This article documents a collection of interesting puzzles, seemingly related to Cicada 3301, which were either confirmed to be unrelated or lack sufficient information to be verifiable at all.
845145127.tk
Description
During the 2012 puzzle, "845145127.tk" was a fake puzzle. It was a registered domain name[1], and tried to mislead solvers by taking advantage of 3301's vagueness when announcing the second chance:
Follow the "Numbers dot TK" hint to find it.
The domain name references the legitimate "845145127.com" website from the 2012 puzzle. Its existence can be traced back to the 16th January. It contained an image in an HTML document:[2]
<html> <title>845145127</title> <body> <center> <img src="chance.jpg" alt="Do you need some?" width="309" height="425" /> </center> </body> </html> <pre> </pre>
The HTML document contained a sequence of spaces and tabs, perhaps encoding a message. It is similar to the last "845145127.com" update, but using the same decoding method fails for this message. Whether or not the whitespaces decode to any meaningful information is unknown.
This is an archive of change.jpg
. It contained a whitespace binary outguess message, which when converted to acsii gives:[3]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Here's your last chance: How many roads must a man walk down, before I will call him a man? How many seas must a white dove sail, before she drowns in the sand? How many times must the old lies fly, before they are forever banned? The answer, my friends... [Some of you submitted an email address. You have received a key, and you knew where to find the lock. But do not feel proud; all doors lead to one room, and this task was easiest of all.] 13 to everyone. - -MUTE -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJPE3q+AAoJEAfLguPQ6KJsBuUH/AutLUk/tazP2z3ZRNGxzJug 32/OVGXiuWVNuqkl0i+9RdQpUox2f7ABl5cCBb/RRFmWYVyAwBq69lSZhnMYQsZ8 dfBodXvG3fp10Oz+x865dsP5PlzxkuDKAzKyjoNaLc/2aNFq4ihE64tqDOfID/dm yUMv6rvYp9hRIUe3VS324zAYwJls4qlnRXQzbN4TYbPjKjmfJgG3lLSc718YylHL G7+3Uyc7+zd7ZDeg2p1Kmq57obtLguXooOFIDoV+Nl433ajWcm3xaWKZ13tDulda hcw2u9ohuZlDxk934HiwtyQ0FqpvoqoD8x2mX3dQ/6RENaKhCMn9noyWYkaPsvU= =O+n6 -----END PGP SIGNATURE-----
This PGP message was signed by the key 07CB82E3D0E8A26C ("Wind 3301"). This is not 3301's key, which proves this puzzle not to be legitimate.
Origin
Later, a PGP message signed using the same key appeared. Its author claims to be behind many fake puzzles from 2012: https://pastebin.com/V62m76fN
In a writeup about the 2012 puzzle, tekknolagi (one of the public 2012 winners) says:
At this point, our story takes a darker turn. Our elite IRC group of 8 people deceived the rest, and led them on a wild goose chase. We created a branch off the puzzle, and led them solving unsolvable things. We distracted them so we would progress and they would not. We’re sorry to announce that, but it’s a necessary part of the story.
The "branch off" he mentions might be the fake '845145127.tk' puzzle.
Not long after, a user named n_ posted the correct "Numbers Dot TK" URL to the n0v4 IRC channel. As it lead to a PGP-signed message from 3301, it presumably invalidated the "845145127.tk" website. n_ was a well-known solver from that time, who were working in a small team with tekknolagi. On his writeup, tekknolagi claims the user that posted the lead wasn't the n_ he knew. Could 3301 be behind this impersonation?
October 2013 /x/ threads:
26th october:

http://archive.4plebs.org/x/thread/13507507/#13508202
http://www.aznrecipes.com/contact-us.html
interesting post:
Anonymous
Wed Oct 02 2013 05:36:20
Quoted By: >>13508292 >>13508459 >>13507507 Cicada 3301 is, perhaps, the most dangerous organization the world has ever known. They are smart, large, well-funded, and very dedicated. The level of loyalty among their members approaches fanaticism. They're not really occult like the leaker said. But it is somewhat similar to a religion in the sense that they provide a way to change -- to transform yourself. To take yourself to the next level. The next evolutionary step. Beyond yourself. Beyond your society. Beyond your own existence. Past all and into enlightenment. As soon as a person reaches that level they are snatched up (not all go willingly, although most do). They are dangerous, because they will usher in the demise of society as we know it. They are wonderful because what they bring in to replace it will be far superior. In the mean time, they watch us all quietly. Waiting for us to achieve the enlightenment they try to lead us towards. And when we do, we disappear. To join the latest brood, and to move forward at last.
