The Voice from Havana: Cuba's Atencion Numbers Station and the Unbreakable Cipher

The Signal That Never Stops

Somewhere on the shortwave dial, between 3 and 30 megahertz, a woman's voice speaks in Spanish. She says a single word -- "Atencion" -- and then begins reading five-digit numbers. The numbers come in groups. They come at scheduled times, on scheduled frequencies. They come every day.

Anyone with a twenty-dollar shortwave radio can hear them. Anyone in the eastern half of the United States, anyone in the Caribbean, anyone with an antenna pointed roughly south-southwest. The broadcasts have been intercepted and recorded by amateur radio enthusiasts since at least 1966. They are not secret in the sense that they are hidden. They are secret in the sense that no one -- outside a very small number of people in Havana and an even smaller number of people in apartments and safe houses across America -- has ever known what the numbers mean.

The station is called Atencion. It is operated by Cuba's Direccion de Inteligencia, the island's primary foreign intelligence service. And for more than half a century, it has been the backbone of one of the most effective espionage communication systems ever devised -- a system that, when used correctly, is mathematically unbreakable.

---

How a Numbers Station Works

The principle behind a numbers station is elegant in its simplicity.

A handler in Havana writes a message -- an instruction to a field agent. The message is converted into numbers using a substitution system: each letter becomes a digit or pair of digits. Then, each digit in the message is combined with a corresponding digit from a one-time pad -- a sheet of truly random numbers, printed on paper, of which exactly two copies exist: one held by the handler, one held by the agent.

The mathematical operation is modular addition. If the message digit is 7 and the pad digit is 6, the encrypted digit is 3 (because 7 + 6 = 13, and you take only the last digit). The result is a string of numbers that is, by the fundamental laws of information theory, **perfectly random**. There is no pattern. There is no frequency analysis that can crack it. There is no supercomputer that can brute-force it. The one-time pad, when used correctly -- when the pad is truly random, when it is used only once, and when it is destroyed after use -- provides **information-theoretic security**. It is not merely difficult to break. It is impossible.

The encrypted numbers are then read aloud over shortwave radio. The agent, listening on an ordinary consumer receiver -- a Sony ICF-2010 was the model of choice for Cuban intelligence -- writes them down. The agent then applies the corresponding one-time pad in reverse, subtracting each pad digit from each received digit to recover the original message.

The beauty of the system is its asymmetry. The broadcast goes out over public airwaves to anyone and everyone. But only the agent with the matching pad can read it. There is no electronic handshake. No IP address. No cell tower ping. No metadata. The agent leaves no trace of having received the message. The only evidence is the radio itself -- and a twenty-dollar shortwave receiver is not, by itself, evidence of espionage.

---

The Voice That Launched a Thousand Spies

The Atencion station is believed to have begun broadcasting in the early 1960s, shortly after Fidel Castro's revolution consolidated power and Cuba's intelligence services were reorganized with extensive Soviet KGB assistance. The earliest authenticated recordings of Spanish-language five-digit numbers stations date to 1966.

The station's operational pattern was consistent for decades. A female voice -- synthesized in later years, live in earlier ones -- would announce "Atencion!" followed by a series of five-digit number groups. Broadcasts occurred on multiple frequencies simultaneously, at predetermined times, on predetermined days. The schedules were known to agents in advance. The frequencies shifted periodically to avoid interference and detection.

The signal was powerful enough to reach the entire eastern seaboard of the United States. It was monitored by the National Security Agency, the Federal Bureau of Investigation, the Defense Intelligence Agency, and a loose global community of shortwave radio hobbyists who catalogued it, recorded it, and speculated endlessly about its purpose.

But speculation was all anyone could do. The numbers, without the pads, were noise.

---

The Cryptographer Who Betrayed the Cipher

The first crack in the system came not from American codebreakers but from a Cuban insider.

Rolando Sarraff Trujillo was born on August 22, 1963, in Havana. He earned a journalism degree from the University of Havana between 1985 and 1990, then joined Cuba's Interior Ministry. His parents -- Rolando Sarraff Elias and Odesa Trujillo -- were, according to some accounts, retired intelligence officers who had trained at KGB academies in the Soviet Union.

Sarraff was assigned to Department M-XV of the Direccion de Inteligencia -- the unit responsible for encrypted communications with Cuban agents operating abroad. He was, in the language of the intelligence world, a cryptologist: a person who designs, implements, and maintains the cipher systems that keep espionage networks alive.

