His forum was formerly available by invitation only, but is now open to everyone. It is filled with lively conversations on a wide variety of topics, including news, suspects, the killer’s correspondences, evidence, analysis, theories, and non-Zodiac crimes. My favorite topics, of course, are the cipher-related ones, in which forum members present their ideas, observations, and theories about the various cryptograms attributed to the killer.

Join the conversation at ZodiacKillerSite.com!

The article was published after the 408-character cryptogram was solved, and before the 340-character cryptogram was mailed.

Using a simple observation, you can easily solve the Examiner’s cryptogram (if you want to skip ahead to the solution, click here). The cryptogram has only 44 characters, and 33 of them are unique. With so few repeated characters, many possible plain texts can fit. For example, if you feed the cryptogram to zkdecrypto, it yields this plaintext:

ERSWILLYOURAGESTOFTHECANAMEDTHEPRESANDBEINTE

This solution looks a lot like English text, but is the wrong solution. This cryptogram would have been very difficult to solve without applying the simple observation. Do you know of a way to solve it without knowing the trick?

(Thanks to Deb for uncovering the article)

UPDATE Apr 24, 2013: Here is an excerpt from the book The Cases That Haunt Us with more details on the origin of the Examiner’s cryptogram:

Cryptographer Klaus Schmeh recently posted about a cryptogram that appears in an FBI article about how their Cryptanalysis and Racketeering Records Unit (CRRU) breaks codes and ciphers to solve crimes.

The FBI article says the cryptogram contains “enciphered instructions for making ricin poison found in the notebook of a lone bomber in Virginia.” I couldn’t find any decryptions of the cipher text, so I transcribed it, and fed it into zkdecrypto lite, which very quickly found a rough approximation of the plaintext. A little bit of extra work yielded the full solution, which really does contain a recipe for ricin poison, encrypted using simple homophonic substitution.

At first I was hesitant to post the solution. Is it irresponsible to reveal a dangerous recipe to the public? But I’ve decided to post it for these reasons:

1. The FBI already posted the cryptogram in full view of the public.
2. The cryptogram is very easy to solve.
3. Ricin recipes are already very easy to come by via Google searches.
4. The enciphered recipe is very crude, producing only a mash form that is not further purified for dangerous potential. Similar recipes in terrorist “cookbooks” are “deemed incapable of achieving a good product for causing a large number of casualties by any exposure route, mainly because of the low content of toxin of the final extracts” ^[1]
5. Only one death has been attributed to ricin poisoning. Every other ricin-related incident seems to involve dumbasses stockpiling the stuff for its claimed deadly potential.

Here’s the decoded plaintext:

[redacted]

And here is the full analysis of the solution, including the solution key, symbol cycles, and symbol frequencies.

The cryptogram bears some interesting similarities to the Zodiac’s ciphers: It is 354 characters long (to Zodiac’s 340), has 65 distinct symbols (to Zodiac’s 64 in the 408-character cipher), uses homophonic substitution (like Zodiac’s 408), and uses some of the same symbols. The ricin bomber, however, did not do a good job of concealing the letter frequencies of the plaintext. In fact, if you look at the symbol frequencies, the most common symbols correspond directly to the most common letters in English: E, T, A, O, N, etc. This is because the lone bomber did not correctly flatten the frequencies with the proper number of symbol assignments per plain text letter.

The FBI says this cryptogram is just one small part of 24 pages of enciphered messages. It would be interesting to see what else was in the notebook, and to know more about the bomber. I can’t find any news sources that mention the Virginia lone bomber. Does anyone have any ideas?

