NTN · 2026-03-14

Identity From Orbit: How LEO Satellite Signals Could Replace Ground-Based Entropy

By J. W. Bouckaert

The entropy problem no one talks about

Entropy is the foundation of every cryptographic operation in modern identity systems. Key generation, nonce derivation, signature randomness, session token creation: all of these depend on a source of unpredictability that an adversary cannot observe, reproduce, or influence.

The industry has spent decades refining entropy sources. Hardware random number generators (HRNGs) sample thermal noise from silicon. Quantum random number generators (QRNGs) measure photon arrival times or vacuum fluctuations. Operating systems blend interrupt timing, disk seek latency, and user input into kernel entropy pools.

These sources are effective. They are also, without exception, terrestrial. They exist within the physical and electromagnetic environment that an attacker occupies. A sufficiently motivated adversary, one with nation-state resources, sophisticated electromagnetic shielding, or physical proximity to the entropy source, can observe, model, or influence the conditions under which that entropy is generated.

This is not a theoretical concern. Side-channel attacks against hardware random number generators have been demonstrated in academic literature since the early 2000s. Electromagnetic emanation analysis can extract information about internal chip states. Power analysis can reveal correlations between entropy generation and observable electrical characteristics. Even QRNGs, which sample genuinely quantum phenomena, are vulnerable to implementation-level attacks: detector blinding, photon-number splitting, and Trojan-horse attacks against the optical path.

The common thread is proximity. Every terrestrial entropy source can be approached, probed, and potentially compromised because it exists in the same physical domain as the adversary.

Orbital physics

Low Earth Orbit (LEO) satellites operate at altitudes between approximately 200 and 2,000 kilometers above the Earth's surface. At these altitudes, they travel at velocities between 7.5 and 7.8 kilometers per second relative to the ground. A single LEO satellite completes a full orbit in roughly 90 to 120 minutes, depending on its altitude.

This velocity creates a continuously shifting relationship between the satellite and any ground-based observer. The Doppler effect, the change in observed frequency of a signal emitted by a moving source, produces measurable frequency shifts that vary as a function of the satellite's position, velocity vector, and the observer's location on Earth. For a satellite transmitting at L-band frequencies (approximately 1.5 GHz), the Doppler shift can range from approximately +40 kHz to -40 kHz as the satellite passes from horizon to horizon.

The critical property of this Doppler shift, from an entropy perspective, is that it is non-deterministic at the precision required for cryptographic seeding. While the orbital trajectory of a satellite can be predicted with high accuracy using Two-Line Element (TLE) sets and SGP4/SDP4 propagation models, the actual observed Doppler shift at a specific receiver at a specific instant is influenced by factors that cannot be predicted with cryptographic precision:

• Ionospheric variability: The ionosphere introduces frequency-dependent delays and phase shifts that vary with solar activity, geomagnetic conditions, and local electron density. These variations are measurable but not predictable to the bit-level precision required to reconstruct an entropy seed.

• Tropospheric refraction: Temperature, humidity, and pressure gradients in the troposphere alter the signal path, introducing sub-microsecond timing variations that are locally unique.

• Multi-path interference: Reflections from terrain, buildings, and other structures create constructive and destructive interference patterns that are unique to the receiver's exact position and the satellite's instantaneous geometry.

• Constellation geometry: Modern LEO constellations (Starlink, OneWeb, Kuiper, Iridium NEXT) deploy thousands of satellites in multiple orbital planes. At any given moment, a ground receiver may observe signals from dozens of satellites simultaneously. The relative geometry of this visible constellation changes continuously, producing a time-varying spatial signature that is unique to the observer's location.

• Handover timing: As LEO satellites move across the sky, the ground terminal hands off from one satellite to another. The precise timing of this handover, measured at the microsecond or sub-microsecond level, depends on signal strength thresholds, constellation scheduling algorithms, and atmospheric conditions. The handover instant is unpublished, unpredictable to external observers, and irreproducible.

Taken individually, each of these factors introduces a small amount of uncertainty. Taken together, they produce a composite entropy signal that is rooted in orbital mechanics, atmospheric physics, and electromagnetic propagation, none of which can be replicated by an adversary without placing their own receiver at the exact same location at the exact same instant.

The architecture of orbital entropy

An identity system that incorporates LEO satellite signals as an entropy source does not replace existing entropy infrastructure. It layers orbital entropy on top of classical and quantum sources, creating a hierarchy where each tier provides independent, uncorrelated randomness.

Consider the following four-tier model:

Each tier is independently valuable. The combination is greater than the sum because an adversary must compromise all four tiers simultaneously to predict the composite entropy output. The orbital tier is the most difficult to compromise because it depends on physical conditions that exist above the atmosphere, beyond the reach of any ground-based attacker.

Doppler shift as a cryptographic primitive

The Doppler shift from a LEO satellite is a deterministic physical measurement, not a random number. However, the measurement residual, the difference between the predicted Doppler shift (from published ephemeris data) and the actual observed Doppler shift (at the receiver), contains genuine unpredictability.

