Internet Phenomena19/09/2026Núcleo de Mistérios e Fenômenos7 min readUpdated on 28/09/2026

Cicada 3301: what was actually solved and why Liber Primus remains open

The public Cicada 3301 paths have been widely reconstructed, but 56 of the 75 Liber Primus pages still have no accepted solution.

Livro antigo aberto com ilustração de uma cigarra e o número 3301, cercado por códigos, lupa, computador com mensagem PGP e mapa ao fundo.

Short answer: Cicada 3301 does not have a single answer such as “it was solved” or “it was not solved.” The public paths from 2012 and 2013 have been reconstructed in considerable detail, and several later materials can be authenticated through PGP signatures. The 2014 round, however, led to the Liber Primus, whose core remains open. The status maintained by the CicadaSolvers community lists 75 pages in total: all 17 pages in the first set are solved, 2 of the 58 pages in the second set are also solved, and 56 pages in the second set remain without an accepted solution.

What “solved” means in Cicada 3301

It helps to separate four levels of certainty. A step can be reproducible when anyone with the original files can repeat the method and reach the same result. A message can be authenticated when its PGP signature validates against the public key associated with Cicada 3301's historical communications. A page can be decrypted when a clear method produces readable, consistent text. And an idea can be merely plausible without enough evidence to be treated as a solution.

This distinction removes much of the noise around the case. An interesting story, a sentence that “looks meaningful,” or a key that works on a few lines is not enough. A strong solution needs an explicit method that can be repeated and that fits the rest of the material.

What was solved in the public 2012 and 2013 rounds

The beginning of 2012 is now well documented. Solvers reconstructed a chain involving character shifts, OutGuess steganography, book ciphers, Tor addresses, and physical clues. The CicadaSolvers 2012 walkthrough preserves the logic of several of these steps, while the community GitHub archive collects images, pages, and historical material.

That does not mean the entire process became public. Reconstructions follow much of the open path, but the archives themselves point to invitations and private stages. What happened beyond those gates is not documented with the same strength. Saying that “2012 was completely solved” is therefore too simple: the public chain is largely reconstructible, while the private phase remains opaque.

In 2013, the public path was also reconstructed through a more complex collection of artifacts. The archives record an opening image, a book cipher, a bootable ISO image, audio files, Twitter messages, XOR operations, and the introduction of the runic table known as Gematria Primus. The CicadaSolvers timeline organizes these elements and shows how the round led to onion addresses and additional runic pages.

Again, the public portion has much stronger technical and documentary evidence than later stories about who was recruited, what they received, or who stood behind the group. Those claims should not be treated as automatically proven consequences of the public clues.

2014 changed the problem: reaching Liber Primus is not the same as decrypting Liber Primus

The third round began in 2014 and led solvers to the Liber Primus, a runic manuscript organized into two sets. This is where many popular summaries blur the difference between “solving the sequence that reached the book” and “solving the book.” They are different tasks.

The archive maintained by Cicada Solvers describes the third round as still unfinished. The main reason is that the Liber Primus has not been fully decrypted, and the remaining material does not have a consensus, reproducible reading.

The verifiable status of Liber Primus

SetTotal pagesSolvedOpen
LP117170
LP258256
Total751956

These numbers appear both on the Liber Primus reference page and in the CicadaSolvers technical briefing. The first set, called LP1, contains 17 pages and is listed as fully solved. The second, LP2, contains 58 pages numbered 0.jpg through 57.jpg. Only 56.jpg and 57.jpg are considered solved, leaving 56 pages, from 0.jpg through 55.jpg, open.

The total number of solved pages is therefore 19 out of 75. That count is more useful than saying vaguely that “some pages” have been decrypted because it shows the true scale of the problem: most of the manuscript still lacks an accepted solution.

What is special about 56.jpg and 57.jpg

The CicadaSolvers technical briefing describes different methods for the final two pages of LP2. Page 56.jpg was decrypted using a prime number based transformation applied to the runic values. The resulting text points to a deep web page identified by a hash. According to the same briefing, that target has never been found. Page 57.jpg is much more direct: its text can be orthographically transliterated from the Gematria Primus symbols.

These cases also show why a solution must be reproducible. When the transformation rule is clear and the result is consistent, other people can test it. That is very different from selecting keys after seeing the desired output.

What PGP signatures actually prove

PGP is one of the most important tools for separating authenticated material from imitations. The archives preserve the public key and signed communications attributed to Cicada 3301. A valid signature can show that a message was signed by the corresponding private key and that its content was not changed after signing.

This provides cryptographic continuity, not a civil identity. The signature does not automatically reveal who controlled the key, how many people controlled it, or what their motives were. It answers a narrower and very useful question: does this communication belong to the same cryptographically authenticated chain as the earlier messages?

The community archive records a signed message in April 2017 warning about false paths and unauthenticated material. Since then, the reference archives do not record a new public round verified by the same signature chain. For that reason, “new Cicadas” without cryptographic validation should be treated as claims, not as proven continuations.

Why the remaining 56 pages are still open

Recognizing the symbols is not the same as knowing the cipher. The Liber Primus uses Gematria Primus as a writing and value system, but the open pages appear to use additional transformations. The CicadaSolvers structural overview describes delimiters, segmentation patterns, runic values, and repetitions that can guide analysis, but these elements still do not form a general key that produces verifiable plaintext for 0.jpg through 55.jpg.

There are three central difficulties. First, transliteration from runes to Latin characters is not perfectly reversible in every case, which increases the space of possibilities. Second, the transformation used in each section of the book is not known with confirmation. Third, the more flexible a hypothesis becomes, the higher the risk of false positives: with enough combinations, fragments can look like words even when the method is wrong.

There is also an external obstacle: one of the solved pages points to a hash for a deep web page that, according to community tracking, has never been located. Even if that address was meant to be an important next step, the missing content prevents confirmation of what came after it.

How to distinguish a verifiable solution from an internet “solution”

  • Identifiable source file: the analysis should begin from a page, image, or message preserved in the historical archive.
  • Explicit method: the solver must show the transformation used, not only publish the final text.
  • Reproducibility: third parties should be able to apply the same procedure to the same material and get the same result.
  • Structural consistency: the method should respect runes, delimiters, pagination, and other corpus features instead of ignoring inconvenient data.
  • Authentication when applicable: communications attributed to the group should be checked against the historical PGP key when a signature is available.
  • Separation of result and hypothesis: a philosophical interpretation may be interesting, but it does not replace a demonstrable decryption.

What we still do not know

Even after years of archiving and analysis, some questions remain beyond the public evidence. There is no public, verifiable identification of the people behind Cicada 3301. There is no complete, independent documentation of what happened to everyone who reached private stages. Most importantly, there is no accepted solution for the remaining 56 pages of LP2.

It is also not possible to conclude from later silence alone that the project ended, that its creators abandoned the book, or that the Liber Primus was deliberately designed never to be solved. Theories exist about these possibilities, but they should remain classified as theories.

So what was actually solved?

The careful picture is this: solver communities preserved and reconstructed much of the public 2012 and 2013 paths, documented the 2014 sequence leading to the Liber Primus, maintain a body of PGP verifiable messages, and decrypted 19 of the book's 75 pages. What remains is not a small final detail. It is 56 LP2 pages without an accepted solution, along with unanswered questions about private stages and the authors' identity.

The most accurate way to describe Cicada 3301 today is therefore to separate what can be reproduced and authenticated from what remains speculative. The mystery is not untouched, but it is not solved either.

Reference sources

Topics in this articleCicada 3301criptografiaenigmas da internetGematria PrimusLiber PrimusPGP