The Mystery of Kryptos: The CIA's Unsolved Secret Code

The Mystery of Kryptos: The CIA's Unsolved Secret Code

At the headquarters of the Central Intelligence Agency in Langley, Virginia, stands a sculpture that has challenged cryptographers, computer scientists, and puzzle enthusiasts for more than three decades.

Its name is Kryptos, a word derived from Greek that means “hidden.”

The artwork was created by American artist Jim Sanborn and dedicated on November 3, 1990. Its most recognizable feature is a curved copper screen covered in letters. Those letters are not arranged randomly. They contain four encrypted messages, each designed to conceal a different passage of text.

The first three messages were deciphered during the 1990s.

The fourth, known as K4, proved far more difficult.

For years, people tried to uncover its message using mathematical analysis, computer programs, and clues released by the artist himself.

Then, in 2025, the story took an unexpected turn. Two researchers discovered the intended plaintext in Sanborn's archival papers. Sanborn confirmed that they had found the correct text, but he emphasized that they had not independently deciphered the code.

The distinction is important.

The message had been recovered, but the encryption method remained unknown to the public.

How did Kryptos become such a famous puzzle, and why has its final code remained so difficult to crack?

The Beginning: A Sculpture for the CIA

The story of Kryptos began in the late 1980s, when plans were being made to add original artwork to the CIA's new headquarters building.

The agency wanted something that reflected its work. Intelligence depends on collecting information, interpreting it, and distinguishing meaningful signals from what remains hidden.

A sculpture built around secret messages was a natural fit.

Sanborn's design was selected in November 1988 through the federal government's Art-in-Architecture program. The finished installation was dedicated in 1990. The U.S. General Services Administration records Kryptos as an artwork commissioned for the CIA headquarters and identifies Sanborn as its artist. (GSA Fine Arts Collection )

The sculpture was not simply a decorative object with a few mysterious letters added afterward.

The codes were central to the design.

Sanborn worked with a retired CIA cryptographer to devise the encryption systems. He also collaborated with a fiction writer on the messages themselves, combining artistic ideas with technical challenges.

The result was an artwork that invited people to participate.

Visitors could look at the letters, study the patterns, and attempt to discover what the messages said.

There was just one problem: solving the first three sections would turn out to be much easier than solving the last.

What Does Kryptos Look Like?

Kryptos is a multi-part installation made from copper, granite, quartz, earth, plants, and petrified wood.

Its most famous component is an S-shaped copper screen that resembles a sheet of paper emerging from a printer.

The screen contains 1,735 alphabetic cutouts. One section carries the encrypted text, while the other displays a series of alphabets used in the coding system.

The wider installation includes stone structures, pools of water, a compass rose, and a piece of petrified wood.

These materials have symbolic meanings. The petrified wood evokes the trees that once grew at the site and the historical use of natural materials for writing. The water suggests information moving outward without a known destination.

The sculpture's physical design reinforces its central theme: information can be visible without being understood.

The CIA's official description explains that Kryptos was intended to explore intelligence gathering and the accumulation of information across history. (CIA, “Kryptos” Sculpture )

Even its location adds to the atmosphere.

The sculpture stands on a secure government campus associated with secrecy and intelligence. The public cannot simply walk into the courtyard to examine it in person.

Yet its encrypted messages have circulated far beyond the people who work there.

Four Messages, Four Challenges

The encrypted text is divided into four sections, commonly called K1, K2, K3, and K4.

Each section contains a different passage and presents its own cryptographic challenge.

The first three were designed to be solved using techniques related to classical cryptography, including variations on the Vigenère cipher and other transformations.

A Vigenère cipher uses a sequence of letters as a key to change the letters of a message. Unlike a simple substitution cipher, in which each letter is always replaced by the same other letter, the Vigenère method changes the substitution according to the key.

The method can be effective when used carefully, but it also leaves patterns that skilled cryptanalysts may be able to detect.

Sanborn incorporated additional complications into Kryptos, making the process more than a straightforward exercise in substitution.

The fourth section was designed to be especially difficult.

According to the CIA's account, K4 consists of a 97-character encrypted message. Its code remained unbroken even after the first three sections had been deciphered. (CIA, “Kryptos” Sculpture )

That final passage would become the sculpture's defining mystery.

K1, K2, and K3: The First Breakthroughs

The first three sections did not remain mysteries forever.

In 1998, CIA physicist David Stein solved K1, K2, and K3 through manual analysis. His work demonstrated that the puzzle could be approached with patience, careful observation, and a detailed understanding of classical ciphers.