• 20, 40, 64, 65, 72, 81, 105, 128, 133, 140, 142, 159, 162, 172, 201, 211, 237, 238, 255, 276, 282, 290, 291, 340

Then, mark every number that is a prime number. Recall from your math classes that a prime number is a number greater than 1 that can’t be divided by anything other than 1 and itself. Here’s the result of marking the primes in the above list:

• 20, 40, 64, 65, 72, 81, 105, 128, 133, 140, 142, 159, 162, 172, 201, 211, 237, 238, 255, 276, 282, 290, 291, 340

There’s only one prime number in the list. Dan points out that 20% of the numbers between 1 to 340 are primes, so we should expect more of the symbols to fall upon prime positions simply by chance. Yet only one does. Is this just a coincidence, or is it some reflection of the cipher author’s method?

I ran an experiment similar to Dan’s, using a computer program that randomly places symbols and counts how many primes they fall upon. First, it scrambles the 340 cipher into a random order, like shuffling a deck of cards. Then it counts how many symbols fall upon prime positions. The result is that out of 1,000,000 random shuffles, only 28,877 of them have exactly 0 or 1 symbols falling upon prime positions. That’s about 2.9% of all the shuffles.

That result can be interpreted like this: Let’s say you were creating a 340-character cipher, and you need to place 24 copies of a particular symbol. If you didn’t care at all about whether or not they were placed on primes, then you’d have about a 2.9% chance of avoiding all but one prime position.

So, it’s possible that the cipher’s author accidentally produced this oddity simply by placing the symbols. A 2.9% chance isn’t rare enough to rule out pure coincidence, but it’s certainly curious.

However, Dan goes on further to point out that , the 2nd most frequent symbol in the 340 cipher, occurs 12 times and yet also only falls on a single prime position:

• 21, 35, 147, 168, 181, 203, 216, 240, 261, 286, 315, 319

The symbols and account for 10% of all of the symbols of the 340 cipher, and yet only fall on two primes.

I repeated the “random shuffle” experiment, counting how often and each fall on no more than one prime. The experiment confirmed Dan’s result: Only 0.7% of the shuffles accidentally shared the same quality as the original 340 cipher.

Strange, isn’t it?

What about Zodiac’s previous cipher? Does it show this same strangeness?

The 408 cipher’s most common symbols are (found 16 times), (found 14 times), (found 12 times), (found 12 times), and (found 11 times). Three of those symbols fall on non-prime positions all but one time: , and . Those three symbols account for about 9% of the entire cipher text.

Repeating the shuffle test for the 408, I found only 1.8% of the 1,000,000 shuffled 408-character ciphers had this same quality.

Why would the cipher symbols be biased against prime positions? Is there something to this, or are we just chasing noise again?

One way to explore the idea further is to simulate the construction method of the 408 cipher. A computer program could generate a million different real ciphers, using different plain texts and somewhat regular sequences of homophones. Then the program can measure how many of the generated ciphers accidentally have these strange prime properties. Perhaps there is some link between the regular assignment of homophone sequences (or some other aspect of the cipher construction), and the probability that the symbols will fall upon primes.

If the ciphers really are prime-phobic, can this knowledge help us unravel the 340?

(The cover depicts what we all probably want to do with Zodiac’s cryptograms.)

Nicht Zu Knacken (which I think roughly translates as Not To Crack) summarizes ten fascinating unsolved mysteries: The Voynich Manuscript, the Rohonc Codex, James Hampton’s notebook, unbroken Enigma messages, messages from East Germany that used “double dice” transposition, the mystery of the Somerton Man, the Beale ciphers, Kryptos, Robert Thouless’ Experiment, and of course the ciphers of the Zodiac Killer.

Relying on Google Translate, I tried to digest the chapter on the Zodiac Killer. Klaus first gives a brief summary of the crimes, including a timeline of the letters and codes. He also relates the story of the Hardens’ successful decryption of the 408-character cryptogram. The Hardens were not cryptography experts, but they knew enough about cryptograms to understand the importance of English letter frequencies in attacking substitution ciphers. They also knew the importance of trying out cribs in the cipher text, which successfully revealed other pieces of the plain text. Klaus describes the effect the Hardens’ success had on them. Reportedly, Bettye Harden had trouble dealing with all of the sudden attention and fame, and developed a manic-depressive personality disorder.

