turned a 350-year-old math problem into a bestseller. The Code Book followed in 1999, and he later wrote The Big Bang and Trick or Treatment. He is also known for a successful libel battle with the British Chiropractic Association over his science journalism — a man willing to defend evidence in court.
Singh’s gift is compression without condescension. He takes genuinely difficult ideas — modular arithmetic, frequency analysis, prime factorization — and builds them up so patiently that a reader with no mathematics background ends up understanding RSA. Readers of Fermat’s Last Theorem will recognize the method: human drama first, then the ideas, each chapter a self-contained story that also advances the larger arc.
Lessons From The Code Book
Kerckhoffs’s principle is the book’s deepest lesson: a cryptosystem should remain secure even if everything about it, except the key, is public. Security through obscurity always fails eventually — the Germans trusted Enigma’s complexity; the Allies broke it with mathematics and captured rotors. The investment parallel: beware the “proprietary black box.” Durable edges are structural — network effects, scale, real secrets — not obscurity. If a thesis depends on nobody looking closely, it is an Enigma waiting for its Turing.
The key-distribution problem is a perfect metaphor for trust in business. For centuries, cryptography’s hard part was not the cipher but getting the key to the other person safely — the human, logistical problem underneath the math. Most business problems are like this: the technical solution exists, and the binding constraint is trust, coordination, or incentives. Solve for the key exchange, not just the algorithm.
Openness wins in the long run — with a caveat. Public scrutiny made RSA stronger; every published attack forced improvements, and the algorithms that survived open review are the ones the world now trusts. But Singh also shows the other side: the codebreakers of Bletchley Park kept Ultra secret for thirty years, and that secrecy shortened the war. The lesson is not “always open” — it is that secrecy is a wasting asset. Spend it where the payoff is enormous and the window is short; everywhere else, let sunlight harden the system.
Finally, the book is a meditation on asymmetry — small inputs, enormous consequences. One decrypted telegram shifted a world war. One clever algorithm (RSA) underpins trillions in e-commerce. One quantum breakthrough could unwind it. Investors live in asymmetric payoffs too: most of a portfolio’s lifetime return comes from a handful of decisions. Singh’s history trains the instinct to look for the small, overlooked mechanism with outsized leverage — the cipher, not the army.
Criticisms of the Book
The Code Book was published in 1999, and the final chapters show it. The quantum-cryptography chapter was speculative then and reads as a time capsule now — real progress has been made, and the threat landscape (state surveillance, ransomware, the politics of end-to-end encryption) has moved on. The crypto-wars chapter ends mid-story. A reader wanting the modern sequel — Snowden, the Apple-FBI fight, post-quantum standards — will need a second book.
The middle chapters are the most demanding popular-science writing Singh ever did, and some readers will stall there. The explanation of RSA is superb, but it is still mathematics, and the Vigenère-cracking sections require real attention. Singh never dumbs it down, which is admirable — but the book’s pace is uneven, sprinting through war stories and then asking you to do modular arithmetic.
A narrower criticism: the Beale ciphers chapter, entertaining as it is, devotes significant space to what is probably a hoax — a buried-treasure cipher story from 1885 that most historians consider fiction. Singh is transparent about the doubts, but the chapter’s inclusion shows the book’s bias toward a good story over strict significance. It is the one place where the drama-first method overreaches.
Who is This Book For?
This is a book for anyone who wants to understand the hidden infrastructure of the digital economy. Every online transaction you make, every message you send, rests on the mathematics Singh explains — RSA, key exchange, the coming quantum transition. Investors in cybersecurity, fintech, or digital infrastructure will find it gives them the first-principles understanding that most market commentary lacks.
It is also, frankly, a book for puzzle lovers and history readers. The war stories — Mary Stuart’s intercepted letters, Turing’s bombe, the Navajo code talkers — are told with a thriller writer’s pacing, and you do not need any mathematics to enjoy three-quarters of the book. Recommend it to the curious teenager in your life; the RSA chapter has converted more than a few readers into mathematics students.
Final Thoughts
The Code Book is the rare popular-science book that is both a page-turner and genuinely educational. Singh makes you feel the weight of secrecy across five centuries and then hands you the mathematics to understand the modern version. The war stories alone justify the read; the RSA explanation justifies the shelf space.
For the investor, the takeaway is structural: the most valuable things in the modern economy — trust, privacy, verification — are built on mathematics most people never see. Understanding the cipher layer, even at Singh’s popular level, is understanding the foundation the digital economy stands on. And foundations are where the durable returns are.