This is also interesting: http://archive.4plebs.org/x/thread/13507507/#q13508959
there were similar PGP messages found on patsebin:
http://pastebin.com/zDPkxjCY | ||
http://pastebin.com/EkUBGyyg |
Pictures of CICADA 3301 sticker we found on /x/ in october:


Cicada 3301 is showing up on 4chan periodically evry few weeks.
Sombody posted two pictures of stickers with cicada symbol. One was lledegyl taken from islandia another one from flordia.

This is supposedly taken on Iceland

Florida? Sign 1

Link to similar ticle in wiki: http://uncovering-cicada.wikia.com/wiki/The_Cicada_Sticker
And archived thread where posts are copied from.
http://archive.4plebs.org/x/thread/13395600/
Here are all link to archived threads with those photos:
http://archive.4plebs.org/x/thread/13005182/
http://archive.4plebs.org/x/thread/13332913/
http://archive.4plebs.org/x/thread/13083118/
http://archive.4plebs.org/x/thread/13395600/
http://archive.4plebs.org/x/thread/13077469/
Added on 25.9.2013:
http://archive.4plebs.org/x/thread/13395600/#13404677
http://archive.4plebs.org/x/thread/13390027/
http://archive.4plebs.org/x/thread/13471557/
NEW VISIT BY WIND:
Few days ago wind was in channel again, IP matched:
Wind hinted that arg 77days and 3301 could be connected. But they probabyl are NOT.
At same time there was /x/ trhead suggestign same thing. We dont know if tha thread was made by wind or did wind saw it and decide to stop in our channel.
http://archive.4plebs.org/x/thread/13461417/
15:38 -!- Wind [18f7814e@gateway/web/freenode/ip.24.247.129.78] has joined #33012013 15:38 < Wind> Hello. 15:45 < Wind> Why are you all still here?
More in logs: http://spiers.usr.sh:808/%2333012013.log
Basicly wind quoted few things from 77days. Mentioned team.forsvarsmakten.se/english/ as part of sequrity question. IP was from Traverse City as usual.
She mildly trolled us with quotes like:
15:45 < Wind> Why are you all still here? 15:58 < Wind> A lot has happened since my last visit.
16:13 < Wind> Change. 16:15 < Wind> ------------- 21:14 < Wind_> ce5. 21:15 < Wind_> -------------
20:50 < NiceLurk> >Cicada 3301, a secret society 20:52 < Wind_> A society of 10 is hardly a society at all. 20:54 < masso> why only 10? 20:56 < Wind_> Only 10 exist. 20:24 < Wind_> What is the difference between a tree and a ball of twine? 20:25 < asqw> what is the difference between Wind and Cicada 3301? 20:26 < Wind_> Wind whispers to all. 14:05 < Wind> Do things left alone and clues never found change over time, or are they simply as static as ends never tied?