Here are some of the other bits of info Klaus mentions:

• Donald Harden was asked to work on the 340-character cryptogram, but refused. However, Bettye “barricaded herself in her room for weeks” to try to solve it, but failed. The CIA and NSA also failed to crack the code.
• The 13-character cryptogram is very difficult to solve, because it is too short for cryptanalysis.
• The Zodiac Killer case went cold in the late 1970s, but then started to heat up again as the Internet became widespread in the late 1990s, and sites such as Tom Voigt’s Zodiackiller.com appeared.
• Robert Graysmith points out in his book “Zodiac” several cryptography books that were available at the time of the crimes: “The Codebreakers” by David Kahn, and “Codes and Ciphers” by John Laffin.

The 340 is still of interest to cryptographers because of its length. The 13 and 32 character cryptograms are simply too short, making definitive solutions very unlikely. But the 340 is long enough to hold out hope for a definitive solution resulting from discovery of an encryption scheme.

Based on symbol frequencies, Klaus observes that the 340 has some homophonic properties (letters in the hidden message might be represented by multiple symbols), suggesting a construction similar to the 408. But he wonders if the same method was used a second time. Since the 408 was solved so quickly, Zodiac could have changed his method, perhaps by adding meaningless letters, or by completely changing his encryption technique.

Homophonic substitution ciphers make decryption difficult, but not impossible, as the Hardens demonstrated. Failing with cribs, one could try to guess common letter pairs. But the 340 does not have much to work with. Another strategy is to look at the homophone order (the sequences of symbols assigned to individual plaintext letters).

While researching his book, Klaus met Austrian Mensa member Jürgen Koller, who was developing his own method of detecting homophone usage in the Zodiac ciphers. His “two-time repetition” approach can be found here. And his Austrian Mensa article about the Zodiac ciphers can be found on page 36 in this “Top IQ” Mensa journal published last year.

Klaus also mentions the Cryptologia paper by John King and Dennis Bahler, An Algorithmic Solution of Sequential Homophonic Ciphers. The method described in the paper is very powerful for attacking cryptograms that are constructed with sequential homophones. You can see the pattern of sequential homophones in this detailed breakdown of the solution to the 408. The 408 is easily cracked by King and Bahler’s method, but no solution is found for the 340 using the same method. I believe the same regularities that make ciphers like the 408 vulnerable to King and Bahler’s technique also make them easily cracked by hillclimbing computer programs such as zkdecrypto.

But the Zodiac killer probably did something unique to the 340 to make it withstand attacks from these various methods. Homemade test ciphers that are 340-characters long and share the same symbol distribution easily fall to these assorted attacks. I don’t think we can keep assuming that a simple substitution attack will work. Something else is probably going on in the encryption scheme in the 340. Or it’s just pointless busywork which continues to hypnotize us nearly a half century after it was created.

What is the “something else” the killer might have applied to the 340-character cryptogram? Klaus mentions Robert Graysmith’s “solution”, but points out the overuse of unusual abbreviations, misspellings, and incomprehensible wording. Those traits are common when you allow anagramming in your approach to the solution (you can see many examples of them here). Klaus also notes Raymond Grant, whose book “The Zodiac Murders – Solved” describes elaborate hidden messages in the Zodiac letters, and is “simply too confusing to be true” and “more of a curiosity than a serious contribution.” Many more ideas have been explored. Hopefully one of them will lead to a breakthrough.

Overall, Klaus Schmeh’s book is very interesting. It goes a bit beyond the usual “Top Unsolved Codes” lists that occasionally appear in the news to tease our thirst for mysteries. Brush up on your German and visit Klaus’ blog in which he unearths more mysteries and tidbits. And watch his appearance on German TV show “Planet Knowledge” during a full hour-long episode about secret codes.

More information about the lecture can be found here: http://www.stanford.edu/class/ee380/Abstracts/130313.html.

To attend the lecture, go to this site: http://www.stanford.edu/class/ee380/. When the lecture is underway, you can click the “join the live presentation” link, or just wait until the on-demand video is made available there.

