2014

Part 1
- Book Cipher

On January 6th, 2014, 3301's Twitter account from 2013 sent out a message. This was a link to a picture hosted on Imgur, shown to the right, and signified the start of the 2014 puzzles. As in the previous years, this picture contained a message hidden inside of it using OutGuess. Extracting it gives the following message, PGP signed with 3301's key:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


The work of a private man
who wished to transcend,
He trusted himself,
to produce from within.


1:2:3:1
3:3:13:5
45:5:2:3
20:3:20:5
8:3:8:6
48:5:14:2
21:13:4:1
25:1:7:4
15:9:3:4
1:1:16:3
4:3:3:1
8:3:26:4
47:3:3:5
3
13:2:5:4
1:4:16:4
.
o
n
i
o
n

Good luck.

3301


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=6Gxk
-----END PGP SIGNATURE----->

The message is a book cipher using the text "Self-Reliance" by Ralph Waldo Emerson, with the lines standing for paragraph:sentence:word:letter. Using the first set of numbers as an example, the 1 is for the first paragraph in the text, the 2 means second sentence in that paragraph, the 3 is for the third word of that sentence, and the second 1 means the first letter of that word. Performing this for every string of numbers (and using the lone 3 as itself) results in "auqgnxjtvdbll3pv.onion".

Part 2
- RSA

Using Tor to go to auqgnxjtvdbll3pv.onion (now offline) brought up a web page with the title "For Every Thing That Lives Is Holy" and the image here. It is a collage of four different paintings by William Blake. The hands are from two different paintings of Blake's Nebuchadnezzar, the top picture of the compass and scroll is from Newton, and the bottom image is from the version of his The Ancient of Days that is in The British Museum. The top, right, and bottom photos are flipped horizontally while the bottom photo contains the 3301 cicada logo as a watermark.

This picture also contains a hidden message, extractable with OutGuess:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Welcome.

Good luck.

3301



e = 65537
n = 75579125746085351644267182920580212556413102071876330957950694457000592	10248050757270234679993673844203148013173091173786572116639


- -----BEGIN COMPRESSED RSA ENCRYPTED MESSAGE-----
Version: 1.99
Scheme: Crypt::RSA::ES::OAEP

eJwBswBM/zEwADE2MgBDeXBoZXJ0ZXh0LE2jxJS1EzMc80kOK+hra1GKnXgQKQgVitIy8NgA7kxn
2u8jNQDvlu0uymNNiu6XVCCn66axGH0IZ9w4Af3K/yRgjObsfA1Q7QqpXNALJ9FFPgYl5rh07cBP
M9kbSH6DynU/5cYgQod2KymjWcIvKx3FkjV4UOGakDnBf1eQp1uwvn3KxDVwTyzPqbMnZvOA06Ec
AfKtyz1hEK/UBXkeMeVrnV5SQQ==
=yTUshDMKN65aPaKAR0OU8g==
- -----END COMPRESSED RSA ENCRYPTED MESSAGE-----


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQIcBAEBAgAGBQJSyly/AAoJEBgfAeV6NQkPHhUP/R7nuYiTMw+3sbe0xV+4rmiN
liSDmW6ibOK4UTkZDTeAS5kAKIjxCC3DwWi0lXqBGZyabojWHM2wRwYLOhvfKvgg
DgPnW1BSZ/R67GaUy0CM/vtZOtktBeIdntlZamk9DpW5bQ311c7N9dy6uWc8+hOM
umkcnT7u799zESazFgCeDSOw0cFgHDiG9UTAQxbe+NsXY/NKm4N0WAtgWmdte5ym
dU8ImpmXWg8NChdn49UtuAACi8s8tcI/lHj1Yjh+AQRbO2+Ozn9eSxUAQ1TsXSgt
30jKmXI5ss4WHS16nYsS97BUbo4oX3NBXaCjSZb7fKO9CRJBo3gm2R8/NcIMIkEc
GlQ/7rCQWHXA0MC+415ut5dcJf2ihwid81c1xsDyqQdfhEsWE/wVnK7Ujje+BgcO
ybBHl8ejJzWhZkCvesHOmIo1RLEanxlGUC5jcRLqImrT7A9CrO+EVFW16EZpvzug
Tsopo56+JbIFiIzAq+CGujHgDZnoHJFtB574utjOnZz9xzsVZ3lirQyAFOGauH+g
K+XxjXjY8tT5lppAgmF3zWKqha7NoV+9FgFl2q2SS9ue+s4Joyn5PYKnICJeze3i
K9BZ7gIT694s4dLEzu6kGaRyuNmx8qaoDs0kjvEB5pI+1buGuNAysHQWIDyY3DWb
CjJ1AnBLY0ObxaMbWMR/
=d5E8
-----END PGP SIGNATURE-----