This residual is the entropy. It arises from the aggregate of all the atmospheric, geometric, and electromagnetic factors that are not captured in the orbital prediction model. At precisions of 0.1 Hz or below, these residuals are effectively non-deterministic: they cannot be predicted from publicly available data, they cannot be reproduced without physical presence at the measurement location, and they change continuously as the satellite moves.

The process for extracting cryptographic entropy from Doppler residuals follows a well-established pattern:

1. Observe: Measure the Doppler shift from one or more LEO satellites at the receiver location.
2. Predict: Calculate the expected Doppler shift using published TLE data and an SGP4 propagator.
3. Subtract: Compute the residual (observed minus predicted).
4. Condition: Apply a randomness extractor (e.g., a cryptographic hash or a min-entropy conditioner conforming to NIST SP 800-90B) to the residual to produce uniformly distributed output bits.
5. Mix: Combine the conditioned orbital entropy with entropy from other tiers (QRNG, HRNG, carrier signals) using a domain-separated HMAC or XOF construction.

The output of this process is a seed that incorporates entropy from orbital mechanics, atmospheric physics, and the unique electromagnetic environment of the receiver's location. The seed is then used in standard cryptographic constructions: key derivation, nonce generation, or signature randomness.

Identity as an entropy consumer

Identity systems are entropy consumers. Every passkey registration generates a challenge nonce. Every verifiable credential issuance requires a unique identifier. Every hybrid PQC signature mixes a quantum-seeded nonce into the payload before signing. Every cross-reference binding produces a cryptographic hash that must be collision-resistant under adversarial conditions.

The security of these operations is only as strong as the entropy that seeds them. If an adversary can predict the nonce used in a passkey challenge, they can pre-compute the response. If an adversary can predict the randomness used in a signature, they can forge the signature. If an adversary can predict the seed used in key generation, they can derive the key.

Today's entropy sources are sufficient against today's adversaries. But the adversary model is changing. Cryptographically relevant quantum computers (CRQCs) threaten the mathematical foundations of classical cryptography. Nation-state actors invest in electromagnetic surveillance capabilities that can observe hardware entropy generation at a distance. Supply chain attacks can compromise the integrity of hardware random number generators before they are deployed.

Orbital entropy is resilient against all of these threat vectors because it derives from a physical process that exists outside the adversary's operational environment. An adversary cannot place a probe inside the ionosphere. They cannot replicate the exact multi-path interference pattern at a receiver location thousands of kilometers away. They cannot predict the precise handover timing of a constellation they do not operate.

The constellation advantage

A single LEO satellite provides a Doppler shift measurement that changes as the satellite transits the sky. The entropy contribution is significant but time-bounded: a single pass lasts 5 to 15 minutes, depending on the orbital altitude and the observer's latitude.

A constellation changes the calculus entirely. SpaceX's Starlink operates the largest LEO fleet, with thousands of active satellites and continuous launches expanding the constellation. OneWeb maintains its first-generation Gen 1 constellation of roughly 630 operational satellites. Iridium NEXT operates 66 active satellites plus on-orbit spares. Amazon's Project Kuiper is deploying its production constellation following its initial operational launches. The combined active LEO population continues to grow with every launch cadence.

At any given moment, a ground receiver with a hemispherical view can observe dozens of LEO satellites simultaneously. Each satellite provides an independent Doppler measurement with an independent atmospheric path and independent residual. The composite entropy from a constellation measurement is proportional to the number of simultaneously observed satellites, each contributing uncorrelated bits.

This is a structural advantage that scales with the commercialization of space. As more constellations are deployed, the available orbital entropy at any ground location increases. The entropy source becomes denser, more available, and more difficult to compromise because an adversary would need to simultaneously observe or predict the behavior of dozens of independent satellites across multiple orbital planes.

Handover timing as an entropy amplifier

LEO satellites move fast enough that a ground terminal must periodically switch from one satellite to another. In dense constellations, these handovers occur every few minutes. The exact timing of a handover depends on:

• The signal strength of the departing satellite (which depends on atmospheric conditions, antenna gain pattern, and satellite attitude)
• The signal strength of the arriving satellite (same dependencies)
• The constellation management algorithm's decision thresholds (which may incorporate load balancing, Quality of Service requirements, and predictive beam management)
• The propagation delay through the current atmospheric path

The handover instant, measured with sub-microsecond precision, is unpublished, externally unobservable (it occurs within the terminal's protocol stack), and irreproducible. It represents a timing measurement that depends on the convergence of orbital mechanics, atmospheric physics, and software state, three domains that are independently unpredictable at the required precision.

Handover timing can serve as an entropy amplifier: a source of additional unpredictability that is layered on top of Doppler residuals and constellation geometry to increase the total entropy rate of the orbital tier.

Non-terrestrial networks and 3GPP standards

The integration of LEO satellites into identity infrastructure is not speculative. The 3GPP Non-Terrestrial Networks programme has been developing NTN specifications since Release 17, with significant enhancements in Release 18 and ongoing work in Release 19. NTN standards define how terrestrial cellular networks (5G NR) can operate over satellite links, including LEO, MEO, and GEO constellations.

