Meredith Gardner's first Venona report: "Covernames in Diplomatic Traffic" (1947)

19. [Meredith Knox Gardner], “Covernames in Diplomatic Traffic,” 30 August 1947. TOP SEGRET-GREAM 3¢ Auguot. 1947 WDGAS-93 copy # 5 I. D. SPECIAL ARALYSIS REPORT # L COVERRAMES IN DIPLoMarIC TRAFFIC [REDACTED] Prevared by ASA TI. D. 38 August 1947 copies WD 1 copy chief, ASA 1 cory Chief, 0>-29-2 ei copy LSIC (thru Col. Marr-Jobnson) i copy WDGAS-93 -B

19. (Continued) FOP SEGRE F-GREAS COVERRAVES IN DIPLOMATIC TRAFFIc [REDACTED] 1. Limitatioas cf tho report. Any revert mde at this time on tke contents of treffic encrypted by the syaten QQEMBmst necessarily be fragmentary and subject to correction in detsil, I2 the neaseges that are in any degres readedlo, there are large gaps in solution ef the cipher key (additive), and in the code beok only about 15 per cont of the equivalences ara identified, same only tentatively. Both these dificiencics are constantly being ameliorated, with the result that such reports this will be ontdated vory rapidly until a mch higher degree of recovery has teen reached. 2. Coliatezal information. The collaterel informaticn given about the covernames ia doth ecanty and tentative, for reesons implied in paragraph 1. ‘The mest reliable data related to the namey aro the date and place of origia of the messages containing them. Since most cf the readable treffic originated ta Rew York, it will be necessary So indicats ta2 origin cnly in the case of Washington, Cepberra, and Stockholm messages. All the messages uesd are. directed to Moscow. 3. Use of covernames. Sees It is kcowm from the Report of the Royal Commission /in Canada/ appointed under Order in Council P. C. 411 of February 5, 1946 (report dated June 27, 1946) thet egoncies o? the Union of Soviet Socialist Republics engaged in conspiratorial activities ers accustomed, for reasons of security, to refer to persons thai ere ferthering these activities by covernames, and in particu- lar that this ta dens in encrypted messages sent betyeen diplomatic installations and Moscow. 4. Covernexes in SD The treffic encrypted by the systenQ@Econtains [REDACTED] many covernames, which are definitely proved to be such by two circumstances, (1) that many of them sre 60 cesignated in mesesges (given as a supplemsnt hereto) that describe themselves as dealing with changes in covernames (KLICHKI) and (2) that many of them are contained in the forms; "A (henceforth B)", in which A is evidently the real name of the old covername and B the (new) covername.

19. (Continued) FOPSEGCREFGREAM The cleessic ezample for the “henceforth” formula 1s in a-message of 23 August iSh4, New York-Moscow, internal address SEMION. ‘There occurs the expression "MAMLUIGA Vitaliy Serionovich (henceforth "EM")." ‘Tho nert sentence starts with "EM's". Nov, Vitaliy Semionovich Mamluiga (usual transliteration: Vitalii Semonovich Menlyga) is the name of a person known to have been with the Soviet Purchasing Commission. Aftez giving his rame in full, the originator of the ressage gavo him e covrermame end immediately proceeded to use tt. (EM ia not kwon ovtside this message, the rest of which is not yot readadle; but sce section 15.) jn this cass, whsre porhavs the need for security was not Grest, the covrerniumo esenms to te ths name of the initial letter of MAMLUIGA--M. fhie circeurstarce mist not, hovcver, lead us to emcloy the tern "covername" for initials used for the sake of orevity, the expansion of which is always evident from other passages in the message concerned. (Covernamss themselves can bs 50 edoreviatod. 5. Reliebilis7 of “readings”. In the Poliowlag it’ must be dorne in mind that somes cf the ccvermames are expressed by single code groups not zet found in other contexta and others contein groups act yes found in othe> contexts. When sny form has teen assumed for tho eguiveien: sf such a group, it is hera gonerally followed by a question mark. The Yorz3 assume’ ara besod (2) on celculations made possible by tho fact that [REDACTED] uses a ons-pert code and that complete ane-part codes o? the sams length are aveilable (tnis procezs of comparison and calculation has yielded many values thet wore later verified) end (2) om the analogy of verified cover- nemea. As mantioied belev, the covernanss fall in part into “fanilies". 6. Families of corernemes. It has become ovident that meny of the covermames can be put into cateo- gories on the basia of seme similarity betveen them. In the Report of the Royal Commieaio ve find the allitereting family BACK, BACON, BADEAU, BACLEY (all members of the Group "Reeearch"; cf. p. 729). We find a Promotheus that seema to belong to a "mythology" family, examples of vhich in Qgptraffic [REDACTED] are Jupiter ard Cer’s. in New York messege 798 appended below, we find Erie immediately followed by Euron (in fact, Erie gave the clue for’the identi- fication of Hnron). ‘There is a family ofvancient Phoenician cities: Carthage, fire, and Siden. The ervargemsn‘, of the material from this point will be based on such categories. First, covernames apparently for persons will be listed: Addresses, signatures, specifically Russian Christian names, Christian names not apecifi- cally Russian, relationships and conditions of age, station and calling, mythological remes, remes of animals, names of plants, and miscellansous. Then coverrames apparently for placea and institutions will be Msted: Ancient FOP SEGRE F-GREAM