At same time she was logged in channel ##77days usign nick Alice__
18:15 < hitsujiTMO> /whowas wind 18:15 < NiceLurk> [00:15] === Wind 18f7814e gateway/web/freenode/ip.24.247.129.78 * 24.247.129.78 - http://webchat.freenode.net 18:16 < NiceLurk> /whowas alice__ 18:16 < NiceLurk> [00:16] === Alice__ 18f7814e gateway/web/freenode/ip.24.247.129.78 * 24.247.129.78 - http://webchat.freenode.net
Few posts related to wind:
20:24 < borken> (6:05:35 PM) Wind: Everything comes to an end. 20:24 < borken> (6:05:39 PM) Wind: ------------- 20:11 < thearrowflies_> wind was a troll, right? 20:15 < borken> dunno 20:15 < borken> she talks quite a bit like the talk i had 2 years ago with her 20:16 < borken> but I did get this out of her. 20:16 < borken> (5:38:51 PM) borken: So are you on shift, or are you here of your own volition and interest, independant of direction from above? 20:16 < borken> (5:39:35 PM) Wind: I am here on my own agenda. 20:16 < borken> is that pasting html still? 20:17 < thearrowflies_> no 20:17 < thearrowflies_> the wiki said she was a troll 20:17 -!- thearrowflies_ is now known as thearrowflies 20:18 < borken> Doesn't matter what the wiki says. 20:18 < borken> The wiki is full of disinformation to throw followers off the trail. 20:19 < thearrowflies> ah 20:19 < borken> Be your own determining factor. 20:19 < borken> "3301 seeks self motivated people" 20:20 < thearrowflies> what exactly, or as exact as you can get, is 3301? 20:20 < borken> Those who know don't tell and those who tell don't know. 20:21 < borken> That is the sum of 3301. 20:21 < thearrowflies> I have this thought that its just recruiting for something rather lackluster 20:21 < thearrowflies> If it was anything major, I don't think they'd be recruiting so publicly 20:24 < borken> (6:05:35 PM) Wind: Everything comes to an end. 20:24 < borken> (6:05:39 PM) Wind: -------------
Some older Winds IPs:
[23:32] ->> wind is 602a99b6@n0v4-9DB6A6F.dhcp.trcy.mi.charter.com (n0v4 qWebIRC)
[04:20] <Anon7> wind, what's it like in Michigan? [04:20] <wind> No, we aren't. [04:20] <Anon7> You are. [04:20] <wind> I'm not in Michigan, it's a fake IP.
18:03 < NiceLurk> [03:42] == wind [602a99b6@n0v4-9DB6A6F.dhcp.trcy.mi.charter.com] 18:03 < NiceLurk> Wind (602aa30a@gateway/web/freenode/ip.96.42.163.10) 18:03 < NiceLurk> this are winds previous IPs
ON Sept 10th somebody posted two interesting posts in thread: Pastebin of whole thread: http://pastebin.com/HeHmGqv6
Anonymous 09/09/13(Mon)13:48 No.13396728Replies: >>13396733 Cicada 3301 is an interesting phenomenon. Are they a hacker group? A religion? A weird Pythagorean-esque cult? An ARG? A joke? I've been looking into them for years now. I've even talked to people who "made it," and I'm not any farther than I was years ago.
Here's what I've learned:
- Even after making it, you have to truly prove yourself as an individual to get anywhere. And they'll kick you out if they even think you are a security risk.
- Their structure and beliefs are accurately described in the infamous Cicada Warning document. Some people believe it really was a leak. Some people think it was a fake leak. Some think it was fake altogether. Either way, multiple people who "made it" confirmed that a lot of the info contained was accurate.
- They are very good at what they do. Which suggests a level of professional training beyond what people get in the "civilian" world. Many of the higher-up members seem to be former intelligence officers.
- They have their hands in information security, and international relations. They may even be involved with the TED conferences.
- One of their leaders goes by the alias "magicicada," the genus of 13- and 17-year periodical cicadas. magicicada seems to mastermind a lot of Cicada 3301 operations.
- They tell new recruits that their goal is to improve freedom around the world.
- They do a lot of weird shit with prime numbers, cryptography, and ancient mystery stuff. Like Aleister Crowley.
- They apparently try to "hack" reality, like they would hack computers. By making small changes that result in larger changes. (Not sure of a specific example, but this is what one person who had made it told me after he got kicked out.)
- They seem to have a large and international presence. They seem to be very well funded.
Continued.>> Anonymous 09/09/13(Mon)13:49 No.13396733Replies: >>13396805 >>13396728
- They seem to have serious scholars in other areas than security and cryptography. Even including philosophy, art, diplomacy, etc.
- There could be a military connection. Or an NSA connection. But it seems more like people in NSA or military joined. Not that the NSA or military created Cicada. Which is consistent with the "good at what they do" point.