This part is either a lot simpler or many times more complex than their previous puzzles, depending on your view. Simply, we are given a RSA encrypted message and need to decrypt it. The hard part is that RSA is considered secure as proper use makes brute forcing the decryption take far too long to be practical. You can learn more about RSA here. Thankfully, while RSA generally uses an N value with sizes such as 2048 or 4096 bits, this message only uses 432 bits (130 digits). A coordinated effort was put in to brute force the private key and it was soon obtained:

P = 97513779050322159297664671238670850085661086043266591739338007321
Q = 77506098606928780021829964781695212837195959082370473820509360759

Decrypting the RSA message reveals another hidden service address, "cu343l33nqaekrnw.onion".

Part 3
- Liber Primus

This new web page had two lines. The first was an HTML comment '<!--Patience is a virtue-->' and the second is a long string of hexadecimal characters. Every few minutes, this string would gain two more characters, eventually ending as:

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>

About an hour after this string stopped adding characters, the page changed. The comment changed to '<!--761-->', and the string was now approximately 3.6 million characters long. Converting the string to binary and flipping the bits so all the zeroes are ones and vice versa gives three JPG image files, one after the other. These are the start of 3301's book, Liber Primus. The first page contains the title, the second says, "Chapter 1" and "Intus", and the third (shown to the right) contains runes from the Gematria Primus used in the 2013 puzzles.

The runes can be deciphered by using an Atbash cipher of the Gematria Primus. For this page, it can be solved by taking the position of the rune in the Gematria Primus and using the letter that many from the end. For example, the first rune on the page is for 'R'. 'R' is the fifth rune in the list, so we use the fifth to last letter, which is 'A'. Doing this for the whole text reveals this message:

A WARNING:BELIEVE NOTHING FROM THIS BOOK.EXCEPT WHAT YOU KNOW TO BE TRUE.TEST THE KNOWLEDGE.FIND YOUR TRUTH.EXPERIENCE YOUR DEATH.DO NOT EDIT OR CHANGE THIS BOOK.OR THE MESSAGE CONTAINED WITHIN.EITHER THE WORDS OR THEIR NUMBERS.FOR ALL IS SACRED:

Along with this, all three of these images contain a message hidden with OutGuess:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
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-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=v5mD
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

