File 246 · Open (K1–K3 solved; K4 plaintext now derived, cipher publicly unbroken)
Case
Kryptos — the encrypted sculpture at CIA headquarters
Pillar
Unexplained Events
Period
Installed 1990; K4 still publicly unbroken in 2026
Location
The courtyard of the CIA's George Bush Center for Intelligence, Langley, Virginia
Agency
Created by artist Jim Sanborn (with retired CIA cryptographer Ed Scheidt); displayed by the CIA
Status
Partly solved. Three of the four ciphertexts (K1–K3) were solved in the 1990s. The fourth, K4, resisted cryptanalysis for 35 years; in 2025 its plaintext was derived from Sanborn's archival materials (not by breaking the cipher), the archive was sealed, and Sanborn auctioned the solution. The puzzle remains publicly unsolved as a cipher.
Last update
June 12, 2026

Kryptos: The Encrypted Sculpture at CIA Headquarters.

In a quiet courtyard at the heart of the Central Intelligence Agency stands a curving copper scroll, perforated with some 1,800 letters in a scramble that has tormented professional and amateur code-breakers since 1990. It holds four secret messages. Three were teased out within a decade. The fourth — just 97 letters, known as K4 — became one of the most famous unsolved puzzles in the world, resisting the NSA, the CIA, and an obsessive global community for thirty-five years. Its resolution, when it finally came in 2025, did not arrive the way anyone expected: not from cracking the code, but from a folder in a museum archive.

AnomalyDesk is reader-supported. Articles may contain affiliate links to books and primary-document collections. Read our full funding disclosure.

What Kryptos is, in a paragraph.

Kryptos (Greek for “hidden”) is an encrypted sculpture created by the American artist Jim Sanborn and dedicated in November 1990 in the courtyard of the CIA's headquarters in Langley, Virginia. Its centerpiece is a large S-shaped screen of copper into which roughly 1,800 characters — letters and a few question marks — are cut, arranged as four separate encrypted passages conventionally labeled K1, K2, K3, and K4. Sanborn developed the encryption systems with the help of Ed Scheidt, a retired chairman of the CIA's cryptographic center, while keeping the plaintext meanings to himself. The first three sections were solved years apart: the CIA analyst David Stein solved K1–K3 internally in 1998 using pencil and paper, and the computer scientist Jim Gillogly independently solved the same three publicly in 1999; the NSA later revealed it had also cracked them in the 1990s. K1 used a modified Vigenère cipher and reads as a poetic line (“Between subtle shading and the absence of light lies the nuance of iqlusion” — with deliberate misspellings); K2 (also Vigenère) describes something gathered and transmitted and buried, ending with coordinates; K3 is a transposition cipher paraphrasing Howard Carter's account of opening Tutankhamun's tomb. The fourth passage, K4 — the final 97 characters — uses a different and far harder system and defeated every attempt at cryptanalysis for decades. To keep interest alive, Sanborn periodically released plaintext “cribs” (known fragments of the answer): he revealed that characters 64–69 decrypt to BERLIN (2010), that the next letters spell CLOCK (2014), and that an earlier section yields NORTHEAST (2020) — hints pointing, many believe, toward the Berlin Clock and the fall of the Berlin Wall. Despite these clues, K4 was never broken by codebreaking. The story took an extraordinary turn in 2025: two independent researchers, working in the Smithsonian's Archives of American Art, discovered materials among Sanborn's donated papers from which they derived the K4 plaintext — obtaining the answer not by solving the cipher but by finding the artist's own notes. The Smithsonian sealed Sanborn's archive (reportedly for decades) to protect his rights, and Sanborn — then in his late seventies and seeking a successor “keeper” for the mystery — auctioned his complete Kryptos archive and the solution through RR Auction in November 2025, where it sold for about $962,500 to an anonymous buyer who said they did not intend to reveal it. As of 2026, then, Kryptos occupies a strange status: K1–K3 are public, K4's plaintext is known to a small number of people but has never been published, and the cipher itself has still never been broken by analysis. The sculpture is significant both as a genuine, long-standing cryptographic puzzle and as an unusual case of a mystery resolved by archival accident rather than by the codebreaking it was built to provoke.

The documented record.

The sculpture and its four parts

The structure is well documented. Verified Kryptos, dedicated in 1990, carries four encrypted passages (K1–K4) totaling roughly 1,800 characters, created by Jim Sanborn with cryptographic help from Ed Scheidt [1][2].

