Skip to main content
CipherChronicle

Cipher methods Pop culture

Kryptos (CIA sculpture)

Kryptos is a cryptographic sculpture created by American artist Jim Sanborn and installed in 1990 in the inner courtyard of the CIA headquarters in Langley, Virginia. It takes the form of a sinusoidal S-shaped copper plate engraved with 865 characters distributed across four distinct sections — K1, K2, K3, K4.

The first three sections were decrypted between 1998 and 1999; the fourth, K4 (97 characters), has resisted for 35 years despite occasional cribs released by Sanborn himself.

The four sections

K1 — 63 characters

Encrypted with Vigenère on the KRYPTOS keyed alphabet, key PALIMPSEST.

Solved in 1998 by David Stein (a CIA in-house computer analyst), then independently in 1999 by Jim Gillogly (cryptanalyst and programmer).

Plaintext (with Sanborn’s deliberate misspelling):

BETWEEN SUBTLE SHADING AND THE ABSENCE OF LIGHT LIES THE NUANCE OF IQLUSION

(“iqlusion” instead of “illusion”)

K2 — 372 characters

Vigenère on the KRYPTOS alphabet, key ABSCISSA.

The plaintext, per Sanborn himself, contains GPS coordinates and the phrase LAYER TWO.

K3 — 336 characters

Transposition: a double column applied to a rectangular grid with a path-based read.

The plaintext is a paraphrased Howard Carter quotation on the opening of Tutankhamun’s tomb in 1922:

SLOWLY DESPARATLY SLOWLY THE REMAINS OF PASSAGE DEBRIS THAT ENCUMBERED THE LOWER PART OF THE DOORWAY WAS REMOVED…

K4 — 97 characters

STILL UNSOLVED. What is known:

  • Sanborn has published three cribs (partial hints) over the years:
    • 2010: positions 64–69 → BERLIN (in plaintext)
    • 2014: positions 70–74 → CLOCK
    • 2020: positions 26–34 → NORTHEAST
  • None of these cribs is enough to reconstruct the algorithm.
  • Sanborn has stated K4 uses several layered cryptographic techniques, but refuses to specify which.
  • Independent analyses have ruled out plain Vigenère, plain double transposition, and most classical ciphers.

Why K4 resists?

K4 is a short ciphertext (97 characters) — too short to leverage statistics. It is probably encrypted by a non-classical combination:

  • Substitution + transposition + custom alphabet?
  • Reference to the previous sections’ text (cipher by reference)?
  • Geographic coordinates encoded as letters?

The Kryptos Group community on Yahoo (then Google Groups) has hovered around 200–300 active members for 25 years, without a breakthrough.

Sanborn’s role

Jim Sanborn is not a trained cryptanalyst. He co-designed Kryptos with Edward Scheidt, former director of the CIA’s Cryptographic Center. Scheidt wrote the four messages; Sanborn engraved them.

Sanborn admits that he himself does not have K4’s plaintext at hand — he wrote it on a piece of paper kept in a safe. He has said he will release the solution if no one breaks K4 before he dies, on the condition that the proceeds support climate research.

Sculpture details

  • Copper + petrified wood + granite + magnetite + LEDs: the sculpture sits in a complex environment.
  • A Latin quotation (“VVOIRRE EVERYTHIN”) on the border suggests a fifth inscription that has not been identified.
  • Other Sanborn works (Antipodes, Cyrillic Projector) reuse K1–K3 in different languages — they too have unsolved sections.

In CipherChronicle

Kryptos is the living cryptographic puzzle of the 21st century — the one cited whenever still-unsolved ciphers come up. Companion grids can reproduce the K1 mechanic (Vigenère on a keyed alphabet) with shorter plaintexts, to convey the elegance of a simple device made unfamiliar through a custom alphabet.

Grid

R
I
A
P
Q
G
U
L
J
H
C
I
N
T
Q
Q
R
S
T
U
V
W
X
Y
Z
KeyK = PALIMPSEST · keyed alphabet KRYPTOS
  1. 1

    Ciphertext

    Fifteen letters whose distribution looks Vigenère-like, but on a scrambled alphabet.

  2. 2

    Pattern recognition

    K1/K2 fingerprint — Vigenère on a KRYPTOS-keyed alphabet rather than the standard A-Z order.

  3. 3

    Hypothesis: Vigenère with key PALIMPSEST and the KRYPTOS keyed alphabet

    The shared key drives two things — the shift sequence and the reference alphabet.

  4. 4

    Inverse shift on the keyed alphabet

    The plaintext is recovered with the tabula recta of KRYPTOSABCDEFGHIJLMNQUVWXZ.

  5. 5

    Message revealed

    The plaintext re-emerges in its original order.