They did so using AlphaProof Code, a multi-agent framework for formal software specification and verification. AlphaProof Code relies on a human-guided agent that writes a Lean specification, assesses machine code semantics, and crafts an agent-authored proof that the Lean kernel checks against the specification. In this instance, AlphaProof Code verified Signal’s post-quantum PQXDH handshake and Triple Ratchet, thereby validating the design of libsignal's forward secrecy, authentication, post-compromise security, and handshake secrecy.
ai-devtools —
Google DeepMind melds humans and AI agents to vet Signal's secure messaging techniques
Google DeepMind researchers have completed a formal verification of Signal's messaging security, marking what they claim is the first time AI has helped devise a proof that links protocol-level security guarantees to a widely used cryptographic implementation.
Reported by theregister.com.