The NTN architecture introduces several properties that are directly relevant to identity entropy:

• Timing Advance (TA) compensation: NTN requires sophisticated timing advance calculations to account for the propagation delay between a ground terminal and a moving satellite. These TA values are continuously updated and reflect the real-time geometric relationship between the terminal and the satellite.

• Doppler pre-compensation: The terminal must pre-compensate for the Doppler shift before transmitting to the satellite. This pre-compensation value is computed locally and depends on the terminal's position, the satellite's ephemeris, and the atmospheric conditions along the signal path.

• Ephemeris broadcast: NTN satellites broadcast their orbital parameters (position, velocity) to terminals, enabling local computation of geometric properties. The difference between the broadcast ephemeris and the actual observed signal properties contains the atmospheric and electromagnetic residuals that constitute orbital entropy.

These are standardized protocol mechanisms already specified, and they will be implemented in commercial 5G NTN terminals. The entropy is a byproduct of the communication protocol: it does not require specialized hardware, additional spectrum allocations, or proprietary satellite access.

The adversary model

Every entropy source must be evaluated against a concrete adversary model. For orbital entropy, the relevant question is: what would an adversary need to do to predict or replicate the entropy output?

To predict the Doppler residual at a specific receiver at a specific instant, the adversary would need:

1. Precise knowledge of the ionospheric state along the signal path between the satellite and the receiver. This requires either a co-located ionospheric probe or a model of sufficient fidelity to predict electron density variations at sub-kilometer resolution and sub-second temporal resolution. No such model exists for arbitrary locations.

1. Precise knowledge of the tropospheric state along the signal path. Temperature, humidity, and pressure gradients at the required precision are not available from public meteorological data, which is typically sampled at hourly intervals and kilometer-scale spatial resolution.

1. Precise knowledge of the multi-path environment at the receiver location. This requires a complete electromagnetic model of the terrain, structures, and reflective surfaces within the Fresnel zone of the signal path. For a moving LEO satellite, the Fresnel zone sweeps across the landscape, making the multi-path environment time-varying and position-dependent.

1. Co-located measurement capability: Even with perfect models of the atmosphere and multi-path environment, the adversary would need a receiver at the exact location of the target receiver to measure the same signal. A receiver even meters away would observe different multi-path interference and different atmospheric path lengths.

This is the fundamental asymmetry of orbital entropy: the adversary cannot predict it without being there, and if they are there, they are no longer an external adversary. The entropy is bound to a location in space and time that cannot be replicated remotely.

PasskeyBridge's current entropy architecture

PasskeyBridge's current entropy architecture uses a four-tier QRNG-seeded hierarchy: Outshift (Cisco), QCi uQRNG (photonic quantum hardware), ANU QRNG (fallback), and local CSPRNG (emergency). This hierarchy provides production-grade quantum-seeded entropy for all cryptographic operations, including ML-DSA-65 hybrid signatures and spatially-bound identity attestations.

LEO satellite entropy represents the next evolution of this architecture. As NTN standards mature and commercial 5G NTN terminals become available, the orbital entropy tier will extend the existing hierarchy with a source of randomness that is physically unreachable by ground-based adversaries.

The integration path is clear: Doppler residuals, handover timing, and constellation geometry measurements feed into the same entropy conditioning pipeline that currently processes QRNG seeds. The output is mixed with existing entropy tiers using domain-separated HMAC constructions, ensuring that the addition of orbital entropy cannot reduce the security of the existing system (it can only add entropy, never subtract it).

Orbital entropy adds to QRNG rather than replacing it. The goal is an entropy stack so deep, so physically distributed, and so adversary-resistant that compromising it requires simultaneous attacks across quantum physics, orbital mechanics, and atmospheric science. That is the standard that identity infrastructure should aspire to.

Open questions

The identity industry has spent years debating algorithms: RSA versus elliptic curves, HMAC versus EdDSA, classical versus post-quantum. These debates matter. But they address the mathematical layer of cryptographic security while leaving the physical layer, the entropy that seeds every algorithm, under-examined.

Orbital entropy forces the conversation to a different plane. It asks not "which algorithm is strongest?" but "where does the randomness come from, and can an adversary reach it?"

For terrestrial entropy, the answer is yes: given sufficient resources, an adversary can approach, observe, or influence the source. For orbital entropy, the answer is no: the source exists in a domain that ground-based adversaries cannot access without launching their own satellites and positioning them in the same orbital plane at the same instant.

This is the future of entropy for identity: entropy that is physically unreachable. Faster algorithms and bigger keys do not get you there. Identity derived from the kinematics of objects moving at 7.5 kilometers per second, 500 kilometers above the Earth.

The orbit does not care about your threat model. It just moves.

Read the PQC Architecture Deep Dive → | Explore Spatially-Bound Identity → | View the Whitepaper →

Start free · Test the API