A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure (www.wired.com)

Google DeepMind has achieved a significant milestone by using agentic AI to formally verify key cryptographic guarantees of the Signal protocol, a widely used encryption method in apps like Signal and WhatsApp. This proof-of-concept project, completed in just four weeks, not only validates the security of critical communications but also showcases DeepMind's new AI framework, AlphaProof Code. This development marks a step forward in the application of AI for formal verification, a process traditionally slow and challenging, highlighting its potential impact on software security. The researchers did not find new vulnerabilities in the analyzed portions of the Signal protocol but did demonstrate that older versions with known issues could not be verified. The collaboration between Google DeepMind and the Signal Foundation aims to expand this verification process, which could vastly improve confidence in the security of critical software used in high-stakes environments, like banking. However, the tech industry is left pondering whether AI-automated verification can truly scale cost-effectively. DeepMind’s approach emphasizes a collaborative process between humans and AI, avoiding complete autonomy for the AI, which adds a layer of oversight crucial for validating the safety of software that society relies on.