What changed: Google DeepMind researchers used a new AI framework called AlphaProof Code to formally verify several cryptographic guarantees of the Signal protocol. The analysis found no new vulnerabilities in the portions reviewed, and when run against older Signal versions with known, long-fixed flaws, it correctly identified them and showed those versions could not be formally verified. DeepMind says the work covered only part of the protocol, not the full Signal mobile app, and that scaling the approach to all software remains a long-term goal.
Who is affected
The source does not name a specific business category; the work concerns the encryption protocol underlying Signal, Google Messages, and WhatsApp rather than a particular industry.
What it means for your business
For businesses that rely on Signal, WhatsApp, or Google Messages for team or customer communication, this means the underlying encryption has passed an independent mathematical check, though the verification does not cover the entire app.
What to watch
No action is required right now; businesses using these messaging platforms don't need to change anything. Watch for further statements from DeepMind and the Signal Foundation as the scope of formal verification expands.
Timing
The source gives no effective date; the four-week research project is already complete, but DeepMind's plans to extend the method, including to power grids and medical devices via CodeMender, are not final.
Source (press reports): Ars Technica, The Decoder