I hope that helps you guys. I originally thought it was some kind of ARG. Now I'm pretty sure it's a legit secret society. Although, I have no clue what the hell they're trying to accomplish. Or who they are. Or where they came from. Or anything else.
Another interesting post:
Anonymous 09/11/13(Wed)00:01 No.13404677 Replies: >>13405108 I won in 2013. I am now a member. I can't really say much about it, other than it's pretty insane. They'd excommunicate me if they even saw me claim to be "in" in public.
The puzzles did finish this year. I got an email, which led to more and more personalized puzzles. So you're right, it is over. For now.
Everybody just needs to wait until 2014 to see... This next one is supposed to be the "final" one, and will is supposed to reveal something even greater.
Fake bbc 2015
This is info on fake BCC news page puzzles and pi.mobi puzzles.
Here are few links documenting cicada 3301 impersonator puzzle from 2015
We believe that authors of this puzzle are same people as authors of so called pi.mobi puzzle from 2016.
http://31415926535897932384626433832795028841971693993751.mobi
None of those puzzles are documented on this wikia page, since general consensus is that both were impersonator puzzles. (they never produced single verifiable PGP signed message).
This are best sources of both fake puzzles (in german use https://translate.google.com/):
http://scienceblogs.de/klausis-krypto-kolumne/2015/01/12/cicada-3301-wann-geht-es-endlich-los/
https://www.reddit.com/r/cicada/comments/2ruala/status_of_cicada_2015/
pi.mobi 2016
Best source of pi.mobi puzzles is http://archive.4plebs.org/x/search/text/.mobi/, most of it happened on 4chan/x/
We believe that creators of this puzzle are associated with few youtube accounts and are active in main CICADA3301z fecebook group.
Sophia Musik: https://www.youtube.com/channel/UCnouYyjQ95buGKVs0-RbdgQ
Whoiscicada3301: https://www.youtube.com/channel/UCXOb7oQgVrgUBTTq_C4vdxQ
https://www.facebook.com/groups/CICADA3301z/
Mojave desert / sevens.exposed / Defango 2017
In Jan 2017 they (probably same group as previous years) started with another puzzle.
Here is some information how it started: https://en.wikipedia.org/wiki/Talk:Cicada_3301#There_was_no_puzzle_in_2017
http://sevens.exposed/ webpage was used to post music, videos and jpgs.
At some point solvers of this puzzle were also solving another ARG called Tengri 137
Then they brought up same spear that was found in 2016.
Backup of now deleted video from Z 3301 channel, The Pilgrimage Continues : https://www.youtube.com/watch?v=dKgw-sJL80I
For further developement check Defango And Outer Dark channels on youtube:
- https://www.youtube.com/watch?v=1G53FCbMwX4 https://www.youtube.com/watch?v=nKFvgC17AUk
- https://www.youtube.com/watch?v=-adn_CXU6xg https://www.youtube.com/watch?v=UbmIdluMyCA
All details about spear of destiny from 2016: https://pastebin.com/udCu1EDn
2015 Pages
http://bbc-news.co.uk/cicada-3301-set-to-deliver-new-clues-on-january-5th-2015/
- http://i.telegraph.co.uk/multimedia/archive/02743/cicada_2743132k.jpg
- no outguess
- http://bbc-news.co.uk/wp-content/uploads/2015/01/qrcode2_transparent2-300x300.png
- When scanned gives "geo:30.090983700000000000,31.322709000000030000"
- https://goo.gl/maps/YFDfv
- Cairo, Heliopolis
- When scanned gives "geo:30.090983700000000000,31.322709000000030000"
http://bbc-news.co.uk/anticipation-runs-high-as-cicada-3301-releases-new-hints/
- upload.wikimedia.org/wikipedia/commons/7/71/Cicada_3301_Poster_Warsaw.jpg
- no outguess
- upload.wikimedia.org/wikipedia/commons/c/cc/Obelisk-SesostrisI-Heliopolis.JPG
