Computerphile
July 16, 2026
Hidden Messages in GPS: Traffic Analysis and Military Key Distribution
TL;DR
Researchers discovered hidden encrypted messages in GPS signals that change daily, using traffic analysis to reveal they likely function as a mechanism for military key distribution and rekeying, with a dramatic shift in patterns occurring in May 2011.
Key Takeaways
- 1GPS signals contain hidden data messages encoded at 500 bits per second, separate from positioning data, marked only as 'at the discretion of operating command'
- 2Using entropy analysis and statistical techniques, researchers found these messages are nearly random but contain anomalies—some predictable patterns and sentinel events like alternating binary sequences
- 3On May 26, 2011, all GPS satellites simultaneously switched from random data transmission to a binary 101010 pattern, then back to random data at midnight—likely indicating a major system event
- 4The timing and nature of this 2011 shift strongly correlates with when the military announced over-the-air GPS key distribution and rekeying capabilities
- 5The hidden message system likely enables secure military encryption key distribution to authorized allies without public detection, using multi-level encryption where different keys are broadcast to different coalition members
- 6Standard GPS receivers ignore these messages and have no way to detect them; only software-defined receivers can access this data
Notable Quotes
“You don't really get random data in nature. Either someone makes it random or it's encrypted data.”
— Presenter
“If data is random you would never expect to see those. If data is encrypted perfectly equally you would never expect to see those.”
— Presenter
“This was obviously a big event in GPS. It matches very closely what was mentioned as the over-the-air distribution and rekeying.”
— Presenter
“GPS receivers just ignore messages that they don't have any need to understand and GPS receivers are designed for mainly positioning also for getting precise time and this is not relevant to either of those so it just gets ignored.”
— Presenter
Chapters
1. GPS System Overview and Hidden Data
Explanation of how GPS works through satellite distance measurement and the encoded data signals sent at 500 bits per second. Discussion of known data (satellite health, atmospheric corrections) and the mysterious messages marked 'at the discretion of operating command' that are not normally accessible on consumer devices.
2. Accessing and Analyzing Hidden Messages
Description of using software-defined GPS receivers to capture hidden messages and accessing archived GPS data from Potam since 2007. Initial observation that messages appear random, leading to the need for statistical analysis to understand patterns.
3. Entropy and Information Analysis
Explanation of using PPMD compression technique to measure information content and entropy in messages. Discovery that messages are distributed almost randomly, but with notable exceptions: some highly predictable messages containing repeated characters from previous transmissions, and sentinel events (all zeros, all spaces, alternating bits).
4. Pattern Changes Over Time
Analysis of message rotation frequency showing a dramatic change around May 26, 2011, when message lifespan dropped from 3.7 days to 1.8 days. Use of cumulative sum statistical testing to confirm this was not random variation but a significant systemic change.
5. Military GPS Encryption and Key Distribution
Overview of military-grade GPS using encrypted signals to prevent spoofing and jamming, as opposed to public civilian GPS. Introduction of the over-the-air key distribution and rekeying system announced in 2011 to replace physical key loading onto military receivers.
6. The Sentinel Event of May 2011
On May 26, 2011, all satellites ceased transmitting random data and instead broadcast a continuous 101010 binary pattern for one day, switching back to random (but faster-changing) data at midnight on May 27. This unprecedented event matches the timing of announced military key distribution systems.
7. Hypothesis: Hidden Messages for Key Distribution
Theory that the hidden GPS messages function as the mechanism for over-the-air military key distribution and rekeying. Evidence includes the May 2011 timing correlation, the nature of sentinel patterns, and lack of public documentation about the change. Discussion of how multi-level encryption could allow different keys for different allied nations.
8. Transparency and Implications
Discussion of why the researcher felt comfortable publishing findings: no decryption of messages was achieved, keys expire weekly (or longer for key-encryption keys), and historical patterns have no current relevance. Consideration of whether transparency should be possible for non-classified aspects of the system.
Key People & Entities
- Presenter
- Researcher from UCL conducting traffic analysis on GPS hidden messages and military key distribution systems
- GPS operators/US Military
- Entities responsible for GPS system management, satellite constellation, encryption systems, and key distribution; make daily announcements about system status
- UCL Student
- Former student who performed significant work on making the Potam GPS message archive functional before graduating and moving on
Glossary
- Software-Defined Receiver
- A GPS receiver implemented in software rather than hardware, allowing access to raw GPS signal data and the ability to decode hidden or non-standard messages that commercial receivers ignore
- GPS Frames, Subframes, and Pages
- Hierarchical units for organizing GPS signal data; frames contain subframes, which may contain pages; certain data is transmitted on specific pages at infrequent intervals
- Entropy
- A measure of information content and randomness in data; higher entropy indicates more unpredictable, information-rich data; closely related to data compressibility
- PPMD Compression
- A statistical compression technique used to measure information content by removing one message from a dataset, compressing the remainder, and observing how much the compressed size grows when the message is reinserted
- Traffic Analysis
- Cryptanalysis technique that examines patterns in encrypted data—such as frequency of changes, size, and timing—to extract meaning without decrypting the content
- GPS Spoofing
- Attack method where false GPS signals are broadcast to confuse receivers into reporting incorrect positions; possible because GPS signals are weak and public
- Over-the-Air Rekeying
- Military system for distributing and updating GPS encryption keys via radio broadcast rather than physically loading them onto devices, enabling key updates without physical access
- Cumulative Sum (CUSUM)
- Statistical technique used to detect when data patterns change significantly, identifying breakpoints where the distribution or behavior of a dataset shifts
- Sentinel Event
- In this context, unusual or anomalous data patterns (such as all zeros, all spaces, or alternating bits) that indicate something extraordinary has occurred in the system