Rules:

1. Registration

  1. You do not need an account to try the challenges.
  2. To participate in the leaderboard or receive automated scoring feedback, you must register for an account.
  3. Each participant may have only one account. Creating multiple accounts is not allowed.
  4. Participants must choose a unique username and display name. Usernames and display names must not be offensive, inappropriate, or intended to impersonate another person. Accounts that violate this rule may be deleted and the participant may be prevented from registering again.
  5. By registering, you agree to these rules and the Privacy Policy.

2. Challenge Format

  1. Challenges will be released according to the published schedule and will be available for a limited time.
  2. The ciphertext, case files, instructions, and other materials for each challenge will be provided on the website.
  3. Participants will receive feedback indicating whether their submitted solution is correct or incorrect.
  4. Hints will be released throughout each challenge, starting with more cryptic guidance and becoming progressively more useful as the challenge progresses.

3. Submitting Solutions

  1. Solutions must be submitted through the competition website.
  2. If you are not signed in, submissions are checked locally and are not recorded on the leaderboard.
  3. If you are signed in, submissions are checked by the server and additional feedback may be provided. Successful submissions will count towards your leaderboard score.
  4. Participants must solve challenges themselves and must not ask another person to solve a challenge or provide a challenge-specific solution.
  5. Participants must not share challenge solutions, answers, keys, or other information that would give another participant an unfair advantage.
  6. Participants must not make excessive or automated submissions that place an unreasonable load on the competition servers. Deliberate abuse of the submission system may result in disqualification.

4. Scoring

  1. Your score for each challenge is based on which scoring deadline you submit a fully correct solution before.
  2. Only submissions made while signed in can contribute to the leaderboard.
  3. Challenge deadlines are shown on each challenge page. All times are UTC.
  4. If you are not signed in, you will only be told whether your solution is correct or incorrect. This check is performed by comparing solution hashes.
  5. If you are signed in, your submitted solution may also be compared with the correct answer using Levenshtein distance. If it is within a specified distance of the correct answer, additional feedback may be provided to help identify small mistakes or typos.
  6. Participants must not deliberately abuse the feedback system to obtain information beyond what it is intended to provide.

5. Leaderboard

  1. The leaderboard only applies to participants who are signed in.
  2. For each challenge, the leaderboard displays each participant's display name and score.
  3. A cumulative score for Missions 4-10 will also be displayed.
  4. Scores may be removed or adjusted if they were obtained in violation of these rules or as a result of a technical error.

6. Tools and Resources

  1. Participants may use tools and software they have written themselves to solve challenges.
  2. Unless a challenge explicitly says otherwise, participants must not use pre-existing tools or software specifically designed to solve the challenge or provide an unfair advantage.
  3. General-purpose programming languages, calculators, and libraries such as NumPy are permitted.
  4. Unless otherwise stated in the case files, participants must not use pre-existing cryptography libraries or challenge-specific solving libraries.

7. AI

  1. These challenges are intended to teach participants about modern cryptography. Asking an AI to solve a challenge for you defeats this purpose and is therefore prohibited for all participants.
  2. If you are not participating in the leaderboard, you may use AI to help you learn or explain concepts related to the challenges.
  3. If you are participating in the leaderboard, all use of AI to help solve the challenges is prohibited. Participants should instead use the provided hints, which are designed to gradually explain the techniques needed to solve each challenge.

8. Hints

  1. Each challenge contains hints to help participants who get stuck.
  2. Hints are released automatically throughout the challenge and are designed to progressively guide participants towards the solution.
  3. Viewing hints does not affect your score. However, more useful hints are generally released later in the challenge.

9. Fair Play and Security

  1. Participants must not attempt to gain an unfair advantage over other participants.
  2. Participants must not deliberately disrupt the competition or place an unreasonable load on the servers.
  3. Participants must not attempt to access another participant's account, submissions, or private information.
  4. Participants must not attempt to gain unauthorised access to the competition servers or other competition infrastructure.
  5. Participants must not exploit vulnerabilities in the competition infrastructure to gain an advantage. Any security vulnerabilities discovered should be reported to the organisers.

10. Other

  1. By participating in the competition, you agree to follow these rules and the Privacy Policy.
  2. The organisers may modify the competition schedule, correct errors, amend or suspend challenges, remove invalid scores, or disqualify participants where necessary to preserve the integrity of the competition.
  3. If a technical problem or error materially affects a challenge, the organisers may extend its deadline, modify its scoring, or otherwise adjust the challenge as necessary.
  4. Material changes to the competition or its rules will be announced on the competition website.