ForHosting KIT · Developer Utilities

Turning grille cipher

The turning grille cipher, also called a Fleissner grille, is a classical transposition system that hides order rather than letter values.

● BetaFree · in your browser

Run — free How it works & API

Use it from WebAPIEmailTelegramApp soon

You lay a square cardboard mask with cut-out holes over a blank grid, write the next plaintext letters through the openings, rotate the mask ninety degrees, and repeat until the grid is full; reading the filled square row by row yields the ciphertext. This capability implements that process deterministically: supply the text, an even grid size, the base hole pattern, and mode encrypt or decrypt. The engine validates that four clockwise turns cover every cell exactly once and reports an invalid grille when holes overlap, leave gaps, sit outside the board, or have the wrong count. Spaces and punctuation travel with the letters; short plaintext is padded with a single pad character so the message fills whole squares. Use the tool free on this page, or call the identical pure algorithm by API at $0.002 per request for classroom demos, CTF helpers, and reproducible documentation examples.

How to use it

Enter your values in the form above. The tool checks them before calculating and shows the result on the same page.

Check your inputs

Use the labels and units shown next to each field. If something is missing or outside the allowed range, the page points to the field to fix.

Use it again or automate it

Use the browser tool for individual checks and the API when you need the same capability in an automated workflow.

What you can do with it

Get an answer now

Enter one set of values and see the result without building a spreadsheet or script.

Compare scenarios

Change one value at a time and rerun the calculation to understand what affects the result.

Automate repeated work

Use the API when the same calculation needs to run inside your product or workflow.

FAQ

How do I use this capability?

Complete the fields above and run it on this page. The form highlights anything that needs attention.

For developers — API access

Everything on this page is available programmatically. This section is for teams who want to wire it into their own systems; everyone else can just use the tool above.

API endpoint

POSThttps://api.kit.forhosting.com/enc/grille-cipher

Prefer to automate it? One authenticated POST creates the task; the result comes back by webhook or a signed link. The same capability also runs here on the web, by email and from Telegram — and soon from our app too.

Call it from your stack

curl -X POST https://api.kit.forhosting.com/enc/grille-cipher \
  -H "Authorization: Bearer $KIT_KEY" \
  -H "Content-Type: application/json" \
  -d '{"text":"ATTACKATDAWN","size":4,"holes":[{"row":0,"col":0},{"row":0,"col":1},{"row":0,"col":2},{"row":1,"col":1}],"mode":"encrypt"}'

const res = await fetch("https://api.kit.forhosting.com/enc/grille-cipher", {
  method: "POST",
  headers: {
    "Authorization": `Bearer ${process.env.KIT_KEY}`,
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "text": "ATTACKATDAWN",
    "size": 4,
    "holes": [
      {
        "row": 0,
        "col": 0
      },
      {
        "row": 0,
        "col": 1
      },
      {
        "row": 0,
        "col": 2
      },
      {
        "row": 1,
        "col": 1
      }
    ],
    "mode": "encrypt"
  })
});
const { task_id } = await res.json();

import os, requests

res = requests.post(
    "https://api.kit.forhosting.com/enc/grille-cipher",
    headers={"Authorization": f"Bearer {os.environ['KIT_KEY']}"},
    json={
    "text": "ATTACKATDAWN",
    "size": 4,
    "holes": [
        {
            "row": 0,
            "col": 0
        },
        {
            "row": 0,
            "col": 1
        },
        {
            "row": 0,
            "col": 2
        },
        {
            "row": 1,
            "col": 1
        }
    ],
    "mode": "encrypt"
},
)
task_id = res.json()["task_id"]

<?php
$res = file_get_contents("https://api.kit.forhosting.com/enc/grille-cipher", false, stream_context_create([
  "http" => [
    "method"  => "POST",
    "header"  => "Authorization: Bearer " . getenv("KIT_KEY") . "\r\nContent-Type: application/json",
    "content" => '{"text":"ATTACKATDAWN","size":4,"holes":[{"row":0,"col":0},{"row":0,"col":1},{"row":0,"col":2},{"row":1,"col":1}],"mode":"encrypt"}',
  ],
]));
$task = json_decode($res, true);

body := bytes.NewBufferString(`{"text":"ATTACKATDAWN","size":4,"holes":[{"row":0,"col":0},{"row":0,"col":1},{"row":0,"col":2},{"row":1,"col":1}],"mode":"encrypt"}`)
req, _ := http.NewRequest("POST", "https://api.kit.forhosting.com/enc/grille-cipher", body)
req.Header.Set("Authorization", "Bearer "+os.Getenv("KIT_KEY"))
req.Header.Set("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)

Example request

{
  "text": "ATTACKATDAWN",
  "size": 4,
  "holes": [
    {
      "row": 0,
      "col": 0
    },
    {
      "row": 0,
      "col": 1
    },
    {
      "row": 0,
      "col": 2
    },
    {
      "row": 1,
      "col": 1
    }
  ],
  "mode": "encrypt"
}

Example response

{
  "task_id": "tsk_a1b2c3d4e5f6a1b2c3d4e5f6",
  "type": "enc.grille_cipher",
  "status": "queued",
  "_links": {
    "result": "/tasks/tsk_…/result"
  }
}

The API is asynchronous: the call returns a task_id immediately and the result arrives by webhook. Polling is capped at 1 req/s per task.

Pricing

Per request$0.002

Published price — no tokens, no invented credits. A failed task is never charged.

Errors

HTTP	Code	Meaning
`401`	`unauthorized`	Missing or invalid API key.
`402`	`insufficient_balance`	Your balance doesn't cover the task price.
`404`	`unknown_type`	That task type doesn't exist.
`429`	`rate_limited`	Too many requests. Use the webhook instead of polling.

Read the full KIT documentation →