Technology news and discussion on TalkFuse.
Google DeepMind just mathematically verified key parts of Signal
Google DeepMind used its AlphaProof Code AI framework to mathematically verify several cryptographic guarantees in the Signal protocol. The four-week project offers additional assurance about technology protecting communications on Signal, Google Messages and WhatsApp, while demonstrating how AI could make formal verification faster and more practical.
The work found no new vulnerabilities in the protocol sections examined, but correctly flagged known flaws in older Signal versions. It did not verify the entire app, and researchers say scaling the method to large codebases remains a challenge. DeepMind is releasing its specification and proof; the project was free, though Google did not disclose its cost or plans for a commercial service.
In short
- DeepMind verified parts of Signal’s cryptographic protocol in four weeks.
- The analysis found no new flaws in the sections examined.
- Whether AI verification can scale affordably remains uncertain.
Steelman: both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
Formal verification offers stronger assurance than ordinary testing by checking whether specified security guarantees hold across all relevant cases. Supporters can argue that applying AI to this work may make rigorous checks faster and more accessible, while the findings add useful evidence about important parts of a protocol used by millions.
The case against
The results cover only selected protocol guarantees, not the whole app or every way it is implemented, so they should not be taken as proof that Signal or other messaging services are secure overall. Sceptics may also question how readily this approach will scale to large codebases and whether the specification captures the assumptions that matter in practice; the project’s undisclosed cost makes its practical efficiency harder to assess.
Explained simply
Signal is a messaging service that uses encryption to protect messages from being read by anyone outside a conversation. Its protocol is the set of rules and methods that makes this protection work; versions of it are also used in Google Messages and WhatsApp.
Google DeepMind is Google’s artificial intelligence research team. It used an AI framework called AlphaProof Code to check mathematical claims about parts of the Signal protocol, a process known as formal verification.
The checks found no new weaknesses in the parts examined and identified flaws already known in older versions. They did not cover the whole app, but the work shows how AI might help researchers check complex software more quickly.
Read the full article at the source →
Originally published by Ars Technica as “Google DeepMind just mathematically verified key parts of Signal”.