K1–K3 were solved

Three sections are public. Verified K1–K3 were solved in 1998 (CIA's David Stein) and 1999 (publicly, by Jim Gillogly), with the NSA having cracked them earlier. They use Vigenère and transposition ciphers and yield a poetic line, a buried-object message with coordinates, and a paraphrase of Howard Carter's tomb-opening account [1][2].

K4's clues

Sanborn released partial cribs. Verified Over the years Sanborn disclosed that parts of K4 decrypt to BERLIN (2010), CLOCK (2014), and NORTHEAST (2020), narrowing the solution space without enabling a full break [1][3].

The 2025 archival derivation and auction

The answer surfaced outside the cipher. Verified In 2025, researchers at the Smithsonian's Archives of American Art derived the K4 plaintext from Sanborn's donated materials; the Smithsonian sealed the archive, and Sanborn auctioned the complete solution (RR Auction, November 2025) for about $962,500 to an anonymous buyer who declined to reveal it [4].

The competing positions.

For 35 years the framing was simple: K4 was an unbroken cipher, and the challenge was to solve it by cryptanalysis. Claimed Thousands of enthusiasts pursued it on that basis, and Sanborn's clues were treated as the legitimate path toward a future codebreaking solution [1][3].

After 2025 the position is more layered: the plaintext is now known, but it was obtained from the artist's archive rather than by defeating the encryption, and it has not been made public; the buyer of the solution may keep it secret. Disputed This archive treats Kryptos as a genuine puzzle whose K1–K3 are solved and whose K4 remains publicly unsolved as a cipher, even though its answer now exists in private hands. Whether the cryptographic community will ever break K4 independently — or whether the answer will simply be released — is open. The case is a rare instance where a famous mystery was effectively spoiled by a paper trail [4].

The unanswered questions.

The K4 plaintext, publicly

The answer is unpublished. Unverified The derived K4 plaintext is held privately by the archive's owners and the auction buyer, and has not been released; the public still does not know what K4 says [4].

The cipher itself

K4 has never been cryptanalyzed. Disputed No one has demonstrably broken the K4 encryption by analysis; the 2025 resolution bypassed the cipher entirely, so the system's workings remain a cryptographic challenge [1][4].

The final layer

Sanborn has hinted at a riddle beyond K4. Claimed The artist has long suggested that solving all four passages yields a further puzzle requiring a physical presence at the sculpture; how that final layer relates to the now-derived plaintext is unclear [1][3].

Primary material.

The accessible record on Kryptos is held principally in these sources:

  • The sculpture itself and Sanborn's public statements and clues (BERLIN, CLOCK, NORTHEAST).
  • The published K1–K3 solutions (David Stein, Jim Gillogly) and NSA's later disclosure.
  • The Smithsonian Archives of American Art holdings of Sanborn's donated Kryptos materials (now sealed).
  • The 2025 RR Auction lot — “The Complete Secrets of Kryptos” — and its reporting.
  • The Kryptos enthusiast community's documentation of cipher analysis and clue history.

Critical individual sources include: the K1–K3 solution write-ups; Sanborn's clue announcements; and the 2025 auction and archival reporting.

The sequence.

  1. November 1990 Kryptos is dedicated in the CIA courtyard at Langley.
  2. 1990s The NSA solves K1–K3 internally.
  3. 1998–1999 David Stein (CIA, 1998) and Jim Gillogly (publicly, 1999) solve K1–K3.
  4. 2010 / 2014 / 2020 Sanborn releases the BERLIN, CLOCK, and NORTHEAST cribs for K4.
  5. September 2025 Researchers derive the K4 plaintext from Sanborn's Smithsonian archive; the archive is sealed.
  6. November 2025 Sanborn auctions the complete Kryptos solution for about $962,500 to an anonymous buyer.

Cases on this archive that connect.

The Beale Ciphers (File 100) — another famous American cipher, with treasure rather than art behind it.

The Dorabella Cipher (File 247) — a short, single-message cipher still unbroken.

The Voynich Manuscript (File 013) — the most famous undeciphered text of all.

The Codex Seraphinianus (File 248) — an encrypted-looking work whose author says it means nothing.

More related files coming as the archive grows. Planned: modern cryptographic puzzles and the culture of codebreaking.

Full bibliography.

  1. Jim Sanborn's public statements on Kryptos and the BERLIN/CLOCK/NORTHEAST clues; the published K1–K3 solutions (Stein, Gillogly).
  2. Reporting and reference material on the Kryptos sculpture and its cryptographic systems.
  3. Coverage of the artist's clue releases and the long enthusiast effort against K4.
  4. 2025 reporting on the Smithsonian archival derivation of K4 and the RR Auction sale of the solution (~$962,500).

← Back to the archive