University College London researcher Steven Murdoch discovered that the U.S. military has used public GPS satellites to broadcast encrypted cryptographic keys to global personnel for nearly two decades.

Key Points

• Steven Murdoch identified a 176-bit sequence in "Subframe 4, Page 17" of GPS data as a covert channel for military key distribution.
• The system supports the Pentagon’s Over-the-Air Distribution (OTAD) and Over-the-Air Rekeying (OTAR) networks, which automate secure receiver updates.
• Analysis of 12 million observations from the GFZ Helmholtz Centre for Geosciences confirmed the transmission of 3,994 unique encrypted messages.
• A major synchronization event across 31 satellites on May 26, 2011, matches declassified timelines for the rollout of military rekeying operations.
• The broadcast system has remained active and largely unnoticed by the public since at least 2007, with recent changes detected in late 2023.

Why it Matters

This discovery reveals that critical military infrastructure has been hiding in plain sight within the global navigation signals used by civilian devices for years. It highlights the potential for public data streams to carry sensitive, encrypted information that remains accessible to anyone with the technical capability to analyze it.