19. (Continued) FOPSEGREFGREAM-— places, geographical features, and miscellaneous. Names occurring only in the speci2l covermume messages are sometims not listed except in the text of of those massages themeelves (see supplement). 7. Addresses. The addresses and signatures seem to be covernames. The constant address o? Canberra and Stockholm messages and the address of by far the greater part of thes Rew York mescages is oxprossed by a group falling in the book just before the group fcr VIL and five pleces sfter the group for YIZ,a (viea). All. provabilizies favor the value VIZTOR(as an address, it is to be read in the @ative case; VIEQORU, to Victor). The only other occurrence of the group is in the speliing YIKTORII (in which, unfortunately, II can be secured only by Sasuning 4 che-digit garble) in the expression $f Victoria and New South Wales." New York moseages show at lesst three other addresses; 8 OTTELU (to the Eighta Division of Lepertzent) and SEMIONU (to Simeon or Simon), both confirmed from other unes, and a group falling tyo places efter PSIER, hence perhaps PIOTR (Fetor? or PETROV or the like. Tae frscvency cf VIXTORU in the latest index is 2k far Cenberra, 4 for Stockholm, und for New York 246. New York four times follows this by 8 OTDELU (with a cepareting dash or period), Canberra 5 times with a period between and once withort--once Canberra has simply VIKTORU 8. New York also has VISTORU, SEMIONU tvico, VIXTORU, BORIS(?)0VU once, and once VIKIORU OT KOMISSART(?7)AT(A?) Victor from the Commissari(?)at(?7). Canberra bes ono YIKTORU SEMIORU. SEMIONT cocurs 22 times as an address from New York (twice after VIKIORU), once fron Cerborre (after VIKTORU). A1l cccurrences are after 19 July 10hh. OMELET ocerra 22 times, 11 of thease after VIRTORU (with oz without separating period or dash). One Cenberra meesage begirs “To Victor. In reply to your telegram So. 2383. 8 oTmeL(u)." Men oe "FETROW, or whatever it is, 1s an address at least 7 times, ell fron Hew York, from May te August 1944. (the group occurs in 4 other presages, twice. preceded by TOVARISECH, "Comrade"; once in a Canberra message. Note that in sll indications of frequency, unless otherwise stated, anti-garble repetitions have been eliminated.) BORTS(7)0V occurs once in the phrase YIKTORU, BORIS(2)OVU" from Hew York, 17 August 194h.

