Mod 26 picoCTF 2021 Solution

Description

1. Step 1Apply ROT13

   Observation

   The ciphertext opens 'cvpbPGS{', the same length and shape as 'picoCTF{', so a fixed letter shift is at work. The distance from c to p is 13, and the title 'Mod 26' confirms ROT13.

   ROT13 rotates each letter by 13 positions in the alphabet. The tr command maps A-Z to N-ZA-M and a-z to n-za-m, effectively applying the cipher. Run the command with the ciphertext to recover the flag.

   bash

   echo "cvpbPGS{arkg_gvzr_V'yy_gel_2_ebhaqf_bs_ebg13_MAZyqFQj}" | tr 'A-Za-z' 'N-ZA-Mn-za-m'

   Copied!

   Expected output

   picoCTF{next_time_I'll_try_2_rounds_of_rot13_...}

   What didn't work first

   Tried: Run the tr command with 'ROT47' ranges to decode the ciphertext

   ROT47 shifts every printable ASCII character, not just letters, by 47 positions, which garbles the underscores, digits, and braces into random-looking symbols. ROT13 rotates only the 26 letters and leaves punctuation and digits alone, which is what the cvpbPGS{...} format needs.

   Tried: Apply the tr mapping twice, thinking two rounds of ROT13 give a stronger decode

   The flag text jokes about trying two rounds of rot13. Applying tr twice just gives back the original ciphertext, because ROT13 is its own inverse: 13 plus 13 is a full 26-letter cycle. One pass of tr 'A-Za-z' 'N-ZA-Mn-za-m' both encrypts and decrypts.

   Learn more

   ROT13(rotate by 13) is a simple letter substitution cipher that replaces each letter with the one 13 positions after it in the alphabet. Since the alphabet has 26 letters, rotating by 13 twice returns to the original - making ROT13 its own inverse. Applying it to already-ROT13'd text always decodes it, with no need to switch between "encrypt" and "decrypt" modes.

   ROT13 is a special case of the Caesar cipher, which Julius Caesar historically used with a shift of 3 to protect military communications. The Caesar cipher works by shifting each letter a fixed number of positions. With only 26 possible shifts, it provides essentially no security against brute-force - but it's still commonly used online to obscure spoilers or puzzle answers without the intent to truly encrypt them.

   The tr command ("translate") is a powerful Unix utility that substitutes characters according to a mapping. The pattern tr 'A-Za-z' 'N-ZA-Mn-za-m' maps: A→N, B→O, ..., M→Z, N→A, ..., Z→M, and the same for lowercase. Every letter shifts, so the ciphertext's suffix MAZyqFQj rotates to ZNMldSDw in the decoded flag.

   The challenge title "Mod 26" hints at the mathematical underpinning: ROT13 is addition modulo 26, where each letter is treated as a number 0 to 25. Adding 13 mod 26 is the same as subtracting 13 mod 26, which is why the same operation both encrypts and decrypts.

   Recognizing ROT13 in the wild: If a ciphertext looks almost like English but with slightly shifted letters - words have the right rhythm but wrong characters - it is often ROT13 or a Caesar cipher. The word "gur" in the ciphertext above is ROT13 for "the," a giveaway. Online tools like rot13.com decode it instantly. In Wireshark, the right-click > "Decode as" menu does not include ROT13 (it is not a real encryption protocol), so a terminal command or online tool is the fastest path.

   Brute-forcing Caesar ciphers: If you suspect a Caesar cipher but do not know the shift, there are only 25 possible shifts. A quick Python loop tries all of them: for shift in range(26): print(shift, ''.join(chr((ord(c)-65+shift)%26+65) if c.isupper() else chr((ord(c)-97+shift)%26+97) if c.islower() else c for c in ciphertext)). The correct shift produces readable English. The tr command handles ROT13 specifically because it is the only Caesar variant where the same command both encodes and decodes.

Flag

ROT13 is its own inverse - applying it twice returns the original text, so a single tr pass decodes the whole flag.