In 1999, computer scientist Jim Gillogly independently published a solution to the same three sections using a computer.

The two approaches illustrated different sides of cryptanalysis.

Stein relied on human reasoning and systematic calculations. Gillogly used computational methods to test possibilities and identify patterns.

Neither approach required access to the artist's private notes.

The encrypted text itself provided the evidence needed to reconstruct the messages.

For puzzle enthusiasts, the breakthroughs offered encouragement. Kryptos was not merely an artwork whose meaning could only be explained by its creator.

At least three of its four sections could be solved independently.

But K4 remained.

Why Was K4 So Difficult?

The fourth section contained only 97 characters, much shorter than the preceding sections.

That might sound like an advantage.

In cryptanalysis, however, a short message can be more difficult to solve because it provides fewer examples from which to identify patterns.

Longer messages may reveal repeated words, common letter combinations, or statistical features of the underlying language. A short ciphertext may not provide enough information to distinguish a correct method from a plausible but incorrect one.

K4 also came with very little certainty about the exact process Sanborn had used.

Over the years, the artist released several clues about words appearing in the plaintext. Among the confirmed clues were “BERLIN,” “CLOCK,” “NORTHEAST,” and “EAST.”

These clues narrowed the possibilities, but they did not reveal the full encryption method.

A solver could construct a candidate message containing those words without demonstrating that the proposed method correctly generated the entire ciphertext.

That is a crucial distinction.

A convincing guess is not necessarily a cryptographic solution.

To demonstrate a solution, a researcher needs a reproducible method that transforms the encrypted characters into the correct plaintext, rather than a series of assumptions that happen to fit a few known clues.

A Global Community of Codebreakers

As the years passed, Kryptos attracted an international community of enthusiasts.

Some studied classical ciphers. Others experimented with computer algorithms, statistical analysis, transposition methods, and possible connections between the sculpture's physical design and its text.

Online discussions allowed researchers to compare ideas and test competing theories.

The artist also received a steady stream of proposed solutions.

Yet no publicly demonstrated method gained broad acceptance as the answer to K4.

This created a peculiar situation.

The ciphertext was displayed in a public artwork, and the clues were available to anyone interested in studying them. But even after decades of work, the final message remained beyond a confirmed independent solution.

Sanborn's own comments sometimes encouraged further investigation while also warning that the cipher was more complicated than many proposed answers suggested.

The challenge had become part of Kryptos itself.

The sculpture was no longer just an artwork containing a secret. It had become a long-running test of how people reason about incomplete information.

The Discovery in the Smithsonian Archives

In 2025, the story changed.

Writer and researcher Jarett Kobek, working with journalist Richard Byrne, examined archival papers associated with Sanborn at the Smithsonian's Archives of American Art.

Among the materials were original texts connected with Kryptos.

The researchers realized that they had found the intended plaintext for K4.

They contacted Sanborn, who confirmed that the text was correct.

The discovery was reported publicly in September 2025 and attracted considerable attention. After 35 years of attempts to crack the final code, it appeared that the answer had finally emerged.

But the researchers had not solved K4 by analyzing the encrypted letters.

They had found the text in the archive.

Sanborn stressed this distinction in comments reported by the Associated Press in November 2025. The researchers had discovered the plaintext, he said, but they had not deciphered it. They did not possess the key or the method used to transform the message into its encrypted form. (Associated Press, “Kryptos’ final code remains unsolved” )

That meant the discovery answered one question while leaving another untouched.

Researchers now had confirmation of the intended message.

They still lacked a publicly available, independently verified method that explained how the ciphertext produced it.

The Auction of the Kryptos Archive

The discovery also affected plans for Sanborn's private archive.

The artist had arranged to sell his Kryptos materials, including documents related to the final section. After the plaintext was found in the Smithsonian papers, the sale proceeded with a broader collection of material.

The archive went to auction in November 2025 and sold for approximately $962,500, including the buyer's premium.

The collection included documents and materials related to the sculpture and its encryption systems.

For researchers, the archive represented a potentially important source of information about how Sanborn constructed the puzzle.

But owning the documents did not necessarily mean that the owner would reveal their contents.

The buyer was later identified as Paradigm, an investment firm that announced its role as steward of the Kryptos secret in June 2026.

Paradigm said it had worked with Sanborn to establish a system for checking proposed plaintext submissions without its team directly viewing the answer. This account is based on the firm's own description of its process. (Paradigm, “Kryptos” )

The arrangement introduced a new chapter in the mystery.

