What Is Kryptos?

The sculpture

Kryptos is an outdoor installation by American artist Jim Sanborn, located in the courtyard of the Central Intelligence Agency headquarters in Langley, Virginia. The name comes from the Greek word for "hidden." It was dedicated on November 3, 1990, commissioned through the GSA Art-in-Architecture program for $250,000.

The centerpiece is a large S-shaped copper screen — approximately 12 feet tall and 20 feet wide — supported by a piece of petrified wood. Nearly 1,735 alphabetic characters were hand-cut through the copper by Sanborn and his assistants using jigsaws, consuming 12 saws and 900 blades over two years. The letters form four distinct encrypted messages.

The screen has two sides. The left half (as viewed from the courtyard) carries the encrypted ciphertext — 865 letters plus question marks across four passages. The right half contains a Vigenère encryption tableau of 867 letters, intentionally oriented so it can only be read from behind the sculpture. Over the decades, the copper has developed a distinctive green verdigris patina.

The courtyard installation

Kryptos is more than the copper screen. The full installation includes several surrounding elements that serve as contextual clues for the cipher:

The compass rose and lodestone. Carved into the courtyard ground near the sculpture's base. The lodestone is a naturally magnetized rock that deflects a compass needle, forcing it to point west-southwest — a deliberate gesture connecting to Sanborn's lifelong interest in Earth's magnetic field and the idea that reference frames can be locally defined.

The Morse code entrance slabs. Large red granite slabs with sandwiched copper sheets flank the walkway to the New Headquarters Building. The copper is perforated with International Morse code encoding fragments: VIRTUALLY INVISIBLE, DIGETAL INTERPRETATIT (deliberately misspelled), SHADOW FORCES, LUCID MEMORY, T IS YOUR POSITION, SOS, and RQ.

Water features. A calm reflecting pool lies between layered granite slabs and tall grasses. A separate bubbling pool sits at the base of the copper screen.

Petrified wood. The piece supporting the copper screen symbolizes, per the CIA, "the trees that once stood on the site of the sculpture and that were the source of materials on which written language has been recorded."

All materials used in the installation are native to the United States.

The four encrypted messages

The copper screen contains four encrypted passages, known as K1 through K4. The first three were solved during the 1990s by independent researchers. The fourth, K4, consists of just 97 characters and resisted all attempts for over three decades — until now.

K1 — Keyed Vigenère · Keyword: PALIMPSEST

Solved independently by CIA analyst David Stein (by hand, 1998) and computer scientist Jim Gillogly (1999, first public solution). An NSA team had also solved it internally in 1992.

K1 uses a keyed Vigenère cipher with the keyword PALIMPSEST. The plaintext reads:

BETWEEN SUBTLE SHADING AND THE ABSENCE OF LIGHT
LIES THE NUANCE OF IQLUSION

"IQLUSION" is a deliberate misspelling of "illusion" — and a functional one. The letter swap (Q for L) encodes f(L) = f(Q) + 19 = 22 via the +19 bridge rule, one of the key relationships used to derive the row key for K4.

K2 — Keyed Vigenère · Keyword: ABSCISSA

Solved by the same researchers in the same period. K2 uses the keyword ABSCISSA and produces a longer plaintext referencing Earth's magnetic field, buried information, geographic coordinates, and the mysterious "WW" — widely identified as William Webster, CIA director at the time of installation. The plaintext includes:

IT WAS TOTALLY INVISIBLE HOWS THAT POSSIBLE?
THEY USED THE EARTHS MAGNETIC FIELD
THE INFORMATION WAS GATHERED AND TRANSMITTED
  UNDERGRUUND TO AN UNKNOWN LOCATION
DOES LANGLEY KNOW ABOUT THIS?
THEY SHOULD ITS BURIED OUT THERE SOMEWHERE
WHO KNOWS THE EXACT LOCATION? ONLY WW

The coordinates in K2 (38°57'6.5″N, 77°8'44″W) point to a location near the sculpture itself. "UNDERGRUUND" is another deliberate misspelling with a cryptographic function: the U→O swap encodes f(O) = f(U) + 19 = 0, independently confirming that O is the hinge point of the row-value system. K2 ends with ID BY ROWS — a phrase some analysts interpret as an instruction about how to read subsequent passages.

K3 — Double transposition cipher

Solved independently by multiple researchers. K3 uses a columnar transposition method and produces a plaintext adapted from Howard Carter's account of opening Tutankhamun's tomb on November 26, 1922 — a narrative about revelation through careful, deliberate removal of obstruction:

SLOWLY DESPARATLY SLOWLY THE DEBRIS THAT ENCUMBERED
THE LOWER PART OF THE DOORWAY WAS REMOVED WITH
TREMBLING HANDS I MADE A TINY BREACH IN THE UPPER
LEFT HAND CORNER AND THEN WIDENING THE HOLE A LITTLE
I INSERTED THE CANDLE AND PEERED IN...
CAN YOU SEE ANYTHING?

