DeepMind verifies selected security properties of Signal’s code
Google DeepMind’s AlphaProof Code framework has mathematically verified selected cryptographic properties of the implementation underlying Signal’s messaging protocol. Human specialists helped set and review the security goals during a four-week research project. The team also checked old versions containing repaired flaws and is releasing verification artifacts, extending earlier work on the protocol’s security.
Artificial Intelligence··Evening
A mathematical check of Signal’s implementation
Google DeepMind, Google’s artificial-intelligence research laboratory, used AlphaProof Code to formally verify selected cryptographic guarantees in the code implementing the Signal messaging protocol. Formal verification checks software against mathematical specifications of its intended behavior. The four-week research project examined core protocol code, rather than the complete Signal mobile app. The protocol also underpins communications in other messaging products, including WhatsApp and Google Messages.[1], [2]
Humans review the goals and the proofs
Human experts worked with models to turn security goals into formal specifications and review them. AI agents then contributed to generating and checking proofs, seeking human input at important stages. Earlier formal-verification research by the Signal Foundation gave the project a starting point. Signal technology chief Ehren Kret said the approach widened the scope of earlier verification work on the protocol.[1]
Older repaired flaws provide another test
The researchers found no new vulnerabilities in the portions they examined. They also applied the framework to older versions with known, long-fixed flaws; those versions failed the verification checks. The team is releasing its specification and proof for further work. Signal received the research without charge. Google did not disclose the computing expense or comment on possible commercial-service plans, while scaling the method to larger software systems remains a research question.[1]