- no outguess
- http://bbc-news.co.uk/wp-content/uploads/2015/01/Ivan.jpg
- no outguess
http://bbc-news.co.uk/cicada-3301-releases-clues-to-bbc-news/
- http://www.lovendal.ro/wp52/wp-content/uploads/2014/05/cicada-3301.jpg
- no outguess
- https://soundcloud.com/bbcnews-1/3301111a/s-JRk9X
- https://soundcloud.com/bbcnews-1/track-04-1-1/s-gfUr4
- upload.wikimedia.org/wikipedia/commons/e/e0/ArPalimTyp2.jpg
- outguess contains binary data
- upload.wikimedia.org/wikipedia/commons/6/6a/Johann_Sebastian_Bach.jpg
- no outguess
- welltempered.files.wordpress.com/2010/06/taliesinbeethoven.jpg
- no outguess
- https://www.youtube.com/watch?v=fyyd4eRVBpM
- binary-ascii text in first image
- numbers on the roll in the video
- 330, 301, 332, 616, 160, 301
- http://www.urgente24.com/sites/default/files/notas/2014/12/17/anono.jpg
- no outguess
- http://anonystroud.co.uk/Layer1.png
- When adjusting color levels reveals 2 qr codes that when put together reveal
- corner, big one, encoded in hex-ascii -> https://infotomb.com/sarp9
- middle, small one, encoded in octal-ascii -> "Sometimes the stories are even hidden to the maximum degree"
- has a filesize of >14mb which indicates more data hidden inside, also message shown in image "WitHin EveRy ImaGe thErE iS alWAyS a StOrY"
- openpuff url + "Sometimes the stories are hidden well, with many keys and many locks" + "Sometimes the stories are even hidden to the maximum degree"
- use openpuff and more than one key and carriers(files) and the maximum bit selection
- which files ?
- what keys ?
- 01135813134558914433377610987159758441816765 from the qr message can't be one of the keys because openpuff only takes keys >=8 and <=32 characters, has 44
- use openpuff and more than one key and carriers(files) and the maximum bit selection
- openpuff url + "Sometimes the stories are hidden well, with many keys and many locks" + "Sometimes the stories are even hidden to the maximum degree"
- When adjusting color levels reveals 2 qr codes that when put together reveal
http://bbc-news.co.uk/cicada-3301-2015-reader-clues/
- http://bbc-news.co.uk/wp-content/uploads/2015/01/Suv%C3%A9e_Joseph-Benoit_-_Milo_of_Croton-214x300.jpg
- no outguess
- http://bbc-news.co.uk/wp-content/uploads/2015/01/7feetLocationQR.tiff
- When scanned gives "GEO:39.050000,17.070000"
- https://goo.gl/maps/niFpL
- Crotone
- When scanned gives "GEO:39.050000,17.070000"
In one of the fake BBC News articles it talks about cicada maybe being an historian, both http://bbc-news.co.uk/ and http://anonystroud.co.uk/ domains are registered to 'Michael Jones'. There is also a historian called Michael Jones, not sure whether that has any relevance or not.
Terms
Liber Concordia (Book of Harmony)
- mentioned on all but the last page
- on page 1
- "Egyptian book of Harmony, rumored to have been the basis of many of Pythagoras’s music and mathematical musings."
- on page 2
- "Obelisk at Heliopolis. Could an ancient book be buried there?"
- on page 3
- " “Book of Harmony” long associated with the city of Heliopolis "
Heliopolis
- mentioned on all but the last page
RECIEVED EMAILS
EMAILS TO PEOPLE WHO SIGNED 3301s PGP KEY
http://pgp.mit.edu/pks/lookup?op=vindex&search=0x181F01E57A35090F
IF YOU WANT TO GET ON THAT LIST: FOLLOW have NEWS!!!!!!!!!!! INSTRUCTIONS HOW TO MAKE PGP KEY
EMAIL 1:
- form:
Reply after signing cicada pgp key:
- Subject: 5061 7469 656e 6365 2069 7320 7669 7274 7565 0a
- From: 1n57lg2@hushmail.com
Hoarders can get piles of money,
That is true, hackers, that is true.
But they cannot help their neighbors;
That's not good, hackers, that's not good.