Sometime in the early 1990s -- the exact date remains classified -- the Central Intelligence Agency recruited Sarraff as a mole. From inside Department M-XV, he began providing the CIA with the encryption keys, communication schedules, and operational details of Cuba's agent communication system. He gave them the codes.

The intelligence Sarraff provided was, according to President Barack Obama's later assessment, among the most valuable the United States had ever obtained from a source inside Cuba. It led directly or indirectly to the identification and prosecution of at least three major Cuban espionage operations on American soil:

**The Wasp Network** -- La Red Avispa -- a ring of at least 27 Cuban intelligence officers operating in south Florida, infiltrating anti-Castro exile groups and U.S. military installations.

**Ana Belen Montes** -- a senior analyst at the Defense Intelligence Agency who spied for Cuba for seventeen years, passing the identities of covert U.S. intelligence officers, details of the classified Misty satellite program, and materials from the SAFE classified database.

**Kendall and Gwendolyn Myers** -- a State Department European analyst and his wife who spied for Cuba for nearly thirty years, communicating with Havana via Morse code on shortwave radio.

On November 2, 1995, Cuban counterintelligence arrested Sarraff. He was sentenced to twenty-five years in prison in September 1996. His sister Vilma later alleged that the trial presented no evidence and accepted no defense testimony. He would remain imprisoned for nearly twenty years.

---

The Break-In That Broke the Code

Before Sarraff's arrest, the intelligence he provided had already set a critical operation in motion.

In 1995, FBI agents conducted a covert entry into the Miami apartment of at least one member of the Wasp Network. The operation was authorized under the Foreign Intelligence Surveillance Act. The agents were not there to arrest anyone. They were there to copy something.

Inside the apartment, the FBI found a laptop computer containing a decryption program -- the software the Cuban agents used to convert the five-digit number groups from the Atencion broadcasts into readable text. The agents copied the program and left without being detected.

From that point forward, the FBI could do what no external codebreaker had ever been able to do: **they could read the Atencion broadcasts in real time**. Every message Havana sent to its agents in Miami, the FBI read first.

For three years -- from 1995 to September 1998 -- the Wasp Network continued to operate, unaware that every instruction they received from Havana was simultaneously being decoded by the very government they were spying on. The FBI watched. They listened. They built a case.

---

The Messages They Decoded

The content of the decoded Atencion broadcasts, presented as evidence at the trial of the Cuban Five in 2001, revealed the texture of a functioning espionage operation.

Some messages were operational directives:

*"Prioritize and continue to strengthen friendship with Joe and Dennis."*

This instruction directed agents to cultivate relationships with American military personnel at Boca Chica Naval Air Station in Key West, Florida.

Some messages were security warnings:

*"Under no circumstances should German nor Castor fly with BTTR or another organization on days 24, 25, 26, and 27."*

"German" and "Castor" were the code names of two Wasp Network agents -- Juan Pablo Roque and Rene Gonzalez -- who had infiltrated Brothers to the Rescue, an anti-Castro exile group that flew light aircraft over the Florida Straits. "BTTR" stood for Brothers to the Rescue. The dates referenced in the message were February 24-27, 1996.

On February 24, 1996 -- the first day of the prohibited window -- Cuban Air Force MiG-29 and MiG-23 fighters shot down two unarmed Cessna 337 Skymaster aircraft operated by Brothers to the Rescue, killing four people: Carlos Costa, Armando Alejandre Jr., Mario de la Pena, and Pablo Morales. The first aircraft was destroyed nine nautical miles outside Cuban territorial airspace. The second was destroyed ten nautical miles outside.

Juan Pablo Roque -- "German" -- had returned to Cuba the day before the shootdown. He had been warned. The decoded message proved it.

A separate intercepted transmission, dated January 29, 1996, read: *"Superior headquarters approved Operation Scorpion in order to perfect the confrontation of counter-revolutionary actions of Brothers to the Rescue."*

And some messages were strangely mundane:

*"Congratulate all the female comrades for International Day of the Woman."*

The trial included approximately 1,300 pages of decoded messages and nearly 1,000 encrypted computer disks confiscated from the agents' south Florida apartments.

---

The Trial of the Cuban Five

On September 12, 1998, the FBI arrested ten members of the Wasp Network in Miami. Five of them -- Gerardo Hernandez, Antonio Guerrero, Ramon Labanino, Fernando Gonzalez, and Rene Gonzalez -- refused plea deals and went to trial.

