Imagine walking around with a secret spy receiver in your pocket for two decades without ever knowing it. That’s essentially what’s happening every time your phone or car locks onto a GPS signal. While we’ve been using those satellites to find the nearest coffee shop, the U.S. military has been using a "hidden" field in the broadcast to send encrypted keys across the globe.
Hidden in Plain Sight
For twenty years, a 176-bit field in the standard public GPS broadcast was widely assumed by the public to be "reserved" or empty. However, security researcher Steven Murdoch recently pulled back the curtain, revealing that the U.S. military has been using this space to broadcast encrypted data for nearly two decades. It’s essentially a high-tech "numbers station"—those eerie shortwave broadcasts used to send codes to spies—but instead of crackling audio, it’s digital ciphertext riding on the back of the signals that help you navigate to work.
The Evolution of a Global Numbers Station
This isn't just a relic of the past; it's an evolving system of Over-The-Air Data (OTAD) and Rekeying (OTAR). Murdoch’s research pinpointed "sentinels"—repeating patterns in the data—that have appeared across all 31 operational satellites. These signals allow the military to update encryption keys for secure receivers remotely, a process that used to require physical hardware swaps.
Things took a turn for the weird in December 2023. On satellite PRN 8, the format shifted to include a literal "TEXT" prefix followed by 18 bytes of ciphertext. While Canada and other allies began adopting this automated key distribution years ago to combat jamming and spoofing, the sheer scale and longevity of this "hidden" broadcast are only now being fully documented by the research community.
A New Era of Radio Silence
As we move deeper into an era of electronic warfare, these "quiet" broadcasts are becoming the backbone of secure navigation. What was once a mysterious empty field is now recognized as a vital pillar of global military infrastructure. We might never know exactly what those ciphertext payloads say, but we now know they’ve been whispering to our devices for a very long time. The field wasn't empty; we just weren't listening correctly.
