DeepMind uses AlphaProof Code to verify Signal protocol code

1. 02:18
   The DecoderFeatured

   Google Deepmind's AlphaProof Code verified Signal's cryptographic core in four weeks instead of years

   Google DeepMind unveiled AlphaProof Code, an AI system that mathematically proves software meets its security specifications, and demonstrated it on Signal's encryption protocol, completing in four weeks work that typically takes years. After experts defined formal security requirements, AI agents built on Gemini Carbon wrote over six million lines in the Lean proof language, flagging roughly one percent of the codebase for human review, and two deliberately planted bugs were caught immediately. Signal CTO Ehren Kret says the approach strengthens trust in data privacy as AI threats grow, and DeepMind plans to extend the method to power grids and medical devices through systems like CodeMender.

1. 22:08
   Ars Technica · AI

   Google DeepMind just mathematically verified key parts of Signal

   Google DeepMind researchers used agentic AI and a new framework called AlphaProof Code to formally verify a number of the Signal protocol's key cryptographic guarantees in a four-week proof-of-concept project. The analysis found no new vulnerabilities in the portions it examined, but when applied to older Signal versions with known, long-fixed flaws, AlphaProof Code correctly identified them and showed the protocol could not be formally verified. DeepMind researchers say the work is one milestone and that scaling formal verification to all software remains a long way off.

1. 20:02
   Google DeepMindFeatured

   Introducing AlphaProof Code: a breakthrough in verifying complex software at depth

   Google DeepMind researchers used AlphaProof Code, a multi-LLM agentic framework combining human expertise with AI agents, to formally verify key security properties of the actual code underlying the Signal protocol, generating over six million lines of Lean. The verification took four weeks, and when two previously fixed bugs were reintroduced into an isolated version of Signal's code, the system produced machine-checked proofs that the buggy versions were insecure. DeepMind is open-sourcing its formal verification artifacts.

Trends compare the same fully observed participants, which may cover fewer participants than current activity. Move the pointer or tap the chart to inspect hourly activity; use the left and right arrow keys with a keyboard.