Kevin Knight and his colleagues have a lot of very interesting work under their belts, helping to unlock old mysteries with new computational technologies. I look forward to hearing what they know about the Voynich Manuscript, and if their approaches might have any relevance to investigating the Zodiac cryptograms.

Click above to view the entire article as it appeared as the top story in the Leader-Herald, a local newspaper in Gloversville, NY.

The article also appeared online here: Decoding a Killer.

Daryll did not solve Zodiac’s puzzle, and this article explains why. I’m glad people are still trying to solve the cryptograms, but until someone comes up with the real solution, these stories will continue to flourish.

These videos popped up on Youtube recently:

340 Zodiac Killer Cipher

408 Zodiac Killer Cipher

The first video presents this solution to the 340 cipher:

This solution starts by applying a simple substitution key to produce the plain text. But like many other solution attempts, this one relaxes the constraints of the cipher text, again permitting construction of words and phrases by re-arranging the plaintext. Worse, this solution allows letters to be added and removed arbitrarily from the plain text, greatly easing the construction of interesting words and phrases.

We already know that the use of anagramming allows a codebreaker to choose from a huge variety of words. Examples of this include solutions by Daryll Lathers, Özcan Türkmen, Robert Graysmith, and Hal Kravcik.

Even a small chunk of plain text can produce many possible words. For instance, let’s look at the four letter sequence SLIA. If you rearrange those four letters, you can produce these words: LISA, SAIL, LAIS, ILSA, AILS, SALI, ASIL, ISLA, LIAS, and IALS. Similary, the four letter sequence TSPA can be rearranged to make these words: PAST, TAPS, SPAT, PATS, APTS, SAPT, and PTAS.

How do you know if you’ve selected the correct word? Does it just “feel” right, because you think Zodiac must have used certain words instead of others? No, verification of the solution demands stronger evidence than that.

Sonja C increases the pool of words by allowing the addition or removal of letters, making certain words appear more readily. Here’s an example of how much freedom you have by using this method: If you allow only one more letter to be added to the sequence SREA, then it can be arranged to form these words: YEARS, AREAS, RATES, SHARE, RAISE, TEARS, FEARS, SPARE, ARISE, ACRES, AROSE, RACES, READS, LASER, SAFER, BEARS, WEARS, CARES, STARE, HEARS, PEARS, SWEAR, FARES, WARES, GEARS, SPEAR, SMEAR, SCARE, EARNS, AIRES, SHEAR, EARLS, MARES, HARES, ERASE, ARIES, SAVER, SABRE, DARES, SEARS, RAPES, SNARE, DEARS, PARSE, REAMS, RAVES, NEARS, RAGES, CESAR, RAKES, ARSES, SAYER, REAPS, SARGE, REARS, SABER, BARES, AKERS, SERRA, ARLES, ARENS, AYRES, ASHER, BASER, MASER, AYERS, SANER, ROSEA, RASEN, SACRE, ARSED, ANSER, AGERS, SAYRE, RNASE, REALS, ASTER, TARES, MEARS, VERSA, MERSA, AVERS, ACERS, SARRE, CARSE, SERVA, SERIA, SEMRA, SAUER, HASER, RASES, ESARN, APRES, and RBASE. Every one of those words consists of the letters A, E, R, S, and only one additional “wildcard” letter.

Sonja C goes on to produce more words and phrases by rearranging the letters in each column of the plain text solution:

For example, the first column of the plain text reads TNNSGPADOSHITPICLTCE, which Sonja C rearranges into D TOSCHI SAT CLIP G PENN, leaving out only one letter: T. Seems interesting, since the sentence mentions Zodiac-related personalities Dave Toschi and Gareth Penn. But the same text can be rearranged in numerous ways. These other “Zodiac-oriented” words can also be found among the same letters: PLOTTING, INCIDENT, HOSPITAL, TIPLINE, TIGHTEN, STATION, STOLEN, POLICE, PISTOL, STINE, PINES, NIGHT, LODGE, LINDA, LEIGH, HOTEL, HOLES, HANDS, DONNA, DITCH, DEATH, CODES, CHEST, CASES, TIED, SHOT, LONE, LIST, LASS, HIDE, DIES, and COED. Which words are the correct ones?

