Between December 1968 and October 1969, a serial killer operating in Northern California murdered at least five people and claimed responsibility for as many as 37 in a series of taunting letters sent to Bay Area newspapers. He called himself the Zodiac. Enclosed with several of his letters were cryptograms—substitution ciphers of varying complexity that, he claimed, contained his identity. The first, a 408-character cipher sent in three parts, was solved within a week by a high school teacher and his wife. The second, a 340-character cipher mailed on November 8, 1969, resisted decryption for 51 years.
The 340-character cipher—designated Z340 by investigators—became one of the most famous unsolved codes in history. Its persistence was not for lack of effort. The cipher attracted the attention of professional cryptanalysts, academic mathematicians, FBI codebreakers, and thousands of amateur enthusiasts. The American Cryptogram Association devoted decades of collective effort to the problem. Computational approaches grew increasingly sophisticated as processing power increased, but the cipher held.
The breakthrough came in December 2020, when a team of three amateur codebreakers—David Oranchak, a web developer; Sam Blake, an Australian mathematician; and Jarl Van Eycke, a Belgian programmer—announced a solution that was subsequently confirmed by the FBI. Their method was computational but not brute-force. The key insight was that the Zodiac had employed a transposition step in addition to the homophonic substitution: the plaintext was written into a grid, then read out in a non-sequential pattern, and then each character was replaced with one of several possible cipher symbols. This two-layer encryption—substitution plus transposition—explained why purely statistical attacks on the cipher had failed for decades.
The decrypted message, while confirmed as a valid reading, contained no identification. It read, in part: "I HOPE YOU ARE HAVING LOTS OF FUN IN TRYING TO CATCH ME... I AM NOT AFRAID OF THE GAS CHAMBER BECAUSE IT WILL SEND ME TO PARADICE ALL THE SOONER." The misspelling of "paradise" was consistent with other Zodiac communications. The message was taunting, self-aggrandizing, and—from an investigative standpoint—empty. The cipher was real. The promise of identity was not.
What the Z340 decryption revealed about the Zodiac was less about his identity than his methodology. The cipher was competently constructed but not expert-level. The homophonic substitution was implemented with inconsistencies. The transposition scheme, while effective as an additional obfuscation layer, was relatively simple once identified. This profile—capable but not professional, methodical but imperfect—is consistent with someone who had read about cryptography but had no formal training. It narrows the field, but it does not close the case.
The Zodiac Killer has never been conclusively identified. The case remains open with the FBI and multiple California law enforcement agencies. The Z340 decryption stands as a reminder that some puzzles are solved not by greater computational power but by a shift in assumptions—and that the most important question about a cipher is not always what it says, but what its construction reveals about the person who made it.