# A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure

> **Open Intelligence Dossier** · First detected: 2026-11-10 12:40 UTC · Category: Technology

## Executive Summary
Google DeepMind's AlphaProof Code AI framework formally verified key security properties of the Signal protocol's compiled machine code in four weeks, generating 6.5 million lines of Lean proof code.

## Intelligence Brief
Google DeepMind researchers used a new AI framework called AlphaProof Code to mathematically prove, or formally verify, key cryptographic guarantees of the Signal protocol, the encryption system used by Signal, WhatsApp, Google Messages, and Meta's Messenger. The project, conducted as a proof-of-concept over four weeks by a team of five researchers, generated approximately 6.5 million lines of machine-checked Lean proof code establishing that the compiled AArch64 binary of libsignal version 0.105.4 satisfies ten security theorems covering forward secrecy, authentication, post-compromise security, and handshake secrecy for the PQXDH handshake and Triple Ratchet. The proofs were checked by Lean's kernel, meaning they cannot be wrong without the kernel rejecting them. DeepMind researchers Swarat Chaudhuri and Pushmeet Kohli emphasized this is a milestone toward scaling formal verification, though significant structural exclusions remain: no post-quantum guarantee for SPQR's healing property, no payload privacy, no responder authentication for the first handshake message, one session per promotion, fixed message lengths, no multi-device state, trust-on-first-use identity keys, an 8-byte MAC forgery term that becomes vacuous at roughly 25,000 messages per session, and 37 routines including AES-256-CBC, X25519, Kyber1024, and ML-KEM-768 were contracted rather than verified. The analysis covered the team's build of libsignal-cli as a fresh process, not the Signal mobile app. To test the specifications, researchers reintroduced two known, long-fixed vulnerabilities—a weak-state bug and a small-subgroup bug—and AlphaProof Code correctly proved the resulting binaries violated the security theorems. The specifications, about 26,000 lines of trusted Lean statements and AArch64 semantics, were drafted with agents powered by Gemini 4 Carbon and Claude Opus 5.5, while the proofs were produced entirely by agent teams powered by Gemini 4 Carbon. DeepMind is open-sourcing the formal verification artifacts at github.com/google-deepmind/code-verification. Signal CTO Ehren Kret said the approach enables significant expansion beyond prior formal verification work focused on smaller scopes. The paper contrasts the 20 person-weeks for this effort with the 20 person-years cited for the seL4 microkernel verification, though the systems differ in size and scope. DeepMind declined to share the compute cost and has no commercial product or service announced.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| The New Stack | Google says Gemini 4 Carbon proved Signal’s encryption in weeks | [Source Link](https://news.google.com/rss/articles/CBMiWEFVX3lxTE5TM2pMUmdKcFpSdXhqZld0NWkyN0s1UUpOd2h3WHBRcFBwRGNUdmFyNGt3UFI0eng4d1dsdXpWN3h2b2Z6Z2c4YW1LTXgtbnlhSVVYdFVZSTY?oc=5) |