In the second video, Sonja C presents a solution to the last 18 symbols of Zodiac’s 408-character cryptogram, again involving rearrangements of letters:

The Hardens’ solution to the cryptogram results in these last 18 characters of gibberish: EBEORIETEMETHHPITI. Sonja C rearranges these, and adds some new letters, to form words and phrases. BRIHT is rearranged into BRIGHT by adding the missing G, but BIRTH or BIRTHS are also possible. And the extra letters N, A, and L are added to MET to produce MENTAL. But if you allow three extra letters, you can generate all of these words:

SYSTEM, MOTHER, MARKET, MOMENT, MATTER, METHOD, MENTAL, MINUTE, MASTER, METRES, REMOTE, STREAM, MODEST, TIMBER, THAMES, THEMES, MATURE, TEMPLE, TEMPER, MOTIVE, METALS, PERMIT, MERITS, HELMET, CEMENT, MANTLE, EXEMPT, TIMELY, TERMED, METRIC, HELMUT, MISTER, HAMLET, ESTEEM, MUSTER, MAGNET, ANTHEM, MOLTEN, MENTOR, METERS, TREMOR, TANDEM, RECTUM, MELTED, METHYL, DREAMT, TUMBLE, TEAMED, TEDIUM, STEAMY, ENMITY, LAMENT, MALLET, HERMIT, NUTMEG, COMETS, MATTIE, MUTTER, METTLE, MILLET, TEMPOS, MOTLEY, INMATE, THEISM, MINUET, MIDGET, MUSKET, THELMA, MUTELY, TIMERS, SMYTHE, TAMPER, METEOR, MATHEW, MINTER, MINTED, MATTED, TIMBRE, MOTELS, TEMPTS, MYRTLE, MUPPET, LIMPET, MULLET, TAMELY, THEMED, KERMIT, EMMETT, AMULET, REMITS, TOTEMS, MALTED, FOMENT, JETSAM, MERTON, MEREST, DERMOT, MELTON, MOOTED, PELMET, MOTETS, MCTEAR, TWOMEY, TIMBRE, MARTEN, MATHER, ELTHAM, SEMTEX, MANTEL, IMBERT, MOIETY, EMPTOR, MOATED, MINTEL, TERMLY, MONNET, MUSTOE, MOLTKE, METALL, MUNTER, and MITRES

Similarly, Sonja C adds the letters S, A, and L to HOPIT to produce HOSPITAL. But you can also make these words if you allow three letters to be added to HOPIT:

PHILPOTT, ANTIPHON, TOWNSHIP, SHOPLIFT, WINTHROP, STROPHIC, HYPNOTIC, PINOCHET, ATROPHIC, PROHIBIT, HOTPOINT, MEPHISTO, POTIPHAR, OLIPHANT, HIGHSPOT, HILLTOPS, PHAISTOS, PONTHIEU, HOPLITES, TROPHIES, TRIOMPHE, ETHIOPIA, PHOTOFIT, PHONETIC, SHIPSTON, and HELIPORT.

I sitll prefer these anagrams of the last 18 characters, since they fit perfectly and don’t require adding or removing any letters:

I’M HERE TO BITE THE PIE
THE EERIE POET BIT HIM
I HOE THE TIBET EMPIRE
TEETH BITE HOMIER PIE
HI. I TIME THE BEER POET.
I MET THE PIE BITE HERO
I.E.: THIRTIETH BEE POEM
HI, I’M THE TEEPEE ORBIT
I’M PETER. I BITE THE HOE.
OH BITE THEIR PEE TIME
I HIT THE BEER EPITOME
HI! TIME TO HIT BEER PEE!
HI! TIME TO HIRE PET BEE!
TIME TO BE THE PIE HIER
I’M THE TIE; BORE THE PIE
I BITE THE PIE THEOREM
HI. BEEP HIT METEORITE.
I BETTER HOPE I TEE HIM.
BE HERE. TIPTOE. TIE HIM.
I’M THE PETITE BIO HERE
I’M BOTH EERIE EPITHET