The trial began on November 27, 2000, in the U.S. District Court for the Southern District of Florida. It lasted seven months.

The prosecution's case rested heavily on the decoded Atencion broadcasts. FBI technicians demonstrated in court how the decryption program worked: number groups received via shortwave were entered into the software, which applied the one-time pad keys to produce Spanish-language plaintext. The decoded messages established the agents' identities, their code names, their missions, and -- in the case of Gerardo Hernandez -- their foreknowledge of the Brothers to the Rescue shootdown.

On June 8, 2001, all five were found guilty on all counts.

Sentencing followed in December 2001:

• Gerardo Hernandez: two consecutive life sentences plus fifteen years, for conspiracy to commit espionage and conspiracy to commit murder
• Antonio Guerrero: life imprisonment
• Ramon Labanino: life imprisonment
• Fernando Gonzalez: nineteen years
• Rene Gonzalez: fifteen years

The Cuban government declared them heroes. Havana erected billboards demanding their release. The case became a cause celebre across Latin America and in parts of Europe.

---

The Queen of Cuba

The same cipher system -- the same Atencion broadcasts, the same one-time pad encryption, the same Sony shortwave receivers -- sustained a far more damaging operation inside the U.S. intelligence community itself.

Ana Belen Montes was recruited by Cuban intelligence in December 1984 at a dinner in Manhattan. She was twenty-seven years old. She unhesitatingly agreed to spy.

In March 1985, she traveled to Cuba via Madrid and Prague for espionage training. Cuban agents, themselves trained by Soviet operatives, taught her covert communications, surveillance detection, and polygraph countermeasures.

By September 1985, she had secured employment at the Defense Intelligence Agency. By 1992, she was the DIA's senior Cuba analyst -- the person who wrote the U.S. government's official assessments of Cuban military capability and intentions.

For seventeen years, she listened to the Atencion numbers station every Tuesday, Thursday, and Saturday evening at nine or ten o'clock. She used a Sony ICF-2010 shortwave receiver. She entered the five-digit groups into a Toshiba 405CS laptop containing a Cuban-installed decryption program that converted them into Spanish-language operational instructions.

She never removed documents from work. Instead, she committed classified information to memory during the day and typed it into her laptop at home, then transferred the intelligence onto encrypted diskettes that she passed to her handlers at physical meetings.

A message recovered from her laptop's hard drive read: *"Cipher the information every time you do, so that you do not leave prepared information that is not ciphered in the house."*

Her security notes were written on water-soluble paper that could be destroyed instantly if necessary.

The damage she caused was immense. She compromised the identities of multiple covert U.S. intelligence officers operating in Cuba. She passed details of the Misty satellite program, one of the National Reconnaissance Office's most highly classified projects. She provided access to the SAFE database, the DIA's secure analytical environment.

In 1987, weeks after Montes visited El Paraiso military base in El Salvador, the leftist FMLN launched a devastating attack killing forty-three soldiers and a U.S. Green Beret. Military experts have long speculated that the attack benefited from insider intelligence.

The NSA eventually decrypted messages revealing an unidentified senior official -- designated "Agent S" -- spying for Cuba. The investigation narrowed to Montes based on her access to classified programs, her purchase of a specific Toshiba laptop model, and her visit to Guantanamo Bay in July 1996.

On May 25, 2001, FBI agents found her Sony shortwave radio and Toshiba laptop hidden under her bed. The hard drive contained eleven pages of direct communications between Montes and her Cuban handlers.

On September 16, 2001 -- five days after the September 11 attacks -- Montes made a payphone call entering an encrypted message that read: *"Danger Perla."* She was warning Havana that Cuba might face U.S. military action.

Five days later, on September 21, 2001, she was arrested at DIA headquarters. She pleaded guilty on October 16, 2002, and was sentenced to twenty-five years. She was released on January 6, 2023, after serving twenty years. She currently lives in Puerto Rico under monitoring restrictions that prohibit internet access without approval and contact with foreign agents.

---

The Station That Would Not Die

In November 2012, the Atencion station went silent. Its frequencies and time slots were taken over by a successor designated HM01 by the ENIGMA 2000 monitoring group -- a European network of shortwave hobbyists who identify and catalogue numbers stations worldwide.

HM01 is what the monitoring community calls a "hybrid mode" station. It broadcasts both a voice component -- a robotic female speaker delivering five-digit number groups in Spanish -- and a digital component using a transmission mode called Redundant Digital File Transfer, or RDFT.

