GPS-Satelliten übertragen seit 20 Jahren Verschlüsselungsschlüssel

For nearly 20 years, every device with a GPS receiver has been quietly receiving hidden encryption keys from the U.S. military — and nobody outside the Pentagon had a clue until now. Steven Murdoch, a security researcher, reverse-engineered the signal and found that all 31 operational GPS satellites double as a distributed numbers station, broadcasting cryptographic material for the military's global encryption network.

The Smoking Gun: May 26, 2011

Murdoch identified a specific sentinel transmitted by every one of the 31 operational satellites within a narrow window of hours on May 26, 2011. That single day was the activation trigger. By cross-referencing declassified documents — including a 2015 presentation on the military's Over-the-Air Distribution (OTAD) and Over-the-Air Rekeying (OTAR) systems — he found a perfect match between the timeline and the signal changes his algorithms automatically detected. "That was the smoking gun," Murdoch said. "This is what it's for."

How OTAD and OTAR Replaced Manual Key Distribution

Before this, rekeying military GPS receivers meant sending a person with a physical key loader to every unit in the field — a logistical nightmare for a force spread across the globe. OTAD and OTAR automate that process: the satellites broadcast encrypted key material directly into every receiver, eliminating onsite procedures. The system has been running silently for roughly two decades, with the May 2011 event marking its operational debut.

What This Means for GPS Security and Privacy

This isn't a vulnerability—it's a feature, and a clever one at that. GPS is a one-way broadcast; receivers can't talk back, so the military gets a stealthy, universal key distribution channel with zero additional infrastructure. The catch? Any researcher with a software-defined radio and enough patience could now spot similar hidden signals. Now that this is public, expect a wave of scrutiny on GPS L-band signals — and possibly the discovery of other covert channels we didn't know existed.

Source: GPS As a Key Distribution Platform
Domain: schneier.com