Kryptos K4 · session map · 2026-10-17 → 18 (overnight update)

What we tried on K4, and where the holes are

Updated after the overnight gap-filling run: every red cell from the first version was tested, and all came back negative. K4 seen as an encryption pipeline. Each step can be built several ways, and every way we tested is marked with its status. The matrix below crosses key structure with alphabet type. Its empty cells are the gaps.

OBKRUOXOGHULBSOLIFBBWFLRVQQPRNGKSSOTWTQSJQSSEKZZWATJKLUDIAWINFBNYPVTTMZFPKWGDKZXTJCDIGKUHUAUEKCAR
ruled out partly covered can't decide with 24 cribs not tested yet n/a or untestable

The encryption pipeline

From plaintext to ciphertext, one possible step per column. Sanborn's "one-to-one" statement says no reordering step exists, so the last column is mostly moot.

Step 1

Plaintext prep

None (plain English)baseline for every test
Arbitrary letter masksolved algebraically; periodic keys only
Mask + non-periodic keymask + autokey, grid, combined, progressive, keyword-through-grid: inconsistent or at shuffled baseline
Inserted nullsimpossible: cribs are 13 and 11 letters with no gaps
Length-changing transformsexcluded by the one-to-one statement
Step 2

Alphabet

A–Z, KRYPTOSevery family
Clue-word keyed~138 English and German words, 13k pairs
Dictionary keyed842k alphabets × every linear key model, autokey, interrupted keys, running text, Chaocipher, two-stage
Sanborn-phrase keyed613k alphabets: periodic, digit, running keys, all linear models, autokey
Hand-modified A–Z/KA1,850 moved or swapped letters
Other constructions959k alphabets: decimated, reversed remainder, continue-from-last, 19.5k German words
Step 3

Key source

Repeating keyword ≤ 26exact and with 1–2 slips; lengths 17–26 re-checked after a reporting bug
Combined keys, grid keys, formulasstd/KA, clue, dictionary and constructed alphabets
Chain addition / Gromark2-term rules, both alphabets free, 2.78B primers
Chain addition, 3 terms2.27B primers, bases 3–26, free alphabets: chance level
Running text (EN/DE)scored against shuffled baselines
Autokey (forward and backward), progressivestd/KA, clue, dictionary alphabets; near-miss tail at noise level
Interrupted / event-driven keysrestart or pause on letters, words, carved lines: 11k models × 842k alphabets
Clock and date streams1.35M Berlin-clock, time-zone and K2-date streams × 8.4M alphabet variants
Cipher devicesM-94, Wheatstone 27/26, Chaocipher (clue × clue, clue × dictionary, dictionary × std) ruled out; strip ciphers need unpublished alphabets
Key sheet / one-time padunrecoverable from 24 letters
Step 4

Combiner

Vigenère, Beaufort, variantall three directions
Quagmire I–IVwithin the alphabet sets above
Hill 2×2 to 4×44×4 forced keys are non-invertible
Porta, Playfair, Bifid, Enigma-likeK→K self-encryption or 26 letters rules them out
Base-27 (Z27, Z3³), affine, Vig/Beau mixing22.7M embeddings; affine for L ≤ 10
Two stages, different tableauxstd/KA/clue/dictionary pairs, L ≤ 12: at baseline
Step 5

Reordering

None (per Sanborn)"plain B … out pops a cipher N"
Columnar, rotations, 1,282 simplewidths 2–13 with periodic keys
Reordering + non-periodic keyrunning-key scoring to width 11 only

Coverage matrix

No reordering, following Sanborn. Rows are how the key is generated; columns are where the alphabet comes from. Red cells are untested combinations.