- Attachment: http://www.sendspace.com/file/vf2c3u 10.01MB
- Backup on infotomb: https://infotomb.com/sptbz
- name of file: 1729
- simialar file is in next email (maybe XORing them would produce something)
- Contains a lot of numbers..
EMAIL 2:
- from: 1nstlg2@privatdemail.net
- subject: DEFINE
- content:
Hoarders can get piles of money, That is true, hackers, that is true. But they cannot help their neighbors; That's not good, hackers, that's not good. -------------------------------------------------------------------- mail2web LIVE – Free email based on Microsoft® Exchange technology - http://link.mail2web.com/LIVE
- Attachment: file named 1729 10MB (NOT SAME FILE THAN IN PREVIOUS EMAIL)
- Suorce: http://pastebin.com/W6YpLDwh
EMAIL 3:
- source: http://pastebin.com/GcvHqqPN
- from: 4873301458350517297@hush.ai
- subject: 3301
Resaved to jpg. Original is bmp.
- Einstein quote
- PGP?
- source:http://pastebin.com/SSrstAWv
- content:
My religion consists of a humble admiration of the illimitable superior spirit who reveals himself in the slight details we are able to perceive with our frail and feeble mind." Good luck. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBAgAGBQJQ+YMmAAoJEBgfAeV6NQkPJakQAJnYqlC4dZrCxj2nbRYbGQg2 WsAtQJTt/8E6sXT5gZmlM7cQyKijIaa6WU2jXEtRwHdWXMmSazXs0Sbg/kxxJZiF bL0u1+HOOgWX780/Fx3KHM3gImYp+EtOKGLcF/VR5px7HApKAfXBYGZB5ZUga3su odLN1wdDqwVN59U8vlvYYD5MFVqyOO77zJeL61hJ1PRvGVbcRw5vhSRz640j2T5e gpWs3gM5Ya5BDwvQpsK4Ysgb7KgYYw5H/e50r9sFGRApcZPG0+5qkoFSDQh/6IfH G6+DRMwdtD2eKURfCSMDYwxRRBsU4c1kWgN8Rqguk3UZuh55V6fpSRRbsnGNWOdD 3I+G8s6dbqC6VW2FRg3Ai64tw5VvN/OBjIk4hgO3UruUr8NM1EZ2FPnilkBH9qAq 3uLzmZ1icyCAgVHdlmqFzW+eXozVFxnhWpJ49Rl1bgnNN0V2PDnGEXZ2qHi6Fmo/ BENGbdBGgh5JkWRBb+XMuiHRGuOX2zp23UHAuevB2jD6KPX8ywunLYNG4wM2xCcc G48c/aVbcSZOaen1088xd0reIXZmMA1BzjjqgEUkSZ2mtwmVUncUpHj2EMhuUeMm PnBPgarvIGglzHxgmzjjWo64DBiVx0iNx2z0V7s9T7fmjOOdyDVBos6Gi9IapZS9 oATLwzKa/5oaT9h9l+5T =dBBp -----END PGP SIGNATURE-----
- attachment 3301.bmp
EMAIL 4:
- http://pastebin.com/wh7sPR8x
- from 33015901@hush.com
- topic 3301
- source with IPs http://pastebin.com/vGbZaSSg
EMAIL 5
- https://0bin.net/paste/NvWGvz70#8pVzfhuTiG9Iog4Jomkpz3UVJRjQt6+5bevYMi9zdZS
- from 1043232@gmail.com and
- topic 3301
- almost same as previous one
- source email with senders IP: http://pastebin.com/tgjef40i
EMAIL 6:
- from: morkzackerborg@gmail.com
- subject: 3301
- Content:
Hi this is mark zuckerborg pls give me you're facebook passwork
- NO SOURCE TO PROTECT personal IP of Mr. Zuckerberg
EMAIL 7:
- from: 845145127cicada@gmail.com
- source:http://pastebin.com/q2gvb60E
- topic: ce5
- Content:
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
- Decoded (base64):
Penis Enlargement - It's finally a proven theory! 2 amazing ways to enlarge your manhood - read below.. No need to dream...you can now expand your penis upto 3 inches GUARANTEED! If you don't like our product we don't want you to keep it. Return it for 110% back! Doctor's have been working years to create such a product and have finally come up with a no side affect herbal pill guaranteed to work Pills info click here.and also a patch similair to the quit smoking patch. -Penis Patches info click here. if you do not wish to see these ads go here. WWVzLCB5b3UgaGF2ZSBiZWVuIHRyb2xsZWQuIFNvcnJ5Lg==
- Decoded again (last line)
Yes, you have been trolled. Sorry.
