DeepMind turns AI agents on Signal's encryption
Google DeepMind has used AI agents working alongside human experts to examine the techniques that underpin Signal's secure messaging, and headlines about the work say the Signal protocol was shown to be secure.
The work concerned the protocol itself, the set of cryptographic rules that decides how Signal messages are encrypted, exchanged and protected between devices. One report describes the tool involved as a new AI tool from Google DeepMind, while other coverage describes the effort as a blend of human and machine checking. What is reported is the pairing: AI agents and people vetting the same messaging techniques together.
Wide reach for the result
Signal's protocol is widely used. Other apps have built the same approach into their own products, and millions of people in the UK send messages through services that rely on it. A finding that the protocol holds up is therefore relevant to a large share of everyday private communication, not only to people who have installed Signal.
The result is a statement about the design of the protocol. A flaw at that level could affect every message sent under it, however well an individual app was built. Proving a design sound is a different job from checking that a particular phone, app or server is free of bugs.
Most real-world breaches of private messages have not come from a broken protocol. They have come from stolen phones, weak passcodes, hijacked accounts, malware and people being tricked into handing over access. A secure protocol does not stop any of those.
Speeding up a slow discipline
Security protocols are normally examined by specialist cryptographers, often over years. The work is slow and relies on a small pool of experts. The DeepMind effort is framed as an attempt to speed that process by putting AI agents to work alongside people rather than replacing them.
For UK households, the practical consequence is indirect but real. If this style of review becomes routine, flaws in the systems that protect banking apps, health records and private chats could be found earlier, and fixed before criminals exploit them. It would also give app makers a way to back up their security claims with something stronger than their own assurances.
No timetable has been given for any wider use of the tool.
Protecting an account day to day
A sound protocol is only one layer, and several steps close the gaps it cannot.
Messaging apps are patched regularly, and many attacks target old versions. Switching on automatic updates in the Apple App Store or Google Play removes the need to remember.
Signal offers a registration lock, a PIN that must be entered before the account can be set up on a new device. This makes it much harder for someone who has taken over a phone number to claim the account. The PIN should not be guessable from a birthday or postcode.
Messages are decrypted on the device, so a six-digit passcode or stronger, plus biometric unlock, matters more than most people assume. Signal also lets users add a screen lock inside the app, which helps if someone borrows an unlocked handset.
Conversations that do not need to be kept can be set to delete themselves after a chosen period, which limits what is exposed if a phone is lost or seized.
Signal provides safety numbers that can be compared with a contact in person or over a separate channel. For sensitive conversations, such as sharing financial details, this confirms that nobody is sitting in the middle.
The list of linked devices in the settings shows every computer or tablet connected to the account, and anything unfamiliar should be removed straight away.
Fraudsters pose as relatives, banks and delivery firms on encrypted apps just as they do by text. Encryption protects the content in transit but does nothing to tell a genuine contact from an impostor, so requests for money or codes should be checked by ringing the person on a known number.
Cloud backups of chat histories can sit outside the protections of the app itself, so it is worth checking where messaging backups are stored and whether those copies are encrypted.
The limits of a clean result
Reports of a proof are a strong signal about the design, but not a guarantee about every piece of software that uses it. Implementations can contain errors the protocol does not. Operating systems can be compromised. Metadata, such as who contacts whom and when, is a separate question from the content of messages.
UK law is also part of the picture for secure messaging. The Online Safety Act has been the subject of long-running argument between the government, regulators and encrypted services over the powers it gives Ofcom, and messaging firms have repeatedly said they would not weaken encryption for UK users. That debate is separate from the DeepMind finding, which concerns whether the cryptography works rather than whether it can be lawfully required or removed.
Next steps for the tool
The coverage presents the work as a demonstration of what AI agents and human specialists can do together on a hard security problem. Whether Google DeepMind will release the tool, apply it to other protocols or publish the full method has not been announced.
For now, the finding is good news for the many people who rely on Signal and apps built on its techniques. The steps that protect an account day to day are the same as they were before, and they remain in the hands of the people using it.
Photo: Unsplash