4dd1c8afafceed237cca8a334b24fe09069e3771e416a749687af002b4de
844566fdef57ba9f76a17c2ca1472f08cbb7b595524310614d8f9044f7f5
49c422a0f10599ace22d443907db0d54d6bf726f1c42c27fe93b7d8a5980
0661353b73fd868adc2ab687a0fdc7cd6560f917a1392e6594b62554b8cc
b844f766583cada19fff1e233867020d49c5b4669b64c1bfe2cb7127b2ca
76d117be8994665dde9a1b49f16494eed2cbd31d4faa8f66b3afd1dc8fd0
96c344c89f2a23ed0d493524ab9f61ef020cbd8a4cd8fb0f21ecdfc461b0
e5aae8037a9ffc7667bee4a11479000c1c93f64dd2e38173f9e8aa380a3a
5387612fbe0787389a91633033be608eb9c0b799869704413a6bdf74961c
d81ac702815f0d4503a212828ad9b25efae12b9bafb4debb3f38f6825fbc
81053014e17d79e82c2548d23e9c32228feccf3a53ca80def3a96a75d83e
5f21b4c35d2641e9ac3a0124dd6dfb2f5187b16c4858158afc0bd285b0a0
ff43bc3452c52e59ffcdc6d5837daabf6800ed0354780625215b2eaa3e4b
1f7323d5ef64419c6ce0b84efe4f5b4c2656d47da20820c91780001d6759
84ee9984864f6679e35fdf255f6478d49c1843277364ecd66da6d0d2d133
fbbd94a63d6f1edb6b8f692c87aa1c99078f8a9e855ee80e27cac12c3033
082355388893e86bff30b33820f71254ee6e920e0ee27b1ca97b1ed69147
a4ee2cca257b9e728ff835b162289f112a90d2de9feaff313beaa624ce7e
a4a3f875bcad3e42aa5bd19c3e3c9a3641c692bc2b987fb2ab551d9503f0
91cf1ca69a88354153c8308b759010bd415f85776cdc1c0f5b965ab00ab4
52ef5f513daad68fd1c94d3547f46aa9baf2e5323a933ec4b2334dea55eb
37a4ec7453d40790d27a082264586e0e3ee1e499e1e0544e2f578bd25d22
06774a80f0d56d4d5f6de6cb95e557b392071497fda207d1f82abc6d71bf
deca78cd55bf7c89be389d8840d5f57f8109ae2cc4879b22191b10297c0c
10965320ae295521074743a119fed32a078031cd35dd1e108e41b0f0f591
e4941f1be81d8ff793e3ec2ad1a3ca718220d8f402eac82da7e51668b90d
0dde5db35f5f933c0d13397afa4377ada56ed49c7ca3fa0b6a190261561b
eba51e102fff455a1bec3424f5e9800c6345460c4fdf23b8c8ce0baaf73c
55712d8a71cd2aa3143f337cb322adea56ee79ce4b239ce352f4b863298f
2c1f5c4ec348f1569c1d125be9c3419ffc5b533b4fb5154c3c5c51a7c4e8
0f3aebf392cc81f2b29f773a44b4a2d7bc3c690f8f58e1aa4ba9d716961a
31003f22306b8c9271b5fa0dc588be92ece2c79043c841592d69fbfbeac4
60c4259e4339a3c8e3e100c3dceab0acb351f026189e1335cd0701f97667
a3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=fabe
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
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-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=IW8b
-----END PGP SIGNATURE-----

By XORing these three blocks of text together, we get another message:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



IDGTK UMLOO ARWOE RTHIS UTETL HUTIA TSLLO 
UIMNI TELNJ 7TFYV OIUAU SNOCO 5JI4M EODZZ 

Good luck.

3301


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=57tj
-----END PGP SIGNATURE-----

This was found to be a simple type of transposition cipher. The text needs to be placed five rows of 14 characters, then the columns have their order changed. If you label the columns as 12, 4, 1, 11, 8, 9, 13, 10, 2, 3, 14, 7, 5, 6 and then shift them into numerical order, the resulting message (with spaces added for clarity) is, "GOOD WORK ULTIMATE TRUTH IS THE ULTIMATE ILLUSION JOIN US AT FV7LYUCMEOZZD5J4 ONIO". The final "n" of ".onion" was left off, presumably for making the message fit inside of the 14x5 grid.