The Triangle Puzzle
I think i know what "triangle puzzle" is. It appeared once on 4chan and i think i have a copy of it on my hdd:
I don't have original name of the file that would help us to look for 4chan archives, but i think file was downloaded on my hdd on 28 Feb 2012.
Image contains some outguesed stego:
-----BEGIN COMPRESSED RSA ENCRYPTED MESSAGE----- Version: 1.99 Scheme: Crypt::RSA::ES::OAEP eJwBRgC5/zEwADU0AEN5cGhlcnRleHTCFSi7dhQG4Pgmh50LyX1mGRFKbuZmdMkJW/iL5YJZHnww ECaj7l2udOqtc9L8qlsvZh24DSzKYh3A =+3dVm5h8VAg/3eTrYvDjNw== -----END COMPRESSED RSA ENCRYPTED MESSAGE-----
We were trying to prove that this image is not connected to Cicada but no real proof was found. But We didn't try all posibilities.
There are few things strange:
- font: We actually dont know what exact font 3301 is using is, but it looks like FUTURA II NORMA THIN but letterspacing is slightly off
- Exiff, some say that some 3301 images show that they have been edited on MAC using Photoshop (still needs to be analyzed)
- triangle puzzle picture has one pixel wide gray border on top right and bottom edge
- "'complete the test' is simply copypasted from the final msg http://prntscr.com/1ud05w
- RSA mesage in outguessed text might be decodable with primes from "Final puzzle" from 2012 (but there are two different factorizations of it... not sure which is right)
- that was solved using script below, result was quite intriguing and defiifnately proves that triangle puzzle was not done by 3301 but somebody who used long semiprime 3301 posted in final.jpg and made little sidepuzzle, question where number from final.jpg should be used remains unsolved


one pixel wide gray border, zoomed in bottom right edge of triangle puzzle
Correct factorization of 130 digit (431 436 bit long) number from Final.jpg is:
10412790658919985359827898739594318956404425106955675643739226952372682423852959081739834390370374475764863415203423499357108713631 = 99554414790940424414351515490472769096534141749790794321708050837 * 104593961812606247801193807142122161186583731774511103180935025763
To solve triangle RSA using semiprimes from final.jpg as p and q components of RSA key run this perl script:
#!/usr/bin/perl use Crypt::RSA; use Crypt::RSA::ES::OAEP; use Crypt::RSA::Key::Private; use Crypt::RSA::Key; use Math::Pari ':int'; use Crypt::RSA; my $rsa = new Crypt::RSA; my $keychain = new Crypt::RSA::Key; my ($public, $private) = $keychain->generate ( 'p' => '99554414790940424414351515490472769096534141749790794321708050837', 'q' => '104593961812606247801193807142122161186583731774511103180935025763', 'e' => '65537', ) or die $keychain->errstr(); my $plaintext = $rsa->decrypt ( Cyphertext => "-----BEGIN COMPRESSED RSA ENCRYPTED MESSAGE----- Version: 1.99 Scheme: Crypt::RSA::ES::OAEP eJwBRgC5/zEwADU0AEN5cGhlcnRleHTCFSi7dhQG4Pgmh50LyX1mGRFKbuZmdMkJW/iL5YJZHnww ECaj7l2udOqtc9L8qlsvZh24DSzKYh3A =+3dVm5h8VAg/3eTrYvDjNw== -----END COMPRESSED RSA ENCRYPTED MESSAGE-----", Key => $private, Armour => 1, ) or die $rsa->errstr(); print $plaintext;
If you don't want to bother with perl, here is the spoiler: http://prntscr.com/1ud1kf Test.pl was test to check if script works correctly, triangle.pl is the result of the script posted above.