Can You Solve The GCHQ Christmas Card Puzzle?

British eavesdropping agency GCHQ is sending out a Christmas card this year, which includes a festive brainteaser that will keep puzzle fans busy over the season of goodwill.
 
The greeting from the director of the Cheltenham-based top-secret listening post contains a cryptographic challenge to exercise the grey cells of armchair agents. Players have to fill in a grid-shading puzzle, which will create a picture that leads to a series of increasingly complex challenges. Those taking part are invited to make a donation to the NSPCC children's charity.

GCHQ said: "This year, along with his traditional Christmas cards, Director GCHQ Robert Hannigan is including a brain-teasing puzzle that seems certain to exercise the grey matter of participants over the holiday season.

"The card, which features the 'Adoration of the Shepherds' by a pupil of Rembrandt, includes traditional Christmas greetings from Director on behalf of the department. "However, unlike previous years, the 2015 card will contain a grid-shading puzzle and instructions on how it should be completed."

Once all stages have been unlocked and completed successfully, players are invited to submit their answer via a given GCHQ email address by 31 January. The winner will then be drawn from all the successful entries.

Those not on the spy chief's Christmas card list can download the puzzle here

Explaining how to get started, the GCHQ website states: "In this type of grid-shading puzzle, each square is either black or white. Some of the black squares have already been filled in for you. Each row or column is labelled with a string of numbers. The numbers indicate the length of all consecutive runs of black squares, and are displayed in the order that the runs appear in that line.

"For example, a label '2 1 6' indicates sets of two, one and six black squares, each of which will have at least one white square separating them."

Dr Gareth Moore, puzzle author and creator of the website Brained Up, designed a series of brainteasers similar to the GCHQ one, including one which produced 'Sky' when solved. He said the GCHQ puzzle is "only difficult in appearance" and is just "a question of being patient…In actual fact, a picture puzzle like this can actually be solved by considering each row and each column one by one," he said.

"So the puzzle already has some squares shaded in - in fact, those are Morse code that spell out 'GCHQ', which is not actually relevant at all to the puzzle, it's just something they've done to make it a bit fun, I think…The secret to doing a puzzle like this is to do it row by row and to put a little x or a dot when you work out where a gap is - the difficult thing perhaps is working out where to start."

Sky:

« Spies Want IBM’s Quantum Computer
French Government Proposals To Block Tor and Forbid Free Wi-Fi »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Patchstack

Patchstack

Patchstack (formerly WebARX) is a web application security platform, which allows digital agencies and developers to monitor, protect and maintain their websites.

Picasso

Picasso

The Picasso project is focused on ICT Policy, Research and Innovation for a Smart Society: towards new avenues in EU-US ICT collaboration.

Soracom

Soracom

Soracom offers secure, scalable, cloud-native connectivity developed specifically for the Internet of Things.

IGX Global

IGX Global

IGX Global is a provider of information network and security integration services and products.

Xcina Consulting (XCL)

Xcina Consulting (XCL)

Xcina Consulting provides high quality business and technology risk assurance and advisory services.

Truepic

Truepic

Truepic provides technologies that prevent fraud, identity theft, misinformation, and disinformation caused by generative, manipulated, or deepfake digital content.

GMV

GMV

GMV is a technological business group offering solutions, services and products in diverse sectors including Intelligent Transportation Systems, Cybersecurity, Telecoms and IT.

Texas A&M Cybersecurity Center

Texas A&M Cybersecurity Center

Texas A&M Cybersecurity Center is dedicated to combating adversaries who desire to harm our citizens, our government, and our industry through cyber-attacks.

Real Protect

Real Protect

Real Protect is a Brazilian provider of managed security (MSS) and cyber defense services.

Grip Security

Grip Security

Grip Security provides comprehensive visibility, governance and data security to help enterprises effortlessly secure a burgeoning and chaotic SaaS ecosystem.

White Tuque

White Tuque

A new way to protect your organization. White Tuque is your partner in identifying threats, understanding your risk, and ensuring your business remains resilient.

Prescient Solutions

Prescient Solutions

Prescient Solutions is a managed services provider, using a cloud-based model to provide IT solutions to small, mid-sized, global organizations and government entities.

Nullify

Nullify

Nullify is your automated security sentry that continuously finds and fixes security issues across your codebase.

Redcoat AI

Redcoat AI

Redcoat AI provide a comprehensive security platform that continuously evolves with the threats and opportunities presented by AI.

Secure Blink

Secure Blink

Secure Blink provides automated application and API security solutions that empower developers and security engineers to protect critical assets from exploitation.

Reco AI

Reco AI

Reco is an identity-centric SaaS security solution that empowers organizations with full visibility into every app, identity, and their actions to control risk in their SaaS ecosystem.