Part 4
- Magic Squares

This hidden service started off blank, but after a short time updated just like the previous .onion page. It contained a comment of '<!--1033--> and a line of growing hex characters:

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>

While this string was growing, a system status page was found on the server running this site. It is unknown if this was intentional, but soon after the content of the server status was changed. Appended to the end was a long string of hex, containing two images concatenated together similarly to the RSA message but with some extra data added in-between them. The second image had it's hexadecimal characters reversed, but both were of the same file: Another rune page, shown here and reads:

SOME WISDOM:THE PRIMES ARE SACRED.THE TOTIENT FUNCTION IS SACRED.ALL THINGS SHOULD BE ENCRYPTED:
KNOW THIS:
272       138    SHADOWS  131      151
ARTHEREAL BUFFERS VOID    CARNAL   18
226       OBSCURA FORM    245      MOBIUS
18        ANALOG  VOID    MOURNFUL AETHEREAL
151       131     CABAL   138      272>

The page is not encrypted and can be read by translating from the Gematra Primus. If you add together the numbers in the "Value" column in the Gematria Primus for each word in the bottom half, it comes out to being a magic square. A magic square is when each row, column, and diagonal add up to the same number, in this case 1033. The extra data between the two images consisted of a text string of numerals referring to the ASCII printable characters. This turns out to be the same magic square.

Part 5
- Vigenère Cipher

A short time after the hexadecimal string stopped growing, the server status page changed. It again contained a hexadecimal string of two images pushed together with the second reversed, with the first shown here. Both of these contain runic messages, while the first image has a hidden Outguess message in it. This message is rather long. It is PGP signed and starts by saying, "Let the text guide you. Good luck. 3301" and then has a hexadecimal string of a JPG image. This image has a single string of runes with two numbers in it, "ᚦᛗᛞᛇᚠᛗᚩᚱ5ᚢᚫᛝᚱᛝ3ᛠᛗᛇᚠᛡ" and is the last part of this puzzle.

The rune pages here have been encrypted with a Vigenère cipher, using the Gematria Primus alphabet order instead of the usual English alphabet. You can learn more about Vigenère here, but put simply it is similar to the Caesar cipher in that you shift each letter down the alphabet, but the key is a word instead of a single number. The encryption key for this is "Divinity", or since we don't have a rune for the letter "V", "Diuinity". Every time the plaintext was the letter "F", the letter was left unchanged and the encryption moved on to the next letter. You can see an example of this here. Once decrypted, the runes on both pages read:

WELCOME:WELCOME,PILGRIM,TO THE GREAT JOURNEY TOWARD THE END OF ALL THINGS.IT IS NOT AN EASY TRIP,BUT FOR THOSE WHO FIND THEIR WAY HERE IT IS A NECESSARY ONE.ALONG THE WAY YOU WILL FIND AN END TO ALL STRUGGLE AND SUFFERING,YOUR INNOCENCE,YOUR ILLUSIONS,YOUR CERTAINTY,AND YOUR REALITY.ULTIMATELY,YOU WILL DISCOVER AN END TO SELF.IT IS THROUGH THIS PILGRIMAGE THAT WE SHAPE OURSELVES AND OUR REALITIES.JOURNEY DEEP WITHIN AND YOU WILL ARRIUE OUTSIDE.LIKE THE INSTAR, IT IS ONLY THROUGH GOING WITHIN THAT WE MAY EMERGE:
WIDSOM:YOU ARE A BEING UNTO YOURSELF.YOU ARE A LAW UNTO YOURSELF.EACH INTELLIGENCE IS HOLY.FOR ALL THAT LIVES IS HOLY:
AN INSTRUCTION:COMMAND YOUR OWN SELF

It is important to note that "WIDSOM" is how it is spelled in the image. Now knowing that Vigenère ciphers are being used, we can solve the image that was hidden inside of the first page. Decrypting with a key of "Welcome pilgrim to the" (which is the first few words of the pages here and is the probable use of the clue "Let the text guide you"), we get the plaintext "AUOWYFXL5LCSFJ3NONIAN" and our next .onion link.