The digital portion of the broadcast sounds, to a casual listener, like a 56K modem connecting to the internet. It is a differential phase shift keying mode that is obscure even by amateur radio standards -- so obscure that the decoding software was written by a single Brazilian radio enthusiast and is freely available online.

When the RDFT transmissions are run through this software, they decode into files. But the files contain only ciphertext -- scrambled data encrypted with one-time pads. The decoding strips the radio transmission layer. The encryption layer remains intact.

HM01 broadcasts the same set of six messages on all schedules, beginning at 16:00 UTC and concluding at 10:00 UTC the following day. It operates on frequencies including 10345, 10860, 13435, and 17480 kHz. Its signal frequently overlaps with Radio Havana Cuba, suggesting both originate from the same transmission facility.

During documented station malfunctions, monitors have detected Windows XP startup and shutdown sounds bleeding through the broadcast -- a surreal reminder that the most theoretically secure encryption system in the history of espionage is being operated on aging personal computers.

The station was confirmed active as recently as April 2024. It continues to broadcast six encrypted messages per cycle. No one outside Cuba's intelligence service knows who is receiving them.

---

The Prisoner Swap

On December 17, 2014, President Barack Obama announced the normalization of diplomatic relations with Cuba. As part of the agreement, the three remaining imprisoned members of the Cuban Five -- Gerardo Hernandez, Antonio Guerrero, and Ramon Labanino -- were released and returned to Cuba.

In exchange, Cuba released Rolando Sarraff Trujillo.

Obama described him, without naming him, as "one of the most important intelligence agents that the United States has ever had in Cuba, and who has been imprisoned for nearly two decades."

Sarraff arrived in the United States on December 18, 2014. His family in Cuba heard nothing for weeks. His sister Vilma eventually received a phone call: he was in the United States, free, and doing fine.

His current location and activities are unknown.

---

What Remains Unresolved

The Atencion case is not a single mystery. It is a constellation of them.

The station -- now HM01 -- continues to broadcast encrypted messages to unknown recipients. Six messages per cycle, every day, on multiple frequencies. Someone is listening. Someone has the pads. Someone is receiving instructions from Havana. The identities of these agents, their locations, their missions, and the intelligence they are providing to Cuba's intelligence service are entirely unknown to the public.

The full scope of the damage caused by the operations Atencion sustained has never been publicly assessed. Ana Montes's damage assessment remains classified. The intelligence Kendall Myers passed over thirty years has never been fully catalogued. The Wasp Network's penetration of U.S. military installations -- including Boca Chica Naval Air Station, MacDill Air Force Base, and the U.S. Southern Command -- has never been the subject of a comprehensive public accounting.

Rolando Sarraff Trujillo's full debriefing has never been disclosed. What he knew about Cuba's cipher systems -- their design, their vulnerabilities, their evolution -- remains in the hands of the U.S. intelligence community. Whether his information compromised Cuba's entire one-time pad infrastructure, or only the systems in use during the period he was active, is unknown.

And the fundamental question that the Atencion case poses -- the question that has haunted signals intelligence since Claude Shannon proved the one-time pad's theoretical perfection in 1949 -- remains unanswered:

**If the cipher is unbreakable, how do you catch the spy?**

The answer, in every case, has been the same. You do not break the cipher. You break the person. You find the insider. You conduct the covert entry. You copy the software. You wait.

The numbers keep coming. The voice keeps speaking. Atencion.

What the Evidence Actually Shows

The Cuban Atencion numbers station represents a case study in the collision between perfect cryptography and imperfect human systems. The mathematical security of the one-time pad is absolute. The operational security of the people using it is not.

**The cipher was never broken by cryptanalysis.** This is the most important technical fact in the entire case. The FBI did not crack the one-time pad through mathematical attack. The NSA did not find patterns in the number groups. No supercomputer defeated the encryption. The one-time pad remains, as Claude Shannon proved in his 1949 paper "Communication Theory of Secrecy Systems," information-theoretically secure. The numbers broadcast by Atencion, without the corresponding pads, are indistinguishable from random noise. They contain zero extractable information.

What broke the system was human intelligence -- HUMINT, not SIGINT. Rolando Sarraff Trujillo, working inside Department M-XV, provided the CIA with the cipher keys and communication protocols. The FBI's 1995 covert entry into a Wasp Network apartment yielded the decryption software. In both cases, the failure was not in the mathematics but in the personnel security of the organization using the mathematics.

