Codebusters - K3 Aristocrat
On this page(10 sections)
A K3 Aristocrat is a monoalphabetic substitution: every plaintext letter is always replaced by the same ciphertext letter everywhere in the message. What makes it a K3 is how the replacement table is built: one keyword makes a scrambled alphabet, and the cipher row is that same scrambled alphabet slid sideways by a fixed shift. Spaces and punctuation are kept, so the ciphertext shows the word lengths of the original message, and that is the main handle a solver has on it.
What the rules cover
Codebusters is a written (or computer-based) exam for teams of up to 3, lasting about 50 minutes. Teams bring only writing utensils: no notes, no resource binder and no calculator of any kind. The supervisor hands each team member a resource sheet that, in Division C, can include English and Spanish letter-frequency tables, which is exactly the table you want for an Aristocrat.
The 2027 Division C rules that matter for a K3 Aristocrat:
| Rule | Section | What it means for you |
|---|---|---|
| Aristocrats may use K1, K2, K3 or random alphabets; a hint may be given | 3.e.i | Word lengths are visible; use them and any hint. |
| Keyword or key phrase may be the requested answer | 3.e.ii | You may have to recover the keyword, not just the message. |
| No letter decrypts to itself | 3.g | Any guess that maps a letter to itself is wrong. |
| The first question is timed and is an Aristocrat | 3.h | It may be a K3; its solve time sets the timing bonus. |
| Wrong timed answers can be resubmitted without penalty | 3.h.v | Only the clock matters, for the first 10 minutes. |
| Special bonus questions are never Aristocrats, Patristocrats or Xenocrypts | 3.i | A K3 earns exam points and possibly the timing bonus, never the special bonus. |
| Two or fewer errors in the plaintext earn full credit | 4.d.i | Small slips cost nothing. |
| Each further error costs 100 points, never below 0 | 4.d.ii | A nearly right answer still scores. |
| Keyword answers need zero errors for full credit | 4.e | Every wrong keyword letter costs 100 points. |
| Timing bonus on the first question | 4.f | Faster is worth points; see the formula below. |
The timed question is an Aristocrat, so in Division C it can be built on a K1, K2, K3 or random alphabet.
How a K3 alphabet is built
In the ACA system, a K1 alphabet keys the plain row, a K2 keys the cipher row, and a K3 keys both rows with the same keyword. A K4 (two different keywords) is a separate ACA type that is not in the Codebusters code list. The K3 recipe has three steps:
- Write the keyword, dropping any letter you have already written.
- Append the letters of A–Z that the keyword did not use, in alphabetical order. This 26-letter string is the keyed alphabet.
- Copy the keyed alphabet to make the cipher row, then slide it right by a shift : the last letters move to the front. The shift is never 0, which is why no letter can map to itself.
The example uses keyword ZEBRA and a right shift of 4. The plain row is the keyed alphabet; the cipher row is the same letters slid right by 4.
index: 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25
plain row: Z E B R A C D F G H I J K L M N O P Q S T U V W X Y
cipher row: V W X Y Z E B R A C D F G H I J K L M N O P Q S T U
The rows are linked by position: the plain letter at index is replaced by the cipher letter at index . Because the cipher row is just the plain row shifted, a plain letter becomes the letter that sits places earlier in the keyed alphabet (wrapping around).
NoteWhere the construction comes from
This matches how scio.ly generates K3 practice problems: one keyword alphabet, with the cipher row rotated by a nonzero shift relative to the plain row. The 2027 rules name the ACA alphabet types but do not draw the layout, so if a supervisor's materials show the rows differently, trust the printed rows and use the same position-by-position rule.
Encryption, step by step
- Build the keyed alphabet from the keyword and write it as the plain row.
- Slide a copy right by the shift to make the cipher row.
- Keep every space and punctuation mark exactly where it is.
- For each plaintext letter, find its index (0 to 25) in the plain row.
- Write the cipher row letter at that index.
Worked encryption: MEET ME AT NOON
| Plaintext | Index in plain row | Cipher row letter at that index |
|---|---|---|
| M | 14 | I |
| E | 1 | W |
| E | 1 | W |
| T | 20 | O |
ME becomes IW. AT becomes ZO, because A is at index 4 (cipher letter Z) and T is at index 20 (cipher letter O). NOON becomes JKKJ, because N is at index 15 (cipher letter J) and O is at index 16 (cipher letter K). The full ciphertext is:
IWWO IW ZO JKKJ
Decryption, step by step
- With the keyword and shift, build the same two rows.
- For each ciphertext letter, find its index in the cipher row.
- Write the plain row letter at that index.
Worked decryption: IWWO IW ZO JKKJ
| Ciphertext | Index in cipher row | Plain row letter at that index |
|---|---|---|
| I | 14 | M |
| W | 1 | E |
| W | 1 | E |
| O | 20 | T |
Continuing the same way, Z is at index 4 and gives A, J is at index 15 and gives N, and K is at index 16 and gives O. The recovered plaintext is MEET ME AT NOON.
TipCheck the shift before you trust it
Pick any one plain letter and its cipher letter from your rows. Find both in the keyed alphabet: the cipher letter must sit exactly places earlier. If it does not, the rows were built wrongly.
Solving under tournament conditions
Solvers are not given the keyword or shift, so the work is to rebuild both. Use a 26-column worksheet with the plain letter on top and the cipher letter below, and write each confirmed pair in its column.
