Skip to main content
Cybersecurity

Kryptos Part Four: Inside the Unsolved Cipher

Kryptos Part Four: Inside the Unsolved Cipher

Who truly owns an unsolved riddle: the artist who made it, the public that puzzled over it for decades, or the stranger who now holds the clues in a private safe? That question has gone from abstract to urgent since two researchers say they discovered the answer to Kryptos’s long-resisting fourth passage not by breaking the cipher with codebreaking alone, but by following paper trails in Jim Sanborn’s archive—material housed in the Smithsonian’s Archives of American Art. The discovery arrives as Sanborn is preparing to auction original notes and a copper proof plate tied to Kryptos, and the solvers, confronted with legal threats, have declined to publish their solution. The result is a cultural and ethical tangle as intriguing as the sculpture itself.

Installed at CIA headquarters in 1990, Jim Sanborn’s Kryptos is part public art, part invitation to puzzle. Its four encrypted passages have been a public obsession: three of them have been solved; the fourth—K4—has stubbornly resisted. That combination of craftsmanship and enigma has attracted hobby cryptanalysts, seasoned professionals, and the curious public for more than thirty years. What’s changed now is that materials the artist says were central to creating the piece—the handwritten plaintext for K4, coding notes and a copper proof-of-concept—are headed to auction through RR Auction, with an estimated price tag reported in the mid six figures. Sanborn himself described the copper plate as “my proof-of-concept piece,” recalling the painstaking, error-intolerant process of hand-cutting roughly 1,800 letters into metal. Those details underscore why the papers matter: they’re not only evidence but part of the sculpture’s provenance and interpretive record .

Here’s the fast-moving arc of events: / Two independent researchers report they have located a solution to K4 among Sanborn’s archived papers at the Smithsonian’s Archives of American Art (the researchers say their work relied on archival context and documentary research rather than fresh cryptanalysis). / Sanborn has put original handwritten plaintext and related material on the auction block. / Legal threats—described by those involved as awkward and unclear in basis—have been made against the solvers, who have chosen not to publish their claimed solution.

Why this matters extends beyond mere curiosity. For historians and museum professionals, primary documents are the raw material of meaning: they allow scholars to reconstruct an artist’s process, clarify intent, and place objects in context. If archival material that illuminates a long-standing public puzzle slips into private hands with restricted access, the public record is weakened and scholarship is hamstrung. For technologists and cryptanalysts, original notes and proofs can test claims about method and reveal whether apparent breakthroughs are the result of technique, serendipity or interpretive leaps. For policymakers and institutions responsible for stewardship of cultural heritage, the sale raises questions about whether—and how—artifacts tied to national institutions should be commodified or conserved. Critics argue that public riddles belong, at least in part, to the public; proponents of the sale counter that private collectors or institutions sometimes offer better material care or more resources than underfunded archives .

There are multiple practical and ethical threads to tug. One is provenance and authenticity: auction houses and buyers will want rigorous documentation to certify that what’s being sold is genuine, and buyers with scholarly bent may pledge to make material accessible. RR Auction’s involvement and the public estimate of $300,000–$500,000 underline that this is a serious market event, not a casual memorabilia sale . Another thread is the risk calculus: Kryptos is an artistic cipher, not an operational encryption system, so the national-security stakes are minimal; nonetheless, the symbolic power of possessing a solution to a celebrated mystery could be exploited for attention or to stoke controversy, and it alters the social dynamics of the solver community.

From the technologist’s perspective, the episode highlights the limits of treating puzzles purely as computational challenges. Sanborn’s methods—his proofs, sketches and hand-cut practice pieces—are as much about material process and creative decision-making as they are about permutations of alphabetic text. The two researchers’ claim that archival sleuthing, rather than fresh codebreaking, produced the answer is a reminder: archives can resolve puzzles as surely as algorithms. That’s a useful correction for a field that increasingly valorizes brute-force computation over archival literacy.

For policymakers and archivists, the case presses a policy question: how should cultural objects tied to public institutions be stewarded when they hold answers to public puzzles? The sale highlights tensions between an artist’s property rights, the public’s interest in access, and the capabilities of private institutions to preserve fragile materials. If significant contextual documents become inaccessible, future scholarship will suffer; if they remain in the public sphere, the scholar and solver communities can continue to work in the open. Neither outcome is purely technical; it is a governance problem about public goods, cultural heritage and private markets .

There is also a human story here: the solvers who decline to publish their claimed solution point to the real-world frictions of disputed discovery. Legal threats—whose basis, according to reporting, is unclear—have chilled disclosure. That reaction raises uncomfortable questions about who can legitimately claim authority over cultural meaning. If archival clues in a public archive lead to an answer, is the discovery part of a communal intellectual heritage or the intellectual property of those who find it? The lack of a transparent resolution leaves the public both curious and unsettled.

Some will argue the auction is benign: the artist owns his work and may sell it as he wishes; a private buyer could preserve and even exhibit the papers. Others will say commodifying the final key to a public enigma transforms a civic puzzle into private capital. Both perspectives are defensible; the tension lies in whether stewardship or ownership better serves the long-term public interest in access and knowledge .

What happens next matters as much as the facts themselves. If the buyer or the solvers make the solution public, Kryptos’s fourth passage will finally step out of rumor and speculation into settled history. If the materials recede into private custody and the solvers keep their discovery private under legal pressure, the sculpture’s cultural afterlife will shift: the mystery will remain—but now shades of gatekeeping and exclusivity will be attached to it.

The story of Kryptos—of hand-cut letters, archival hints and auction-room decisions—illustrates a wider truth about how we value knowledge in public life. Puzzles are not merely intellectual exercises; they are social objects whose meaning depends on who has access to the pieces. In the end, the question may be less about whether K4 can be solved than about what kind of public life we want for our shared mysteries: an open commons of inquiry, or a marketplace where riddles are boxed and sold. Which future do we prefer?

Source: https://www.schneier.com/blog/archives/2025/10/part-four-of-the-kryptos-sculpture.html