"DESPARATLY" is the third deliberate misspelling, encoding f(E) = f(A) + 19 = 23. The passage ends with the famous question Lord Carnarvon asked Carter — repurposed by Sanborn as a direct challenge to the solver.

K4 — The final 97 characters

The fourth and final passage. Just 97 characters beginning with OBKR. K4 uses a fundamentally different mechanism than the earlier passages. Where K1–K2 used single-keyword Vigenère ciphers and K3 used transposition, K4 is a double-keyed Vigenère cipher that uses the KRYPTOS tableau on the sculpture as its lookup square. Two keys — a row key f (derived from compass bearings and misspelling clues) and a column key g (derived from the tableau’s helper rows) — disguise entry into the tableau. A final binary gate correction (+1 or +0, derived from position) completes the shift.

Over the years, artist Jim Sanborn publicly confirmed four plaintext anchors within K4:

When revealing CLOCK in 2014, Sanborn urged solvers to "delve into that particular clock" — a reference to the Berlin Clock. In 2020, he called NORTHEAST his "final clue" and noted that K4's plaintext is itself "a riddle" that will "lead to something else."

This site presents the complete K4 solution: the full 97-character plaintext, the double-keyed Vigenère mechanism verified at all 97 positions, and step-by-step verification data. The four artist-confirmed anchors are preserved at their documented positions.

The artist: Jim Sanborn

Herbert James Sanborn Jr. (born November 14, 1945, Washington, D.C.) is an American sculptor whose work centers on making invisible phenomena visible — Earth's magnetic field, the physics of secret communication, and the tension between concealment and revelation.

Sanborn studied at Randolph-Macon College and earned his MFA in sculpture from the Pratt Institute in 1971. His father served as head of exhibitions at the Library of Congress for 30 years. To design Kryptos's encryption systems, Sanborn worked with Edward M. Scheidt, retired chairman of the CIA's Cryptographic Center, meeting "more or less in secret" beginning in late 1988. Scheidt provided several encryption frameworks; Sanborn added his own artistic modifications.

Sanborn's other major works include the Cyrillic Projector (1997, University of North Carolina at Charlotte) — an 8-foot bronze cylinder that projects encrypted Cyrillic text onto surrounding walls at night, cracked in 2003; Antipodes (1992, Hirshhorn Museum) — a copper-and-petrified-wood piece sometimes called "Kryptos 2"; Covert Obsolescence (1992, Corcoran Gallery) — an installation exploring Cold War espionage using pulped CIA documents; Critical Assembly (2003) — a life-size recreation of a hypothetical atomic lab using genuine Los Alamos parts; and Terrestrial Physics (2009, MCA Denver) — featuring a functioning Van de Graaff accelerator generating 1 million volts.

The 2025 events

In August 2025, Sanborn — battling metastatic cancer and having fielded "tens of thousands of emails and letters" over 35 years — announced he would auction the K4 solution and related materials through RR Auction on November 20, 2025, his 80th birthday and the sculpture's 35th anniversary.

The auction catalog noted that "copies of coding charts used to code Kryptos (originals at the Smithsonian)" were among the materials. Writer Jarett Kobek noticed this reference and asked journalist Richard Byrne to examine Sanborn's publicly accessible papers at the Smithsonian's Archives of American Art. On September 2, 2025, Byrne photographed the files. That evening, Kobek found five pages of scrambled text — the K4 plaintext that Sanborn had accidentally included while compiling documents during cancer treatment years earlier.

Sanborn confirmed the recovered text's accuracy. The Smithsonian sealed his papers for 50 years (until 2075). The auction closed on November 20, 2025, at $962,500 to an anonymous bidder — far exceeding the $300,000–$500,000 estimate. Both discoverers emphasized they had recovered the plaintext but had not solved the cipher cryptographically.

Sanborn also announced K5 — a new 97-character coded message to be released publicly when K4 is cryptographically solved. K5 will use a "similar but not identical" coding system to K4 and is thematically connected to K2's reference to something "buried out there somewhere."

Why Kryptos matters

Kryptos sits at the intersection of art, cryptography, intelligence culture, and Cold War history. It is the only unsolved cipher at CIA headquarters — a puzzle that resisted professional cryptanalysts, amateur code-breakers, and computational brute-force for over three decades.