Start with the structure of the message, exactly as for any Aristocrat:
- Single-letter words. A one-letter ciphertext word is nearly always A or I. Test both.
- Word shapes. Look at repeated letters inside each word. A frequent three-letter word is a strong candidate for THE or AND. Double letters, apostrophes and common endings such as -ED and -ING also narrow the choices.
- Letter frequency. Count how often each ciphertext letter appears. The figure below shows that English letters are used very unevenly, so the most frequent ciphertext letters are likely E, T, A, O, N. Treat this as a first guess and confirm with words.
- The no-self rule. Use rule 3.g to discard guesses. If a guess would make a ciphertext letter decrypt to itself, it is wrong.
What is special about K3
Two facts make a K3 easier than a random alphabet once you have a few pairs.
- The shift is one number. Every pair obeys the same rule: the cipher letter is places earlier in the keyed alphabet than the plain letter. One reliable pair does not give by itself, because you do not yet know the keyed alphabet, but pairs from the alphabetical tail do (next point).
- The tail is alphabetical. After the keyword letters, the keyed alphabet runs in ordinary A–Z order with the keyword's letters skipped. So the cipher letters are the same alphabetic distance apart as the plain letters only when both the plain letters and their cipher letters ( places earlier) lie in the alphabetical tail, with no keyword-removed letter in either span. In the example, N → J fixes a letter offset of 4 for nearby tail letters whose cipher letters are also in the tail, so O → K, P → L, Q → M and M → I follow at once. Near the start of the tail the rule fails: I → D but J → F, because E (a keyword letter) is missing between D and F. Within those limits, a run of consecutive letters in the plaintext maps to a run of consecutive letters in the ciphertext.
When you confirm a pair like N → J, test whether neighboring letters (O → K, M → I) fit your words. Runs break where a keyword letter was removed (here between Q and S, since R is in the keyword), and that break points to the keyword.
Keyword recovery. The leftover letters that do not fit the alphabetical runs spell the front of the keyed alphabet. If the plain row begins with a recognizable word, test it as the keyword. Because a keyword answer needs zero errors (rule 4.e), check each letter against your rows before writing it.
Time. On the timed question retries are free, so submit as soon as at most two letters could be wrong.
Common pitfalls
Treating one row as a plain alphabet
A K1 has a plain A–Z cipher row and a K2 a plain A–Z plain row. In a K3 both rows are keyed, so alphabetical neighbors tell you nothing outside the tail.
Shifting by the wrong amount or direction
Right by 4 means the last four letters move to the front. Moving the first four to the back is a left shift of 4 and gives a different cipher. Test one known pair after building the rows.
Dropping the keyword's duplicates
A letter that already appeared in the keyword is skipped, not kept twice. After the keyword, add the unused letters in A–Z order. A finished keyed alphabet has 26 distinct letters; check this before you encrypt or decrypt.
Forgetting the no-self rule
Rule 3.g removes many candidate pairs. A guess that makes a letter decrypt to itself is never the answer, so check it before spending time on words built on it.
A keyword answer with one wrong letter
Keyword answers need zero errors (4.e) and lose 100 points per error, while full-text answers allow two errors. Read the keyword off your solved rows and double-check spelling.
Division and level notes
- Division C, all levels: K3 Aristocrats can be any regular question, the timed first question, or a keyword-answer question. Regional, State and National exams all draw on the same Aristocrat rules.
- Division C, never as K3: Patristocrats (K1 or K2 only) and Xenocrypts (K1 or K2 only).
- Division B: no K3 alphabets anywhere; Aristocrats there are K1 or random.
- State and National: harder cryptanalysis is added elsewhere on the exam, so a fast Aristocrat routine buys time for it.
How tournaments test this
There are no archived K3 Aristocrat questions to count yet, so this guide cannot give question-type statistics. What the 2027 rules guarantee: the first, timed question is an Aristocrat, Division C Aristocrats may use a K3 alphabet, and a K1, K2 or K3 Aristocrat may ask for the keyword or key phrase instead of the plaintext, scored with zero errors allowed.
Practice ciphertexts
Each message below is a K3 Aristocrat. Solve it, then check the key.
Worked examplePractice set with answers
- QKIF MXZ QKIYE AHIEM. Answer: WORK THE WORDS FIRST (keyword CHEMISTRY, right shift 3)
- DEOMM DQSBD VSOQ VAZ ZFSDDSD. Answer: SMALL STEPS BEAT BIG GUESSES (keyword LANTERN, right shift 11)
- WXKXH NJXII MTYEFJY V PEXPC. Answer: NEVER GUESS WITHOUT A CHECK (keyword PLANET, right shift 7)
References and further reading
- American Cryptogram Association, the source of the K1, K2 and K3 alphabet definitions: https://www.cryptogram.org/
- Science Olympiad 2027 rules manual, Codebusters C (the code list in section 3.e and scoring in section 4): https://www.soinc.org/
- Wikipedia, "Substitution cipher," for the general monoalphabetic model: https://en.wikipedia.org/wiki/Substitution_cipher
- Wikipedia, "Frequency analysis," for the letter-frequency method behind the figure: https://en.wikipedia.org/wiki/Frequency_analysis
- SciOly Wiki, for community notes on Codebusters code types: https://scioly.org/wiki/