Description: “Cryptography can be easy, do you know what ROT13 is cvpbPGS{arkg_gvzr_V'yy_gel_2_ebhaqf_bs_ebg13_nSkgmDJE}
Difficulty: Easy
Author: Pandu
Summary
This challenge teaches ROT13 by asking you to decode the ciphertext cvpbPGS{arkg_gvzr_V'yy_gel_2_ebhaqf_bs_ebg13_nSkgmDJE}.
You can solve it using online ROT13 tools or by applying the ROT13 substitution manually.
Analysis
ROT13 is a simple substitution cipher that replaces each letter in a text with the letter 13 places after it in the alphabet. Because there are 26 letters in the Latin alphabet, applying ROT13 twice returns the original text, making it both an encryption and decryption method. For example, “A” becomes “N” and “N” becomes “A”.
Now how Modulo 26 is related to ROT13
In cryptography, Mod 26 represents arithmetic done within the bounds of the 26-letter alphabet. ROT13 can be expressed mathematically as:
Where:
- Each letter is first converted to a number (A = 0, B = 1, …, Z = 25).
- Then, 13 is added to that number.
- The result is taken modulo 26 to ensure it wraps back around the alphabet once it passes “Z.â€
This modular operation guarantees the cyclic behavior of the cipher — after “Z,†it starts again at “A.â€
In other words, ROT13 is simply a Caesar cipher with a fixed shift of 13, powered by Mod 26 arithmetic.
Decoding ROT13
Applying ROT13 transforms each letter:
c → pv → ip → cb → oP → CG → TS → F
…and so on, until the full flag is revealed.
Tools for ROT13
You can decode ROT13 either manually or with online tools:
- Online decoders: https://www.rot13.com
- Command-line:
echo "cvpbPGS{arkg_gvzr_V'yy_gel_2_ebhaqf_bs_ebg13_nSkgmDJE}" | tr 'A-Za-z' 'N-ZA-Mn-za-m'cipher = "cvpbPGS{arkg_gvzr_V'yy_gel_2_ebhaqf_bs_ebg13_nSkgmDJE}"plaintext = cipher.encode('rot_13')print(plaintext)âš¡ Raikiri?? Flag pwned! The ciphertext has been decoded successfully.

💡 TL;DR / Lesson LearnedROT13 is a simple substitution cipher that demonstrates modular arithmetic in cryptography.
Applying+13 mod 26twice restores the original message.
Remember: ROT13 is not secure and should never be used for real-world encryption.