--- title: Secure keys strengthen protected military satellite... description: MIT Lincoln Laboratory built a prototype key-management system for the U.S. Space Force's next-generation protected satellite communications system, PATS. The... canonical: https://daily.dev/posts/secure-keys-strengthen-protected-military-satellite-communications-kpn2zjgka twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Secure keys strengthen protected military satellite communications | daily.dev og:description: MIT Lincoln Laboratory built a prototype key-management system for the U.S. Space Force's next-generation protected satellite communications system, PATS. The... og:url: https://daily.dev/posts/secure-keys-strengthen-protected-military-satellite-communications-kpn2zjgka og:image: https://api.daily.dev/og/posts/Kpn2ZJGKa.png og:image:alt: Secure keys strengthen protected military satellite communications og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Secure keys strengthen protected military satellite communications **[MIT News](https://daily.dev/sources/mit)** · 7 min read · 0 upvotes · 0 comments ## Summary MIT Lincoln Laboratory built a prototype key-management system for the U.S. Space Force's next-generation protected satellite communications system, PATS. The system refreshes cryptographic keys rapidly across globally dispersed terminals, even in contested or bandwidth-constrained conditions. It uses a hybrid 'pull-and-push' approach: terminals pull a monthly package of keys over the satcom link, while the satellite pushes a smaller daily key that drives frequency-hopping patterns. The monthly keys encrypt the daily keys, creating layered security. The team also built the first operational-scale implementation of broadcast encryption for this kind of protected satcom use. The project won a 2025 R&D 100 Award, and the first PATS end cryptographic unit already earned NSA certification. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How does a key management system refresh encryption keys for satellite terminals that are offline or disconnected? MIT Lincoln Laboratory's PATS Key Management System uses a hybrid 'pull-and-push' approach: each terminal pulls a monthly package of keys tailored to it, and the satellite separately pushes a smaller daily key to every terminal. The monthly keys encrypt the daily keys, so a terminal offline for months, like a submerged submarine, can request keys for the whole period in advance and reconnect instantly later. _Engineers designing resilient key rotation for distributed systems can track approaches like this one on daily.dev._ ### What happens to security if an adversary captures a satellite terminal and extracts its keys, like from a downed drone? The exposure can extend beyond that one device since terminals share keying material to follow protected frequency-hopping patterns together. The fix is refreshing keys for all legitimate terminals, including ones that are offline or in contested conditions, while locking out the captured device. Because daily keys change and are encrypted differently each day, a captured key only exposes a single day's communications. _Teams building key-revocation strategies for compromised devices can follow similar resilience patterns on daily.dev._ ### What is broadcast encryption and why is it used for sending keys to thousands of satellite terminals at once? Broadcast encryption is a method for securely sending information to many users simultaneously by encrypting each key using just a small subset of keys, rather than separately encrypting it for every terminal. Lincoln Laboratory adapted theoretical broadcast encryption algorithms from academia into the first operational-scale implementation for protected satellite communications, preserving bandwidth that would otherwise be consumed sending keys individually. _Developers evaluating scalable encryption schemes for large fleets of devices can find related work on daily.dev._ ## Similar posts on daily.dev - [Schneier on Security](https://daily.dev/posts/schneier-on-security-a0hqg0sfd) · Schneier on Security · 0 upvotes · 0 comments - [WISeSat.Space Develops Post-Quantum Security for Satellite Communications](https://daily.dev/posts/wisesat-space-develops-post-quantum-security-for-satellite-communications-zkrkt1mrq) · The Quantum Insider · 0 upvotes · 0 comments - [Researchers validate measurement-protection quantum key distribution](https://daily.dev/posts/researchers-validate-measurement-protection-quantum-key-distribution-77czss8mn) · Phys.org · 1 upvotes · 0 comments - [Defeating Satellite Spoofing With Galileo’s Encryption](https://daily.dev/posts/defeating-satellite-spoofing-with-galileo-s-encryption-ox6evijik) · Hackaday · 0 upvotes · 0 comments - [For the first time, the US military confirms it has deployed weapons in orbit](https://daily.dev/posts/for-the-first-time-the-us-military-confirms-it-has-deployed-weapons-in-orbit-clvvoeckt) · Ars Technica · 1 upvotes · 2 comments --- Tags: [#cryptography](https://daily.dev/tags/cryptography) [View this post on daily.dev](https://daily.dev/posts/secure-keys-strengthen-protected-military-satellite-communications-kpn2zjgka) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Secure keys strengthen protected military satellite communications","url":"https://daily.dev/posts/secure-keys-strengthen-protected-military-satellite-communications-kpn2zjgka","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/secure-keys-strengthen-protected-military-satellite-communications-kpn2zjgka"},"datePublished":"2026-10-27T19:10:18.474Z","dateModified":"2026-10-27T19:21:02.666Z","description":"MIT Lincoln Laboratory built a prototype key-management system for the U.S. Space Force's next-generation protected satellite communications system, PATS. The...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/57aba58fba15f0e9e7f55265a20a3131?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/57aba58fba15f0e9e7f55265a20a3131?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"MIT News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"MIT News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/881e20a40aa44b12ba4bd27f5c14289d","url":"https://daily.dev/sources/mit"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/secure-keys-strengthen-protected-military-satellite-communications-kpn2zjgka","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cryptography","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"MIT News","item":"https://daily.dev/sources/mit"},{"@type":"ListItem","position":3,"name":"Secure keys strengthen protected military satellite communications"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/secure-keys-strengthen-protected-military-satellite-communications-kpn2zjgka#faq","mainEntity":[{"@type":"Question","name":"How does a key management system refresh encryption keys for satellite terminals that are offline or disconnected?","acceptedAnswer":{"@type":"Answer","text":"MIT Lincoln Laboratory's PATS Key Management System uses a hybrid 'pull-and-push' approach: each terminal pulls a monthly package of keys tailored to it, and the satellite separately pushes a smaller daily key to every terminal. The monthly keys encrypt the daily keys, so a terminal offline for months, like a submerged submarine, can request keys for the whole period in advance and reconnect instantly later. Engineers designing resilient key rotation for distributed systems can track approaches like this one on daily.dev."}},{"@type":"Question","name":"What happens to security if an adversary captures a satellite terminal and extracts its keys, like from a downed drone?","acceptedAnswer":{"@type":"Answer","text":"The exposure can extend beyond that one device since terminals share keying material to follow protected frequency-hopping patterns together. The fix is refreshing keys for all legitimate terminals, including ones that are offline or in contested conditions, while locking out the captured device. Because daily keys change and are encrypted differently each day, a captured key only exposes a single day's communications. Teams building key-revocation strategies for compromised devices can follow similar resilience patterns on daily.dev."}},{"@type":"Question","name":"What is broadcast encryption and why is it used for sending keys to thousands of satellite terminals at once?","acceptedAnswer":{"@type":"Answer","text":"Broadcast encryption is a method for securely sending information to many users simultaneously by encrypting each key using just a small subset of keys, rather than separately encrypting it for every terminal. Lincoln Laboratory adapted theoretical broadcast encryption algorithms from academia into the first operational-scale implementation for protected satellite communications, preserving bandwidth that would otherwise be consumed sending keys individually. Developers evaluating scalable encryption schemes for large fleets of devices can find related work on daily.dev."}}]} ```