Key structure A–Z / KRYPTOS2 alphabets Clue words~138 keyed alphabets Sanborn phrases613k keyed alphabets Dictionary words842k keyed alphabets Any alphabetsolved algebraically
Repeating keywordlength 1–26 ruled outexact + 1–2 slips ruled out13,456 pairs, 1–2 slips ruled outexact ruled outexact + 1 slip, 1.8M alphabets partlymask out for L = 1–12, 14, 15, 17, 21, 22; independent alphabets impossible for 1–7, 9, 10, 14, 15, 17, 21, 25
Long keywordlength 27–96 partlyonly specific words and phrases as keys partly partlyphrase as its own key partly8.9M-letter corpus by exact lookup, 81M configs undecidable
Two combined keysScheidt "key splits" ruled outunknown splits 2–26 each; QUAE + two splits ruled out ruled out ruled out1.8M alphabets undecidable
Grid keyrow key + column key ruled outwidths 2–30, all offsets ruled outwidths 2–30 ruled out ruled outwidths 2–30, all offsets, 1.8M alphabets undecidable
Progressive keykey shifts each cycle ruled out ruled out ruled out ruled out1.8M alphabets, + 1 slip not tested
Autokeyplaintext or ciphertext ruled outall lags 1–96, forward and backward ruled out ruled out ruled outexact; near-miss 10/24 vs shuffled 10–11/24 ruled outarbitrary mask + autokey, all lags
Chain additionGromark / Vimark, 2 terms ruled outcovered by the any-alphabet column: free alphabets include all of these ruled outbases 3–26, primers ≤ 8 digits; 221k dictionary primers; none explains the width-21 rhythm
Chain addition3 terms ruled outcovered by the any-alphabet column ruled out2.27B primers, bases 3–26; 790k chance survivors, none explains the width-21 rhythm
Running textEnglish / German ruled outscored vs shuffled ruled out ruled out ruled outK4 −5.17 vs null −4.86…−5.21 untestable
Specific textsK1–K3, tableau, Morse ruled outexact, all offsets ruled out ruled out ruled out+ 10 books, Carter's Tut vol. 1, interview; 81M configs untestable
Digit keyGronsfeld, clock, dates ruled outπ, e, √2, φ, coordinates, 1986/89 ruled out ruled outno alphabet gives digits ≤ 12 ruled outnone < 16 untestable
Formula keylinear, polynomial ruled out1,544 linear rules ruled out ruled out ruled outlinear and quadratic, 1.8M alphabets n/a
Interrupted keysrestart/pause on triggers ruled out ruled outQuagmire IV, 116² pairs not tested ruled out11,077 models × 842k undecidable
Clock / time streamsBerlin clock, zones, dates ruled out ruled outQuagmire IV, 116² pairs not tested ruled out1.35M streams × 8.4M vectors untestable
Chaocipherself-modifying disks ruled out ruled out116² pairs not tested partlyclue × dictionary (10¹⁰ rows) and vs A–Z/KA closed; full dictionary × dictionary open untestable
Two stagesdifferent tableaux ruled outL1, L2 ≤ 26 ruled outL ≤ 10 not tested partlyL ≤ 12, at shuffled baseline undecidable
Keyword through a gridblock-constant, drift keys ruled out ruled out not tested ruled out3,366 models × 1.8M alphabets; 148 fits vs 197 chance, all gibberish undecidable

What the evidence pins down

Hard constraints

  • Cribs24 letters: EASTNORTHEAST at 22–34, BERLINCLOCK at 64–74. About 113 bits of evidence, enough to confirm any hand-cipher key.
  • Sanborn"One-to-one": each letter is encrypted in place. No reordering.
  • 42 apartPositions 24 and 66 are both V (from T and L); 31 and 73 are both K (from A and K). No scheme may reuse one substitution 42 positions apart, so periods 7, 14, 21 and 42 are impossible for any alphabets.
  • K→KPosition 74 encrypts to itself, which rules out ciphers that can't (Porta, Enigma-like).
  • Scheidt"More than one stage", "change the language base", "simple, can be remembered… with the correct key word/s".

Statistical fingerprints

  • Width 2111 repeated vertical pairs: 1 in ~210 after correction. It's mostly the stacked doublets.
  • Width 75 of 6 doublets in one column: 1 in 2,500 if 7 is pre-chosen (KRYPTOS), 1 in 4 if not.
  • DoubletsEvery visible column-5→6 step is a double: NO→QQ, ST→SS, IN→TT (plaintext gaps +1, +1, +5).
  • Minor diffsBean's near-A–Z effect: p = 0.14 using all 24 letters, so not significant.
  • CiphertextIC 0.036, entropy 4.55 bits/letter (the random ceiling; K1/K2 4.35–4.39, K3 3.95).
  • Implied keyRandom-like linear complexity under 8.4M alphabet variants. A short memorable key would need a nonlinear expansion step.

Gaps, ranked

Ranked by plausibility for a 1989 hand cipher and by the cost of testing.

  1. Sanborn-phrase alphabets × interrupted keys, clock streams, Chaocipher

    The 613k phrase alphabets are now closed for periodic, digit, running, linear and autokey structures. The three newest families were run with clue and dictionary alphabets only.

    hours
  2. Chaocipher, full dictionary × dictionary

    About 10¹³ rows. A 1M random sample and the whole clue × dictionary block are at the shuffled baseline, and Byrne's rule was unpublished in 1989.

    weeks; low prior
  3. Two stages with longer periods or three stages

    Two tableaux with L1, L2 ≤ 12 sit at baseline. Longer periods are mostly undecidable with 24 cribs, and three stages are out of reach.

    days; mostly undecidable
  4. Unpublished material

    Strip-cipher sheets, arbitrary non-keyword alphabets, one-time key sheets. Nothing to search against.

    blocked
  5. Undecidable cells

    Mask with key lengths 13, 16, 19, 20, 23, 24, 26; both alphabets free with long keys; mask + grid keys at widths above ~11. These need more known plaintext than 24 letters.

    blocked