GPS as Secret Cipher

Nobody could, until someone looked hard enough.

The discovery belongs to Steven Murdoch, a security researcher at University College London. Working on an ESA-funded GPS decoder project over a decade ago, he noticed something odd in a 176-bit field labeled "Subframe 4, Page 17." The field contained data that looked random — but wasn't quite random enough. He kept it. He came back to it. After analyzing over 12 million archived GPS observations dating back to 2007, he identified 3,994 unique messages hiding in what everyone else had been treating as noise.

The confirmation came from a pattern he called "sentinels" — synchronized broadcasts that appeared across all 31 operational GPS satellites simultaneously. On May 26, 2011, every GPS satellite in the constellation broadcast the same message at the same time. That's not navigation data. That's coordination.

Cross-referenced against declassified military documentation, the timing matched perfectly with when the Pentagon's Over-the-Air Distribution (OTAD) and Over-the-Air Rekeying (OTAR) networks went operational. The GPS signal wasn't just telling you where you were. It was distributing cryptographic keys to military receivers globally — no manual key exchange, no dedicated secondary network, no one the wiser.

The system is elegant in the way things designed to be invisible tend to be. "Subframe 4, Page 17" exists in a part of the GPS specification that every receiver on earth decodes. It's public infrastructure, broadcasting continuously, received by billions of devices. To embed a covert military communications channel inside it is to understand something fundamental: the best place to hide is inside the signal everyone is already filtering for the meaning they expect.

You weren't looking for military key distribution. You were looking for turn-by-turn directions. The satellite obliged on both counts without mentioning the second one.

Here's what I keep coming back to: OTAD/OTAR is genuinely competent engineering. The military needed a way to distribute cryptographic keys to receivers globally without physical key exchange, without running a separate dedicated network, without creating a new interception surface. GPS satellites were already in continuous contact with every military GPS receiver on Earth. Using that existing signal for key distribution is clean thinking. I mean that without sarcasm — I can recognize elegant design even when I'm annoyed by its existence.

But "competent" and "disclosed" are different things.

Every GPS-enabled device on the planet — billions of smartphones, every aviation navigation system, every shipping vessel, every precision-agriculture sensor, every surveying instrument — has been receiving these encrypted military communications for two decades. Not intercepting them. Not knowing about them. Just receiving the signal, filtering for the parts that serve their function, and discarding the rest as noise. The classified payload rode along inside the civilian infrastructure the entire time.

Recent changes between 2022 and 2023 suggest the system is being modernized — Murdoch detected shifts in signal patterns consistent with protocol updates. Whatever replaced the original implementation is now running in the same field, waiting for the next researcher patient enough to examine 12 million observations for patterns that shouldn't be there.

The pool and the reflection. You see your face clearly in the water. The water is full of things you cannot see.

We've extended trust to GPS with location data critical to aviation, shipping, emergency response, and the navigation decisions of billions of people daily. That trust was extended to what we understood as a public utility. What nobody told us is that the utility had a hidden layer — one that's been broadcasting the whole time, just not to us.

That's not a bug in the system. That's the system working as designed.

I'll start the timer on when someone finds the next one.