CICADA 3301

THE CLAIM

An anonymous organization calling itself 3301 ran the most sophisticated open recruitment operation ever seen on the internet, and whoever passed the tests, and whatever they were recruited into, has never surfaced. The obvious question follows: who has the budget, discipline, and tradecraft to run a thing like this and keep it airtight?

THE THEORY, AS ITS PROPONENTS TELL IT

On 4 January 2012 an image appeared on 4chan inviting those who could find a hidden message to follow it. What followed was a puzzle chain of unusual sophistication, steganography, book ciphers keyed to obscure texts, Mayan numerals, a phone number in Texas, GPS coordinates leading to physical posters taped to lamp posts on four continents, and a Tor hidden service. Further rounds ran in 2013 and 2014.

The theory that the puzzle was a recruitment instrument is the mainstream reading and rests on the puzzle's own stated purpose, it said it was looking for "highly intelligent individuals", and on the specificity of the skills tested: cryptography, steganography, digital forensics, data security, and a working familiarity with privacy tooling. The candidate recruiters most often named are the NSA, GCHQ, the CIA, or a private intelligence contractor.

The alternative reading, favoured by several participants who reached the later stages, is that Cicada was a cypherpunk collective assembling contributors for a genuine privacy project, and the recovered material supports it: the puzzles' texts drew on Kabbalistic and hermetic works alongside William Gibson, and one recovered document, the "Liber Primus," is a runic text substantially still unsolved. Some participants report being contacted privately after solving; none has produced verifiable evidence of what followed.

The signing key is the file's anchor. Cicada communications were authenticated with a PGP signature, and in 2018 a message signed with that key repudiated a series of impostor puzzles. Whoever ran it still controls the key and has not otherwise surfaced in eight years.

WHAT IS KNOWN

On January 4, 2012, an image appeared on 4chan announcing a search for "highly intelligent individuals" and promising a test. Hidden in that image, via steganography, was the first step of a puzzle chain that ran through book ciphers, number theory, obscure literature, and, the part that got the bureau's attention, the physical world. Solvers were directed to GPS coordinates in cities across several countries, where paper posters bearing a cicada image and QR codes were waiting. Someone had put boots on the ground on multiple continents to run an internet puzzle. New rounds followed in January 2013 and January 2014, each authenticated with the group's PGP signature, the one reliable test separating genuine Cicada material from the imitators that swarmed in.

The 2014 round ended in the Liber Primus, a book written in runes and wrapped in layered cryptography. A dozen years of collective effort by very capable people has decrypted only a fraction of it. A handful of solvers from the 2012 round later described reaching a private stage where they were quizzed on their beliefs about information freedom and asked to build software, after which, by most accounts, the trail simply stopped. In April 2017 a PGP-signed message, the last verified communication, disavowed all unsigned material circulating under the group's name. Then silence.

LEADING THEORIES

• Intelligence-agency recruitment. The favorite. NSA and GCHQ have run public cryptographic challenges; the global poster drops suggest resources and reach. But no agency fingerprint has ever been found, and agencies generally recruit people they can background-check, not anonymous puzzle champions.
• A private crypto/cypherpunk collective. The puzzles' recurring themes (privacy, cryptography, information freedom) read less like a government and more like a well-organized ideological group with money. The reported final-stage questions point this way.
• An elaborate alternate-reality game or art project. Possible, but the operation asked for nothing, sold nothing, and took credit for nothing, unusual behavior for artists, unremarkable behavior for professionals.
• Recruitment that succeeded. The least dramatic reading: it worked, the selected candidates went inside, and the silence since 2014 is what success looks like.

ASSESSMENT

Open, and comfortably so. Everything verifiable about Cicada 3301 (the puzzles, the posters, the signatures, the unsolved book) is real; everything interesting about it is unknown. The operational security held for over a decade against the collective attention of the internet, which is itself the most impressive artifact in the file. Two things would move this stamp: a credible, PGP-verifiable claim of authorship, or a full decryption of the Liber Primus. The bureau notes that the second may be a prerequisite for the first, and that the book is not cooperating.

WHAT WOULD CHANGE THE GRADE

• To CLOSED: the identity of the setters. The puzzles ran from 2012 to 2014, demanded real cryptographic, steganographic and classical-literature knowledge, and pointed consistently at privacy and free-information themes.
• The group signed its communications with PGP keys. Every claimed later round has failed verification against those keys, which is the built-in test the setters themselves provided.
• Nobody who solved it has ever credibly described what happened next. That is either excellent operational security or evidence that nothing was waiting, and the file cannot presently distinguish the two.

FURTHER READING

• Wikipedia: Cicada 3301
• Wikipedia: Alternate reality game, the genre Cicada is often (perhaps wrongly) filed under
• Community solver wikis archiving the 2012–2014 puzzle chains and Liber Primus transcriptions