**The FBI's three-year passive surveillance is the most operationally significant element.** From 1995 to 1998, the Bureau read every Atencion message sent to the Wasp Network -- in real time. They watched Cuban agents receive instructions, carry out missions, and report back to Havana, all while knowing exactly what those instructions said. This surveillance period produced the 1,300 pages of decoded messages and the evidence connecting Gerardo Hernandez to the Brothers to the Rescue shootdown. The decision to maintain passive collection rather than immediately arrest the agents allowed the FBI to map the full network and build cases that resulted in multiple life sentences.

**The Brothers to the Rescue connection transforms this from an espionage case into a murder case.** The decoded message explicitly warning agents "German" and "Castor" not to fly between February 24 and 27, 1996, combined with the intercepted "Operation Scorpion" directive, constituted the prosecution's strongest evidence that the Wasp Network had foreknowledge of the shootdown. Four civilians died. The cipher system that was supposed to protect Cuban intelligence operations was, through the FBI's covert access, turned into the instrument that proved conspiracy to commit murder.

**Ana Montes represents the system's greatest success and greatest failure simultaneously.** For seventeen years, she operated without detection -- receiving Atencion broadcasts on a consumer shortwave radio, decrypting them on a laptop, memorizing classified information rather than removing documents, and passing intelligence on water-soluble paper and encrypted diskettes. Her tradecraft was nearly flawless. She was eventually identified not through her communications but through the NSA's decryption of messages referencing "Agent S" -- intelligence that may have originated from Sarraff's compromise of Cuba's cipher systems. The cipher protected her for almost two decades. The compromise of the cipher infrastructure ultimately contributed to her identification.

**The station's continued operation is the most significant unresolved element.** HM01 -- Atencion's successor -- broadcasts six encrypted messages per cycle, every day, on multiple frequencies. This is not a legacy system running on inertia. Six distinct messages per cycle implies at least six distinct recipients, each with their own one-time pads. Someone in Havana is generating these messages. Someone in the field is receiving them. The operational purpose of these broadcasts in 2024 -- decades after the Cold War, after the normalization of U.S.-Cuba relations, after the exposure of three major spy rings -- is the central unanswered question.

**The Windows XP sounds detected during station malfunctions reveal an operational vulnerability.** The fact that HM01's broadcast equipment is connected to personal computers running an operating system that Microsoft ceased supporting in 2014 suggests either resource constraints within Cuba's intelligence infrastructure or a deliberate decision to maintain airgapped legacy systems. Either way, the bleeding of system sounds into the broadcast is a security failure -- it confirms that the station is computer-operated and provides monitoring communities with technical intelligence about the broadcast infrastructure.

**The Kendall Myers case demonstrates the system's long-term resilience.** Myers and his wife spied for Cuba for nearly thirty years -- from approximately 1979 to 2009. They communicated with Havana by picking up encrypted Morse code messages on shortwave radio and decrypting them using a program provided by Cuban intelligence. Their operation survived the exposure of the Wasp Network in 1998, the arrest of Ana Montes in 2001, and the public revelation that Cuban communications had been compromised. Either the Myers couple operated on a completely separate cipher system that Sarraff's intelligence did not reach, or Cuban intelligence successfully rebuilt its communication infrastructure between the compromises. Either possibility has implications for the current HM01 broadcasts.

**The institutional question is whether the pattern of exposure represents systemic vulnerability or acceptable attrition.** Cuba's intelligence service lost the Wasp Network (1998), Ana Montes (2001), and the Myers couple (2009) within a span of eleven years. All three operations relied on the same fundamental communication architecture -- shortwave numbers station broadcasts encrypted with one-time pads. The cipher itself was never the point of failure. But the pattern of compromises raises the question of whether the Direccion de Inteligencia has fundamentally restructured its agent communication protocols since HM01 replaced Atencion in 2012, or whether the continued use of shortwave broadcasts represents institutional conservatism that will eventually produce another exposure.

The honest assessment is this: the Atencion system worked. For decades, it sustained espionage operations that penetrated the Defense Intelligence Agency, the State Department, the U.S. military, and anti-Castro exile organizations. The cipher was never broken. The operations were exposed through human betrayal and physical access, not through signals intelligence. And the system continues to operate, broadcasting to agents whose identities, locations, and missions remain unknown. The numbers keep coming. The mathematics remain sound. The only question is who is listening.