How does cryptanalysis of the Playfair cipher work? I have a set of Playfair-enciphered data that I'm trying to crack without the key. I know I need to analyse bigrams; I've currently worked out what decrypts to th, er, in, and he, and have figured out where th and he are in the grid. However, now I'm stumped.

I've looked at the "Solution to Polygraphic Substitution Systems" field manual, but it didn't help. How do I complete the cryptanalysis of Playfair having a few bigrams decrypted and knowing where two of those go in the grid?
There are several algorithms available which can attack a playfair cipher. 

Hill climbing might be one option. Basically it starts with a random key (assuming it's the best one) and decrypts the cipher. The resulting clear text is scored using a fitness function. Then small changes are applied to the key and if the resulting clear text of the modified key scores better, the modified key is regarded as the best key and the process of applying small changes to the key starts over again until no better key can be found.

Sometimes Hill Climbing does not find the best solution, the algorithm gets stuck at a local maximum. An effective way to resolve this issue is to use the Shotgun hill climbing (refer to the wikipedia link provided above).

The Simulated Annealing Algorithm is another option, see also here.

Or you can use the Genetic Algorithm. The algorithm mimics the process of natural selection.

If you are interested in an online playfair breaker: http://bionsgadgets.appspot.com/ww_forms/playfair_ph_web_worker3.html. I think here the hill climbing algorithm is used. It is coded in Javascript, so the source can be studied.

If you are interested in how a clear text can be scored: 
Quadgram Statistics as a Fitness Measure.