Full Report
Two people found the solution. They used the power of research, not cryptanalysis, finding clues amongst the Sanborn papers at the Smithsonian’s Archives of American Art. This comes as an awkward time, as Sanborn is auctioning off the solution. There were legal threats—I don’t understand their basis—and the solvers are not publishing their solution.
Analysis Summary
# Main Topic
Resolution of Part Four of the Kryptos Sculpture Cipher: The solution was discovered through historical research rather than traditional cryptanalysis, involving the review of Sanborn papers held at the Smithsonian’s Archives of American Art. This discovery coincides with an auction of the solution by Sanborn and is complicated by legal threats against the solvers, who are withholding publication.
## Key Points
- The solution was found via non-cryptanalytic research, specifically by analyzing clues within the Sanborn papers at the Smithsonian’s Archives of American Art.
- The disclosure timing is problematic as creator Jim Sanborn is currently auctioning off the solution.
- Legal threats have been issued against the solvers, though their basis is unclear.
- The solvers are currently refusing to publish their solution, likely due to the legal situation.
- One commentator suggests the legal claim might relate to Sanborn's own original plaintext documentation being referenced in the auction materials.
## Threat Actors
- **Solvers/Researchers:** Two unnamed individuals who discovered the solution.
- **Jim Sanborn (Implied):** The originator of the sculpture/cipher, who is auctioning the solution and potentially initiating legal threats.
## TTPs
- **Discovery Method (Non-Malicious):** In-depth archival research ("power of research, not cryptanalysis").
- **Conflict TTP (Implied Legal):** Issuing legal threats against the solvers to prevent disclosure or control the market value of the solution.
## Affected Systems
- **Cryptographic Data:** Part Four of the Kryptos Sculpture cipher.
- **Institutional Archives:** Smithsonian’s Archives of American Art (as the source of the breakthrough information).
## Mitigations
- **For Solvers:** Withholding publication of the solution due to legal threats.
- **For Public/Researchers:** No technical mitigations are applicable as this involves a historical/artistic cipher resolution and associated legal maneuvering.
## Conclusion
This incident centers on the resolution of a famous cipher, which has immediately devolved into a legal and commercial conflict. The crucial finding is that the solution bypassed expected cryptographic methods, originating from physical archival research tied to the creator. The primary risk moving forward is the suppression of public knowledge concerning the solution due to the ongoing legal dispute surrounding the auction.