The sculpture is referenced in Dan Brown's The Lost Symbol, has been the subject of coverage by the New York Times, NPR, Scientific American, Wired, and the Washington Post, and maintains an active online community of solvers. The 2025 auction and Smithsonian discovery brought worldwide attention back to the puzzle, but the fundamental cryptographic question — how does the cipher work? — remained open.

This site presents the answer: a closed, reproducible cipher mechanism verified at all 97 positions.

Sanborn's clues and context

Over three decades, Sanborn released clues and made public statements about K4. These are not rumors or speculations — they are documented artist statements, each of which constrains interpretation. What follows consolidates everything Sanborn has said matters.

The Berlin Clock

BERLINCLOCK appears at confirmed positions 64–74 in the K4 plaintext. When Sanborn revealed CLOCK in 2014, he told the New York Times to "delve into that particular clock." For 11 years, the community focused on the Mengenlehreuhr (Set Theory Clock) — the world's first public clock to tell time using illuminated colored fields, designed by Dieter Binninger and installed on June 17, 1975, in West Berlin. It stands 7 meters tall, uses 24 light fields across five rows, and operates on a modified base-5 numbering system. Binninger died in a plane crash on March 5, 1991 — a fact Sanborn himself noted.

In November 2025, Sanborn clarified that the intended referent is actually the Weltzeituhr (World Clock) at Alexanderplatz — a 16-ton, 10-meter turret-style world clock designed by Erich John and opened on September 30, 1969. It displays the current time for 148 cities worldwide. Critically, the Weltzeituhr sits on a compass-rose mosaic — mirroring the compass rose element of Kryptos itself.

The Weltzeituhr also has deep Cold War resonance: on October 7, 1989, opposition demonstrators gathered at the clock during celebrations of the GDR's 40th anniversary. Thirty-three days later, the Berlin Wall fell.

This project's conclusion: BERLINCLOCK is a confirmed anchor and geographic/cultural reference, not the arithmetic engine of the cipher. The mechanism is defined by the formulas. The clock is a waypoint in the plaintext's navigational instruction.

The Berlin Wall

The Berlin Wall fell on November 9, 1989 — one year and one day before Kryptos was dedicated. Sanborn has stated that the fall of the Berlin Wall influenced K4, and in his 2025 clues confirmed it as one of two autobiographical events embedded in the cipher.

The interpretive role is structural, not sentimental. Boundaries matter in K4: the 7×14 grid has seam behavior where tiers and lanes meet; the cipher stream wraps at fixed intervals; crossing points and transitions are not incidental but definitional. The Berlin Wall is the geopolitical instance of the same principle: a boundary that defined everything on either side of it, until the moment it was breached.

Egypt (1986 trip)

Sanborn visited Egypt in 1986 and confirmed in 2025 that this trip influenced K4. The connection is not mysticism — it is about how inscriptions behave. Egyptian carved texts are site-bound: they assume a specific place, a specific frame, and a specific viewing orientation. Removed from the monument, the inscription loses its context and therefore part of its meaning.

K4 behaves the same way. "THE COMPASS ROSE IS HERE" only makes sense if "here" is a physical location. "EAST NORTHEAST" only makes sense if you have a reference frame to measure from. The Egypt connection reinforces a practical discipline: orientation precedes interpretation.

K3's plaintext — Howard Carter's account of opening Tutankhamun's tomb — connects directly. Carter's narrative is about the physical act of breaching a sealed chamber and peering inside. The Egypt trip and K3 together teach: the inscription is bound to its site, and reading it requires being present at the threshold.

The compass rose and lodestone

A compass rose is carved into the courtyard ground near the base of the sculpture. At its center sits a lodestone — a naturally magnetized rock that deflects a nearby compass needle, reportedly pushing it toward west-southwest.

This is not a decorative compass — it is a working demonstration that reference frames can be locally defined. The lodestone teaches you that "north" near the sculpture is not where you expect it to be. Sanborn, whose artistic practice centers on making invisible forces visible (Earth's magnetic field, the physics of concealment), is showing you that the site's own frame may differ from the global one.

The connection to K4 is direct and literal: "THE COMPASS ROSE IS HERE" is the opening phrase of the plaintext. "EAST NORTHEAST" immediately follows. The compass rose is the physical origin from which the message's directional language is measured.

The Morse code entrance slabs

Large red granite slabs flanking the walkway to the New Headquarters Building contain copper sheets perforated with International Morse code. These are not decorative — they are meta-instructions about how to approach the cipher:

VIRTUALLY INVISIBLE — The mechanism is hidden in plain sight. The r-grid exists; it is not immediately apparent from the sculpture's surface.

T IS YOUR POSITION — Position is the key variable. In the cipher mechanism, every shift value is determined entirely by the position (i) in the 97-character stream.