None of this, unfortunately, can be shown to be anything more than diversions of word play. I’ve indulged in the same word play in this article, partly for fun, but mostly to demonstrate how easily we become ensnared by the cryptograms.

I recently saw this post on Twitter:

Sounds like a joke at first. But someone really did pay to place this ad in the San Francisco Chronicle newspaper:

It appeared in the December 21, 2012 paper, and appeared three more times on successive Fridays.

The ad provoked my curiosity, so I called Daryll to ask him about his solution. He is a very friendly, older gentleman who lives in upstate New York. He said he has no background in code breaking, apart from working codes as a hobby in the free time resulting from his retirement. He took out the ad in the San Francisco Chronicle because he had submitted his solution to the Vallejo police department and the American Cryptogram Association, and received no responses. His plan was to charge $5 for the solution, but when he realized he wasn’t going to make any money, he decided to mail out copies for free.

I received my copy recently. You can see his worksheets here:

Daryll Lathers’ solution.

Here are his substitutions for the cipher symbols:

To arrive at his solution, Daryll splits the cipher text and corresponding plain text into sentences, defined by the appearances of dot and hyphen symbols in the cipher text. The plain text looks like random gibberish. But then he rearranges the plain text to form readable sentences and phrases. Here are all the sentences, showing the plain text before and after anagramming:

1. HERCEANBASHOLTGOONEEBNLOLNEY: HERB CAEN HAS BEEN LONELY TOO LONG
2. TLSDCLYOVCEIZAWNHLLDHOSIISVAEEVSENEARKOLIMFDRPOUTSIEITSBDARNSRO: THE CITY WILL HOLD ZODIAC’S SEVEN SLAVES NEAR RKO’S FILM DROP OUTSIDE ITS BARN
3. LDESSIODNLTEKMLIEYVOAB: I’VE KILLED MOSTLY BAD ONES
4. DTINGOMFHLNILEAGESTIGAMELSARDMLKUAEOS: KILLING MAN IS THE MOST DANGEROUS GAME OF ALL
5. DAIBENFENIOTSLY: BEEN INTO S.F. DAILY
6. INGKTREIDOBEBOMSNAACLRFILEHTM: TIRED OF MAKING BOMBS IN THE CELLAR
7. FILSLEWSKLOIILSLVNIARAGFENITOTL: I WILL KILL A TOTAL OF SEVEN GIRLS IN S.F. (Daryll notes: He did, and possibly more – 1971 through 1973.)
8. CBDRENNSOELIAICEOBUZK: ZODIAC’S BEEN IN BLUE ROCK
9. ORK: RKO (Daryll notes: 1932 RKO Radio-Picture The Most Dangerous Game)
10. ADBSDNEW: BADD NEWS
11. DMNAORKOSTLOETESTEVIDEENCSIDACIOSHTTNHENFIDETSRLEEONL: DAMN RKO STOLE TEST EVIDENCE SAID TOSCHI – THEN FIND STOLEN REEL! (Daryll notes: RKO = Rook, Steve Kee’s ship. Kee: Pg 466, 470, 481 Zodiac Unmasked)
12. CITMDHNESSDZOAAISOE: ZODIAC’S SHOE IS A TEN D. M. (Daryll notes: D = Width, M = Medium)

It’s an interesting attempt, but unfortunately this solution has several major problems with it:

• The use of anagrams allows many possible solutions and interpretations.
• 51 out of the 63 different symbols of the cipher text are allowed to have more than one plain text letter assignment. For example, Daryll allows the symbol to represent seven different letters: A, E, F, I, N, O and S.

