Wire flash
Google says Gemini 4 Carbon and AlphaProof Code formally verified Signal protocol code
Editorial responsibility
- No named human review is recorded for this page.
- Source reporting is collected, normalized, translated or condensed automatically when needed.
- Automatically published source-backed update
Google teams used Gemini 4 Carbon and AlphaProof Code, with DeepMind researchers guiding agents, to mathematically prove the code underlying the Signal protocol down to compiled device code, according to the post. The work produced over 6M lines of machine-checked Lean proofs, compressing years of expert manual verification into weeks, with roughly 1% of the codebase requiring human review while Lean automatically checked the rest. The post frames the effort as unlocking scalable formal verification for secure software and shifting the advantage to defenders, and states the results are being open sourced for the security community.
Source report
Our teams put Gemini 4 Carbon to work on a major security challenge: mathematically proving the code underlying the Signal protocol.
Using AlphaProof Code, @GoogleDeepMind researchers guided agents to verify the protocol down to compiled device code, closing the gap where real bugs hide. The results:
- Gemini 4 Carbon generated over 6 million lines of machine-checked Lean proofs.
- Years of expert manual verification were compressed to just weeks.
- Approximately 1% of the codebase required human review; Lean automatically checked the rest.
This work is helping unlock scalable formal verification for building secure software, laying the groundwork to fundamentally shift the advantage to defenders. We are open sourcing the results for the security community.
Source
sundarpichaiNeutral / independent
Part of this Story
DeepMind's AlphaProof Code Formally Verifies Signal Protocol in Four Weeks