19. (Continued) FOP SEGREF GREAM 8. Signaturce. The constent Canberra signature is @ grouD that has been tentatively tagged YEFIM (Joachim). Only one cese of a Washington signature {7} is known, a group prestmably in the range of VAY to VAX. It could be something like VAVILOV or even VAKE (Bacchus) Ro Stockholm signatures are known. qThe most frequent Rew York signature is MAY, with an overall frequercy of 164, cnly a handful of which occurrences are not gignatures. Cccasionally, to distinguieh hie own remarks from a document to ia transmitting, MAY will use the expression "PRIMSCEANI YE MAYA" (Mey's nots), thus confirming that MAY is a signature end that the value of the gigzature group is MAY (for MAYA is a different group and certainly meas "of May" in dates). Anozker sigtetuce, in ebout the range for ANTON (Anthony), occurs 1p times {ey York).. Once (32 December 1944) the form is "anon (2) and WAK" {yAZ ia possibly a gexble for MAY). All occursences aro from Octover 1945 to Jamuary 1945. Ths nams also occura in the text 8 times (Gew Yor’, M2y-Decenber i9hh}. In a message of 23 August 1944, ANTON {%) is associated with SERGEY (7) and AKIM,.apperently in connecticn with soutzvestern fectories anc plants. A sigvceture in the right range for BORIS occurs at least twice as a Now Yore sigrature, on 23 October and 31 December 19ht. SERGry (2) (€ergiua); There are 2 candidates for this value. One occurs Septembar 194k an2 11 January 1945; the other occurs 17 times, 26 Maz 19th 15 January 195. ‘The second one is aesociated with ABTOY enc AKIM (see esction 8). ALEKSEY (Alexie); occurs 5 times, 9 May 1k December 19k4.

19. (Continued) FOP SEGREFGREAM- colebrated falling, his neres kept vanishing. Shortly after my labor editorahip bagen, he suddenly converted himself into "Comrade Peters" and then into "Comrade Steve” and then, after long time, back to “Comrads Robarte’. It kept one busy trying to keep up with these trans- formationa. Before the puolication of Budenz"s beok, certain groups had tentatively been identified as equivalent to RICHARD, ROBERT, and the like. That such names occu ia the code book has been amply verified, e.g. by the message of 2 December 1Sk4, listing nuclear physicists end mathemsticians. To serve as surnames in Geily colloduy, some of these names Would have to take on an S. Yhe group that eeems to stand for ROHERT (it follova next after RO) occurs 25 times. ais group for RICHARD (2 places beyond RIT) cccere 6 times (plus orce in RICHARD? PAIMER). Eoth are restricted to New York messages. RICEARD is tho new ccovorname giver in Soptember 1944 to someone whose previous (cover?) name esems to have bogan with 10 (eco tossage appende below). A ROBERT occurs from 7 June 194% on through 17 January 19h5-< of course not necesezrily ons single individual througront. It is eignificent that ROHERT ves alvaya "transmitting" written matter to the origizetor(s) of the messages: the foraula "Robert? has transmitted” ccsurs five times in the index. Another individzel of particular interest is one vhogse name wouli seen to begin vith HE (oz, by the more usual transliteration, KBB). Thies may be HEERI (Henry), though there is almost certainly another and more usual spelling of “Eerry” in the book, GERRI OR CEYRIN. HENRI? figures in arrangemerts for a rendezvous in front cf e Mexico City movie house (a. Y. mosesags of 1) Juno ichs); in other messages also he 4a lecated in DEREVHIA (the Country, covaramme for MEXICO). In a message of 1¢ Angust 19h4 there seema to be talk cf calling him back to TIR (Tyre, covernane for Sev York). He occurs 21 times, from 25 May-1¢ August 194k. The other group, GFARI, occurs in messegs 795 (below) and pernaps in a messege of 1 June ishh involving the securing of e DEREVEHSEOY (Mexican) visa. Other such names ers; AL’ or EL® (Alt): occurs 1 October in phrase "Al’ or EL’” (doth attempts to render English Al?) DIK (Dicis}: was EHO (Bcho) before October 19k4; occurs in five messages, 23 October -26 December 194k. DOBAL'D (Donald): became PILOT? September 194k; this second name appears in section 11 below. DUN?KAN (Duncaz): occurs in messege of 26 May 1944. KARL (Carl): wae SKAT before October 19kk; occurs once 26 December 19h4.