With so much freedom, you can overcome the constraints of the cipher text and produce numerous coherent messages.

For instance, consider Daryll’s plain text for the first sentence: HERCEANBASHOLTGOONEEBNLOLNEY, which he anagrams to read HERB CAEN HAS BEEN LONELY TOO LONG. The following phrases can be found by rearranging the same plain text:

• BOB CHALLENGES ANYONE ON THE ROLE
• AN ACE, HER LONELY NOBLE GHOST
• ANYONE BORN ON THE GLOBAL LEECHES
• CAN HE BE ONE REALLY NOBLE GHOST? NO.
• NOBLE ONSHORE BAYONET CHALLENGE
• LOON BAYONET CHALLENGES HER BONE
• HERB SHOT A LONELY ANGEL BONE ONCE
• GENE THE HORNY COLONEL LOANS BABE
• B.E.: HE SHOT ONE OLE GREY CANNONBALL
• REASON TO CHALLENGE NOBLE HONEY B
• ONE NOTABLE CRONY: HE SHALL BE GONE.
• HE SHALL BE ONE LONGER BEAN TYCOON
• NONE HEALS. BOTH ENABLE NECROLOGY.
• HELL NO, BABY HON, CONSOLE TEENAGER
• HELL NO, BONY SCHOOL TEENAGER BANE
• NOBLE HOOCH NABS LONELY TEENAGER

With so many possibilities, we cannot be certain any of them is a better guess over any other. The text HERCEANBASHOLTGOONEEBNLOLNEY has 91,895,840,751,505,190,400,000 (91 thousand billion billion) possible rearrangements. Even if only one in a trillion of those rearrangements resemble real sentences, there would be almost 92 billion of them.

Anagramming the plain text gives you a very large canvas of words to work with. In the text HERCEANBASHOLTGOONEEBNLOLNEY, you can find almost 3,000 words that are at least six letters long. The full list can be seen here. Which words can you build a sentence with?

Here’s a more extreme example. Consider the text:

TLSDCLYOVCEIZAWNHLLDHOSIISVAEEVSENEARKOLIMFDRPOUTSIEITSBDARNSRO

which is 63 letters long. Daryll rearranged it to read THE CITY WILL HOLD ZODIAC’S SEVEN SLAVES NEAR RKO’S FILM DROP OUTSIDE ITS BARN. I ran a search of a small sample of texts from Project Gutenberg, and found that Daryll’s plaintext can also be rearranged to match these excerpts with some leftover letters:

• IS CLEAN SHAVEN. YOUR THIRD ESTATE IS INSIPID, COLORLESS, ODORLE (11 leftover letters)
• WISHES AND COMPLAINED OF TOO SEVERE RESTRICTIONS I HAD LAID U (12 leftover letters)
• LED NOR ROSE ABOVE ITS ORDINARY LEVEL WITH HIS ACCUSTOMED PLA (12 leftover letters)
• ERS HIS ROOMS WERE BRILLIANTLY LIT AND EVEN AS I LOOKED UP IS A (13 leftover letters)

While these aren’t perfect fits, look at how coherent those excerpts are, derived solely from the 63 letters Daryll manipulated to form a Zodiac-related sentence. And since symbols are allowed to replace more than one letter, you can manipulate the leftover letters to form more interesting words.

Daryll told me he does not have a computer, so I doubt that he has seen the other solution attempts online that use similar “constraint reducing” techniques, such as Hal Kravcik’s solution, John Cecil’s solution, and Oczan Turkmen’s solution. Graysmith’s solution, too, suffers from the same excessive liberties.

But what if the Zodiac really did author the cipher using anagrams, or some other constraint reducing technique? If he did, we would need some strong evidence to exclude all the other solutions that can be generated using the same methods.

