August 15, 2014 | By Bill Budington and Aaron Jue

EFF's Defcon 22 T-Shirt Puzzle Explained

This summer we proudly unveiled EFF's fifth limited edition member t-shirt to DEF CON 22 attendees at the annual hacker conference in Las Vegas. Secretive organizations scheming global domination and watching everything you do may not be very far fetched, but we've turned that concept on its head with a digital freedom society-themed motif created by EFF Senior Designer Hugh D'Andrade. Together we are growing our own conspiracy to defend privacy and free expression for all. Hidden within the rich mystic symbolism of the crossing keypair, ethernet cable crest, lockpicks, and anti-surveillance eye is a secret puzzle for you to decipher, the likes of which would make even Voynich jealous! Warning: spoilers are ahead, and you already know too much!

Displayed on the left is the original shirt as seen in plain daylight. But under the shine of a blacklight, the ciphertext is revealed:

[Iikcggu] Gvdw ag etxlku | [Ptjhafvmkx] rqgrva(cgvs urlaiaixcm Asiixl) | [Gwhusu] akksdx bzqaymoukh(gsyi, Jnsrgo) | [Rmtm] mwllzg(ihrl.qv_e? Wkivav)

What does it mean? A second text is highlighted with the blacklight:


Our super secure Key Derivation Function comes in the form of a dictionary. Translated from Latin into English, this phrase becomes:

Everyone has something to hide

And how do you decode the ciphertext? Using a cipher developed in the 16th century called the Vigenère cipher:

[English] Code is speech | [Javascript] assert(code instanceof Speech) | [Python] assert isinstance(code, Speech) | [Ruby] assert(code.is_a? Speech)

The plaintext reminds us of an important ruling made in the historic case Bernstein v. US Department of Justice, which EFF litigated: source code is a form of speech constitutionally protected by the First Amendment. Special congratulations go to 1o57 and the council of 9 for being the first to solve this year's puzzle!

Photo Credit: junkmail.  CC Attribution 2.0

Deeplinks Topics

Stay in Touch

NSA Spying

EFF is leading the fight against the NSA's illegal mass surveillance program. Learn more about what the program is, how it works, and what you can do.

Follow EFF

San Diego County has doubled the number of facial recognition devices officers use in the field since 2013:

Nov 25 @ 1:30pm

We are more secure when we have better locks. It's nonsense for FBI to suggest the opposite.

Nov 25 @ 12:50pm

Free software on routers can be more powerful and secure. Fortunately, FCC has clarified this rule won't target it.

Nov 25 @ 12:17pm
JavaScript license information