“There was a perfect match between the timeline and that presentation and the change points that were automatically identified from the data,” Steven Murdoch said. “That was the smoking gun that made me think: This is what it’s for.”
Steven Murdoch’s reconstruction of a hidden GPS sentinel
Researchers led by Steven Murdoch have identified what they describe as a long-running, covert use of the public Global Positioning System: for nearly 20 years the U.S. military has likely been broadcasting codes for its global encryption network using public GPS signals, effectively turning each satellite into a hidden “numbers station,” Murdoch reports. According to the material reviewed by Murdoch, every device that uses GPS has been receiving hidden government information for years, and nobody outside the military knew it until now.
May 26, 2011: the sentinel that appeared on all 31 operational satellites
Murdoch discovered a distinctive sentinel transmission that was emitted by all 31 operational GPS satellites within a window of a few hours on May 26, 2011. He characterizes that synchronized transmission as potentially heralding the activation of a new operational system. The simultaneous appearance across the full operational constellation is the central empirical observation that led Murdoch to seek documentary corroboration.
Linking the signal to OTAD and OTAR via declassified documents
To test his hypothesis, Murdoch cross-referenced the timing of the sentinel with declassified material. He found that the timeline coincided with the rollout of the military’s Over-the-Air Distribution (OTAD) and Over-the-Air Rekeying (OTAR) systems, including a 2015 presentation that lists dates of the operation. That coincidence — the “perfect match” Murdoch described — is the evidentiary basis he cites for interpreting the GPS broadcasts as part of a key-distribution mechanism.
How automated rekeying replaced manual cryptographic distribution
The declassified documentation and Murdoch’s interpretation point to a shift in practice: these automated systems replaced the cumbersome manual distribution of cryptographic keying material. According to the source material, OTAD and OTAR allow military GPS receivers around the world to be rekeyed remotely through satellite broadcasts rather than through onsite procedures. The implication in the records Murdoch examined is that the public GPS signal itself has been used to carry that hidden keying information.
What this means for technologists, policymakers, and end users
- Technologists and security teams: The finding identifies GPS signals as a carrier for government key-distribution traffic; teams responsible for GPS-enabled systems may now treat the received signal stream as containing more than navigation data and consider whether passive observation or analysis of that stream is appropriate.
- Policymakers and regulators: The synchronization of a sentinel across 31 satellites and its match to a documented OTAD/OTAR rollout in declassified material is likely to draw attention from those responsible for oversight of military use of civilian-spectrum infrastructure and for classification policy around dual-use broadcasts.
- End users and the general public: The reporting states plainly that every device that uses GPS has been receiving hidden government information for years; that fact may prompt questions from users about what their devices have been receiving and what protections, if any, apply.
The chain of evidence Murdoch presents is compact: a measurable, time-stamped radio sentinel observed across all operational satellites on May 26, 2011; a temporal match to declassified documentation describing OTAD and OTAR; and a stated operational purpose that shifts key management from manual, onsite processes to remote rekeying via satellite broadcasts. Taken together, those elements support the central claim reported here: that public GPS has functioned as a distribution platform for military cryptographic material.
The discovery leaves a pointed question in its wake: to what extent has this technique been used beyond the 2011 rollout, and for how long has the practice persisted? The documents Murdoch cites and the signal markers he identified provide a firm starting point; the next steps will be documentary and technical follow-up to map the full scope and timeline of the broadcasts.
https://www.schneier.com/blog/archives/2026/06/gps-as-a-key-distribution-platform.html
