Can You Solve The GCHQ Christmas Card Puzzle?

British eavesdropping agency GCHQ is sending out a Christmas card this year, which includes a festive brainteaser that will keep puzzle fans busy over the season of goodwill.
 
The greeting from the director of the Cheltenham-based top-secret listening post contains a cryptographic challenge to exercise the grey cells of armchair agents. Players have to fill in a grid-shading puzzle, which will create a picture that leads to a series of increasingly complex challenges. Those taking part are invited to make a donation to the NSPCC children's charity.

GCHQ said: "This year, along with his traditional Christmas cards, Director GCHQ Robert Hannigan is including a brain-teasing puzzle that seems certain to exercise the grey matter of participants over the holiday season.

"The card, which features the 'Adoration of the Shepherds' by a pupil of Rembrandt, includes traditional Christmas greetings from Director on behalf of the department. "However, unlike previous years, the 2015 card will contain a grid-shading puzzle and instructions on how it should be completed."

Once all stages have been unlocked and completed successfully, players are invited to submit their answer via a given GCHQ email address by 31 January. The winner will then be drawn from all the successful entries.

Those not on the spy chief's Christmas card list can download the puzzle here

Explaining how to get started, the GCHQ website states: "In this type of grid-shading puzzle, each square is either black or white. Some of the black squares have already been filled in for you. Each row or column is labelled with a string of numbers. The numbers indicate the length of all consecutive runs of black squares, and are displayed in the order that the runs appear in that line.

"For example, a label '2 1 6' indicates sets of two, one and six black squares, each of which will have at least one white square separating them."

Dr Gareth Moore, puzzle author and creator of the website Brained Up, designed a series of brainteasers similar to the GCHQ one, including one which produced 'Sky' when solved. He said the GCHQ puzzle is "only difficult in appearance" and is just "a question of being patient…In actual fact, a picture puzzle like this can actually be solved by considering each row and each column one by one," he said.

"So the puzzle already has some squares shaded in - in fact, those are Morse code that spell out 'GCHQ', which is not actually relevant at all to the puzzle, it's just something they've done to make it a bit fun, I think…The secret to doing a puzzle like this is to do it row by row and to put a little x or a dot when you work out where a gap is - the difficult thing perhaps is working out where to start."

Sky:

« Spies Want IBM’s Quantum Computer
French Government Proposals To Block Tor and Forbid Free Wi-Fi »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Pondurance

Pondurance

Pondurance is an IT Security and Compliance company providing services in Cyber Security, Continuity, Compliance and Threat Management.

Rackspace Technology

Rackspace Technology

Rackspace Technology is a leading provider of managed services across all major public and private cloud technologies. Secure your IT environments with powerful cloud security solutions and support.

CloudCheckr

CloudCheckr

CloudCheckr is a next-gen cloud management platform that unifies Security & Compliance, Inventory & Utilization and Cost Management.

Joe Security

Joe Security

Joe Security specializes in the development of automated malware analysis systems for malware detection and forensics.

CodeOne

CodeOne

CodeOne provides solutions for website and web app security.

Norwegian Information Security laboratory (NISlab)

Norwegian Information Security laboratory (NISlab)

NISlab conducts international competitive research in information and cyber security and operates study programs in this area.

Snyk

Snyk

Snyk is the leader in developer security. We empower the world’s developers to build secure applications and equip security teams to meet the demands of the digital world.

VigiTrust

VigiTrust

VigiTrust is a security firm specializing in cloud based eLearning programs, security compliance portals and providing security assessments.

Quokka

Quokka

Quokka (formerly Kryptowire) is the source for mobile security and privacy solutions, staying steps ahead of the threat and delivering peace of mind.

ClearBlade

ClearBlade

ClearBlade is the Edge Computing software company enabling enterprises to rapidly engineer and run secure, real-time, scalable IoT applications.

Sadoff E-Recycling & Data Destruction

Sadoff E-Recycling & Data Destruction

Sadoff E-Recycling and Data Destruction protect the environment and your data with proven and trusted electronics recycling and data destruction services.

Debevoise & Plimpton

Debevoise & Plimpton

Debevoise & Plimpton LLP is a premier law firm with market-leading practices in areas including Data Strategy & Security.

Google Cloud

Google Cloud

Accelerate your digital transformation. Whether your business is early in its journey or well on its way to digital transformation, Google Cloud can help solve your toughest challenges.

Beaming

Beaming

Beaming is an established Internet Service Provider for businesses across the UK. We deliver reliable voice, data and managed services, including cybersecurity.

Potech

Potech

Potech provides masterful services in Information & Technology and Cybersecurity to multiple markets across the world.

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.