CICADA 3301

THE CLAIM

An anonymous organization calling itself 3301 ran the most sophisticated open recruitment operation ever seen on the internet — and whoever passed the tests, and whatever they were recruited into, has never surfaced. The obvious question follows: who has the budget, discipline, and tradecraft to run a thing like this and keep it airtight?

WHAT IS KNOWN

On January 4, 2012, an image appeared on 4chan announcing a search for "highly intelligent individuals" and promising a test. Hidden in that image, via steganography, was the first step of a puzzle chain that ran through book ciphers, number theory, obscure literature, and — the part that got the bureau's attention — the physical world. Solvers were directed to GPS coordinates in cities across several countries, where paper posters bearing a cicada image and QR codes were waiting. Someone had put boots on the ground on multiple continents to run an internet puzzle. New rounds followed in January 2013 and January 2014, each authenticated with the group's PGP signature — the one reliable test separating genuine Cicada material from the imitators that swarmed in.

The 2014 round ended in the Liber Primus, a book written in runes and wrapped in layered cryptography. A dozen years of collective effort by very capable people has decrypted only a fraction of it. A handful of solvers from the 2012 round later described reaching a private stage where they were quizzed on their beliefs about information freedom and asked to build software — after which, by most accounts, the trail simply stopped. In April 2017 a PGP-signed message — the last verified communication — disavowed all unsigned material circulating under the group's name. Then silence.

LEADING THEORIES

• Intelligence-agency recruitment. The favorite. NSA and GCHQ have run public cryptographic challenges; the global poster drops suggest resources and reach. But no agency fingerprint has ever been found, and agencies generally recruit people they can background-check, not anonymous puzzle champions.
• A private crypto/cypherpunk collective. The puzzles' recurring themes — privacy, cryptography, information freedom — read less like a government and more like a well-organized ideological group with money. The reported final-stage questions point this way.
• An elaborate alternate-reality game or art project. Possible, but the operation asked for nothing, sold nothing, and took credit for nothing — unusual behavior for artists, unremarkable behavior for professionals.
• Recruitment that succeeded. The least dramatic reading: it worked, the selected candidates went inside, and the silence since 2014 is what success looks like.

ASSESSMENT

Open, and comfortably so. Everything verifiable about Cicada 3301 — the puzzles, the posters, the signatures, the unsolved book — is real; everything interesting about it is unknown. The operational security held for over a decade against the collective attention of the internet, which is itself the most impressive artifact in the file. Two things would move this stamp: a credible, PGP-verifiable claim of authorship, or a full decryption of the Liber Primus. The bureau notes that the second may be a prerequisite for the first, and that the book is not cooperating.

FURTHER READING

• Wikipedia: Cicada 3301
• Wikipedia: Alternate reality game — the genre Cicada is often (perhaps wrongly) filed under
• Community solver wikis archiving the 2012–2014 puzzle chains and Liber Primus transcriptions