Google DeepMind Uses AlphaProof Code to Formally Verify Signal Protocol Guarantees in Four-Week Research Project

Google DeepMind completed a four-week proof-of-concept in which its AlphaProof Code AI framework formally verified a number of the Signal protocol's key cryptographic guarantees, finding no new vulnerabilities in the portions examined, WIRED reported. As validation, the team ran AlphaProof Code on older Signal versions with known, long-fixed flaws; the system identified those flaws and showed the protocol could not be formally verified in those versions, and DeepMind is releasing the specification and proof to support other formal verification work. DeepMind research scientist Swarat Chaudhuri said "there is a long distance to go before we are able to scale this to all the software of the world," and the project did not verify the entire Signal mobile app or every part of the services using the protocol; DeepMind did the work free of charge and Google declined to comment on cost and commercialization.

Google DeepMind Uses AlphaProof Code to Formally Verify Signal Protocol Guarantees in Four-Week Research Project Google DeepMind has completed a four-week proof-of-concept project using a new AI framework called AlphaProof Code to formally verify selected cryptographic guarantees in the Signal protocol, the encryption design underlying Signal, Google Messages and WhatsApp. The work, reported by WIRED, represents a demonstration of AI-assisted formal verification on real-world security-critical code—but with clear scope limits and unresolved questions about cost and scalability \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . What was actually done DeepMind researchers applied AlphaProof Code to "a number of the Signal protocol's key cryptographic guarantees" \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . Formal verification uses mathematics to prove that software meets specified requirements—in this case, that the protocol's cryptographic properties hold as designed. The analysis found no new vulnerabilities in the portions examined. As a validation step, the team also ran AlphaProof Code on older Signal versions containing known, long-fixed vulnerabilities; the system identified those flaws and showed the protocol could not be formally verified in those versions \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . The researchers are releasing the specification and proof they developed to support other formal verification work \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . Scope limits and head start The project did not formally verify the entire Signal mobile app, nor every part of the services that use the protocol \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . DeepMind researchers emphasize the findings are "just one milestone in a larger process" \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . Swarat Chaudhuri, a DeepMind research scientist, told WIRED: "We are very excited by this result, but there is a long distance to go before we are able to scale this to all the software of the world, and we want to do that" \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . The four-week timeline also benefited from prior formal verification work by the Signal Foundation, which the DeepMind team said gave them "a head start to a degree" \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . Signal chief technology officer Ehren Kret stated that "while prior formal verification focused on smaller portions of the code, Google DeepMind's approach enables significant expansion" \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . Human-AI collaboration, not autonomy DeepMind describes the workflow as a "human-AI collaboration process" in which agents contribute and self-correct at almost every phase while humans provide input and review at key junctures \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . Chaudhuri told WIRED the team does not want a "vibe world where AI is generating the goals and AI is generating the proofs and basically taking tests that are self-written," adding that "there's a middle ground" \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . People still define what properties to prove and review critical stages. Cost and commercialization unknown DeepMind conducted the analysis free of charge as a research project. Google declined to share the cost of the work and declined to comment on whether it plans to release a commercial formal verification product or service \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . Pushmeet Kohli, chief scientist at Google Cloud and DeepMind's vice president of research, framed the potential value broadly: "If you can now verify the correctness of these implementations, then you can rest easy... You can imagine banks, imagine all those other companies who rely on assurances and who worry about bugs who could now say, 'I can prove these properties.'" \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol The open question: scale and cost The central constraint remains whether AI-automated formal verification can cover far more software at a workable cost. Formal verification has historically required substantial human effort to describe intended behavior and build proofs. AlphaProof Code aims to shorten the proof-building phase, but the specification-writing and review steps still demand expertise. DeepMind's ambition reaches well beyond messaging apps, yet Chaudhuri acknowledges the goal is "a long way off" \ 1\ https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol . For now, the concrete result is a bounded research demonstration: selected Signal protocol guarantees mathematically verified in four weeks with human-defined requirements, prior art as a foundation, and the artifacts released for others to build on. Whether this becomes a scalable service—or remains a high-effort showcase—depends on economics that have not been disclosed. Sources 1. A New AI Tool From Google DeepMind Proved the Signal ... https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol wired.com 2. Google DeepMind Used AlphaProof Code to Analyze ... https://mezha.net/eng/news/mezha-990104230d1cd1769bf06ddc google deepmind used mezha.net 3. Google DeepMind uses AI to prove key security ... https://superpowerdaily.com/posts/google-deepmind-uses-ai-to-prove-key-security-guarantees-of-the-signal-protocol superpowerdaily.com 4. Google DeepMind's AI proves key Signal protocol ... https://startupfortune.com/google-deepminds-ai-proves-key-signal-protocol-guarantees-in-four-weeks startupfortune.com 5. Troy Aikman jokes about contract standoff during Bills- ... https://mezha.net/eng/news/mezha-e489f061e727866c5be2da53 troy aikman jokes mezha.net 6. Google https://primo.ai/wiki/Google primo.ai 7. A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure | WIRED https://wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol wired.com