Instead of simply asking whether anyone could discover the message, researchers could now face a different question: could they produce an independently derived answer that passed a verification process?

Has Kryptos Finally Been Solved?

The answer depends on what “solved” means.

If the question is whether the intended plaintext of K4 has been recovered, the 2025 discovery indicates that it has. Sanborn confirmed the text found in the archive.

If the question is whether the public now knows the full message and can reproduce the process that generates it from the ciphertext, the answer is different.

The plaintext has not been publicly released in full, and the encryption method has not been publicly demonstrated in a way that settles the puzzle for independent researchers.

The distinction is important because cryptography is not simply about obtaining readable words.

A proposed solution should explain how the encrypted text was produced and allow other people to verify the process.

Without that method, researchers cannot independently reproduce the result from the sculpture's 97 characters.

Scientific American also reported in November 2025 that Sanborn continued to regard K4 as unsolved or undecrypted, despite the discovery of its plaintext in the archives. (Scientific American, “Final Clues to Mystery of CIA Kryptos Puzzle Released” )

The result is an unusual situation: the answer exists, but the public mystery surrounding the method remains.

What We Actually Know

Several facts about Kryptos are well established.

Jim Sanborn created the sculpture for CIA headquarters, and it was dedicated in 1990.

The installation contains four encrypted messages.

The first three sections, K1 through K3, were independently deciphered during the 1990s.

The fourth section, K4, contains 97 characters and resisted public cryptanalysis for decades.

In 2025, researchers found its intended plaintext among Sanborn's archival materials, and Sanborn confirmed the text.

The archive was subsequently sold, and Paradigm identified itself as the buyer in 2026.

What remains unavailable to the public is a complete, independently reproducible explanation of the method used to encrypt K4.

These distinctions help separate the documented history from the claims that sometimes surround the puzzle.

Kryptos is not evidence of a hidden intelligence operation encoded into the sculpture without the agency's knowledge. The CIA commissioned the artwork, and the sculpture's encrypted messages were part of its design from the beginning.

Its mystery lies in the challenge of deciphering those messages, not in speculation about secret meanings unrelated to the evidence.

Why Kryptos Still Matters

Kryptos has endured because it combines art with a problem that has no easy shortcut.

Its letters are physically present, but their meaning is concealed.

Its creator has offered clues, but not enough to make the final method obvious.

And the recovery of the plaintext has not ended the challenge. Instead, it has sharpened the question of what it means to solve a cipher.

For historians, Kryptos also documents a particular moment in the relationship between art, technology, and intelligence culture.

The sculpture was created before the internet became a global forum for puzzle solving. Over the decades, it became a shared challenge for people who could collaborate across countries and disciplines.

The archive discovery then showed how historical documents can change the story of a puzzle without resolving every technical question.

The final code now occupies an unusual position: its intended text has been confirmed by its creator, but its public cryptographic explanation remains elusive.

A Mystery Without a Final Answer

More than three decades after Kryptos was unveiled, its story has entered a new phase.

The first three messages are understood. The intended plaintext of K4 has been found and confirmed. The archive has changed hands, and a new system has been established to evaluate proposed answers.

Yet the essential challenge remains.

Can someone independently derive the message from the encrypted characters and demonstrate a method that others can reproduce?

Until that happens publicly, the final section of Kryptos remains an unsolved cryptographic problem in the sense that matters most to codebreakers.

Perhaps a future researcher will find a missing relationship between the clues, the sculpture's physical structure, and the encryption method.

Perhaps the archive's new stewardship will eventually lead to further disclosures.

For now, Kryptos continues to demonstrate the difference between knowing an answer and understanding how it was reached.

The plaintext may no longer be a complete secret.

But the code that hides it remains the final mystery of Kryptos.

Sources

Central Intelligence Agency — “Kryptos” Sculpture — https://www.cia.gov/legacy/headquarters/kryptos-sculpture

U.S. General Services Administration, Fine Arts Collection — Kryptos — https://art.gsa.gov/objects/23717/kryptos

Associated Press — Kryptos’ final code remains unsolved. The CIA sculpture’s creator is auctioning the solution — https://apnews.com/article/kryptos-jim-sanborn-auction-cia-650c1253d6a96591f29b88a20299c430

Scientific American — Final Clues to Mystery of CIA Kryptos Puzzle Released — https://www.scientificamerican.com/article/cia-kryptos-puzzle-creator-releases-final-clues/

Paradigm — Kryptos — https://www.paradigm.xyz/2026/06/kryptos