SHADOW FORCES — Light and shadow affect legibility. The cut-through letters on the copper screen are readable only when light passes through from behind at the right angle.

LUCID MEMORY — Pattern recognition across two sides. Reading the cipher requires holding the ciphertext and the tableau in memory simultaneously.

DIGETAL INTERPRETATIT — Deliberately misspelled. The E→I swap follows the same +19 bridge rule as the K1–K3 misspellings: f(I) = f(E) + 19 = 16.

SOS and RQ — International distress and identity signals. SOS: "I need help." RQ: "I have an urgent message." These frame the sculpture as an act of communication under constraint.

The deliberate misspellings

All three solved passages contain intentional spelling errors: IQLUSION (K1, for "illusion"), UNDERGRUUND (K2, for "underground"), and DESPARATLY (K3, for "desperately"). The Morse code slabs include a fourth: DIGETAL (for "digital").

These are not encoding errors or transmission artifacts. Each one encodes a specific value in the row key (f) used to decrypt K4, via the +19 bridge rule: f(correct letter) = f(wrong letter) + 19 mod 26. The misspellings are functional components of the cipher system, hidden in plain sight across every channel of the installation.

They also assert the physicality of the medium — every letter was individually hand-cut through copper with a jigsaw. But their primary role is cryptographic, not decorative. See the Field Guide for the complete derivation of each bridge value.

Frequently asked questions

Where is Kryptos located?

In the courtyard of the Central Intelligence Agency headquarters in Langley, Virginia (McLean, VA 22101). It is not accessible to the general public — the CIA campus is restricted. However, Sanborn's Antipodes at the Hirshhorn Museum in Washington, D.C. is publicly viewable and uses similar encrypted copper forms.

Who created Kryptos?

American sculptor Jim Sanborn, with cryptographic guidance from Edward Scheidt, retired chairman of the CIA's Cryptographic Center. The sculpture was commissioned through the GSA Art-in-Architecture program and dedicated on November 3, 1990.

Has Kryptos been solved?

K1, K2, and K3 were solved in the 1990s. K4 — the final 97-character passage — resisted all attempts for over 35 years. In September 2025, the plaintext was recovered from Sanborn's Smithsonian archives but was not publicly disclosed. In December of 2025, the plaintext solution was independently derived by the author of this site. This site presents a complete, independently verified cipher mechanism that produces the full K4 plaintext at all 97 positions.

What is K4?

K4 is the fourth and final encrypted passage on the Kryptos sculpture — 97 ciphertext characters beginning with OBKR. It uses a fundamentally different cipher method than K1–K3. Four plaintext anchors were confirmed by the artist between 2010 and 2020: BERLIN, CLOCK, NORTHEAST, and EAST. This site presents a complete cryptographic solution. See the K4 Solution page for the full plaintext and FAQ about the mechanism.

Who solved Kryptos K1–K3?

CIA analyst David Stein solved K1–K3 by hand in 1998 (classified internally). Computer scientist Jim Gillogly published the first public solution of K1–K3 in 1999. An NSA team had also solved them internally by 1992. K4 remained unsolved until the mechanism presented on this site.

The 2025 upheaval

2025 transformed Kryptos from a slow-burning puzzle into a high-drama saga.

Sanborn’s health and the auction. After a decade of cancer treatment, Sanborn announced in August 2025 that he would auction the K4 solution on November 20 — his 80th birthday and the sculpture’s 35th anniversary. The auction ultimately proceeded and was won by an anonymous bidder.

The Smithsonian discovery. The auction catalog mentioned “copies of coding charts” at the Smithsonian. Writer Jarett Kobek and journalist Richard Byrne examined Sanborn’s publicly accessible papers at the Archives of American Art and found five pages of scrambled text containing the K4 plaintext — accidentally included in Sanborn’s archival donation. Sanborn confirmed the recovered text on September 3, 2025, and asked the Smithsonian to seal his papers.

K5 announced. At the International Spy Museum on November 12, 2025, Sanborn announced K5 — a new 97-character coded message using a “similar but not identical” system to K4. K5 shares some coded words in the same positions as K4 and is thematically connected to K2.

The Weltzeituhr clarification. Sanborn also revealed in November 2025 that “BERLIN CLOCK” refers to the Weltzeituhr (World Clock) at Alexanderplatz — not the Mengenlehreuhr (Set Theory Clock) as the community had assumed for 11 years. The Weltzeituhr sits on a compass-rose mosaic, mirroring Kryptos’s own compass rose.

Additional 2025 clues: Two events figure in the K4 solution — Sanborn’s 1986 trip to Egypt and the 1989 fall of the Berlin Wall. Sanborn emphasized that Kryptos is fundamentally about “delivering a message.”

Continue