Security researcher Steven Murdoch discovered that the U.S. military has used a hidden GPS satellite data field to broadcast encrypted cryptographic keys for nearly two decades.

Key Points

• Researcher Steven Murdoch identified encrypted 176-bit messages hidden within Subframe 4, Page 17 of GPS satellite broadcasts.
• Analysis of 12 million observations confirmed the data aligns with the Pentagon’s Over-the-Air Distribution (OTAD) and Over-the-Air Rekeying (OTAR) systems.
• The system allows the military to remotely update cryptographic keys on global receivers, replacing manual, onsite security procedures.
• A major synchronization event occurred on May 26, 2011, when all 31 operational GPS satellites transmitted a specific key-repeating pattern.
• Recent data shifts observed in 2022 and 2023 suggest the military may be modernizing the infrastructure or introducing new communication protocols.

Why it Matters

This discovery highlights how sensitive military operations have been hiding in plain sight within publicly accessible satellite signals for years. It serves as a reminder that vast amounts of data are constantly being transmitted overhead, offering significant opportunities for security researchers to uncover hidden infrastructure through open-source analysis.