This is not to say that anagramming is not useful or valid for code breaking. Indeed, when solving transposition ciphers which rearrange plain text into chunks of gibberish, looking for anagrams of certain words can help unlock the transposition scheme. But in those cases, the rearrangements are subjected to an orderly scheme, rather than to the whims of the codebreaker. The same is true of polyalphabetic ciphers that assign more than one plaintext letter to a given cipher symbol. These, too, are subjected to orderly schemes.

So, Daryll, I respect your effort, and hope that these explanations may help you refine your approach.

In his book Zodiac, Robert Graysmith makes this claim about the Zodiac’s 408-character cryptogram:

Fifty-five characters comprise a very complicated cipher. Was this a totally original code or had Zodiac used other sources to build his cipher system? If he had used particular books on code, perhaps these could be traced back to him.

I began by looking for basic books on secret writing. In the preface to The Codebreakers by David Kahn a sample cipher alphabet is presented; eight of the twenty-six suggested equivalents had been used by the killer. The Zodiac must have had a copy of this book.

That is a very strong conclusion. Is it true? Here’s the sample cipher from Kahn’s book:

So, if you use Kahn’s cipher alphabet on the message “CAT”, you’d get “QLK.”

Graysmith says Zodiac used eight of those equivalents. But if you look at the key to the 408-character cipher,
he really only used three of the equivalents:

For instance, Kahn says to use the symbol “R” to replace the plain text letter “G”. In the 408, Zodiac uses the symbol to replace the plain text letter “G”.

How did Graysmith find eight equivalents? Well, if you swap the plaintext and cipher letters in Kahn’s table, you can find four additional matches in Zodiac’s key:

Graysmith cheated a little by treating Kahn’s cipher symbols as plain text letters. For example, Kahn says to use the symbol “C” to replace the plain text letter “E”, but we’re swapping them so the symbol “E” is used to replace plain text letter “C”. Zodiac uses to replace “C”.

Allowing for this kind of cheating accounts for seven equivalents. But where is the eighth one? The best I can come up with is that Kahn says to use the symbol “O” to replace the plain text letter “J”, and Zodiac uses the symbol to replace the plain text letter “O”.

It’s a stretch. I’m banking on the idea that “i” and “j” are close enough, leading Graysmith to include it. But the whole idea is a stretch to begin with. Still, is it possible that Graysmith was right? Could Zodiac have used part of Kahn’s sample cipher? Let’s run an experiment to estimate the difficulty of accidentally matching Kahn’s equivalents:

1. Start with the Zodiac’s list of equivalents for the 408-character cipher.
2. Shuffle the symbols, but retain the same number of symbols assigned per plain text letter. For example, we’ll choose seven random symbols to represent “E”, the same number used in the original cipher.
3. Count the number of equivalents that are also found in Kahn’s sample cipher alphabet.
4. Do the random assignments produce as many matches as Graysmith observed?

For example, here is a set of randomly shuffled assignments of the Zodiac’s symbols:

These equivalents from Kahn’s example can be found among the shuffled symbols: a -> L, c -> Q, e -> C, m -> M, n -> H, p -> I, and t -> K. If you use Kahn’s assignments in the reverse direction, as Graysmith does, then these assignments also match: K -> t, O -> j, and W -> o. So, you could claim 10 equivalents here came from Kahn’s example, but in fact they are random coincidences.

I ran 10,000 trials of randomly generated assignments, and found that 460 of them produced at least 7 equivalents that matched Kahn’s example. I’m ignoring the 8th equivalent, since it’s such a stretch. The result suggests that when Zodiac created his cipher, he had a 4.6% chance of matching at least 7 of Kahn’s equivalents purely by accident.

What does this mean? My opinion is that the 4.6% chance, combined with Graysmith’s very loose interpretation of Kahn’s example cipher alphabet, makes it impossible to conclude that Zodiac must have used Kahn’s assignments. Maybe Zodiac really did use Kahn’s book, but Graysmith’s idea does not sufficiently prove this.

Nevertheless, maybe there is something else in Kahn’s book, or in a similar book available in Zodiac’s time, that more conclusively lines up with how the killer constructed his mysterious ciphers.