Part 6
- A Koan

The next hidden service once again had a 512 character long hexadecimal string:

bf1d5574ca36efd524e6c34c26cbd628b19aa835aceb94ea7f2ca7f33d1b8f51476bc597d4bf9ad5111d8f39ef5351b3b090bce47f023002fe69928e79f6f8147f6fe051f2f159041f932f5190308d7441fc3cecead0851662d3217485827e640a4183fa5bc8cef5ff7d1473d2746a37fbc8b94318ff0d3aeb467017c0ea5cb33b3e6967453986e1450b35ad47861f679cf7db5a6c170bcfb67544983ec1e36b27ee8c5721da39d27dbfa0cdc15ba3cbaa425e8a8b96b81ab665f3ebc41563a0e9270695d3d68887cfab2c07b290718307f764afba684b17fcfd71323f64206e5fa378b4ee89e80885733080065dd34a5c838898906b8d43de9f1d8eb6922bad>

This page was taken offline shortly after it was visited, but then it came back up with a a PGP signed message and a very long hexadecimal string. This string was a gzip file that contains four more pages of the Liber Primus when unzipped. This time the decryption had two parts to it: First, a Caesar shift of -3 needs to be used, followed by the Atbash cipher:

A KOAN:A MAN DECIDED TO GO AND STUDY WITH A MASTER.HE WENT TO THE DOOR OF THE MASTER."WHO ARE YOU WHO WISHES TO STUDY HERE"ASKED THE MASTER.THE STUDENT TOLD THE MASTER HIS NAME."THAT IS NOT WHO YOU ARE,THAT IS ONLY WHAT YOU ARE CALLED.WHO ARE YOU WHO WISHES TO STUDY HERE"HE ASKED AGAIN.THE MAN THOUGHT FOR A MOMENT, AND REPLIED "I AM A PROFESSOR"."THAT IS WHAT YOU DO,NOT WHO YOU ARE,"REPLIED THE MASTER."WHO ARE YOU WHO WISHES TO STUDY HERE".CONFUSED,THE MAN THOUGHT SOME MORE.FINALLY,HE ANSWERED,"I AM A HUMAN BEING"."THAT IS ONLY YOUR SPECIES,NOT WHO YOU ARE.WHO ARE YOU WHO WISHES TO STUDY HERE",ASKED THE MASTER AGAIN.AFTER A MOMENT OF THOUGHT,THE PROFESSOR REPLIED,"I AM A CONSCIOUSNESS INHABITING AN ARBITRARY BODY"."THAT IS MERELY WHAT YOU ARE,NOT WHO YOU ARE.WHO ARE YOU WHO WISHES TO STUDY HERE".THE MAN WAS GETTING IRRITATED."I AM,"HE STARTED,BUT HE COULD NOT THINK OF ANYTHING ELSE TO SAY,SO HE TRAILED OFF.AFTER A LONG PAUSE THE MASTER REPLIED,"THEN YOU ARE WELCOME TO COME STUDY":
AN INSTRUCTION:
DO FOUR UNREASONABLE THINGS EACH DAY.

The third of these four images, shown above, contains an Outguess message:

For those who have fallen behind:

	TL BE IE OV UT HT RE ID TS EO ST PO SO YR 
	SL BT II IY T4 DG UQ IM NU 44 2I 15 33 9M

	Good luck.

	3301

	

This was another columnar transposition cipher, with 7 columns and a key of "1736254". It reads, "TO BELIEVE TRUTH IS TO DESTROY POSSIBILITY Q4UTGDI2N4M4UIM5 9133" where "Q4UTGDI2N4M4UIM5" is the next .onion link.

Part 7
- Interconnectedness

The next web page was a PGP signed message containing the hexadecimal for an MP3 file. The ID3 information tags in it state that it is called "Interconnectedness" with the artist being 3301. You can listen to it here. This MP3 file had a text message hidden in it just like the JPG files do, except rather than using Outguess, which is meant for images, the software used is OpenPuff. This file was called "magicsquares.txt" and contains three magic squares:

434     1311    312     278     966

204     812     934     280     1071

626     620     809     620     626

1071    280     934     812     204

966     278     312     1311    434

 

