Google DeepMind Releases AlphaProof Code to Verify Signal Encryption Library Down to Machine Code

Google DeepMind recently announced its AI agent formal verification framework, AlphaProof Code, which was used to verify libsignal, the core program library of the Signal encryption communication protocol. This work extends the scope of security proofs from source code to compiled machine code.

According to iThome, five DeepMind researchers collaborated with AI agents to produce approximately 6.5 million lines of mathematical proof code written in the Lean language over four weeks. These proofs aim to verify key security requirements such as forward secrecy, authentication, and post-compromise security recovery.

Formal verification is a technique that proves software correctness through mathematical methods, typically requiring significant time and specialized expertise. DeepMind's progress suggests that AI agents can automate the large-scale generation of complex verification proofs, potentially lowering the barrier and cost for auditing the security of high-assurance software like end-to-end encrypted applications.