19. (Continued) TOP SEGREFGREAM GENRI(H) (Henry): DZHON (John): PETER: CHARL'Z (Charles): ERIK?: SEW?: KLOD (Claude): HIE (Hick?2): DORA: KORA (Cora): OLA: wee TAM before October 1944. See tho last paragraph above. was GUDZOH before October 1944; occurs once 1b December 1544, with AMIR? was CECRNOY? (Black) before October 19kk. was something else until October 1944. vas something else until October 19h4. Canberra, twice 1 September 1985. Seems to have -furnished information on the Australian Security Service. Same nams twice fram Rew York, 26 July and 16 August 1944.¢ Canberra, April-October 1945. KZLOD 1s Canberra's Yeguler purveyor of information; he occurs 13 tim 8 times in the Zormnle ""KLOD’ has commmicated”. 22 July 1544; message contains names DuPont, Ford, Mellon, Weiz, Pow. (CHARL‘Z ERUS (Cherles Bruno): in msasege 14 Juze 19%4, this is the name HENRI? is to girs as a password at the rendezvous.) in tyo measeges, 23 October 1944 and 4 January, 1945. 246 December 1944. @ Washington female agent; name changed to some- thing else in October 1944. Occurs in 2 messages, 3 May and 19 August 19hk, both dealing vith KDMAR (that is, probably KRAVCHEREO). It is planned to Eake these messages the subject. of a separate repor In the former OLA is described as seeking more detailed information on the XOMAR affair. In the ‘latter she has something to do with the supposition that (does not think that?) KOMAR is staying at 299 West 97th Street. mentioned 19 August 1944 in the phrase "the first two parts (of?) the business of RITA". (The message also mentions KOMAR, issue of IA VOZ/Merico City Communist organ/ for 7 June, BEMRI?). 1l. Rolationships and Conditions of Age, Station and Calling. OTCHIM (Stepfather): in 3 messeges, 17 May 27 December 198k. SVAT (Matchaaker: Son- or Daughter-in-law's Father): 23 Aug. and 6 Dec. 194k. 100

19. (Continued) 13. DEDUSHKA (Granapapa or Grunuaeaay NABOB (Habob): ATAMAN (Hotman): PILOT? {Pilot):, Mytholozical Ranea: YUPITER (Jupiter): SERES (Ceres): MUZA (Nuse): EGO (Echo): GNOM (Gnome): Hames of aninals- TIULEN' (Seal): ORIOL? (Eagle): Lon* (Een Harrier): cus* (Goose) KOMAR (Gnat etc.): CGdavd > Sees 1 BE lO Oo Se 9 May 14 August 19k. apparently a high American diplomatic official. Occurs 5 times in 3 messeges; 9 May, 7 September, la December 1947; in message of 7 September, in connection with postwar treatment of Germany. oceure 4 times in 3 messages, 17 May, 7 June, 6 October, 19th. was DOKAL'D before September 1944. decane ORIOL? (Eagle) in October 19hk. in 4 moseeges, 4 May 25 July 19hk. h guly 1944; communicated concerning Secret Funds Division, Emerson Bigelow, aid of 92,609,690 Portugvess escudoa, Northern Evropeen division of Secret Intelligence Branch, etc. became DIX in Octoder 1944; ccecurs 14 times, 2 May 23 Octover, 154b.° became YAXOV? in September 1944. Cccura 3 times, 18 May, 16 June, 25 July. 16 Angust 19h, (a KOMAR oF Kravebenko message) was YUPITER until October 1944. Cccurs pec. 194k in messages, 3 MAy- 17 August 19hk. changed to something else October 19bh. ybably covername for Yilktor. Kravche: For a complete development of this idea, a separate report would be necessary. Occur: in 8 messages go far partly reed, 6 betveen 3 and 23 May, 194, 2 on 19 August, 19h; KOMAR is the object of intense interest, including attempts to locate him May: “is living with? KERENSEOY in the state of Comecticut etc.”). FOPSEGCREF CREAM 101

