Skip to main content
CipherChronicle

Cipher methods Pop culture

Kryptos (CIA sculpture)

A cryptographic sculpture installed at CIA headquarters in Langley in 1990, holding four encrypted messages. Three were broken (K1, K2, K3 between 1998 and 1999), the fourth (K4) has resisted for 35 years despite Sanborn's published cribs.

Family :
Pop culture
Difficulty :
Advanced
Era :
1990, sculptor Jim Sanborn — installed at CIA headquarters
Inventor :
Jim Sanborn (with help from Edward Scheidt)

Also known as : Kryptos sculpture · Sanborn cipher · K1 K2 K3 K4

Kryptos is a cryptographic sculpture created by American artist Jim Sanborn and installed in 1990 in the inner courtyard of the CIA headquarters in Langley, Virginia. It takes the form of a sinusoidal S-shaped copper plate engraved with 865 characters distributed across four distinct sections — K1, K2, K3, K4.

The first three sections were decrypted between 1998 and 1999; the fourth, K4 (97 characters), has resisted for 35 years despite occasional cribs released by Sanborn himself.

The four sections

K1 — 63 characters

Encrypted with Vigenère on the KRYPTOS keyed alphabet, key PALIMPSEST.

Solved in 1998 by David Stein (a CIA in-house computer analyst), then independently in 1999 by Jim Gillogly (cryptanalyst and programmer).

Plaintext (with Sanborn’s deliberate misspelling):

BETWEEN SUBTLE SHADING AND THE ABSENCE OF LIGHT LIES THE NUANCE OF IQLUSION

(“iqlusion” instead of “illusion”)

K2 — 372 characters

Vigenère on the KRYPTOS alphabet, key ABSCISSA.

The plaintext, per Sanborn himself, contains GPS coordinates and the phrase LAYER TWO.

K3 — 336 characters

Transposition: a double column applied to a rectangular grid with a path-based read.

The plaintext is a paraphrased Howard Carter quotation on the opening of Tutankhamun’s tomb in 1922:

SLOWLY DESPARATLY SLOWLY THE REMAINS OF PASSAGE DEBRIS THAT ENCUMBERED THE LOWER PART OF THE DOORWAY WAS REMOVED…

K4 — 97 characters

STILL UNSOLVED. What is known:

  • Sanborn has published three cribs (partial hints) over the years:
    • 2010: positions 64–69 → BERLIN (in plaintext)
    • 2014: positions 70–74 → CLOCK
    • 2020: positions 26–34 → NORTHEAST
  • None of these cribs is enough to reconstruct the algorithm.
  • Sanborn has stated K4 uses several layered cryptographic techniques, but refuses to specify which.
  • Independent analyses have ruled out plain Vigenère, plain double transposition, and most classical ciphers.

Why K4 resists

K4 is a short ciphertext (97 characters) — too short to leverage statistics. It is probably encrypted by a non-classical combination:

  • Substitution + transposition + custom alphabet?
  • Reference to the previous sections’ text (cipher by reference)?
  • Geographic coordinates encoded as letters?

The Kryptos Group community on Yahoo (then Google Groups) has hovered around 200–300 active members for 25 years, without a breakthrough.

Sanborn’s role

Jim Sanborn is not a trained cryptanalyst. He co-designed Kryptos with Edward Scheidt, former director of the CIA’s Cryptographic Center. Scheidt wrote the four messages; Sanborn engraved them.

Sanborn admits that he himself does not have K4’s plaintext at hand — he wrote it on a piece of paper kept in a safe. He has said he will release the solution if no one breaks K4 before he dies, on the condition that the proceeds support climate research.

Sculpture details

  • Copper + petrified wood + granite + magnetite + LEDs: the sculpture sits in a complex environment.
  • A Latin quotation (“VVOIRRE EVERYTHIN”) on the border suggests a fifth inscription that has not been identified.
  • Other Sanborn works (Antipodes, Cyrillic Projector) reuse K1–K3 in different languages — they too have unsolved sections.

In CipherChronicle

Kryptos is the living cryptographic puzzle of the 21st century — the one cited whenever still-unsolved ciphers come up. Companion grids can reproduce the K1 mechanic (Vigenère on a keyed alphabet) with shorter plaintexts, to convey the elegance of a simple device made unfamiliar through a custom alphabet.

Grid

R
I
A
P
Q
G
U
L
J
H
C
I
N
T
Q
Q
R
S
T
U
V
W
X
Y
Z
KeyK = PALIMPSEST · keyed alphabet KRYPTOS
  1. 1

    Ciphertext

    Fifteen letters whose distribution looks Vigenère-like, but on a scrambled alphabet.

  2. 2

    Pattern recognition

    K1/K2 fingerprint — Vigenère on a KRYPTOS-keyed alphabet rather than the standard A-Z order.

  3. 3

    Hypothesis: Vigenère with key PALIMPSEST and the KRYPTOS keyed alphabet

    The shared key drives two things — the shift sequence and the reference alphabet.

  4. 4

    Inverse shift on the keyed alphabet

    The plaintext is recovered with the tabula recta of KRYPTOSABCDEFGHIJLMNQUVWXZ.

  5. 5

    Message revealed

    The plaintext re-emerges in its original order.