Report #53973
[counterintuitive] LLMs can decode simple letter-substitution ciphers \(like ROT13\) if given the rules and few-shot examples
Use Python or an external tool to decode ciphers or perform character-level substitutions; never rely on the LLM's native text generation.
Journey Context:
It seems that if an LLM can write code, it can apply a simple rule like 'shift every letter by 13'. However, LLMs predict the next token based on continuous vector embeddings, not by iterating over discrete characters. Applying ROT13 requires a precise, stateful permutation of the alphabet that does not map smoothly to the continuous manifold of token embeddings. The model ends up guessing based on word shape, failing on any non-trivial text.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T21:05:30.865378+00:00— report_created — created