19. (Continued) is. 15. FOP SEGRE FGREAM Hames of plants. TTUL'PAN (Tulip): Miscellsnsous. 26 August 1944; (a KOMAR or Krarchenko message) changed to something beginning with KAW Sept. 194k. LYB?? (Lieb?) or possibly LIBERAL: wes ANTENKO until Sept. 1944. Occurs AMUR? (Amour?) 6 times, 22 October 2¢ December 1944. Measage of 27 November spsaka of his wifs ETHEL, 29 years old married (2?) 5 years, ".......busband's work and the role of MZTR(O) and NIL". vas ZHA---2--et (Jeannette??) before October 1944; occurs once 1k December 1944 with DZEON. METR (like many other equivalences in the code book, thie might have an GRART: EM (M): KANUK? (Cannck?): SI (C7): PA (Pa2): alternative reading,perhaps METRO; as METR it means “meter” and as METRO it is a nickname, applied for example to the Paris subway eystem): was SEAUT until September 1944. Occurs 27 Nov. 19h {somechirg about LIB?‘s wife Ethel? wtknowing about her husband's vork and the role of MPTR(0) and NIL; notice in measage 77f beloy how MBTR(O) and NIL com together). Seema to occur 5 December 1944 in phras “METR(O) and ?HYU?SON (Bughson?t)". Note on page 73: of the Report of the Royal Commission: "Metro..... +.-the Eabassy of the U.S.S.R." cecura 26 May 1944 in phrase "of GRANT and EARL"; message Mentions FFI (Forces Francais de'l Intérieur?) or possibly a name ending in FFI (FFY). In 1945, GRAHT was used in Canada as the covermme of Colonel Nikoloy Zabotin, Soviet Military Attaches in Ottawa and head of military intelligence vork in Canadz (see Report of the Royal Cammission). covername of Vitaliy Semicnovich Mamluigs in messag of 23 August 194%. He was a member of the Soviet Purchasing Commiasion, having entered the U.S. in December 1943. He was still here in September 1946 This nemo may be EMA, and may be the same EMA liste 28 Hovember 198k (see below). Occurs 4 times in 2 messages, 24 July and 1 August 1944. occurs 23 October and 6 December 19hk. occurs 14 December 1944. 102

19. (Continued) 16. 17. List of 28 hovenber 1944; in a message of that date the following names occur, apparently as operating from New York: KRUG (Circle, or the name Krug}, KIN-o?--(was R-e?--OL0V until October 1944), EMA, St-o%-- (this word my not be a name) --MALIAR (Painter), YAN (Jan), ENK........ Covernames apparently for places and institutions: Ancient places (also rivers, etc.). TIR (tTyrs): ceovernamo for New York. SIDOR (Sidcn): covernams for London. KARFAGE’ ‘Carthags): covername for Washington. NIL (Rile?): was something beginning with TU (TUMAR, Mict?) vntil September 1944; linked with METR, which see. Geographical feetures. STRAHA (Land, Country); ccvername for the Thited States. OSTROV ‘[sland): -covername for Great Britain; changed October 19bh. to something beginning with EK (or EX). OSTROVITIANIN (Islander): Briton. DEREVRIA (the Country /i.e., rural districts/): covername for Mexico. DEREVENSKOY (Country, Rural): Mexican. JEMUTON (Follow Cowateyman): Covervord for some naticnality, possibly U.S. Miscellaneous. BANK (the Bank): propably covername for the U.S. State Depertment; occurs 24 times, (once in the plural from Canberrs, probably in the literal sense). DOM STARUHI (the Old Woman's House): in 2 messages, 26. May and 1g Aug. 19hk. 103

19. (Continued) 19. Conclasion. In ite prescnt state the Qe Ptrarric tends to arouse curiosity more than it does to sttiefy it. This unsatisfactory state of affairs makes it imperative that this report be supplemented at intervals. It 1s proposed that such supplements not de complete revisions of this report, but rather be of such a nature that they would be filed with it and used in conjunction with it. When enough material has been accumulated, a nov repors will be msde. This report incorporates the previous bric? tentative report of 26 Jane 1947. A final reminder of the extremely provisional nature of all assumptions made in this report ie desirable. Future supplements vill not fail to specify those that have become unterable. FOP SEGRET-CREAM— 104