Google DeepMind uses AI to formally verify parts of the Signal protocol

Researchers at Google DeepMind used a new AI framework called AlphaProof Code to mathematically prove, or formally verify, several key cryptographic guarantees of the Signal protocol. Completed in just four weeks, the project showcases the potential of AI to speed up formal verification, a time-consuming software security process. While the analysis did not find any new vulnerabilities in the tested portions of the protocol, the AI framework successfully identified known flaws in older versions of Signal. Researchers and security experts note that while this is a significant milestone, scaling AI-driven formal verification to handle entire software codebases remains a distant goal.