KRYPTOS

THE CLAIM

That the hardest cipher problem of the modern era is not locked in a vault but standing in a courtyard at CIA headquarters, in letter-forms large enough to read from a bench, placed there, with institutional approval, by an artist who then watched the world's intelligence services fail to read it. The Office notes the site selection as a masterstroke of provocation: a secret installed at the address of the people whose job is secrets.

THE THEORY, AS ITS PROPONENTS TELL IT

Kryptos is the rare file in this cabinet where the conspiracy is officially sanctioned: a sculptor was commissioned to place an unsolved cipher in the courtyard of the Central Intelligence Agency, and he did.

The known structure: Jim Sanborn designed the copper scroll with cipher systems developed in consultation with a retired CIA cryptographer, Ed Scheidt. Sections K1 through K3 were solved (first internally at the NSA in 1992, then publicly by CIA analyst David Stein in 1998 and independently by computer scientist Jim Gillogly in 1999) using keyed Vigenère and transposition methods. K4, ninety-seven characters, has resisted every attempt for thirty-six years.

The theories about K4 divide between cryptographic and institutional. The cryptographic camp holds that it uses a system fundamentally different from K1–K3, possibly a one-time element or a physical key referencing the sculpture's own geometry or the courtyard's layout, and that the decrypted text of K3, an adapted passage from Howard Carter's account of opening Tutankhamun's tomb, plus K2's coordinates pointing to a location on the CIA grounds, indicate the plaintext is a set of instructions leading somewhere physical.

The institutional camp holds that the solution is known inside the intelligence community and has not been disclosed, noting that K1–K3 were solved internally years before the public knew. Sanborn has released four clues (BERLIN, CLOCK, NORTHEAST and EAST) and has stated that he deposited the solution with a third party against his own death, and that he has found errors of his own making in the ciphertext. Proponents of the harder theories treat that last admission as the most important one: part of what has defeated the world's codebreakers may simply be a mistake.

WHAT IS KNOWN

Kryptos was commissioned for the CIA's New Headquarters Building and dedicated in November 1990. Sculptor Jim Sanborn, tutored in cryptography by Ed Scheidt, formerly of the CIA's cryptographic staff, cut about 1,800 letters through an S-shaped copper screen. The text divides into four sections. K1 and K2 use variants of the Vigenère cipher; K3 is a transposition whose plaintext paraphrases Howard Carter's account of opening Tutankhamun's tomb. The plaintexts contain deliberate misspellings, K1's closes on the word "iqlusion", which solvers have learned to treat as features, not errors.

The solve record is itself a small intelligence story. In 1999, computer scientist Jim Gillogly announced solutions to the first three sections, whereupon the CIA revealed that one of its own analysts, David Stein, had quietly solved them in 1998 with pencil and paper. It later emerged that an NSA team had gotten there earlier still, in the early 1990s. Everyone stopped at the same wall: K4, ninety-seven characters that yield to none of the classical methods that opened the first three sections.

Sanborn has spent the intervening decades managing the siege. In 2006 he corrected an error in the accepted K2 solution. He then released four plaintext cribs to keep solvers honest and hopeful: BERLIN (2010), CLOCK (2014), and NORTHEAST and EAST (2020), each tied to specific positions in the ciphertext. None has cracked it. In 2025, at eighty, Sanborn announced that the K4 solution itself would be sold at auction, the buyer to decide whether the answer is ever published, and researchers reported that portions of the solution material survived in papers he had donated to a Smithsonian archive, which promptly restricted access. The cipher, in other words, now has a custody chain.

LEADING THEORIES

• A masked cipher beyond the first three systems. Scheidt has indicated K4 uses a harder technique than K1–K3, likely with a masking step that defeats frequency analysis on a text too short to attack statistically. Ninety-seven characters is a brutally small corpus.
• The sculpture is the key. Sanborn has said the K4 plaintext is a riddle in its own right, pointing onward to something at the site, suggesting the solution may require the physical work (and possibly the released clues' compass bearings) rather than the ciphertext alone.
• An error makes it unsolvable as cut. The 2006 K2 correction proved mistakes exist in the system. A single dropped or altered character in 97 could leave the section permanently ajar, solvable in principle, unrecognizable in practice.

ASSESSMENT

The Office regards Kryptos as the control experiment for every other cipher mystery in this archive: the author is alive, cooperative, and dropping hints, the text is short, the audience includes the finest cryptanalysts on the planet, and it still stands. That is a useful calibration of how hard "unsolved" can legitimately be. The 2025 auction converts an intellectual commons into a private asset, which this bureau records without enthusiasm; a secret with a receipt is still a secret. File remains open until a solution is published and independently verified against the copper.

WHAT WOULD CHANGE THE GRADE

• To CLOSED: K4, the final 97 characters. Three of the four passages were solved by 1999, and the fourth has defeated the NSA, the CIA and thirty years of public attempts.
• Sculptor Jim Sanborn has released clues, BERLIN, CLOCK and NORTHEAST, which constrain the plaintext without yielding the method.
• Sanborn has said the solution is held in escrow against his death, and in 2025 moved to auction it. This is the only file in the archive with a known expiry date, which makes it the one certain to close.

FURTHER READING

• Wikipedia: Kryptos
• Wikipedia: Jim Sanborn
• Wikipedia: Jim Gillogly