7       375     236     190     27      17      181

351     223     14      47      293     98      7

456     232     121     114     72      23      15

16      65      270     331     270     65      16

15      23      72      114     121     232     456

7       98      293     47      14      223     351

181     17      27      190     236     375     7

 

272     138     341     131     151

366     199     130     320     18

226     245     91      245     226

18      320     130     199     366

151     131     341     138     272

Soon after being found, the site was taken down and a short time after that it was brought back up. This time however, it contained the painting "Portrait of Andrés del Peral by Goya y Lucientes" with a few things added. Superimposed into the top left corner is the 3301 cicada logo, the top right is an image of Grigori Rasputin, and along the left and right sides are two columns of numbers. The left side has 181, 7, 15, 16, 456, 351, and 7 and the right side has 966, 1071, 626, 204, and 434, which sum to 1033 and 3301, respectively. These are also the numbers used across the sides of the first and second magic squares from "magicsquares.txt".

As usual, the image also contains a message hidden with Outguess. As it is long you can view it here. It is PGP signed and starts off saying "Very good. You have done well to come this far." Following that are three hexadecimal strings. The first one is an image of part of Gödel's incompleteness theorems, the second is the painting "Eye" by M.C. Escher, and the third is a short MP3 clip of Bach's Trio Sonata in G major, BWV 1039. The hidden message ends with another book code and the usual signature:

3PI:6:1:3   
LML:1:1:1
3
ETOATS:19:9:1
...AF:5:3:1
AMO:13:10:1
CC:8:6:1
CBIA:3:7:2
CFAF:5:23:6
SPR:1:8:1
7
C[1]:4:5:3
AWDV:6:2:1
C[2]:2:17:5
SC:3:17:1
AOGS:2:8:1
ONION


Good luck.

3301

The book used here is "Gödel, Escher, Bach: An Eternal Golden Braid" by Douglas Hofstadter, with the segments of the code referring to the chapter of the book, the line in that chapter, the word in that line, and the letter of that word. Decrypting it leaves us with "ut3qtzbrvs7dtvzp.onion".

Part 8
- Ending

The next web page was, yet again, a long hexadecimal string. This time it contained four more pages of runes. They were not encrypted and used the standard Gematria Primus to read them:

THE LOSS OF DIVINITY:THE CIRCUMFERENCE PRACTICES THREE BEHAVIORS WHICH CAUSE THE LOSS OF DIVINITY.
:CONSUMPTION:WE CONSUME TOO MUCH BECAUSE WE BELIEVE THE FOLLOWING TWO ERRORS WITHIN THE DECEPTION.
1WE DO NOT HAVE ENOUGH,OR THERE IS NOT ENOUGH.
2WE HAVE WHAT WE HAVE NOW BY LUCK, AND WE WILL NOT BE STRONG ENOUGH LATER TO OBTAIN WHAT WE NEED.
MOST THINGS ARE NOT WORTH CONSUMING:
:PRESERVATION:WE PRESERVE THINGS BECAUSE WE BELIEVE WE ARE WEAK.IF WE LOSE THEM WE WILL NOT BE STRONG ENOUGH TO GAIN THEM AGAIN.THIS IS THE DECEPTION.
MOST THINGS ARE NOT WORTH PRESERVING:
:ADHERENCE:WE FOLLOW DOGMA SO THAT WE CAN BELONG AND BE RIGHT , OR WE FOLLOW REASON SO WE CAN BELONG AND BE RIGHT.
THERE IS NOTHING TO BE RIGHT ABOUT. TO BELONG IS DEATH.
IT IS THE BEHAVIORS OF CONSUMPTION, PRESERVATION, AND ADHERENCE THAT HAVE US LOSE OUR PRIMALITY, AND THUS OUR DIVINITY:
SOME WISDOM:AMASS GREAT WEALTH.NEVER BECOME ATTACHED TO WHAT YOU OWN.BE PREPARED TO DESTROY ALL THAT YOU OWN:
AN INSTRUCTION:PROGRAM YOUR MIND.PROGRAM REALITY:

Each page contained a PGP signed message hidden with Outguess as well. All four are nearly identical, containing the same message and number squares with the only differences being the PGP signature and the border of the square. The first two images had the number 3 around the border, the third had 0, and the fourth had 1 around its border:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Create one Tor hidden service that can accept CGI file uploads.