| OrcaRouter | AlphaProof Code vs SWE-2: Two Kinds of Verification | [Source Link](https://news.google.com/rss/articles/CBMiZkFVX3lxTFAyUTgtb3ZkUFRFeG4tRktRT2ZDaWVkdkdMM3pIY0NlQ01wWjRNNjdQbFhyRTFSQ3pwOEpDWkpWMUxmQVRIcW5SZzZ4T19SeW83MkVsT1ZZWmVmOHF4YVJVMVZDYzFMQQ?oc=5) |
| FourWeekMBA | DeepMind AI Cuts Formal Verification Cost: Signal in 4 Weeks | [Source Link](https://news.google.com/rss/articles/CBMikAFBVV95cUxQODc1b0t3MkJIWE1telgwaHhFeVFSQlpWdzUtbkswM3VncEY1YWJkM2hxN2RLSkRlVE8xbXlUX3NkUmJHQ0pDX2J0aUpiWEJlN2xnc0xtcV9QdEY1UkZkcFI5TTBJcnA5UE1Tcnp3aEdZc2diTGlTSTNpUV9DRGFWRDBfdmxUdUlfaUZrN2k1LUY?oc=5) |
| Unite.AI | Google DeepMind Uses AI Agents to Verify Signal’s Core Machine Code | [Source Link](https://news.google.com/rss/articles/CBMikgFBVV95cUxOdHNGdThKNlFnbTJlZTRSRjI3VUZmUHR1aGF1Z0NTTlhsSE1kNERMQlBsV2hkVVRiX3FJZGRWaGtRc3duenlFWXNELWxvU1dFaVk3X3Rib01GNnhtam9LUGhWMHBQS1VPUDRDbmVfVEtDeXBIWVdITlJBZ0M2QldSN0x2cEJrdTROQkxjV3RCVjZLUQ?oc=5) |
| Mezha.net | Google DeepMind Used AlphaProof Code to Analyze the Signal Protocol | [Source Link](https://news.google.com/rss/articles/CBMihgFBVV95cUxQVWpwNGFvUDBOSU1IVDJ3WVJEY1NMVXprc2x5NG9OVzBlUFV5MWl0MFpCUG1mbEhTdnJHN3lkbmwwWVhVLU5hakVGQTAwb2cySTNMdTBXZ0Fsb20zZzhtSkZIdnRsMDZqdGJZYmFKbFFfM1hkMTF1OW9ULUpuZmwwTXZ0XzVydw?oc=5) |
| The Register | Google DeepMind melds humans and AI agents to vet Signal's secure messaging techniques | [Source Link](https://news.google.com/rss/articles/CBMi2gFBVV95cUxNQk5RbnFlVndUdjNPMGhlS0h3bFc1UkMxNmRCQk1QNXBYY1MxeUMweWxuRWliS2FsR2ttT2l1OGZ2b01ONTUzRkZ5LUpWM0pPZWl1T2pTWTlzTDV2Y1cxZEI5ZmMwMHZMVl80ZU1GejV4RDJjUm9fZEtmeG5iSWpHa1NQRWlIZ3BETXp1WktleVRXOFRBcGVwNkVZdGJFZFFoNzZwczJtV0FPUGh6Zm5kaFcwSENsNXgxcGpGOHI0UWpXWndLTWdxR2RxdTVLQ2kzd3lKcGpNaGVCUQ?oc=5) |
| Forbes | Google AI Proves Signal’s Encryption Really Works | [Source Link](https://news.google.com/rss/articles/CBMisgFBVV95cUxQcVJwRmgyc29rTTRYR1lmX185YkZuZUFFcmZnTUxvY1FTa2VFakpSeTR6TjkxYlJRaFNmNFhQWmRwSnhCWGpaRmZLRW1WcV96WDN3cDdseXJucW0xUm9UU0x1Mmh4OHAyb2xyZ29TSmxhRUI5aV9ROUY3dl96NVQ0RURGVGczMWxkYjhLZVp1cjBYOVNXUnozMXUxeGlrVGxxYW42QWltMVRiREZpeVAtdWd3?oc=5) |
| Axios | Google's AI takes a big step toward hacker-proof, "unhackable" software | [Source Link](https://news.google.com/rss/articles/CBMickFVX3lxTE1lMHgwMGdCNDctazFZY0ZnZTRVYlhSWGxTWkU3a0RRcDN1cVdJMXNZeUNEeGJsYzUxdW5zd24tb3FWRlVKV1R5dGctdGFubHJaSzhicGRfT1Jrcl9QQ3U2dVppR2VnN0JXWFY0cnFTLUliQQ?oc=5) |
| WIRED | A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure | [Source Link](https://news.google.com/rss/articles/CBMiowFBVV95cUxNSV9UXzJZbldTTW1URGM4UVozZGNvMTlrZldGaWR1Y3ZjTngwa0JTdVVxWURJcDdsd3kxUjd6bWRZUFBkemdIMjdYX1ZsUExYY1Y0X2pMdTJDVy01WDBfdzZTN0RQblloam5VbUpNU3FzeV9FUWtaS3c1N3pobFBJUk1RMlo3bEk0MFFobVptODFNUWcxRW9wbHRUcWpJcXNCTldn?oc=5) |

---
*Canonical Source: https://pulse.byoaiapps.com/trend/2026-11-10/a-new-ai-tool-from-google-deepmind-proved-the-signal-protocol-is-secure*