TL;DR
The Borealis project has successfully deployed a fully OCaml-based CCSDS protocol stack on a satellite in low Earth orbit, including secure, post-quantum key rotation. This demonstrates OCaml’s viability for space security and safety-critical systems.
On April 23, 2026, the Borealis satellite successfully activated a pure-OCaml CCSDS protocol stack in low Earth orbit, marking the first public demonstration of such technology in space. This achievement highlights OCaml’s potential for secure, reliable space systems, especially in environments where untrusted code execution and cryptographic security are critical.
The Borealis project, developed by Parsimoni, used a custom OCaml implementation of the CCSDS protocol stack to manage spacecraft communications. The stack includes encryption, authentication, and post-quantum key rotation, all implemented in OCaml, running on a Linux-based satellite payload. The satellite’s communication is limited to filesystem transfers, simulating delay-tolerant networking, with all data protected via BPSec extensions wrapping each bundle in encryption and authentication layers.
Confirmed by Parsimoni on April 23, 2026, the deployment involved a daemon running on the ClusterGate-2 payload module, which serializes telemetry, commands, and images into bundles, encrypts them, and writes them to disk for later transmission. The ground station can send commands and receive telemetry through the same OCaml-implemented protocol, with no direct network connectivity, only filesystem-based data exchange. The system supports OTAR (Over-The-Air Rekeying) for post-quantum cryptographic keys, a feature claimed to be the first of its kind in orbit.
Why It Matters
This development matters because it demonstrates the feasibility of using a safe, functional programming language like OCaml for space software, especially for security-critical functions. The use of post-quantum cryptography and secure key rotation in orbit addresses long-standing concerns about space system vulnerabilities and untrusted code execution. It could influence future standards for satellite security and software reliability.
As an affiliate, we earn on qualifying purchases.
Background
Prior to this deployment, space communication protocols typically relied on C or Rust, with limited emphasis on formal safety guarantees. OCaml’s reputation for safety and correctness has made it a candidate for high-assurance systems, but its space application remained untested until now. The Borealis project builds on recent advances in OCaml 5, which introduced multi-threading and performance improvements, enabling more practical deployment in embedded systems like satellites.
Earlier milestones in space cryptography focused on traditional protocols, with limited integration of formal methods or functional languages. This deployment marks a significant step toward integrating safer programming paradigms into space hardware, especially where security and reliability are paramount.
“This is the first public demonstration of a fully OCaml-based CCSDS protocol stack operating in orbit, showcasing OCaml’s suitability for space security-critical systems.”
— Virgile Robles, Parsimoni
“OCaml 5.0’s features could enable space applications that require both performance and mathematical rigor, potentially going to the moon.”
— KC Sivaramakrishnan, ICFP 2022 keynote
Motorola Defy Satellite Link – Rugged Handheld GPS Communicator, Two-Way Global SMS Text Messenger, Emergency SOS Alerting – Android iOS Compatible
- Monthly Service Plan: $19.99 required for service
- Two-Way Satellite Messaging: Advanced messaging for iOS and Android
- Reliable Satellite Coverage: Stay connected off the grid
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
What Remains Unclear
It is not yet clear how the system will perform over extended periods or in more complex operational scenarios. The initial deployment confirms functionality but long-term reliability and resilience in space conditions remain to be validated.
As an affiliate, we earn on qualifying purchases.
What’s Next
Parsimoni plans to exercise the post-quantum OTAR key rotation on a subsequent orbit pass, testing the cryptographic protocol’s robustness. Further testing will evaluate system stability, security, and performance over extended durations. Additional deployments or integrations into other satellite platforms are likely if initial results are positive.
embedded systems development kits
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why is using OCaml in space significant?
OCaml’s safety guarantees, formal verification potential, and performance make it suitable for security-critical space applications, reducing risks from untrusted code and vulnerabilities.
What is post-quantum OTAR, and why is it important?
OTAR allows cryptographic keys to be securely rotated over the air, even in space, ensuring long-term security against quantum attacks without needing to re-flash the satellite.
Is this the first time a protocol stack like this has been used in space?
According to Parsimoni, yes. This is the first public demonstration of a fully OCaml-implemented CCSDS protocol stack operating in orbit.
What are the practical implications of this deployment?
It shows that safe, functional programming languages like OCaml can be used reliably in space, potentially leading to more secure and maintainable satellite systems in the future.