When this hidden service returns and can accept input, post the 
three magic squares and the URL to your Tor hidden service here.

Work alone.


3333333333333333
310    12    103
3              3
312    14    123
3              3
310    12    103
3333333333333333


Good luck.

3301


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=/MnD
-----END PGP SIGNATURE-----

As it stated, the Hidden Service went offline and came back up several days later with a new message:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hello.  You have done well to come this far.

Please paste the magic squares into the appropriate textareas below, then
provide the URL to your Tor hidden service.

The path to your CGI script which accepts uploads should be '/cgi-bin/upload'
and the HTML form input which accepts file uploads should be named 'file'.

Additionally, please generate a GnuPG key pair, and place the public key
in the location '/key.asc'.

We will contact you soon.

Good luck.

3301


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=TwC1
-----END PGP SIGNATURE-----

The web page had three text fields where it expected a magic square and a field for a URL to be entered. With all of these entered and submitted, a new page came up that said "Thank you for your submission." This page also had three more Liber Primus pages. The first two were encrypted using a Vigenère cipher with the key "FIRFUMFERENFE" and reads:

A COAN:DURING A LESSON,THE MASTER EXPLAINED THE I."THE I IS THE VOICE OF THE CIRCUMFERENCE,"HE SAID.WHEN ASKED BY A STUDENT TO EXPLAIN WHAT THAT MEANT, THE MASTER SAID"IT IS A VOICE INSIDE YOUR HEAD"."I DON'T HAVE A VOICE IN MY HEAD," THOUGHT THE STUDENT,AND HE RAISED HIS HAND TO TELL THE MASTER.THE MASTER STOPPED THE STUDENT,AND SAID"THE VOICE THAT JUST SAID YOU HAVE NO VOICE IN YOUR HEAD, IS THE I."AND THE STUDENTS WERE ENLIGHTENED:

The third page is not encrypted and can be read using a straight translation from the Gematria Primus:

AN INSTRUCTION:QUESTION ALL THINGS.DISCOVER TRUTH INSIDE YOURSELF.FOLLOW YOUR TRUTH.IMPOSE NOTHING ON OTHERS:

KNOW THIS:
434  1311 312  278  966
204  812  934  280  1071
626  620  809  620  626
1071 280  934  812  204
966  278  312  1311 434

A Note about 2014

There was a theme across the HTML (the code that structures how a web page displays in your web browser) of the web pages this year. As a quick primer, HTML uses tags to separate logical sections in a web page. For example, to signify a paragraph in HTML you could surround your text with a paragraph tag, <p>like this.</p> There are also special tages such as <head> or <title>, where the former is not shown in the web browser but used to hold info such as style data and search engine terms while the latter displays the title of the page.

The first onion link visited had a title of "For every thing that lives is holy", but the <head> tag on the page did not have a matching closing tag. The second onion link had a comment (a note that is in the code, but does not show up visually) in the page before the hex string that said "Patience is a virtue". When the page was updated, this comment was changed to "761", which is the sum of the gematria values for each letter of "Patience is a virtue". The third page started with a comment of "1033" and its status page that contained the "Welcome, pilgrim" messages had a comment of "3301". It wasn't until the fourth onion link that the closing </head> tag showed up. This was followed with another "3301" comment.

The fourth onion page is also special.

Conclusion

This was the end to 2014's puzzles by 3301. Some people claim they received a message similar to the one sent out in 2013, while everyone else had a file uploaded to their servers from part eight roughly two months later. This message contained a link to a new .onion address where 58 new Liber Primus pages were found. Most are still unsolved, and you can find up to date information about them here.