Google DeepMind AI Tests Signal Encryption Protocol and Finds No New Flaws

Google DeepMind researchers used agentic AI tools to test the encryption protocol of the messaging app Signal, finding no new vulnerabilities in the analyzed code.

The Experiment

The four-week proof-of-concept project used DeepMind's new AI framework called AlphaProof Code to scan the Signal encryption protocol for weaknesses. When the team tested older versions of Signal, the tool identified security flaws that had already been known and patched. The analysis was conducted without any cost to Signal, and DeepMind is now releasing the specification and proof to help other formal verification work.

Industry Reactions

Google DeepMind research scientist Swarat Chaudhuri stated that the team is excited by the result while noting a long distance remains to scale this to all software. Signal Chief Technology Officer Ehren Kret said that rigorous verification gives greater confidence in the code's privacy guarantees as AI-driven security threats grow. Google Cloud chief scientist and DeepMind vice president of research Pushmeet Kohli added that banks and other companies could now prove software properties and rest easy.

Context

Signal is widely known as a secure messaging app that uses end-to-end encryption by default and collects minimal user data. Manual security verification is typically a slow process that requires researchers to turn software characteristics into formulas and develop proofs. AI tools like AlphaProof Code could help speed up these independent security assessments as cyber attacks become more advanced.