TL;DR
A satellite has successfully launched and run a pure OCaml CCSDS protocol stack in space for the first time. This demonstrates OCaml’s viability for secure, reliable space software, particularly with post-quantum key rekeying. The event is a milestone in space cybersecurity and software safety.
On April 23, 2026, the Borealis project successfully booted a pure-OCaml CCSDS protocol stack in low Earth orbit, marking the first known deployment of such software in space. This milestone highlights OCaml’s potential for secure, reliable satellite operations and space cybersecurity.
The deployment occurred on the ClusterGate-2 payload module of the DPhi Space satellite, which orbits Earth approximately every ninety minutes. The protocol stack, implemented entirely in OCaml, covers all layers from radio framing to security extensions, including post-quantum key rotation. The satellite runs a daemon that communicates via a filesystem-based, delay-tolerant network, with data encrypted and authenticated using BPSec extensions, ensuring end-to-end security.
This event represents a significant technical achievement: it is the first publicly confirmed instance of a spacecraft running a complete, verified, OCaml-based CCSDS protocol stack in orbit. The system supports OTAR (Over-The-Air Rekeying) of post-quantum cryptographic keys, allowing key rotation without re-flashing the satellite, an essential feature for long-term security.
Why It Matters
This deployment demonstrates OCaml’s suitability for space applications requiring high security and reliability. It also provides a proof of concept for using safe, functional programming languages in space, where untrusted or vulnerable code can pose serious risks. The successful implementation of post-quantum key rekeying in orbit sets a new standard for space cybersecurity, aligning with NASA standards and future-proofing satellite command protocols.
Furthermore, this milestone could influence future satellite software architectures, encouraging adoption of safer programming languages that can mitigate vulnerabilities associated with kernel exploits and other security flaws prevalent in traditional Linux-based systems.
As an affiliate, we earn on qualifying purchases.
Background
Prior to this deployment, space software has largely relied on C or C++ due to performance needs, with security often managed through hardware and network isolation. The Borealis project builds on ongoing research into safe programming languages like OCaml, which has seen recent advances such as OCaml 5.0, promising improved performance and safety. The use of a pure OCaml CCSDS stack aligns with efforts to enhance space security amidst rising threats and vulnerabilities in Linux kernels, such as recent CVEs and privilege escalation exploits.
This event follows months of development and testing, including a Christmas hackathon by the team, culminating in the successful in-orbit demonstration. It also coincides with a broader push toward post-quantum cryptography in space systems, driven by standards from agencies like NASA.
“Seeing the protocol stack run successfully in space was a moment of immense pride—it proves that safe, functional programming languages can meet the demanding needs of space systems.”
— Virgile Robles
“OCaml 5.0’s features make it a compelling choice for secure, high-performance space applications, and this in-orbit test validates that potential.”
— KC Sivaramakrishnan
space cybersecurity software tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What Remains Unclear
It is not yet confirmed how the system will perform over extended periods or under different operational conditions. The full security implications of in-orbit OCaml implementations are still being evaluated, and further tests are planned to validate long-term stability and security features.
post-quantum cryptography hardware
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What’s Next
The team plans to conduct further passes to exercise the OTAR (Over-The-Air Rekeying) process, demonstrating in-orbit key rotation with post-quantum cryptography. Additional testing will monitor system stability, security, and performance over the satellite’s operational lifespan. Future updates may include scaling the implementation for more complex missions and broader deployment.
satellite communication security devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
What is the significance of using OCaml for space software?
OCaml’s safety features and mathematical rigor make it well-suited for secure, reliable space systems, reducing vulnerabilities inherent in traditional languages like C or C++.
What does the successful deployment mean for space cybersecurity?
This demonstrates that advanced cryptographic protocols, including post-quantum key rekeying, can be implemented securely and effectively in orbit, setting new standards for satellite security.
Will this technology be used in future satellites?
While the initial deployment is a proof of concept, it paves the way for broader adoption of OCaml-based protocols in future space missions, especially where security is critical.
What are the main challenges remaining?
Long-term operational stability, handling software updates in orbit, and verifying security under various conditions remain challenges to be addressed in future tests.
